
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: abKovPXNay8uVJonakCf+g5cQvZp7EwNfoNcvu6j2/8=
Subject key identifier: 1A:C2:D6:59:7D:EE:A4:3B:97:FB:C3:59:14:D2:AF:DB:31:D4:F6:40
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 79D4C6BC5402FB1468D9370D40FDBD37B61A2B3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 091A
Signing time: Thu 24 Sep 2026 03:54:58 +0000
Manifest this update: Thu 24 Sep 2026 03:49:58 +0000
Manifest next update: Fri 25 Sep 2026 04:14:58 +0000
Files and hashes: 1: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
2: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
3: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
4: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
5: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
6: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
7: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
8: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
9: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
10: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
11: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
12: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
13: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
14: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
15: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
16: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: 66utW7YClPq5cG2rrO6PT2vMjorXSMcGPsjBzIJnDMo=)
17: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
18: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
19: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
20: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
21: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d4:c6:bc:54:02:fb:14:68:d9:37:0d:40:fd:bd:37:b6:1a:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Sep 24 03:49:58 2026 GMT
Not After : Sep 25 04:14:58 2026 GMT
Subject: CN=1AC2D6597DEEA43B97FBC35914D2AFDB31D4F640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:7a:b1:db:2d:b6:60:9f:72:d9:7f:3f:c9:
d7:4f:5f:50:39:09:07:f2:3e:8f:e0:5e:68:35:74:
21:8c:87:8e:1a:8b:6a:be:2f:3b:63:fe:f3:8a:34:
0a:bf:3e:13:1e:05:0e:f7:ad:00:03:b8:0d:c4:a0:
9b:ae:d6:b0:2f:82:00:9d:ff:86:53:f4:e1:ce:bd:
dd:af:b5:87:d1:64:ef:43:8e:50:d5:58:3a:31:84:
7a:be:a8:47:5a:7c:01:ba:67:0e:ca:12:0c:a8:fa:
4f:9a:dd:4b:33:22:02:db:1a:ac:4c:a8:0c:ea:76:
04:95:b5:bc:a6:5a:70:67:d1:aa:1c:54:f2:70:71:
1d:93:72:fc:07:f5:bc:8b:b1:e1:9f:9e:d0:e9:44:
41:1d:17:36:a7:bd:db:8f:4e:3a:a7:16:ca:c1:83:
89:21:fa:d1:14:1a:71:64:45:ce:37:ab:51:4f:4a:
e3:5b:44:f3:84:bd:a3:9d:ac:37:51:fc:05:2f:2f:
7d:56:c1:1a:7e:3d:39:c5:71:3f:b4:10:8a:a8:8f:
7c:d0:d6:26:02:d5:35:08:ce:57:bf:8a:3e:90:5a:
4c:6b:cd:76:d4:11:36:8b:89:18:ac:1f:a8:98:d2:
e5:18:d1:ed:a8:0b:dd:33:b9:82:c0:54:15:c0:03:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:D6:59:7D:EE:A4:3B:97:FB:C3:59:14:D2:AF:DB:31:D4:F6:40
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:95:5d:11:1a:dd:68:00:91:63:4c:4c:86:aa:2a:9d:cd:
7b:c6:09:bb:e7:d0:a2:dc:df:ac:83:09:13:11:23:d7:8f:99:
50:58:8e:03:25:6e:79:5f:3b:e4:ef:e2:bc:24:2a:06:63:81:
be:e5:d7:03:85:5b:46:f3:6d:74:b0:0e:f4:a4:f2:a6:c2:f8:
a3:2d:b8:6b:7a:04:69:9e:f7:9a:bf:6f:b0:7e:e2:5b:4e:b9:
74:7b:fd:5c:7d:93:37:ac:3f:9c:c5:bb:21:2f:21:de:d0:cf:
90:c4:d9:3a:a1:36:4c:1e:0c:a0:5a:d9:10:37:60:42:27:56:
8a:33:84:3c:99:b3:ee:8b:1e:f1:fe:87:f5:0e:43:7e:b0:1d:
94:d8:74:6b:95:cc:be:aa:08:da:fb:2b:9e:50:d9:82:2a:c3:
0a:cb:9d:43:c7:5f:45:1d:1c:fc:60:08:40:54:5b:0f:79:7c:
9c:ce:d0:0d:90:5b:df:03:24:14:a0:08:0d:76:23:f0:73:cb:
10:74:bc:b2:a1:8a:52:b9:46:86:e0:84:63:18:5d:72:2e:20:
77:da:a2:5d:39:55:cf:5b:4a:8f:dc:12:27:ee:bb:21:83:99:
99:15:90:9b:73:8f:2c:dd:92:f4:2d:4f:61:19:c2:e1:a3:49:
29:3e:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:04:52 2026 by rpki-client