This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier: LBuGHCE8Sdw1wGop0b40PMahAsgN22H6LVboBUEQRM8=
Subject key identifier: BA:BF:E6:9B:71:F6:6E:D7:3A:38:98:7D:51:84:00:50:B5:80:A2:8D
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 73ECA6CE7286EC402359115F739BA845B15D83A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number: 07C2
Signing time: Sat 06 Dec 2025 14:59:37 +0000
Manifest this update: Sat 06 Dec 2025 14:54:37 +0000
Manifest next update: Sun 07 Dec 2025 17:50:37 +0000
Files and hashes: 1: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
2: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
3: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
4: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
5: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
6: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
7: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
8: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
9: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: Wb5h0Uch4G+5ARn6gqDvKm3lBphjBrRX0TG1TlYWv08=)
10: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
11: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
12: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
13: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
14: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
15: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
16: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
17: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 17:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ec:a6:ce:72:86:ec:40:23:59:11:5f:73:9b:a8:45:b1:5d:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Dec 6 14:54:37 2025 GMT
Not After : Dec 7 17:50:37 2025 GMT
Subject: CN=BABFE69B71F66ED73A38987D51840050B580A28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:e4:51:de:2f:f6:69:b2:26:88:44:81:29:
30:fd:b5:34:97:92:b8:65:58:80:d3:8c:27:c7:5b:
77:e0:32:47:03:cb:88:bc:5e:87:90:7d:23:9c:5a:
cf:7f:13:8c:ca:a3:28:f0:72:9d:5d:56:02:51:bb:
9d:8d:8b:e9:7f:36:24:38:86:5b:f7:dc:2e:27:98:
00:e2:fb:67:17:0d:79:1d:51:24:8b:ac:69:81:46:
59:bf:41:ac:5e:49:48:26:b4:5f:1c:01:bf:9f:12:
30:3c:3c:d4:cc:84:d0:c7:f3:fd:0e:61:1c:3c:65:
ff:75:27:54:6b:43:62:5d:bc:12:5c:2e:5d:a5:9a:
ce:f8:06:c2:61:20:75:1a:c5:49:5d:91:da:91:3c:
93:93:d0:dc:39:30:de:ad:25:a4:43:c5:f7:3e:1d:
e7:31:c5:52:0a:1c:97:9b:2d:63:ef:72:73:1d:60:
9f:82:a6:35:8c:df:0a:65:3d:f9:4b:2e:f7:d8:23:
1a:08:36:db:32:47:a8:b1:36:b1:7b:db:6a:0b:04:
da:f3:2c:ee:c8:15:e5:0a:d2:43:42:46:af:95:5b:
68:18:cf:0c:49:2a:90:f1:0b:70:73:bd:6f:60:8b:
16:84:9b:ec:1b:b4:76:89:0f:fb:15:72:28:09:4e:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BF:E6:9B:71:F6:6E:D7:3A:38:98:7D:51:84:00:50:B5:80:A2:8D
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b1:f3:5e:08:6b:4f:ab:32:e6:83:b8:a0:a5:58:97:a6:b9:
37:cc:77:78:37:cc:6d:a9:f6:1e:82:37:f7:2d:f7:8a:0a:a5:
fb:57:a5:9f:07:9e:fc:0b:05:a0:48:ae:b3:f2:55:cd:53:c6:
0f:dc:ed:71:b0:30:72:bc:38:38:06:9e:4d:06:5d:fd:9a:85:
57:16:a0:47:15:40:51:f0:7d:ba:5c:cc:5e:db:40:56:1b:89:
6d:1f:79:bc:b6:be:c5:51:b3:a1:fc:03:d3:63:1e:2e:34:c3:
f7:5f:aa:73:eb:96:30:4d:9b:9b:77:01:f2:59:f9:83:d4:92:
09:53:fd:c7:f6:76:df:5d:25:c7:4e:24:82:a6:8a:21:7d:7f:
36:4c:5b:5b:c4:04:1f:c5:3e:1a:8d:90:0d:a7:bf:91:2f:3b:
a8:4d:a9:61:97:55:4f:07:e5:ab:64:af:19:98:c4:6a:b8:fe:
69:12:8b:9d:eb:4a:ae:02:e1:23:33:c5:4a:32:f4:72:2a:01:
ae:2e:ea:dd:d4:0c:6d:1c:cd:ff:7f:45:5c:a1:31:62:1c:fe:
c7:73:39:a5:49:37:02:66:77:8b:04:ea:6c:2f:62:1a:61:df:
c8:e4:cb:37:5a:7f:02:85:dc:b2:da:30:ac:b5:06:31:b8:7a:
df:ba:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:58 2025 by rpki-client