$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: qQY1HunA73Uqvmb6j1s6z5hRN5A0WgUEgmpcYSoGErI= Subject key identifier: F4:19:08:C8:94:5C:79:C3:E9:58:4D:EB:81:92:CE:EA:A4:3A:34:0F Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 347CC87F661D8C934F0DD2B5E03F7264B4B5BC41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 01C9 Signing time: Tue 22 Sep 2026 15:59:58 +0000 Manifest this update: Tue 22 Sep 2026 15:54:58 +0000 Manifest next update: Wed 23 Sep 2026 17:56:58 +0000 Files and hashes: 1: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 2: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: spzygjJsnXteoxcMBMp85UrBr7k83EAaQhql9K/9fi4=) 3: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU=) 4: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) 5: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 6: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) 7: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) 8: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg=) 9: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 10: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7c:c8:7f:66:1d:8c:93:4f:0d:d2:b5:e0:3f:72:64:b4:b5:bc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Sep 22 15:54:58 2026 GMT Not After : Sep 23 17:56:58 2026 GMT Subject: CN=F41908C8945C79C3E9584DEB8192CEEAA43A340F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:e8:87:6d:04:6f:3f:75:34:01:0d:90:06: 86:c3:ad:e9:cd:27:a4:eb:95:19:5a:27:c2:4a:fb: a6:7c:0a:8e:ed:84:02:b5:40:81:77:51:2a:a9:22: 01:44:d7:ed:7e:f7:be:7a:99:92:81:6a:91:02:3a: b7:82:2e:95:c4:71:bc:2a:d9:a7:7e:37:a2:00:f0: 6e:10:2a:e0:23:e0:ff:4b:6e:54:08:fa:f1:fe:f6: be:e5:33:3c:b8:75:22:88:e2:b4:16:a5:54:5b:df: fe:dd:6b:1f:72:ae:b2:91:2d:36:a0:b6:3e:e7:85: 63:d8:3c:bb:f2:73:24:6f:a5:00:d3:c9:06:03:8d: af:07:dd:22:da:b3:ff:9e:e5:34:84:08:c3:e6:9a: d7:fc:6a:05:81:a6:59:61:b2:41:0b:fe:49:5e:14: 69:f5:c2:7e:9d:a2:e3:af:10:fc:5c:9c:24:f7:dc: 6d:5a:fa:75:e8:d5:1c:fc:3a:e3:a1:be:43:f4:a7: 5d:93:d8:0b:38:64:3f:b7:19:31:a9:93:57:c8:e6: 56:56:9d:3d:68:65:b9:8a:9c:91:5b:71:81:df:da: f1:18:a9:9e:c7:ed:0d:86:fe:f6:81:59:76:0a:7f: 22:b0:14:6f:8b:29:e6:ff:01:5f:4b:3f:be:62:8d: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:19:08:C8:94:5C:79:C3:E9:58:4D:EB:81:92:CE:EA:A4:3A:34:0F X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4e:4f:1a:47:cf:d9:ff:20:b6:53:94:38:a5:3b:2e:34:0a: 04:84:3b:ea:ef:19:27:39:d2:14:b2:52:3b:5b:3a:49:a1:32: 1a:98:31:e4:58:58:04:8f:6b:63:86:07:d3:9a:03:07:b0:ad: 63:42:98:a4:6f:31:ad:f9:21:46:16:d7:59:23:f8:e4:67:44: 31:9d:d3:32:a9:88:0d:a7:fc:6b:45:8e:0e:46:39:b9:c6:bb: c8:39:fd:c2:49:66:8e:88:0e:b2:a1:13:e0:49:52:f7:e1:11: 75:4e:fb:29:b3:d6:e9:dc:77:a4:d2:97:dc:f5:e1:ea:3c:ea: a7:c5:7f:e2:c9:ee:c0:09:e5:f6:1d:9f:25:10:c0:fd:c9:fc: 7a:7c:a7:e2:6e:35:8c:1d:fa:1f:e6:9c:44:93:8c:66:91:02: a1:7f:01:24:33:ce:b4:e3:4b:33:e6:1a:0e:a7:b8:6b:81:38: b3:18:a7:91:1f:77:2b:9a:ef:c0:c0:41:16:b8:6b:e8:c6:f5: 8d:22:1c:f9:12:1f:da:fd:f7:7e:af:c2:bf:7a:df:6b:54:8e: c8:5a:7e:57:36:f9:13:69:be:ae:c3:85:27:87:3c:de:dc:32: 76:e5:b3:0e:1b:91:2e:c3:70:26:81:c7:ad:fd:39:e8:2e:e7: 48:05:0b:00 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUNHzIf2YdjJNPDdK14D9yZLS1vEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDkyMjE1NTQ1OFoX DTI2MDkyMzE3NTY1OFowMzExMC8GA1UEAxMoRjQxOTA4Qzg5NDVDNzlDM0U5NTg0 REVCODE5MkNFRUFBNDNBMzQwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbM6IdtBG8/dTQBDZAGhsOt6c0npOuVGVonwkr7pnwKju2EArVAgXdRKqki AUTX7X73vnqZkoFqkQI6t4IulcRxvCrZp343ogDwbhAq4CPg/0tuVAj68f72vuUz PLh1IojitBalVFvf/t1rH3KuspEtNqC2PueFY9g8u/JzJG+lANPJBgONrwfdItqz /57lNIQIw+aa1/xqBYGmWWGyQQv+SV4UafXCfp2i468Q/FycJPfcbVr6dejVHPw6 46G+Q/SnXZPYCzhkP7cZMamTV8jmVladPWhluYqckVtxgd/a8RipnsftDYb+9oFZ dgp/IrAUb4sp5v8BX0s/vmKNsIsCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT0GQjI lFx5w+lYTeuBks7qpDo0DzAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVOTxpHz9n/ILZTlDilOy40CgSEO+rvGSc5 0hSyUjtbOkmhMhqYMeRYWASPa2OGB9OaAwewrWNCmKRvMa35IUYW11kj+ORnRDGd 0zKpiA2n/GtFjg5GObnGu8g5/cJJZo6IDrKhE+BJUvfhEXVO+ymz1uncd6TSl9z1 4eo86qfFf+LJ7sAJ5fYdnyUQwP3J/Hp8p+JuNYwd+h/mnESTjGaRAqF/ASQzzrTj SzPmGg6nuGuBOLMYp5Efdyua78DAQRa4a+jG9Y0iHPkSH9r9936vwr9632tUjsha flc2+RNpvq7DhSeHPN7cMnblsw4bkS7DcCaBx639Oegu50gFCwA= -----END CERTIFICATE-----Generated at Wed Sep 23 08:17:51 2026 by rpki-client