$ rpki-client -vvf rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft File: 5577EED829CD0AC31399054DE74453562390C62F.mft (raw, json) Hash identifier: 3hn26Il0zCNx88PpXW9dbVzhHFmylLelz39rzwOQ+cY= Subject key identifier: FB:9B:2E:37:8C:40:75:52:78:E8:E9:18:E9:45:57:2D:9A:EF:B9:30 Authority key identifier: 55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F Certificate issuer: /CN=A9124B5E0000/serialNumber=5577EED829CD0AC31399054DE74453562390C62F Certificate serial: 46E4E33BEF97922E1EBD2FCBA9B197FE2D974F1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft Manifest number: 7D Signing time: Sun 01 Mar 2026 03:06:30 +0000 Manifest this update: Sun 01 Mar 2026 03:01:30 +0000 Manifest next update: Mon 02 Mar 2026 05:30:30 +0000 Files and hashes: 1: 5577EED829CD0AC31399054DE74453562390C62F.crl (hash: T20KXeDG42hjEKHQcnuymOtlTvuI7qFBZgXBJCiU+lM=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e4:e3:3b:ef:97:92:2e:1e:bd:2f:cb:a9:b1:97:fe:2d:97:4f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=5577EED829CD0AC31399054DE74453562390C62F Validity Not Before: Mar 1 03:01:30 2026 GMT Not After : Mar 2 05:30:30 2026 GMT Subject: CN=FB9B2E378C40755278E8E918E945572D9AEFB930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:cc:ab:c3:68:d7:f7:73:87:69:92:4a:16: 55:13:c0:95:2d:b2:47:e9:59:c2:78:a6:76:89:f7: 6f:95:a4:06:fb:0b:d7:82:39:3f:9c:82:c5:a9:fd: f6:d1:0b:c1:73:e8:e4:d0:99:5c:07:71:b3:f4:5d: fe:bf:00:0a:11:34:e8:69:ef:0b:6e:5d:7f:ad:9c: f0:ba:4d:b6:d8:e4:c9:74:9a:9d:69:26:e4:88:e1: 49:6e:1c:c9:a6:0d:ed:d9:f8:f3:81:47:08:6d:6f: d7:44:e9:ef:1a:e5:7c:e5:a1:b5:f9:ef:1e:90:b0: 6f:da:e3:38:8e:8d:9e:61:4c:de:12:4e:9e:5f:5f: b4:d7:c8:8e:70:49:fa:2d:12:e4:79:4f:ce:40:bd: b0:b0:a1:43:53:76:ca:a1:b2:96:bc:67:d7:09:64: ad:62:21:45:cd:8c:12:5b:e4:9f:5a:9f:93:76:b1: 2f:98:a3:10:42:7f:65:45:cc:53:3e:31:41:46:c7: 41:f8:09:a5:03:a4:b6:06:25:84:aa:ca:23:ff:07: 02:cd:d8:e0:07:0b:8c:74:5a:b7:83:d5:70:aa:66: d3:a0:fc:15:b4:09:5c:a5:8b:e3:35:db:24:cf:c2: 09:28:ba:5a:93:70:e0:81:e2:8d:8d:dd:26:83:f1: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9B:2E:37:8C:40:75:52:78:E8:E9:18:E9:45:57:2D:9A:EF:B9:30 X509v3 Authority Key Identifier: keyid:55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:88:b7:4e:70:25:da:8a:39:59:aa:49:6b:10:4f:60:75:63: 3b:86:91:2a:90:fc:20:4e:55:47:4b:0c:35:ca:d4:1c:bf:4d: 