
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: kt0Zno5QW9DS8MFlMcmOTyTzY2ZUrIBKf1LrOvy7Oeo=
Subject key identifier: 2A:5B:6A:5A:83:32:EC:24:DD:44:11:46:BD:CE:C7:80:81:13:ED:7D
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 02D4CDFBF557274B2CBFA575E8A24913B73E45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 08C3
Signing time: Thu 23 Jul 2026 07:09:57 +0000
Manifest this update: Thu 23 Jul 2026 07:04:57 +0000
Manifest next update: Fri 24 Jul 2026 07:19:57 +0000
Files and hashes: 1: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
2: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
3: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
4: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
5: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
6: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: poVGvqoWeeyeu83QNTfE87ZMPDmF5B7G+mr6zRjcorA=)
7: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
8: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
9: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
10: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
11: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
12: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
13: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
14: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
15: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
16: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
17: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
18: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
19: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
20: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
21: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d4:cd:fb:f5:57:27:4b:2c:bf:a5:75:e8:a2:49:13:b7:3e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Jul 23 07:04:57 2026 GMT
Not After : Jul 24 07:19:57 2026 GMT
Subject: CN=2A5B6A5A8332EC24DD441146BDCEC7808113ED7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:6b:34:6e:29:1c:50:88:02:8f:ce:17:65:
85:79:f8:98:59:3d:44:19:fd:7b:92:d3:c1:87:8f:
31:41:21:2b:89:f3:93:50:ea:3a:6d:22:e9:c2:3f:
36:0c:49:b4:c9:57:c3:a2:12:76:9d:bd:66:41:7f:
5e:03:a1:c5:f1:ea:f5:d3:e2:23:4c:66:f2:ed:6d:
e2:2e:89:e7:9b:04:60:cb:18:44:13:b6:e9:6d:21:
62:8c:e5:3a:db:f4:0b:45:e5:03:23:fb:53:83:72:
27:a5:49:f4:69:0b:db:f7:6e:f9:d1:b8:92:ca:b7:
33:3c:3c:38:d6:12:5c:1d:04:4a:1d:ea:fc:50:c5:
3e:c6:7b:de:3f:3d:a8:6b:d4:04:88:49:f3:34:ff:
09:86:43:ed:33:c3:a4:88:0e:43:a2:2d:fd:b0:41:
12:8a:3f:02:e0:11:87:6a:00:7e:a7:ec:ce:d2:de:
25:f1:1b:37:38:d2:a9:0c:b2:5e:8b:f6:31:14:5c:
d4:19:1b:64:e7:55:2e:1b:a5:98:82:a9:87:69:65:
27:26:bd:cf:76:e8:93:cb:06:2b:b2:b6:e2:12:41:
1a:a1:80:0a:7b:a1:2f:66:ad:51:71:3c:94:d8:f3:
85:3c:11:4a:e3:5a:85:32:5e:1a:66:c0:e2:04:9c:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:6A:5A:83:32:EC:24:DD:44:11:46:BD:CE:C7:80:81:13:ED:7D
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:94:f2:6f:47:54:e1:62:2b:24:3c:75:a0:cb:52:78:a5:
fe:d3:4f:99:c2:a1:f5:d1:e5:7f:29:2f:f0:87:61:1c:cf:6b:
7e:5e:1f:97:8e:cc:d7:f7:ce:5a:58:37:78:70:33:e0:b7:f8:
b7:cf:00:06:ab:bd:bc:0e:81:67:e6:e6:31:15:4a:9b:f6:c6:
3d:44:bd:a6:e4:5e:8e:17:74:77:ab:46:25:4b:ab:d7:b7:ff:
6d:77:c4:ed:50:c0:b2:2a:d9:f5:03:eb:4b:99:d4:75:db:00:
80:45:17:13:f9:a6:a2:0c:9a:f1:51:ce:95:a8:1a:49:bb:6b:
87:d1:24:21:3b:5a:20:8a:30:24:ab:21:00:01:c2:4e:51:49:
04:da:8e:67:06:4a:cc:a6:73:66:cd:c4:8d:77:6e:4d:0a:30:
ff:e4:22:16:a0:48:c5:00:bd:e2:69:c4:85:d8:b1:d2:6a:bf:
4e:e9:97:0b:5d:ff:a4:ad:d8:26:05:77:91:6c:41:da:7e:90:
8b:c0:2e:da:7c:46:18:bd:f1:f2:7a:6f:9e:69:a5:19:54:c2:
a2:24:52:76:e1:77:c5:8f:49:93:af:e4:83:b0:9d:e6:49:ee:
22:85:44:98:57:a3:08:1f:b0:5c:c9:9c:12:7d:79:ba:3d:a8:
a1:65:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:04:25 2026 by rpki-client