
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier: 8jtTn3kzicdgl0MQcRuuOYrPiN68LN/PhjZji4HwM9Q=
Subject key identifier: F3:1E:01:48:BB:0A:CC:96:37:81:52:A5:C2:E0:6E:38:25:6E:D2:42
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 482666F973E761965DC28F699679295AFC21F13A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number: 0857
Signing time: Wed 25 Mar 2026 12:56:13 +0000
Manifest this update: Wed 25 Mar 2026 12:51:13 +0000
Manifest next update: Thu 26 Mar 2026 14:06:13 +0000
Files and hashes: 1: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
2: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
3: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
4: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
5: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
6: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
7: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
8: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
9: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
10: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
11: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
12: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
13: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
14: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
15: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
16: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: lvGuV0hULdKuksYNnMFEjXC8T6AWyyy5mc3I9iHUowQ=)
17: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 14:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:26:66:f9:73:e7:61:96:5d:c2:8f:69:96:79:29:5a:fc:21:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Mar 25 12:51:13 2026 GMT
Not After : Mar 26 14:06:13 2026 GMT
Subject: CN=F31E0148BB0ACC96378152A5C2E06E38256ED242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:fa:24:b2:d8:99:fe:c5:95:b3:93:01:b0:
14:bc:8c:0c:fa:d8:04:39:8a:d0:e3:72:cc:d2:f9:
07:6c:25:a2:b4:0d:d2:47:dc:1f:6f:e0:71:ce:70:
38:03:48:ed:a8:4a:0f:90:ce:5a:42:a3:e0:b9:4c:
3f:21:2c:ce:e7:4d:1f:ca:c6:30:11:de:8f:19:64:
0f:1c:3e:61:1e:3c:ab:96:ec:97:9d:c3:53:e8:05:
a0:a5:56:f5:e2:d9:f9:3d:4e:2d:dc:45:7f:1b:8e:
07:99:d6:a1:d3:f0:1a:ca:ae:41:0a:b0:0f:37:94:
2f:ad:58:d6:68:67:80:e7:18:02:b6:01:26:42:29:
d0:3c:e2:28:f2:39:cf:d7:81:88:6d:f6:68:fa:ea:
38:8f:34:8c:4c:16:f3:aa:ef:9e:c2:f1:25:d3:20:
0e:01:43:7c:72:1e:14:e5:8d:4e:92:22:7b:f7:70:
f1:c2:8d:79:bf:54:a6:f5:6f:fc:67:02:0f:e6:5f:
1d:90:19:8e:b7:1e:24:cc:ec:db:45:0e:ce:b6:5b:
8b:8f:e2:2b:e4:d9:3b:40:ab:39:05:e2:86:e4:9b:
8a:92:26:74:70:c7:df:fd:41:b9:78:05:aa:53:32:
cb:a2:0f:5e:d1:d3:e3:f5:ff:0c:0c:91:14:21:98:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:01:48:BB:0A:CC:96:37:81:52:A5:C2:E0:6E:38:25:6E:D2:42
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:7b:d1:ff:3e:dd:ea:f6:0f:37:5c:1b:7a:61:7f:c9:a2:
c8:4a:7c:e8:54:d0:b0:82:e8:30:ac:83:af:c5:0b:37:4c:57:
6d:55:49:c9:96:e6:b2:bc:94:0e:3b:25:51:df:b3:5d:fe:39:
20:c5:d0:e1:1e:7c:1f:a7:3e:70:9d:b4:fe:ff:bf:4d:c1:9c:
10:cf:85:5d:99:6a:86:70:9b:90:47:60:03:06:36:4a:7d:50:
77:cc:79:fe:e3:95:a5:09:b7:47:ba:c5:d5:13:f0:85:c4:64:
dc:a9:f5:7b:17:e8:9d:07:0a:b5:f4:b8:5d:ab:88:3a:b3:ac:
d5:a8:f7:20:bc:f3:4d:60:92:6c:88:d0:15:57:e7:ae:bb:bc:
ae:b2:ba:01:3a:33:5e:c2:8e:a4:8b:7d:2b:17:bd:96:c6:76:
8f:a4:f7:d1:7c:e0:68:18:f4:81:ba:70:ec:de:48:b4:89:01:
9f:f9:3a:23:7a:d8:3b:bb:c9:bc:16:43:73:2a:1e:d7:3c:a9:
27:3c:3f:b8:1d:cd:d8:d8:f5:25:9c:3e:22:82:0a:46:fb:6b:
76:92:d5:b3:86:45:fb:e2:ef:c3:e6:70:d4:50:cf:a5:4d:bb:
40:28:4c:25:80:7f:77:d3:39:33:eb:dc:05:90:74:ac:48:b9:
ef:2b:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:46 2026 by rpki-client