$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: 35ZBK5U5AVWRCGX0tdVy8Jz5E6A5CJrhY8/GHiXCu+c= Subject key identifier: 6A:A0:AA:EF:EF:7B:D7:27:21:4D:84:BA:E3:46:BE:E5:6D:5F:47:C6 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 2EB173283E91DC6A2268A0624A9A443851F64436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 4F Signing time: Tue 12 May 2026 07:01:33 +0000 Manifest this update: Tue 12 May 2026 06:56:33 +0000 Manifest next update: Wed 13 May 2026 10:46:33 +0000 Files and hashes: 1: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 2: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 3: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 4: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 5: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 6: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: xHMGG7c+pWUykc9qwXArikwz6F4O+nSRJyL28obrSK4=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b1:73:28:3e:91:dc:6a:22:68:a0:62:4a:9a:44:38:51:f6:44:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: May 12 06:56:33 2026 GMT Not After : May 13 10:46:33 2026 GMT Subject: CN=6AA0AAEFEF7BD727214D84BAE346BEE56D5F47C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:04:a6:94:8d:2c:00:b3:1f:3c:d5:bf:21: ee:7f:86:83:02:a1:f7:1f:4b:30:3e:39:b2:4c:f3: ee:17:1e:8d:de:0e:db:01:81:35:91:79:06:5e:63: 4b:ce:5a:ac:eb:23:56:7c:f9:28:4f:8f:b7:3e:fe: a3:c5:22:a5:73:bd:e6:62:ea:80:0c:fc:76:ae:97: fa:36:06:37:0e:1b:a4:22:b6:8b:08:7b:97:4b:db: 92:fc:1e:78:71:21:0a:e6:d2:ea:b1:8e:8a:d5:ac: 84:91:65:c4:34:a6:51:ad:29:22:26:9d:15:15:59: 53:9e:4c:03:95:e9:6a:16:76:ae:4c:f6:e7:40:a1: 69:78:9e:53:99:d7:1e:b5:44:e3:e9:e7:68:50:b7: 2b:3f:32:95:e7:70:92:a6:87:49:85:73:aa:82:6b: fe:76:c4:07:01:dd:b4:40:99:98:24:37:c8:02:6f: 79:17:f5:85:0f:00:60:d7:c6:ca:e7:42:d9:16:f7: 0f:87:9a:99:92:27:a8:d5:03:2c:02:b0:58:93:c0: c9:ac:27:28:14:95:54:13:72:03:64:ac:88:ac:3a: e3:d7:f5:a0:5e:8d:2e:42:0f:d5:5c:c0:5d:57:f5: 6d:11:16:ab:3d:48:ca:22:bc:f1:8c:5b:f6:93:36: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A0:AA:EF:EF:7B:D7:27:21:4D:84:BA:E3:46:BE:E5:6D:5F:47:C6 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6c:16:a1:58:2a:c8:41:e9:ee:98:c8:69:48:56:6a:37:ac: ca:c1:03:07:82:e3:15:b6:b3:e0:9a:bb:a1:ce:ce:3e:01:a0: 9f:eb:55:b9:ac:02:b6:eb:e1:c0:4b:0c:36:1f:91:58:12:8e: af:ed:a8:36:4e:c1:12:ea:e8:a7:cf:79:0b:cb:48:b5:99:0b: d1:cc:bb:e7:7b:e9:5a:5c:de:21:27:ec:f9:ae:09:f9:dc:a2: c5:55:e2:22:32:0d:d8:48:42:5e:9c:2f:1b:86:01:6f:cb:a4: 9c:b4:a2:58:1e:cc:4c:50:8d:81:87:62:f0:15:f1:b7:67:83: 3a:8b:27:96:55:66:ad:04:32:c5:c2:00:61:d6:54:ab:fe:a9: ba:ab:a9:79:13:b5:8d:7e:ae:32:0a:3e:bb:25:ef:74:b6:e3: 89:90:ff:41:74:d8:b1:6a:ad:d9:82:bc:d2:e0:75:8c:d6:43: de:58:88:9b:b3:0a:32:5d:e2:12:48:20:39:da:82:fe:0a:ec: 97:47:d2:7a:22:c8:49:e9:bd:38:0a:4a:44:a4:6f:13:0c:b4: a6:43:fc:b7:4c:0e:0b:20:f1:e7:08:47:e2:d3:f4:d3:de:8d: 37:2e:99:5b:29:49:86:c2:33:3d:4c:e6:2d:ba:ee:48:21:22: 7e:33:37:c8 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIULrFzKD6R3GoiaKBiSppEOFH2RDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDUxMjA2NTYzM1oX DTI2MDUxMzEwNDYzM1owMzExMC8GA1UEAxMoNkFBMEFBRUZFRjdCRDcyNzIxNEQ4 NEJBRTM0NkJFRTU2RDVGNDdDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfBBKaUjSwAsx881b8h7n+GgwKh9x9LMD45skzz7hcejd4O2wGBNZF5Bl5j S85arOsjVnz5KE+Ptz7+o8UipXO95mLqgAz8dq6X+jYGNw4bpCK2iwh7l0vbkvwe eHEhCubS6rGOitWshJFlxDSmUa0pIiadFRVZU55MA5XpahZ2rkz250ChaXieU5nX HrVE4+nnaFC3Kz8yledwkqaHSYVzqoJr/nbEBwHdtECZmCQ3yAJveRf1hQ8AYNfG yudC2Rb3D4eamZInqNUDLAKwWJPAyawnKBSVVBNyA2SsiKw649f1oF6NLkIP1VzA XVf1bREWqz1IyiK88Yxb9pM2oLMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRqoKrv 73vXJyFNhLrjRr7lbV9HxjAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdsFqFYKshB6e6YyGlIVmo3rMrBAweC4xW2 s+Cau6HOzj4BoJ/rVbmsArbr4cBLDDYfkVgSjq/tqDZOwRLq6KfPeQvLSLWZC9HM u+d76Vpc3iEn7PmuCfncosVV4iIyDdhIQl6cLxuGAW/LpJy0olgezExQjYGHYvAV 8bdngzqLJ5ZVZq0EMsXCAGHWVKv+qbqrqXkTtY1+rjIKPrsl73S244mQ/0F02LFq rdmCvNLgdYzWQ95YiJuzCjJd4hJIIDnagv4K7JdH0noiyEnpvTgKSkSkbxMMtKZD /LdMDgsg8ecIR+LT9NPejTcumVspSYbCMz1M5i267kghIn4zN8g= -----END CERTIFICATE-----Generated at Tue May 12 23:25:37 2026 by rpki-client