$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: yuZp9vJ+8NfZofhG14/MO7ioDkW6xd4crvqPsBEYl4I= Subject key identifier: 1C:F9:3B:95:34:08:CA:EC:5D:6E:D4:91:38:9E:87:3A:F6:D7:98:16 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 12F4ADC863490B4273E2F47EBBC6E5B90E551BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 0161 Signing time: Sat 07 Nov 2026 12:18:46 +0000 Manifest this update: Sat 07 Nov 2026 12:13:46 +0000 Manifest next update: Sun 08 Nov 2026 16:08:46 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 2: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) 3: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 4: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 5: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) 6: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 7: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: RSgpEwIlbeZSS5+DTk1ycvxfuB+lATew1PMr/uccLPc=) 8: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) 9: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 10: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 11: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 12: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) 13: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 14: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 16:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f4:ad:c8:63:49:0b:42:73:e2:f4:7e:bb:c6:e5:b9:0e:55:1b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Nov 7 12:13:46 2026 GMT Not After : Nov 8 16:08:46 2026 GMT Subject: CN=1CF93B953408CAEC5D6ED491389E873AF6D79816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:53:77:76:af:eb:73:1f:d3:f7:89:a0:a9: 06:5a:fe:8a:71:a0:2f:43:fa:e5:23:3c:78:53:a5: 0f:d6:0a:dd:e3:a1:d2:ca:0b:4e:a0:0b:4a:b6:12: 54:43:9a:86:5b:c7:82:42:1b:ed:e2:43:8d:d7:6f: 9d:32:8e:bc:13:d2:d9:f5:ee:bf:19:f9:db:03:ce: be:55:5c:72:9f:2a:7a:ae:a7:c2:f3:7c:78:b3:f4: c8:75:72:40:b0:fa:89:4b:6e:fa:fd:3d:06:ae:a1: 4d:76:14:0f:e4:87:fb:f7:e2:26:66:62:55:75:4f: a6:22:18:ec:e7:dc:c4:41:8b:e1:88:4d:54:6e:85: 7f:8e:5e:24:01:21:b2:b4:dd:b9:e1:fd:ed:b7:c6: b3:10:6f:bd:d8:9c:72:75:04:80:90:bb:b2:ca:4c: 45:31:f3:e9:ec:c6:d8:4e:bf:ea:71:cf:2e:32:26: 16:e4:a5:75:9c:1d:70:5d:cf:c9:aa:08:b9:f4:af: 18:47:23:10:76:96:04:bd:ef:7e:ad:d3:5d:67:8a: 14:fa:63:53:9c:a2:7c:6b:20:5e:45:97:4d:d5:25: eb:9b:e2:3f:f4:7e:23:e0:83:fa:48:f6:d0:4a:4e: 2a:69:90:ff:30:87:10:15:1e:61:6b:44:6b:54:a6: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F9:3B:95:34:08:CA:EC:5D:6E:D4:91:38:9E:87:3A:F6:D7:98:16 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a5:fe:9c:8b:e5:d1:65:a0:f7:ae:28:3f:44:38:65:3f:76: a5:59:14:5b:0e:05:ff:78:04:f2:44:85:19:fc:ac:15:70:2c: 88:17:52:5e:99:5a:91:83:fa:b0:d0:97:55:69:b6:02:71:6a: ad:0d:2d:a4:a9:3f:3b:c5:e6:87:0a:47:c0:61:85:fc:ae:de: df:39:dc:85:61:f0:6d:d1:bc:1a:96:ff:f2:8a:28:9c:e5:2c: b0:12:cf:10:22:33:a1:d6:cd:2c:60:67:8b:ec:d0:0e:bd:82: 69:96:3f:d1:79:6a:da:0d:c4:27:b4:0d:d2:1d:a8:e5:49:ec: ce:f7:30:ef:5b:08:3f:b0:7d:6a:b7:74:92:b3:9f:76:fc:12: ee:6f:30:65:a3:df:54:b4:99:92:80:9d:72:1e:5f:50:67:26: be:ce:31:0a:03:57:d7:c1:a1:06:cc:5c:a1:1c:e2:f5:28:62: 9c:77:2c:65:32:bf:f7:ce:71:75:1c:9f:39:7b:8f:08:15:17: f2:7c:63:e8:af:c9:69:69:6b:ea:b4:bf:9a:af:a2:67:97:20: 23:96:10:b2:63:39:ef:44:a9:57:f8:97:3b:ab:0f:0b:5a:ef: 52:74:89:53:7d:dc:74:98:cf:8b:59:bd:6d:d4:31:8a:d9:c1: f0:b8:39:91 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUEvStyGNJC0Jz4vR+u8bluQ5VG/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MTEwNzEyMTM0NloX DTI2MTEwODE2MDg0NlowMzExMC8GA1UEAxMoMUNGOTNCOTUzNDA4Q0FFQzVENkVE NDkxMzg5RTg3M0FGNkQ3OTgxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPvU3d2r+tzH9P3iaCpBlr+inGgL0P65SM8eFOlD9YK3eOh0soLTqALSrYS VEOahlvHgkIb7eJDjddvnTKOvBPS2fXuvxn52wPOvlVccp8qeq6nwvN8eLP0yHVy QLD6iUtu+v09Bq6hTXYUD+SH+/fiJmZiVXVPpiIY7OfcxEGL4YhNVG6Ff45eJAEh srTdueH97bfGsxBvvdiccnUEgJC7sspMRTHz6ezG2E6/6nHPLjImFuSldZwdcF3P yaoIufSvGEcjEHaWBL3vfq3TXWeKFPpjU5yifGsgXkWXTdUl65viP/R+I+CD+kj2 0EpOKmmQ/zCHEBUeYWtEa1SmBlUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQc+TuV NAjK7F1u1JE4noc69teYFjAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIql/pyL5dFloPeuKD9EOGU/dqVZFFsOBf94 BPJEhRn8rBVwLIgXUl6ZWpGD+rDQl1VptgJxaq0NLaSpPzvF5ocKR8Bhhfyu3t85 3IVh8G3RvBqW//KKKJzlLLASzxAiM6HWzSxgZ4vs0A69gmmWP9F5atoNxCe0DdId qOVJ7M73MO9bCD+wfWq3dJKzn3b8Eu5vMGWj31S0mZKAnXIeX1BnJr7OMQoDV9fB oQbMXKEc4vUoYpx3LGUyv/fOcXUcnzl7jwgVF/J8Y+ivyWlpa+q0v5qvomeXICOW ELJjOe9EqVf4lzurDwta71J0iVN93HSYz4tZvW3UMYrZwfC4OZE= -----END CERTIFICATE-----Generated at Sun Nov 8 05:12:16 2026 by rpki-client