$ rpki-client -vvf rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft File: 5577EED829CD0AC31399054DE74453562390C62F.mft (raw, json) Hash identifier: jXOOz0YBECPZRpq1NUzFZS7YQJlHaO1ueDT/DqeNXdM= Subject key identifier: BD:36:B4:51:57:38:EC:8C:2D:22:C5:E0:1A:99:E7:C7:7D:0A:2F:DE Authority key identifier: 55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F Certificate issuer: /CN=A9124B5E0000/serialNumber=5577EED829CD0AC31399054DE74453562390C62F Certificate serial: 4943477D27CF96F8E325681F00E039503B19BABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft Manifest number: 9F Signing time: Wed 25 Mar 2026 12:56:13 +0000 Manifest this update: Wed 25 Mar 2026 12:51:13 +0000 Manifest next update: Thu 26 Mar 2026 14:19:13 +0000 Files and hashes: 1: 5577EED829CD0AC31399054DE74453562390C62F.crl (hash: iQU+O/GOS74hLE6xN7fXgGuC1xYL5cGWDLipttlKu0E=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 14:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:43:47:7d:27:cf:96:f8:e3:25:68:1f:00:e0:39:50:3b:19:ba:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=5577EED829CD0AC31399054DE74453562390C62F Validity Not Before: Mar 25 12:51:13 2026 GMT Not After : Mar 26 14:19:13 2026 GMT Subject: CN=BD36B4515738EC8C2D22C5E01A99E7C77D0A2FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:fb:8a:10:89:49:10:e1:03:01:73:c5:fb: 5c:1f:07:67:19:0a:c4:39:83:9a:20:e9:86:62:00: 21:1d:84:90:76:e8:7b:0d:5d:48:8f:c3:a8:c7:7c: 45:02:96:5a:03:b4:c0:db:f1:cb:19:19:67:01:4a: 9a:ad:10:01:74:7d:d8:9f:37:21:04:5b:2a:5e:33: 43:21:af:d3:be:92:b3:95:23:95:d9:fe:fc:23:aa: b8:32:15:df:cd:1d:d9:c5:a2:b7:fc:a6:7b:83:ba: 4e:41:ec:32:12:e6:59:52:b6:71:1e:64:50:15:02: df:da:ff:6a:86:5d:2b:f6:bd:c8:c8:6e:b0:88:22: 74:89:91:b2:46:d9:41:40:85:a6:88:1d:e7:7f:f8: 13:ee:1e:55:76:b5:17:b3:47:87:5c:84:71:4d:8c: d8:cf:9e:14:31:9c:3e:3d:8d:83:00:4e:68:65:3f: b1:bc:2c:1b:46:95:a6:8b:03:ba:2f:8e:c9:16:ab: 05:01:26:2b:4e:2b:a1:4f:d9:a3:12:9a:a0:ec:07: 84:25:d8:b9:ec:3d:7e:f0:f1:fe:29:c2:42:92:87: 04:62:a5:86:0b:84:96:4a:8c:f2:7c:28:67:c2:06: 9b:68:60:06:f6:d7:bf:0f:7e:ad:5c:f9:a8:4f:c7: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:B4:51:57:38:EC:8C:2D:22:C5:E0:1A:99:E7:C7:7D:0A:2F:DE X509v3 Authority Key Identifier: keyid:55:77:EE:D8:29:CD:0A:C3:13:99:05:4D:E7:44:53:56:23:90:C6:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VXfu2CnNCsMTmQVN50RTViOQxi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/61/5577EED829CD0AC31399054DE74453562390C62F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:9d:99:87:ad:f9:fa:e6:a9:a5:bc:0d:d0:f7:45:05:81: 