Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          8jtTn3kzicdgl0MQcRuuOYrPiN68LN/PhjZji4HwM9Q=
Subject key identifier:   F3:1E:01:48:BB:0A:CC:96:37:81:52:A5:C2:E0:6E:38:25:6E:D2:42
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       482666F973E761965DC28F699679295AFC21F13A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          0857
Signing time:             Wed 25 Mar 2026 12:56:13 +0000
Manifest this update:     Wed 25 Mar 2026 12:51:13 +0000
Manifest next update:     Thu 26 Mar 2026 14:06:13 +0000
Files and hashes:         1: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
                          2: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
                          3: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
                          4: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
                          5: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
                          6: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
                          7: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
                          8: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
                          9: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
                          10: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
                          11: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
                          12: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
                          13: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
                          14: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
                          15: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
                          16: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: lvGuV0hULdKuksYNnMFEjXC8T6AWyyy5mc3I9iHUowQ=)
                          17: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 14:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:26:66:f9:73:e7:61:96:5d:c2:8f:69:96:79:29:5a:fc:21:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Mar 25 12:51:13 2026 GMT
            Not After : Mar 26 14:06:13 2026 GMT
        Subject: CN=F31E0148BB0ACC96378152A5C2E06E38256ED242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:fa:24:b2:d8:99:fe:c5:95:b3:93:01:b0:
                    14:bc:8c:0c:fa:d8:04:39:8a:d0:e3:72:cc:d2:f9:
                    07:6c:25:a2:b4:0d:d2:47:dc:1f:6f:e0:71:ce:70:
                    38:03:48:ed:a8:4a:0f:90:ce:5a:42:a3:e0:b9:4c:
                    3f:21:2c:ce:e7:4d:1f:ca:c6:30:11:de:8f:19:64:
                    0f:1c:3e:61:1e:3c:ab:96:ec:97:9d:c3:53:e8:05:
                    a0:a5:56:f5:e2:d9:f9:3d:4e:2d:dc:45:7f:1b:8e:
                    07:99:d6:a1:d3:f0:1a:ca:ae:41:0a:b0:0f:37:94:
                    2f:ad:58:d6:68:67:80:e7:18:02:b6:01:26:42:29:
                    d0:3c:e2:28:f2:39:cf:d7:81:88:6d:f6:68:fa:ea:
                    38:8f:34:8c:4c:16:f3:aa:ef:9e:c2:f1:25:d3:20:
                    0e:01:43:7c:72:1e:14:e5:8d:4e:92:22:7b:f7:70:
                    f1:c2:8d:79:bf:54:a6:f5:6f:fc:67:02:0f:e6:5f:
                    1d:90:19:8e:b7:1e:24:cc:ec:db:45:0e:ce:b6:5b:
                    8b:8f:e2:2b:e4:d9:3b:40:ab:39:05:e2:86:e4:9b:
                    8a:92:26:74:70:c7:df:fd:41:b9:78:05:aa:53:32:
                    cb:a2:0f:5e:d1:d3:e3:f5:ff:0c:0c:91:14:21:98:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1E:01:48:BB:0A:CC:96:37:81:52:A5:C2:E0:6E:38:25:6E:D2:42
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:7b:d1:ff:3e:dd:ea:f6:0f:37:5c:1b:7a:61:7f:c9:a2:
         c8:4a:7c:e8:54:d0:b0:82:e8:30:ac:83:af:c5:0b:37:4c:57:
         6d:55:49:c9:96:e6:b2:bc:94:0e:3b:25:51:df:b3:5d:fe:39:
         20:c5:d0:e1:1e:7c:1f:a7:3e:70:9d:b4:fe:ff:bf:4d:c1:9c:
         10:cf:85:5d:99:6a:86:70:9b:90:47:60:03:06:36:4a:7d:50:
         77:cc:79:fe:e3:95:a5:09:b7:47:ba:c5:d5:13:f0:85:c4:64:
         dc:a9:f5:7b:17:e8:9d:07:0a:b5:f4:b8:5d:ab:88:3a:b3:ac:
         d5:a8:f7:20:bc:f3:4d:60:92:6c:88:d0:15:57:e7:ae:bb:bc:
         ae:b2:ba:01:3a:33:5e:c2:8e:a4:8b:7d:2b:17:bd:96:c6:76:
         8f:a4:f7:d1:7c:e0:68:18:f4:81:ba:70:ec:de:48:b4:89:01:
         9f:f9:3a:23:7a:d8:3b:bb:c9:bc:16:43:73:2a:1e:d7:3c:a9:
         27:3c:3f:b8:1d:cd:d8:d8:f5:25:9c:3e:22:82:0a:46:fb:6b:
         76:92:d5:b3:86:45:fb:e2:ef:c3:e6:70:d4:50:cf:a5:4d:bb:
         40:28:4c:25:80:7f:77:d3:39:33:eb:dc:05:90:74:ac:48:b9:
         ef:2b:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:46 2026 by rpki-client