$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: S0uPYsXp8PJL5SLjU3BrFogr9sH+Als2eVlymzLK7MY= Subject key identifier: 50:4D:6A:72:B1:9F:EB:87:54:4D:74:40:09:11:11:F6:73:E2:09:39 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 1BD4632DA9D9887631FF6B0C54CA13500AD55126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 011D Signing time: Sun 20 Sep 2026 11:49:58 +0000 Manifest this update: Sun 20 Sep 2026 11:44:58 +0000 Manifest next update: Mon 21 Sep 2026 15:22:58 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) 2: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 3: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 4: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) 5: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 6: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 7: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 8: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 9: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 10: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: pMSFxTJ/sKZBB+kBl2E/06/R4wZ+yIncEVJodZBgyWI=) 11: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 12: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) 13: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 14: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d4:63:2d:a9:d9:88:76:31:ff:6b:0c:54:ca:13:50:0a:d5:51:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Sep 20 11:44:58 2026 GMT Not After : Sep 21 15:22:58 2026 GMT Subject: CN=504D6A72B19FEB87544D7440091111F673E20939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:e6:e0:c3:3c:0d:32:f5:e3:e5:a2:4f:41: 4c:9f:63:88:04:3b:3e:6e:d5:1d:14:4e:2d:79:4d: fe:67:f1:a4:eb:97:92:7e:07:f8:ab:6d:86:7a:69: e6:36:25:ed:a6:fa:bd:8a:a4:39:9c:93:2a:d1:89: c9:c6:f0:2b:35:a5:68:f7:9b:ec:7f:87:a0:10:85: 23:2d:66:26:b0:ba:0b:4d:20:a2:7c:ea:87:6b:4c: 42:ae:27:25:80:89:42:9f:0a:8e:d0:cd:10:b0:df: 69:cc:4a:83:7d:a3:f6:b7:48:35:e9:8d:66:5b:1b: e5:b9:06:ee:84:b0:ab:bd:db:92:e9:df:f9:1e:b7: 58:e4:ae:7f:44:5c:25:89:72:38:f6:d4:9c:33:1c: 21:d4:b4:e5:f5:f1:50:a9:df:aa:94:99:9c:e3:87: b9:14:33:79:9a:ac:1a:05:fe:3a:0c:cf:54:c7:68: b0:88:e6:65:b4:77:b0:3b:2a:0a:75:4c:a2:03:f8: de:0b:bc:86:28:23:28:76:2a:4e:a4:77:9c:55:6d: 45:85:23:96:13:16:aa:ac:0b:d3:6b:be:c5:c5:4c: ec:a2:15:61:80:06:1d:8a:a7:08:aa:b9:eb:b2:b8: 05:bc:6d:ae:82:d7:df:11:58:ec:b1:f3:cb:a3:f6: 0f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4D:6A:72:B1:9F:EB:87:54:4D:74:40:09:11:11:F6:73:E2:09:39 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b3:c9:da:3d:90:a8:84:2d:e1:c4:fb:8b:c5:e6:e2:aa:4c: fa:24:ac:4c:47:ba:10:b2:4d:3f:14:db:dc:b5:26:f0:53:1e: 05:b3:3a:56:94:a7:54:54:2d:17:97:91:2f:a2:6f:80:ca:08: 31:15:61:e6:75:dc:cc:f3:f7:9b:09:a1:33:cf:4e:05:6a:2a: 2b:5e:f8:84:05:2c:38:4f:b4:9d:45:d0:99:09:15:eb:49:aa: 0d:38:5b:28:e8:3b:68:39:2a:4b:d8:c4:33:d4:d0:ce:86:69: 47:9f:1f:3e:57:19:db:32:3a:22:f0:da:23:d1:4b:72:02:e7: 04:e5:96:82:db:62:ec:44:fe:92:6d:39:54:ba:3c:f4:26:f3: d0:f0:0a:65:26:d2:b6:e0:be:3a:f3:e6:9f:6f:b2:76:55:0c: 06:42:e5:ef:dd:d0:36:59:c4:14:e9:c3:d3:d7:dc:c3:08:5b: 80:32:4d:51:ae:f7:93:1c:03:78:59:02:1f:97:34:2e:28:85: 05:f4:d6:b3:12:f3:d7:0c:03:85:bb:6d:66:57:d9:3c:96:3e: 5f:fa:7e:f4:61:dc:dc:dd:f9:fd:ad:9a:63:e0:97:6d:20:a2: 8d:77:d5:9c:1a:6c:ba:57:17:27:da:22:e2:48:1e:61:33:60: a1:ec:e3:66 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUG9RjLanZiHYx/2sMVMoTUArVUSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDkyMDExNDQ1OFoX DTI2MDkyMTE1MjI1OFowMzExMC8GA1UEAxMoNTA0RDZBNzJCMTlGRUI4NzU0NEQ3 NDQwMDkxMTExRjY3M0UyMDkzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD15uDDPA0y9ePlok9BTJ9jiAQ7Pm7VHRROLXlN/mfxpOuXkn4H+Ktthnpp 5jYl7ab6vYqkOZyTKtGJycbwKzWlaPeb7H+HoBCFIy1mJrC6C00gonzqh2tMQq4n JYCJQp8KjtDNELDfacxKg32j9rdINemNZlsb5bkG7oSwq73bkunf+R63WOSuf0Rc JYlyOPbUnDMcIdS05fXxUKnfqpSZnOOHuRQzeZqsGgX+OgzPVMdosIjmZbR3sDsq CnVMogP43gu8higjKHYqTqR3nFVtRYUjlhMWqqwL02u+xcVM7KIVYYAGHYqnCKq5 67K4BbxtroLX3xFY7LHzy6P2D9cCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRQTWpy sZ/rh1RNdEAJERH2c+IJOTAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKzydo9kKiELeHE+4vF5uKqTPokrExHuhCy TT8U29y1JvBTHgWzOlaUp1RULReXkS+ib4DKCDEVYeZ13Mzz95sJoTPPTgVqKite +IQFLDhPtJ1F0JkJFetJqg04WyjoO2g5KkvYxDPU0M6GaUefHz5XGdsyOiLw2iPR S3IC5wTlloLbYuxE/pJtOVS6PPQm89DwCmUm0rbgvjrz5p9vsnZVDAZC5e/d0DZZ xBTpw9PX3MMIW4AyTVGu95McA3hZAh+XNC4ohQX01rMS89cMA4W7bWZX2TyWPl/6 fvRh3Nzd+f2tmmPgl20goo131ZwabLpXFyfaIuJIHmEzYKHs42Y= -----END CERTIFICATE-----Generated at Mon Sep 21 03:56:54 2026 by rpki-client