3f:a2:62:45:94:af:66:54:b6:bb:c2:77:68:66:a8:3b:cf:61: 98:f8:37:82:44:6a:cc:e8:fa:97:ce:ce:11:35:65:2f:f5:b6: c3:a4:67:8e:70:a7:74:b3:d2:57:b7:f4:75:36:02:85:b6:82: 0e:65:94:57:42:0f:07:be:f2:b1:b3:f3:29:87:29:fc:81:91: 0d:7a:42:a8:f9:c1:18:3d:b2:07:b0:42:67:4b:4f:a1:5d:75: d9:3d:74:d9:5a:ce:9b:2c:aa:ed:22:4f:72:c2:81:ba:32:bc: 58:0f:50:4a:86:23:49:ac:5e:eb:2e:ef:e3:f8:4a:9d:59:30: 2c:ee:97:81:55:bb:9d:a9:f8:9e:e2:a8:97:9a:2e:83:31:1d: 8a:92:31:94:58:83:62:05:e9:39:d9:21:c3:13:f5:d1:68:1c: 10:3e:5a:47:73:49:c9:61:1a:f0:d7:56:20:13:46:2d:ea:a5: 6f:18:bb:a2:6b:0d:ce:bf:c1:71:50:52:4a:25:76:15:cc:a1: fa:99:09:73:6c:57:01:21:04:a0:f7:24:c8:f4:ad:c6:aa:5d: 9e:c1:08:f1:0b:de:df:bb:a7:43:55:ac:7c:46:96:61:fc:8c: 37:a5:12:47 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUSUNHfSfPlvjjJWgfAOA5UDsZur4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg1NTc3RUVEODI5 Q0QwQUMzMTM5OTA1NERFNzQ0NTM1NjIzOTBDNjJGMB4XDTI2MDMyNTEyNTExM1oX DTI2MDMyNjE0MTkxM1owMzExMC8GA1UEAxMoQkQzNkI0NTE1NzM4RUM4QzJEMjJD NUUwMUE5OUU3Qzc3RDBBMkZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK2+4oQiUkQ4QMBc8X7XB8HZxkKxDmDmiDphmIAIR2EkHboew1dSI/DqMd8 RQKWWgO0wNvxyxkZZwFKmq0QAXR92J83IQRbKl4zQyGv076Ss5Ujldn+/COquDIV 380d2cWit/yme4O6TkHsMhLmWVK2cR5kUBUC39r/aoZdK/a9yMhusIgidImRskbZ QUCFpogd53/4E+4eVXa1F7NHh1yEcU2M2M+eFDGcPj2NgwBOaGU/sbwsG0aVposD ui+OyRarBQEmK04roU/ZoxKaoOwHhCXYuew9fvDx/inCQpKHBGKlhguElkqM8nwo Z8IGm2hgBvbXvw9+rVz5qE/HX8UCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBS9NrRR VzjsjC0ixeAamefHfQov3jAfBgNVHSMEGDAWgBRVd+7YKc0KwxOZBU3nRFNWI5DG LzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYxLzU1NzdFRUQ4MjlDRDBBQzMxMzk5MDU0REU3 NDQ1MzU2MjM5MEM2MkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1ZYZnUyQ25OQ3NNVG1RVk41MFJUVmlPUXhpOC5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjEvNTU3N0VFRDgyOUNEMEFDMzEzOTkwNTRERTc0NDUz NTYyMzkwQzYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKinZmHrfn65qmlvA3Q90UFgT+iYkWUr2ZU trvCd2hmqDvPYZj4N4JEaszo+pfOzhE1ZS/1tsOkZ45wp3Sz0le39HU2AoW2gg5l lFdCDwe+8rGz8ymHKfyBkQ16Qqj5wRg9sgewQmdLT6Fdddk9dNlazpssqu0iT3LC gboyvFgPUEqGI0msXusu7+P4Sp1ZMCzul4FVu52p+J7iqJeaLoMxHYqSMZRYg2IF 6TnZIcMT9dFoHBA+WkdzSclhGvDXViATRi3qpW8Yu6JrDc6/wXFQUkoldhXMofqZ CXNsVwEhBKD3JMj0rcaqXZ7BCPEL3t+7p0NVrHxGlmH8jDelEkc= -----END CERTIFICATE-----Generated at Thu Mar 26 04:22:20 2026 by rpki-client