
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: kiyPV+E/6z5FdA7ReM7MbalesG4FP7/bVyqVXj0InBo=
Subject key identifier: 2B:19:5E:2D:81:8A:49:F7:74:60:46:D7:C9:3C:12:1D:05:A1:6F:C7
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 3C7B170AA0A0172BE31555F2AD33E8CE7535F97E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: 015C
Signing time: Sat 14 Nov 2026 19:48:46 +0000
Manifest this update: Sat 14 Nov 2026 19:43:46 +0000
Manifest next update: Sun 15 Nov 2026 20:09:46 +0000
Files and hashes: 1: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
2: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
3: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
4: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
5: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
6: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
7: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
8: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
9: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
10: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: 8QlEwyOFLutZ9bnimDULMMOfsjXjRX9sppUEQ/Lly0I=)
11: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 20:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7b:17:0a:a0:a0:17:2b:e3:15:55:f2:ad:33:e8:ce:75:35:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: Nov 14 19:43:46 2026 GMT
Not After : Nov 15 20:09:46 2026 GMT
Subject: CN=2B195E2D818A49F7746046D7C93C121D05A16FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:06:ff:cf:44:27:31:41:4d:1a:6b:87:84:
1c:c8:9c:ce:b0:00:55:e2:a1:e8:85:39:10:3e:fb:
f9:54:02:8e:fa:7a:ac:bf:dc:5e:0c:d9:d3:79:69:
7a:7b:b7:82:73:05:97:23:19:c1:56:1f:7e:59:8a:
65:b5:b8:39:78:5d:81:89:26:95:b5:c6:fa:03:bd:
b4:96:09:8f:80:05:95:3d:66:52:0b:51:c0:dd:5a:
9a:0d:79:8d:12:9e:54:28:5d:09:87:8a:bb:29:25:
4b:13:8a:16:15:9b:56:86:f7:c7:e6:ee:02:b8:34:
a2:32:d8:b1:48:b6:00:24:14:5f:b9:ec:f9:26:d6:
c4:a6:6c:ae:a7:cc:34:e5:3d:0f:66:88:a9:34:e1:
5c:1c:b2:1b:2f:de:34:10:93:6a:05:7a:eb:c2:de:
85:9d:e8:38:d0:14:89:87:9a:8d:83:64:cb:ee:4e:
41:a1:15:f0:a3:fc:69:36:1f:ba:f5:2e:16:7f:9e:
e8:33:11:0e:b7:9b:3f:59:82:76:70:7e:fd:47:35:
3e:77:14:75:66:db:ac:b5:14:a3:24:9e:ce:c8:bc:
b1:6f:60:cb:40:fa:9d:98:b2:24:71:b7:b6:0a:ed:
64:2a:e4:0a:12:75:dc:f4:83:cd:7f:c4:c3:49:4c:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:19:5E:2D:81:8A:49:F7:74:60:46:D7:C9:3C:12:1D:05:A1:6F:C7
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9f:90:94:4b:db:af:23:2c:ec:6e:c4:8f:85:ee:e7:1b:01:
66:4e:c1:a0:d7:3a:9c:aa:58:c9:65:e4:ed:55:62:3b:70:3a:
8c:f3:96:24:90:ed:1e:7e:a4:83:6f:4e:ee:a0:04:a8:75:b6:
b5:fa:96:57:3c:26:db:55:d0:9f:b2:61:71:a2:57:02:90:d8:
d3:63:f9:1d:5f:01:55:45:95:3a:91:d7:5a:4e:0a:97:6d:b5:
42:85:8c:9f:82:05:8c:1f:f4:f0:15:d9:a5:fc:4d:12:9b:3d:
02:55:c9:70:6c:d1:90:8c:ea:56:00:59:f9:d1:cb:36:d6:28:
8b:6d:0d:7f:2d:bf:91:ec:c8:8f:66:c7:cc:ab:cb:e6:a8:1c:
7b:d9:bf:85:5a:87:b9:7d:f5:94:05:a7:c5:c5:2b:92:96:0c:
6b:74:a8:53:f8:20:1a:83:d9:eb:a5:92:a5:31:04:13:58:6f:
f5:ac:57:aa:03:dc:87:d1:41:5b:aa:18:e9:76:36:8d:3d:c6:
9f:68:ca:9c:71:49:fd:fd:7a:8b:36:12:79:2d:0d:69:2e:ca:
35:4a:1c:3d:87:7b:63:ed:eb:21:aa:ad:4b:b3:94:16:e3:b9:
42:b2:ae:b1:4f:2c:ce:28:9c:1d:09:62:dc:3a:eb:09:15:41:
38:3c:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:49:15 2026 by rpki-client