
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: mWu3P+fwovdFVa3PJFqTlgBPWuGmXLELDl5Im0MuEbc=
Subject key identifier: 2D:50:5A:84:45:13:00:39:AB:5C:0C:7D:39:9D:27:E0:B9:8E:A1:89
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 343BB29773F760073DE2D2C10B40EE5327527D61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 0964
Signing time: Sat 14 Nov 2026 21:23:46 +0000
Manifest this update: Sat 14 Nov 2026 21:18:46 +0000
Manifest next update: Mon 16 Nov 2026 00:42:46 +0000
Files and hashes: 1: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
2: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
3: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
4: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
5: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: VZNesasvz2tEhuMGNvLzXouMh85J877cx99AejiIwmI=)
6: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
7: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
8: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
9: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
10: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
11: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
12: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
13: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
14: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
15: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
16: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
17: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
18: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
19: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
20: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
21: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 00:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3b:b2:97:73:f7:60:07:3d:e2:d2:c1:0b:40:ee:53:27:52:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Nov 14 21:18:46 2026 GMT
Not After : Nov 16 00:42:46 2026 GMT
Subject: CN=2D505A8445130039AB5C0C7D399D27E0B98EA189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:db:f0:bc:b3:cb:98:f8:b2:88:2d:51:93:
62:86:68:33:f4:a6:7d:1a:1d:7c:e8:bd:fe:7d:13:
ee:98:55:c2:32:b2:3c:08:f8:4b:20:76:af:30:af:
ae:13:07:c0:7d:6a:3a:b7:1e:6a:60:65:3d:d5:d7:
8a:fe:db:75:01:1c:13:64:85:0b:57:a7:59:1b:6a:
8c:6c:ab:af:f1:c2:5e:02:7a:69:5a:4b:6d:6c:c1:
70:f8:23:f6:14:15:d7:0c:e4:75:a4:b2:31:db:84:
6c:bf:7a:85:11:73:c5:01:48:38:ce:c9:1c:4b:a7:
7e:63:f6:14:01:fe:05:3f:ff:ce:0c:f8:1e:3c:85:
0f:07:0d:5f:91:cb:d5:39:57:c4:93:e8:46:61:bd:
02:cf:38:4e:f1:3b:48:ec:55:8a:ee:11:1a:37:7c:
99:a7:62:9a:d1:5c:ab:0e:a6:5e:cf:75:d6:b7:73:
39:88:7d:5a:91:d9:b9:89:95:94:ae:74:35:d1:d9:
a3:18:31:8b:34:ab:cc:1f:b9:2d:70:61:d4:a7:db:
b9:59:6d:81:aa:ac:13:f5:91:bb:7a:ca:8f:90:ce:
cb:f7:c4:02:07:85:dc:17:49:fc:fd:39:3c:46:11:
04:2d:6d:19:10:f6:17:ad:77:e3:16:90:7d:2e:60:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:5A:84:45:13:00:39:AB:5C:0C:7D:39:9D:27:E0:B9:8E:A1:89
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:0a:e7:09:b3:5e:5a:f1:fe:40:68:33:02:33:54:18:0d:
e0:68:e7:34:48:dc:7a:b1:17:b2:f0:9e:1c:56:f1:3c:13:56:
b6:cd:68:74:72:5e:ae:ab:49:ff:19:c0:97:a5:97:d7:d3:5b:
ce:95:79:8a:c0:7f:68:d6:6d:b3:a7:4f:03:26:95:e8:f2:03:
96:e4:90:31:b7:a4:76:af:9c:ce:78:e8:39:82:a0:65:ab:cf:
67:e2:ae:c4:e8:0a:23:7c:16:ec:50:17:a9:4a:70:c4:11:86:
c1:22:01:c2:8d:0d:fb:90:2c:37:7a:b3:3f:53:b4:aa:e1:ab:
a7:c9:6d:55:66:51:0c:3c:2d:86:a0:c2:4c:f3:9d:a6:5f:1a:
79:fa:0e:2c:f3:5e:96:e0:3d:df:5c:6c:1a:17:07:88:3b:72:
2a:43:c7:45:56:f0:cb:8b:37:c0:66:65:fd:81:4d:9f:8c:a1:
bd:71:44:4c:a4:a6:14:8b:a6:ab:20:cd:b5:48:e1:3c:a2:96:
7f:1b:b7:46:2c:b2:8e:98:d3:6e:a2:62:64:77:6b:2d:d9:45:
3b:96:59:0d:54:7a:a5:3d:a4:fa:25:bf:ca:b1:aa:52:3e:ce:
2c:d5:47:7a:3a:1c:9e:83:f4:73:27:56:f9:6a:d6:d0:16:04:
8f:c2:c9:05
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUNDuyl3P3YAc94tLBC0DuUydSfWEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4
MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MTExNDIxMTg0NloX
DTI2MTExNjAwNDI0NlowMzExMC8GA1UEAxMoMkQ1MDVBODQ0NTEzMDAzOUFCNUMw
QzdEMzk5RDI3RTBCOThFQTE4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIpo2/C8s8uY+LKILVGTYoZoM/SmfRodfOi9/n0T7phVwjKyPAj4SyB2rzCv
rhMHwH1qOrceamBlPdXXiv7bdQEcE2SFC1enWRtqjGyrr/HCXgJ6aVpLbWzBcPgj
9hQV1wzkdaSyMduEbL96hRFzxQFIOM7JHEunfmP2FAH+BT//zgz4HjyFDwcNX5HL
1TlXxJPoRmG9As84TvE7SOxViu4RGjd8madimtFcqw6mXs911rdzOYh9WpHZuYmV
lK50NdHZoxgxizSrzB+5LXBh1KfbuVltgaqsE/WRu3rKj5DOy/fEAgeF3BdJ/P05
PEYRBC1tGRD2F6134xaQfS5gXl8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQtUFqE
RRMAOatcDH05nSfguY6hiTAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR
qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC
OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNTcvNUExOUQyRkRDODM5MjcyNzY5NkY3MDQ0OUI4QjMy
QUY3NzIwOTFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGxeCucJs15a8f5AaDMCM1QYDeBo5zRI3Hqx
F7LwnhxW8TwTVrbNaHRyXq6rSf8ZwJell9fTW86VeYrAf2jWbbOnTwMmlejyA5bk
kDG3pHavnM546DmCoGWrz2firsToCiN8FuxQF6lKcMQRhsEiAcKNDfuQLDd6sz9T
tKrhq6fJbVVmUQw8LYagwkzznaZfGnn6DizzXpbgPd9cbBoXB4g7cipDx0VW8MuL
N8BmZf2BTZ+Mob1xREykphSLpqsgzbVI4Tyiln8bt0Ysso6Y026iYmR3ay3ZRTuW
WQ1UeqU9pPolv8qxqlI+zizVR3o6HJ6D9HMnVvlq1tAWBI/CyQU=
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:49:07 2026 by rpki-client