$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: NnLH0FMWsIkyvCOKZM2BVt1q4I4se7QHdi6prF5/DVQ= Subject key identifier: 5E:E2:C3:71:CE:26:77:12:3B:90:86:D7:31:68:A8:32:BA:73:A6:A2 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 39EFD3A9C175BA8FAD1FA31D945F0FA4B382D52C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 0174 Signing time: Thu 23 Jul 2026 23:49:57 +0000 Manifest this update: Thu 23 Jul 2026 23:44:57 +0000 Manifest next update: Sat 25 Jul 2026 01:57:57 +0000 Files and hashes: 1: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: bV8cXV2Hk3bXfFSARR1Z5TmgbVHIS/mTFseX12ZX76g=) 2: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU=) 3: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) 4: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 5: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 6: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) 7: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) 8: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 9: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg=) 10: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ef:d3:a9:c1:75:ba:8f:ad:1f:a3:1d:94:5f:0f:a4:b3:82:d5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 23 23:44:57 2026 GMT Not After : Jul 25 01:57:57 2026 GMT Subject: CN=5EE2C371CE2677123B9086D73168A832BA73A6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:7f:a4:ff:a1:b1:02:06:31:38:b5:d8:a0: 44:9f:ca:49:a1:6c:8e:5d:6a:7b:25:61:c2:d7:6a: 15:83:34:70:5d:c3:83:51:9a:22:4a:f4:d1:02:f7: 9f:91:d5:87:ce:d2:05:cd:1b:54:6c:4c:ad:b2:bc: d9:8c:44:5b:a6:5a:43:5a:20:c1:55:6e:a2:74:49: ad:e5:00:32:46:ef:5a:7d:0c:0e:c7:bb:d7:29:9d: 7c:d1:d6:99:df:68:ba:42:d0:5b:36:a2:c2:f7:97: 3f:6f:61:0c:29:68:5f:32:0f:65:d9:ee:42:20:02: 4e:64:5f:25:64:1d:db:3d:53:bf:a0:6e:b2:1b:aa: d0:b0:d8:88:bc:c0:6c:e7:08:cc:da:a9:38:fe:48: 5e:85:f1:68:5a:df:85:d2:95:3e:c2:5a:5b:03:06: 86:fd:c5:e9:19:84:be:f9:aa:5e:55:ab:47:07:ac: 26:b5:1f:59:d1:35:c8:3d:16:4c:5d:57:ef:33:71: 7d:c1:f4:aa:9a:ce:03:24:52:ed:98:07:27:a6:b6: 6c:7e:ab:53:d0:c1:f8:c8:83:0e:a2:51:15:54:b9: e2:bf:b3:e5:70:dc:7d:2c:13:3a:0f:26:e0:68:04: 0a:59:1e:5f:d3:79:02:12:fe:5e:4e:c1:21:f8:2f: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:C3:71:CE:26:77:12:3B:90:86:D7:31:68:A8:32:BA:73:A6:A2 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ce:51:88:78:58:07:16:3f:31:fe:81:ce:04:82:3a:14:7c: 96:f4:d2:b1:12:61:34:5c:b0:8a:d9:8e:2d:96:bf:8e:7f:28: 14:76:c6:b9:25:ae:09:a2:a3:5b:d1:57:a3:c8:26:4f:b5:a5: df:4f:01:2f:4f:54:15:58:55:66:29:48:ef:eb:3b:29:f9:d3: c5:7b:a1:1a:00:29:e1:70:70:0e:97:55:92:66:33:f5:be:80: 93:a9:7c:96:47:dc:c4:99:db:20:30:ff:80:cd:b6:39:7b:a2: a1:ef:c0:5d:9f:ab:53:24:79:8b:17:dd:d2:75:06:ee:90:ce: 94:b6:5d:bb:ac:81:69:70:5c:a8:18:b1:61:28:21:74:a9:fd: 64:35:2b:9d:23:54:01:88:b9:e9:6a:90:23:93:a4:ac:1e:33: ad:61:d0:9d:cd:20:63:24:30:7a:47:12:0e:13:3b:3c:23:a2: c7:f7:40:00:2e:ba:f7:44:ff:8d:e4:3e:6b:d0:14:86:ff:00: ba:9c:47:50:7e:6f:f4:5b:b5:3f:47:0e:94:ad:07:4c:04:c3: d0:3a:c4:43:3c:e8:46:c8:38:ef:bf:90:f9:44:3e:31:11:54: e9:1f:24:c8:f1:da:ca:6e:28:7c:14:ae:92:90:9f:39:6f:4a: a9:b7:5f:f9 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUOe/TqcF1uo+tH6MdlF8PpLOC1SwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcyMzIzNDQ1N1oX DTI2MDcyNTAxNTc1N1owMzExMC8GA1UEAxMoNUVFMkMzNzFDRTI2NzcxMjNCOTA4 NkQ3MzE2OEE4MzJCQTczQTZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQmf6T/obECBjE4tdigRJ/KSaFsjl1qeyVhwtdqFYM0cF3Dg1GaIkr00QL3 n5HVh87SBc0bVGxMrbK82YxEW6ZaQ1ogwVVuonRJreUAMkbvWn0MDse71ymdfNHW md9oukLQWzaiwveXP29hDCloXzIPZdnuQiACTmRfJWQd2z1Tv6Bushuq0LDYiLzA bOcIzNqpOP5IXoXxaFrfhdKVPsJaWwMGhv3F6RmEvvmqXlWrRwesJrUfWdE1yD0W TF1X7zNxfcH0qprOAyRS7ZgHJ6a2bH6rU9DB+MiDDqJRFVS54r+z5XDcfSwTOg8m 4GgEClkeX9N5AhL+Xk7BIfgvrmECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRe4sNx ziZ3EjuQhtcxaKgyunOmojAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzOUYh4WAcWPzH+gc4EgjoUfJb00rESYTRc sIrZji2Wv45/KBR2xrklrgmio1vRV6PIJk+1pd9PAS9PVBVYVWYpSO/rOyn508V7 oRoAKeFwcA6XVZJmM/W+gJOpfJZH3MSZ2yAw/4DNtjl7oqHvwF2fq1MkeYsX3dJ1 Bu6QzpS2XbusgWlwXKgYsWEoIXSp/WQ1K50jVAGIuelqkCOTpKweM61h0J3NIGMk MHpHEg4TOzwjosf3QAAuuvdE/43kPmvQFIb/ALqcR1B+b/RbtT9HDpStB0wEw9A6 xEM86EbIOO+/kPlEPjERVOkfJMjx2spuKHwUrpKQnzlvSqm3X/k= -----END CERTIFICATE-----Generated at Fri Jul 24 13:49:18 2026 by rpki-client