$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: KuXmgJFjYQWbJRRQuzJ8YyMBoxZrnTUReu1+TkvdX+s= Subject key identifier: 34:1D:97:F0:FB:ED:1D:3A:28:AA:94:26:D5:04:68:D7:79:20:29:4D Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 70EF00007988EDFFF5A34875ACD04007E0C9924F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 0216 Signing time: Sat 14 Nov 2026 21:18:46 +0000 Manifest this update: Sat 14 Nov 2026 21:13:46 +0000 Manifest next update: Sun 15 Nov 2026 23:57:46 +0000 Files and hashes: 1: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 2: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: +gVpHXbm+Xs5FmG+ncboMLP+C9Rxjxb7R1itCi/jNp4=) 3: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: irj/pQijVKXQ1FsPVstg2ZCJ9apIMMwMd0BjxS7Y04g=) 4: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 5: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) 6: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) 7: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 8: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) 9: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: TQnlfyMCmOGJXfsvC8eOauV2T6ETny61uOd5G+fsWZw=) 10: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ef:00:00:79:88:ed:ff:f5:a3:48:75:ac:d0:40:07:e0:c9:92:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Nov 14 21:13:46 2026 GMT Not After : Nov 15 23:57:46 2026 GMT Subject: CN=341D97F0FBED1D3A28AA9426D50468D77920294D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:cc:c2:19:75:41:9c:36:dd:2c:41:7b:a5: e8:71:41:50:3e:ab:52:52:89:e3:ca:49:a5:0f:53: 48:e2:8c:5f:a2:fa:e2:f9:af:fb:17:de:52:94:a6: 9a:cd:48:6d:fd:54:8e:90:53:12:81:be:ab:39:4a: 8d:d1:b5:48:a7:24:2e:63:fe:b4:0e:ca:0f:5a:75: 8a:65:be:df:4a:15:6f:4e:68:51:29:20:56:0a:ed: bf:15:88:bb:c2:7c:97:37:e6:fa:52:1c:8d:71:41: a8:4d:9f:4c:fc:76:79:f1:36:c4:70:82:b0:ce:5f: a3:d4:64:4e:00:04:95:d3:2d:59:57:98:77:90:4d: ad:ce:d9:d9:7f:19:bf:13:cc:7b:2a:f7:c5:a4:cb: 2e:47:1a:f3:d5:de:ba:1d:c4:85:ca:28:a0:2a:38: 68:2c:ed:13:b9:93:c3:b9:6a:03:0d:2d:6b:61:d6: 63:fd:86:17:fd:04:7b:a5:b8:53:1f:b9:bd:d9:bd: 6a:33:08:f7:82:87:e0:2d:9a:56:02:10:63:0d:4c: f6:81:09:5f:31:d3:31:d3:81:09:39:7b:fb:32:8a: bf:4d:4f:ba:59:09:6f:f1:56:3a:c0:c4:42:73:ac: 60:1a:f6:b8:b5:06:0a:c9:7d:0e:95:da:45:42:dd: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:97:F0:FB:ED:1D:3A:28:AA:94:26:D5:04:68:D7:79:20:29:4D X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:99:a2:92:14:b4:48:0e:60:d1:97:d9:1c:36:ef:2d:32:ea: f4:84:30:59:9c:56:d0:1c:54:64:65:7a:3c:75:56:1c:bc:82: 2b:52:77:01:de:60:5d:20:08:51:9a:4b:5d:59:a9:87:21:dd: 6e:2d:59:f1:99:d0:fa:a5:72:76:af:7a:f1:21:9c:1d:0f:61: d3:6f:d5:d2:a5:7a:a1:bd:d6:95:01:11:0b:4c:da:30:a0:83: f0:a0:f2:fc:cc:50:67:54:2d:b9:f6:91:91:c6:20:3f:63:ba: 33:e5:60:cf:30:1c:31:2a:87:de:9b:91:27:ef:4f:10:3a:5f: 8d:f0:3a:81:e3:e1:b5:9e:70:a2:28:69:3f:81:dd:7d:fa:aa: 87:03:3a:6a:d0:5c:e9:d0:9c:1a:69:76:e8:a4:8c:25:a5:c8: 59:02:11:9e:83:a4:58:51:39:2d:ae:47:60:90:8f:95:ba:9a: e7:77:85:9c:ed:69:91:1b:10:47:a5:39:69:4b:36:c1:23:4a: 33:4b:07:25:af:58:e9:7e:1b:c6:d6:95:6a:f5:3a:91:bc:bf: 3f:4c:61:26:9f:64:99:dc:4d:1f:b7:5c:27:b9:17:95:a9:c0: fd:00:fa:b5:7f:8a:3d:5a:c3:8d:38:21:5f:ea:88:1a:13:c0: 38:4b:8f:20 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUcO8AAHmI7f/1o0h1rNBAB+DJkk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MTExNDIxMTM0NloX DTI2MTExNTIzNTc0NlowMzExMC8GA1UEAxMoMzQxRDk3RjBGQkVEMUQzQTI4QUE5 NDI2RDUwNDY4RDc3OTIwMjk0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkczMIZdUGcNt0sQXul6HFBUD6rUlKJ48pJpQ9TSOKMX6L64vmv+xfeUpSm ms1Ibf1UjpBTEoG+qzlKjdG1SKckLmP+tA7KD1p1imW+30oVb05oUSkgVgrtvxWI u8J8lzfm+lIcjXFBqE2fTPx2efE2xHCCsM5fo9RkTgAEldMtWVeYd5BNrc7Z2X8Z vxPMeyr3xaTLLkca89Xeuh3EhcoooCo4aCztE7mTw7lqAw0ta2HWY/2GF/0Ee6W4 Ux+5vdm9ajMI94KH4C2aVgIQYw1M9oEJXzHTMdOBCTl7+zKKv01PulkJb/FWOsDE QnOsYBr2uLUGCsl9DpXaRULdOOMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQ0HZfw ++0dOiiqlCbVBGjXeSApTTAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaZopIUtEgOYNGX2Rw27y0y6vSEMFmcVtAc VGRlejx1Vhy8gitSdwHeYF0gCFGaS11ZqYch3W4tWfGZ0PqlcnavevEhnB0PYdNv 1dKleqG91pUBEQtM2jCgg/Cg8vzMUGdULbn2kZHGID9jujPlYM8wHDEqh96bkSfv TxA6X43wOoHj4bWecKIoaT+B3X36qocDOmrQXOnQnBppduikjCWlyFkCEZ6DpFhR OS2uR2CQj5W6mud3hZztaZEbEEelOWlLNsEjSjNLByWvWOl+G8bWlWr1OpG8vz9M YSafZJncTR+3XCe5F5WpwP0A+rV/ij1aw404IV/qiBoTwDhLjyA= -----END CERTIFICATE-----Generated at Sat Nov 14 23:48:53 2026 by rpki-client