
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier: PZe+FkrCwizyE1ykUUmz1Yf/Eer85Rqhu14mgiQht28=
Subject key identifier: EF:44:28:F8:76:86:A5:53:E9:50:B0:0D:B9:FD:42:6C:56:F9:A7:FC
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 4E592021E93BD3AA2CE4ADE36D5B6721DA76C2E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number: 0858
Signing time: Thu 26 Mar 2026 06:06:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 09:39:31 +0000
Files and hashes: 1: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
2: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
3: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
4: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
5: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
6: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
7: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
8: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
9: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
10: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
11: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
12: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
13: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
14: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: 4cft7QEXbwj6VVEeHds9YarzNNaAiGV/3vur1vHnBfY=)
15: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
16: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
17: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 09:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:59:20:21:e9:3b:d3:aa:2c:e4:ad:e3:6d:5b:67:21:da:76:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 09:39:31 2026 GMT
Subject: CN=EF4428F87686A553E950B00DB9FD426C56F9A7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:9c:99:c3:a8:9d:91:ea:d5:97:6c:67:23:
59:20:97:56:f3:9e:10:3b:e3:84:74:0b:d9:57:99:
d0:a9:74:6f:68:70:3e:4d:4c:ab:60:84:ec:10:12:
0f:a8:9b:fb:13:04:12:cf:74:ab:5c:db:78:db:85:
d2:06:ff:08:5e:36:d7:ed:72:aa:53:0f:bf:60:28:
56:27:48:e9:e2:89:d2:04:a9:a8:75:16:cd:54:eb:
20:14:02:f3:0b:ec:10:bc:00:54:0e:fd:13:73:4f:
c3:b4:bf:4b:e0:b0:e7:ac:dc:53:17:e5:ce:f5:9e:
33:e2:41:1e:79:c1:7f:39:f3:90:84:d8:27:5b:2a:
4d:9c:df:07:f7:5a:c5:03:99:08:bb:e5:cf:d6:9a:
de:67:c0:6c:29:c8:7c:2b:8c:13:5c:98:78:ad:2a:
83:93:1b:93:66:20:19:eb:88:33:35:55:d0:06:8c:
8f:c5:f2:83:79:ef:61:2d:68:40:b8:44:3f:0e:04:
4d:68:61:7b:26:3a:55:d8:1b:60:e3:a8:96:6d:e0:
96:95:5b:32:0b:b0:e9:6c:94:00:d0:20:01:af:bc:
8a:5b:de:5b:65:5d:df:30:02:dd:b9:ca:e0:08:3f:
f0:93:d4:37:d8:b6:f4:0b:a7:47:63:b2:ad:ef:32:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:44:28:F8:76:86:A5:53:E9:50:B0:0D:B9:FD:42:6C:56:F9:A7:FC
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:2d:76:d3:18:c4:46:d3:7e:3a:89:50:d3:c0:ef:ee:b3:
5b:cf:7e:9a:97:ca:6a:00:f8:b5:b2:c3:c8:2d:95:18:e0:dc:
69:70:22:4d:77:6d:80:73:de:ce:b0:0d:70:31:6e:bd:53:c8:
ac:2f:e5:0e:53:6c:16:92:31:6a:f6:08:0d:6d:34:68:41:14:
91:91:05:f3:84:8b:79:84:92:b4:f2:6a:89:33:2c:b0:2a:16:
dd:93:30:43:db:97:e6:ec:a6:d8:9a:68:71:96:14:3a:5d:5c:
3c:c9:5f:2f:c6:c9:94:31:87:b7:b1:4b:4d:3a:88:6f:a0:f1:
ed:23:86:7c:c7:1b:02:38:55:19:78:c7:84:b4:22:5d:aa:7f:
c5:a0:35:4e:48:ae:1d:39:53:db:87:45:96:48:87:f3:05:6e:
a4:d8:d8:07:28:a6:34:4d:32:4f:dd:df:35:26:23:54:c5:89:
1f:7a:61:ef:c2:f3:fe:75:4e:5a:1c:c8:b7:1e:65:cb:2e:5c:
74:28:be:6c:04:71:41:c9:db:fb:71:67:e7:a1:52:e6:c4:ef:
ed:7f:ea:ad:9a:90:d5:85:26:5a:9b:b0:5d:8a:0f:6a:4f:09:
bf:60:23:77:90:91:8b:1e:58:76:df:24:10:85:42:6c:fe:4a:
b7:61:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:36 2026 by rpki-client