$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: n21yMF940OwsqkGx4P0texk+e3UMEq243QwCIMbkjt8= Subject key identifier: A8:D6:47:55:C9:46:FE:63:49:AA:A7:3C:59:FF:A0:EB:1F:5E:21:20 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 6F7B5F84A3CEB7519BF1054151A601527C744A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 0121 Signing time: Wed 23 Sep 2026 11:09:58 +0000 Manifest this update: Wed 23 Sep 2026 11:04:58 +0000 Manifest next update: Thu 24 Sep 2026 12:54:58 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) 2: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 3: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) 4: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: ICjww19FHjCfGtXiDOd0ik1ieYBbFs9fb/m3Rct5xyo=) 5: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 6: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) 7: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 8: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 9: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 10: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 11: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) 12: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 13: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 14: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7b:5f:84:a3:ce:b7:51:9b:f1:05:41:51:a6:01:52:7c:74:4a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Sep 23 11:04:58 2026 GMT Not After : Sep 24 12:54:58 2026 GMT Subject: CN=A8D64755C946FE6349AAA73C59FFA0EB1F5E2120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:ce:e2:42:de:ff:8a:d0:0f:cc:4a:ad:18: eb:88:7d:14:fd:ec:92:f3:ef:d0:f6:3c:c3:4b:16: cf:aa:d3:1f:f0:bc:fe:88:89:93:3f:a9:33:1b:62: 01:e8:f0:fd:43:53:97:74:92:7e:19:8d:ca:ae:b1: bc:6c:c0:89:36:b3:ac:71:a2:24:bc:24:ef:8b:b8: 17:c4:ed:a2:82:00:9a:6c:ac:1c:4b:32:00:59:a1: 1f:5c:f0:06:31:60:60:b3:2b:83:24:38:6b:2b:ca: 3c:a4:38:94:37:2b:36:ba:0b:14:c4:f0:ad:b2:a4: 8d:03:68:4b:52:f4:89:6b:8d:28:b5:18:55:6b:eb: 28:cb:d5:21:a5:a9:a6:e4:13:fe:34:53:9c:61:f4: 3a:a1:ca:cd:d8:c2:9f:dc:b3:0f:3d:13:8d:3b:5d: ab:df:df:2a:5f:19:c9:18:df:1b:01:f3:28:10:1f: b0:00:4d:67:a8:f8:87:8c:ff:91:fb:3e:b1:98:6a: 8b:9f:37:48:64:a5:af:b8:ba:86:a8:70:18:01:59: 31:32:10:cc:5b:ab:f2:15:c9:02:5a:11:c4:67:89: 1d:43:4d:47:fe:66:03:85:9e:a2:44:5f:7e:ee:66: b1:74:27:89:84:3f:d9:a2:de:88:2e:9b:a6:c3:a6: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D6:47:55:C9:46:FE:63:49:AA:A7:3C:59:FF:A0:EB:1F:5E:21:20 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f0:62:30:b7:9c:b1:04:d4:7a:6f:a3:02:04:62:18:4b:6c: 95:61:d8:fe:e7:bc:b3:2a:48:40:51:94:72:32:e9:dd:06:ae: 3f:46:18:60:b5:c0:4b:b5:e0:90:49:d3:e9:36:ef:4e:dd:7b: 61:b5:88:0b:74:fe:2c:9f:bb:85:40:0a:76:0d:84:cd:af:17: 72:c1:75:64:7a:e2:c6:21:20:57:fd:64:05:d4:7a:fa:35:3e: 11:e9:17:7b:c3:75:fb:ce:fb:79:41:43:ac:3d:e8:7f:34:e0: ea:48:84:d5:65:fb:37:e2:a2:89:dc:98:b0:9e:1c:1b:17:7e: fc:ed:22:27:ba:eb:85:ce:54:97:73:56:ad:da:74:02:b9:f4: e2:78:1a:fc:5c:0e:09:14:3f:c1:e5:35:f4:e4:e2:81:07:2c: 43:7a:0c:f1:be:8d:a1:34:bd:c6:63:d2:d6:37:c5:74:08:20: d9:cc:75:3a:b0:c2:3d:ba:e9:b1:c2:83:56:ed:56:0d:27:7f: 89:ca:cf:4e:37:81:70:7d:15:55:b4:8d:72:ee:22:29:5f:20: 29:2d:c3:2b:7c:93:d9:da:cd:12:82:e4:6b:33:db:dd:3e:f8: 9b:b5:68:f7:a6:3c:f4:31:66:08:e6:56:ca:58:85:82:04:a3: c6:3c:2c:8d -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUb3tfhKPOt1Gb8QVBUaYBUnx0SgYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDkyMzExMDQ1OFoX DTI2MDkyNDEyNTQ1OFowMzExMC8GA1UEAxMoQThENjQ3NTVDOTQ2RkU2MzQ5QUFB NzNDNTlGRkEwRUIxRjVFMjEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9kzuJC3v+K0A/MSq0Y64h9FP3skvPv0PY8w0sWz6rTH/C8/oiJkz+pMxti Aejw/UNTl3SSfhmNyq6xvGzAiTazrHGiJLwk74u4F8TtooIAmmysHEsyAFmhH1zw BjFgYLMrgyQ4ayvKPKQ4lDcrNroLFMTwrbKkjQNoS1L0iWuNKLUYVWvrKMvVIaWp puQT/jRTnGH0OqHKzdjCn9yzDz0TjTtdq9/fKl8ZyRjfGwHzKBAfsABNZ6j4h4z/ kfs+sZhqi583SGSlr7i6hqhwGAFZMTIQzFur8hXJAloRxGeJHUNNR/5mA4WeokRf fu5msXQniYQ/2aLeiC6bpsOmtIUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSo1kdV yUb+Y0mqpzxZ/6DrH14hIDAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbwYjC3nLEE1HpvowIEYhhLbJVh2P7nvLMq SEBRlHIy6d0Grj9GGGC1wEu14JBJ0+k2707de2G1iAt0/iyfu4VACnYNhM2vF3LB dWR64sYhIFf9ZAXUevo1PhHpF3vDdfvO+3lBQ6w96H804OpIhNVl+zfiooncmLCe HBsXfvztIie664XOVJdzVq3adAK59OJ4GvxcDgkUP8HlNfTk4oEHLEN6DPG+jaE0 vcZj0tY3xXQIINnMdTqwwj266bHCg1btVg0nf4nKz043gXB9FVW0jXLuIilfICkt wyt8k9nazRKC5Gsz290++Ju1aPemPPQxZgjmVspYhYIEo8Y8LI0= -----END CERTIFICATE-----Generated at Wed Sep 23 18:08:03 2026 by rpki-client