
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: LYx8h479giCnIWQhydhse6vamZKeTAN7lnq1QwP/YFE=
Subject key identifier: B6:6F:FB:A1:E5:9F:3E:18:5B:89:84:77:50:30:49:75:D0:21:3F:F6
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 5CA00DB751F226A58BDB38F485EF87C04489EFDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: 40
Signing time: Tue 12 May 2026 07:51:33 +0000
Manifest this update: Tue 12 May 2026 07:46:33 +0000
Manifest next update: Wed 13 May 2026 09:17:33 +0000
Files and hashes: 1: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
2: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
3: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
4: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: zbKmBTw/KdxK1f20rbRbZ3wBQ8ODhHQXKzmSi/psdfc=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a0:0d:b7:51:f2:26:a5:8b:db:38:f4:85:ef:87:c0:44:89:ef:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: May 12 07:46:33 2026 GMT
Not After : May 13 09:17:33 2026 GMT
Subject: CN=B66FFBA1E59F3E185B89847750304975D0213FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:0a:e5:d2:55:c1:00:ab:ce:b4:41:84:4b:
02:3b:5f:9c:c0:02:28:7a:1c:c7:13:02:11:86:6d:
63:0a:fc:b6:6f:64:22:56:76:ca:94:d8:75:13:c0:
45:2d:2b:0d:68:86:5c:17:60:18:d1:da:73:bf:66:
fc:c0:28:51:20:97:5f:f9:ed:95:8b:e3:70:d7:9a:
74:ff:3e:94:ba:46:5c:6d:3c:5f:94:98:3b:aa:40:
bb:a2:cd:5b:05:9b:56:80:a9:7e:2a:6d:3b:c7:dc:
89:a3:1d:9b:e2:b6:4d:73:24:39:26:ea:0e:4f:a2:
70:6c:63:32:96:57:df:a8:3d:b6:e6:f4:e4:a2:c7:
c2:da:ba:13:7c:3c:c8:73:51:09:53:b1:71:f0:b4:
3b:03:3a:f8:ec:40:65:11:b5:34:b8:e6:af:ce:23:
63:31:0d:f1:97:5f:75:3b:d1:d1:70:0b:b3:3e:18:
f0:78:e4:8d:22:13:33:4c:07:50:65:02:43:f7:e7:
4b:3d:4a:5f:28:19:f1:aa:60:6f:cd:e0:f5:a9:4d:
ad:b6:c8:e2:7e:3b:1a:14:36:f3:86:87:3e:fc:a4:
b4:31:4b:93:d7:eb:6d:cf:50:23:ec:c5:c4:d6:82:
a2:21:6a:14:0b:c1:8c:0b:c5:8b:3e:1a:63:4b:c2:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:FB:A1:E5:9F:3E:18:5B:89:84:77:50:30:49:75:D0:21:3F:F6
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e5:1d:f2:ba:94:e8:ae:ea:a2:d8:2a:99:ec:d9:96:1e:36:
e6:d4:c3:86:de:1e:b6:22:69:aa:58:46:d7:2a:83:34:74:36:
fc:b2:ac:8b:c6:d3:60:25:93:9f:ab:ba:d2:66:21:20:65:51:
35:2e:04:78:07:0b:57:fc:5a:71:12:24:98:c9:e4:24:1d:b3:
93:09:d9:da:62:95:ce:33:9b:34:72:21:44:7c:b1:98:f5:8b:
3f:95:ef:c2:19:30:aa:35:cb:27:8e:c1:b5:b6:ab:2e:ce:9e:
54:87:48:7a:e6:3a:86:40:f3:2b:c9:a8:ae:2c:27:c7:3b:c2:
63:9f:67:7c:fb:ce:f9:91:0d:db:68:b7:c0:49:8e:fe:18:2f:
57:d2:c4:82:6d:96:ff:12:74:bb:6d:43:f8:e6:e9:31:87:c2:
30:46:85:b1:de:7e:ed:2d:4b:5a:d3:1c:bb:7b:d6:25:77:06:
b7:6e:d9:a8:a8:1a:03:ab:e4:37:ca:67:a8:76:7f:3b:44:ed:
3f:18:33:78:2a:8b:b8:27:98:38:31:ad:73:bd:90:c5:7e:c2:
b8:5b:c0:de:1a:40:06:8c:90:a5:f6:23:50:fa:bb:1a:8b:36:
66:89:70:30:27:a5:d3:09:1c:29:fe:6a:a7:a0:15:4a:36:00:
f9:b6:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:32:08 2026 by rpki-client