85:bb:da:ff:ce:a6:d1:00:24:b7:29:4c:d7:54:71:31:e7:9f: 4b:b1:80:e4:94:c7:6f:38:9c:07:f0:5b:65:52:f2:4f:b6:83: 1c:b7:b3:82:47:7c:17:4d:1d:08:f9:3b:c8:6e:bb:6c:c0:7d: bc:42:02:79:3a:eb:71:91:26:26:5c:41:11:d0:27:90:9b:9f: 72:23:10:6c:40:bc:a3:ae:75:a6:86:c7:4b:5c:de:78:3a:10: 66:0c:92:4e:ad:cb:bc:2c:99:3d:ea:6c:60:52:b7:a0:3e:8a: 3a:86:42:a1:cf:bf:ab:0b:06:fb:73:08:06:4b:33:19:0b:7d: 50:92:8c:f0:a8:3c:f9:d0:47:ed:43:e4:e0:b4:f1:7d:57:0a: b8:61:b8:c7:b7:94:2d:89:fc:e0:5b:bf:5f:c7:2c:b2:f0:3c: 09:35:6c:d2:51:06:c1:49:4c:7e:3c:8d:db:82:99:29:5f:5d: 2b:6d:63:e9:46:72:10:4e:6f:8a:c2:79:ff:ac:a9:53:90:f0: b7:5c:21:34:ef:ae:83:91:67:a5:b5:84:ae:0b:93:16:81:25: 4f:25:28:fe -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIURuTjO++Xki4evS/LqbGX/i2XTxwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg1NTc3RUVEODI5 Q0QwQUMzMTM5OTA1NERFNzQ0NTM1NjIzOTBDNjJGMB4XDTI2MDMwMTAzMDEzMFoX DTI2MDMwMjA1MzAzMFowMzExMC8GA1UEAxMoRkI5QjJFMzc4QzQwNzU1Mjc4RThF OTE4RTk0NTU3MkQ5QUVGQjkzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR0zKvDaNf3c4dpkkoWVRPAlS2yR+lZwnimdon3b5WkBvsL14I5P5yCxan9 9tELwXPo5NCZXAdxs/Rd/r8AChE06GnvC25df62c8LpNttjkyXSanWkm5IjhSW4c yaYN7dn484FHCG1v10Tp7xrlfOWhtfnvHpCwb9rjOI6NnmFM3hJOnl9ftNfIjnBJ +i0S5HlPzkC9sLChQ1N2yqGylrxn1wlkrWIhRc2MElvkn1qfk3axL5ijEEJ/ZUXM Uz4xQUbHQfgJpQOktgYlhKrKI/8HAs3Y4AcLjHRat4PVcKpm06D8FbQJXKWL4zXb JM/CCSi6WpNw4IHijY3dJoPxxc8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT7my43 jEB1Unjo6RjpRVctmu+5MDAfBgNVHSMEGDAWgBRVd+7YKc0KwxOZBU3nRFNWI5DG LzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYxLzU1NzdFRUQ4MjlDRDBBQzMxMzk5MDU0REU3 NDQ1MzU2MjM5MEM2MkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1ZYZnUyQ25OQ3NNVG1RVk41MFJUVmlPUXhpOC5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjEvNTU3N0VFRDgyOUNEMEFDMzEzOTkwNTRERTc0NDUz NTYyMzkwQzYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6It05wJdqKOVmqSWsQT2B1YzuGkSqQ/CBO VUdLDDXK1By/TYW72v/OptEAJLcpTNdUcTHnn0uxgOSUx284nAfwW2VS8k+2gxy3 s4JHfBdNHQj5O8huu2zAfbxCAnk663GRJiZcQRHQJ5Cbn3IjEGxAvKOudaaGx0tc 3ng6EGYMkk6ty7wsmT3qbGBSt6A+ijqGQqHPv6sLBvtzCAZLMxkLfVCSjPCoPPnQ R+1D5OC08X1XCrhhuMe3lC2J/OBbv1/HLLLwPAk1bNJRBsFJTH48jduCmSlfXStt Y+lGchBOb4rCef+sqVOQ8LdcITTvroORZ6W1hK4LkxaBJU8lKP4= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:01 2026 by rpki-client