
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: bBCWiKwCQRD+BfwIMRSPkrcNBKQhqSvp6OE3Jd1u21g=
Subject key identifier: 20:F2:4A:3D:E9:62:A3:ED:16:AC:39:CF:0E:08:B4:82:6D:14:B0:49
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 7BA787C0419E4EA0D4F581F76F9A89E82B5300D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: 0113
Signing time: Thu 24 Sep 2026 01:29:58 +0000
Manifest this update: Thu 24 Sep 2026 01:24:58 +0000
Manifest next update: Fri 25 Sep 2026 04:32:58 +0000
Files and hashes: 1: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
2: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
3: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: /1ghYsH4a4S3JsKs1uxO9M6Jsb6Nh/v7IlwsLHxnhkg=)
4: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
5: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
6: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
7: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
8: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
9: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
10: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
11: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a7:87:c0:41:9e:4e:a0:d4:f5:81:f7:6f:9a:89:e8:2b:53:00:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: Sep 24 01:24:58 2026 GMT
Not After : Sep 25 04:32:58 2026 GMT
Subject: CN=20F24A3DE962A3ED16AC39CF0E08B4826D14B049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:2e:db:45:a9:81:d6:fe:1f:15:65:e8:c0:
ff:f9:12:31:12:89:ef:64:a1:40:b5:3d:b2:f8:a2:
d7:09:0d:61:82:5f:17:d6:e8:f5:f4:84:06:4a:ef:
8d:e3:c7:bf:e8:3c:11:08:70:f6:be:3d:7f:4c:cd:
17:59:8e:88:a4:a5:f6:03:39:d7:ff:e8:7b:8e:c4:
73:85:1c:33:26:19:ad:a8:fe:10:06:eb:92:8c:12:
ae:67:1c:86:22:57:82:b1:23:64:43:9d:0e:02:13:
a4:fb:81:80:c4:40:92:64:51:91:33:70:03:55:9b:
b1:96:14:8b:46:ed:fc:c2:5a:1b:ec:f7:47:e0:cd:
b6:59:13:dc:8e:0b:97:08:e4:68:7c:96:9b:35:0a:
41:0c:c3:74:1d:ab:fd:a3:38:3e:16:ec:7f:08:84:
3d:97:59:a7:88:1f:71:d9:a2:cf:72:07:9e:0a:77:
c0:da:fc:54:b9:f4:8c:f8:4e:5e:e4:b6:12:03:c4:
f6:d0:a8:42:37:5b:57:04:83:6f:85:3c:c2:ce:a6:
cd:cd:33:67:f7:ca:a4:9a:6c:67:72:fb:d3:b5:d6:
ca:c4:5a:46:16:9d:d2:24:12:78:76:a4:1f:59:61:
ab:03:e2:af:7f:3a:9f:d0:fb:83:76:ab:06:19:6d:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:4A:3D:E9:62:A3:ED:16:AC:39:CF:0E:08:B4:82:6D:14:B0:49
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e0:b8:dc:99:aa:e5:88:a8:46:91:8e:7e:a4:05:28:f4:bf:
79:fd:e8:f3:72:f5:2e:1a:89:82:3e:a5:6b:7e:92:b6:55:1e:
5e:79:6f:7c:ce:be:2d:85:ee:23:c0:c2:a0:fd:f7:ad:15:83:
1b:a0:9c:8b:06:80:c3:44:7d:bf:ed:8a:b2:a7:4d:0d:8a:40:
8d:9b:18:4b:d9:28:87:24:4c:28:af:32:4b:a2:e2:27:28:be:
7c:47:38:30:9b:a7:f8:27:4c:fd:fb:ce:6a:79:97:1f:78:41:
cd:db:c2:13:d2:8d:7a:c5:85:76:92:b2:60:e0:74:c7:fd:f5:
36:d5:ad:b2:d3:a3:6e:d4:1a:e2:13:42:f9:7f:e6:ab:69:66:
57:ea:2d:a7:b3:bd:b0:94:8c:bc:ea:0e:f7:58:2f:74:99:80:
82:08:a7:81:fd:70:ee:d5:4c:ec:02:17:ac:09:ab:1c:ac:a7:
8c:91:4a:b1:2a:d9:90:76:cb:94:d1:3f:5c:5d:65:70:0b:a2:
b0:57:0f:3c:04:0c:c3:85:8c:6c:7f:46:d0:0b:51:b1:5e:84:
d8:1d:04:aa:b2:34:2c:c2:5c:22:72:30:15:4a:f1:ca:c0:6b:
92:d1:9a:ff:f6:14:48:92:be:b0:97:ec:6d:58:30:9f:04:b5:
9a:ae:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:38 2026 by rpki-client