$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: OVt6thoroP4rdFIhJz9lP+GDXXEuouk8m4zrkWm3eSU= Subject key identifier: 91:91:E7:29:0C:2C:29:CF:D3:BE:FD:2C:28:0B:B7:99:79:8B:01:9A Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 2922ECEDDBDF520F9BB8304BAADBD21C53F6FD64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 016A Signing time: Sat 14 Nov 2026 04:23:46 +0000 Manifest this update: Sat 14 Nov 2026 04:18:46 +0000 Manifest next update: Sun 15 Nov 2026 07:15:46 +0000 Files and hashes: 1: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 2: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) 3: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 4: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) 5: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 6: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) 7: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 8: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 9: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 10: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 11: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: TScMFVkJ0vXPH31JPSe/TZm4zyrN6oVtCFooNR2By8w=) 12: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 13: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) 14: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:22:ec:ed:db:df:52:0f:9b:b8:30:4b:aa:db:d2:1c:53:f6:fd:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Nov 14 04:18:46 2026 GMT Not After : Nov 15 07:15:46 2026 GMT Subject: CN=9191E7290C2C29CFD3BEFD2C280BB799798B019A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:7d:fd:f5:04:e3:ab:d7:c0:4c:34:a1:6d: 9c:56:07:22:f9:ea:b7:fa:7e:e8:02:70:23:62:4b: 2e:26:78:54:2c:44:b5:fa:06:60:2a:eb:f0:09:11: 1a:e7:05:39:07:9d:77:38:a8:47:ff:7c:c2:0e:c4: 72:7f:d1:1d:05:8a:19:25:bf:0f:0a:29:df:e9:65: fb:55:8a:fb:ac:8a:6f:80:a0:54:49:37:97:ab:47: 1f:5b:f7:19:92:34:23:d1:59:16:13:af:34:3e:35: c6:8c:a4:7b:5f:c2:f7:03:5a:73:44:9e:8a:ec:ab: 6b:a7:1a:d4:ca:a7:0a:f0:c8:34:f8:1b:96:bd:46: ae:3a:83:b5:10:ad:db:11:c6:9f:dd:20:95:3a:6c: 16:42:61:29:42:e0:49:0f:b6:9c:ee:50:fe:5c:1f: 85:f9:28:9f:00:85:df:9f:37:82:c0:f2:82:77:c6: a8:72:3b:e2:ec:5e:b3:cb:80:ac:a5:4e:13:88:73: bd:ef:de:99:3e:28:16:9b:6d:39:4d:d7:53:83:cf: 7b:56:9a:43:61:86:d2:4c:31:48:4f:3f:18:7c:c0: 96:58:01:2a:e1:5f:24:f6:b6:0a:31:de:49:0e:fa: 94:c8:b6:6f:9d:81:f6:54:6c:4d:23:f0:a8:c7:32: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:91:E7:29:0C:2C:29:CF:D3:BE:FD:2C:28:0B:B7:99:79:8B:01:9A X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:cd:8c:1f:15:06:66:21:70:e2:fb:2e:1a:82:56:60:72:22: 11:63:1f:0b:92:43:5d:62:b9:64:c3:12:72:07:71:5a:78:12: 06:18:7f:7a:e5:9d:72:e1:44:0d:c4:d7:99:36:23:a1:3a:30: bd:71:f4:24:27:0d:54:40:30:42:7f:19:2a:a5:e4:e7:2b:67: 4b:3e:d4:fe:c9:3b:da:c0:a8:05:d3:0c:40:97:aa:30:09:06: 15:0a:c1:da:d8:6e:7b:c2:c5:8e:6a:b2:14:c8:76:40:d2:aa: f4:67:06:97:b9:a0:2a:4f:7e:e5:cd:f0:ee:f4:ff:bd:9d:6a: 8c:91:fd:fa:1e:aa:f1:b9:51:09:b9:b4:a5:1d:04:28:5f:04: 82:2e:76:d9:50:6a:4a:13:96:b0:49:96:60:d2:cf:6c:0e:ef: 0f:ab:0b:69:b9:be:06:2f:7f:5c:3c:89:9d:1e:38:8c:e0:3d: c8:de:ce:9d:81:5b:ec:be:41:95:c0:ef:02:3a:26:4f:f5:c1: b2:a8:80:08:37:5f:12:74:2c:30:aa:00:a9:a2:63:63:06:be: 29:9f:29:55:17:5b:3e:90:30:ff:98:75:bb:c2:da:d4:2f:d6: c7:90:f9:1e:be:23:54:b7:b2:19:12:b3:2e:4e:87:3e:27:74: 8d:2c:63:ca -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUKSLs7dvfUg+buDBLqtvSHFP2/WQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MTExNDA0MTg0NloX DTI2MTExNTA3MTU0NlowMzExMC8GA1UEAxMoOTE5MUU3MjkwQzJDMjlDRkQzQkVG RDJDMjgwQkI3OTk3OThCMDE5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOoTff31BOOr18BMNKFtnFYHIvnqt/p+6AJwI2JLLiZ4VCxEtfoGYCrr8AkR GucFOQeddzioR/98wg7Ecn/RHQWKGSW/Dwop3+ll+1WK+6yKb4CgVEk3l6tHH1v3 GZI0I9FZFhOvND41xoyke1/C9wNac0Seiuyra6ca1MqnCvDINPgblr1GrjqDtRCt 2xHGn90glTpsFkJhKULgSQ+2nO5Q/lwfhfkonwCF3583gsDygnfGqHI74uxes8uA rKVOE4hzve/emT4oFpttOU3XU4PPe1aaQ2GG0kwxSE8/GHzAllgBKuFfJPa2CjHe SQ76lMi2b52B9lRsTSPwqMcyAX0CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSRkecp DCwpz9O+/SwoC7eZeYsBmjAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXNjB8VBmYhcOL7LhqCVmByIhFjHwuSQ11i uWTDEnIHcVp4EgYYf3rlnXLhRA3E15k2I6E6ML1x9CQnDVRAMEJ/GSql5OcrZ0s+ 1P7JO9rAqAXTDECXqjAJBhUKwdrYbnvCxY5qshTIdkDSqvRnBpe5oCpPfuXN8O70 /72daoyR/foeqvG5UQm5tKUdBChfBIIudtlQakoTlrBJlmDSz2wO7w+rC2m5vgYv f1w8iZ0eOIzgPcjezp2BW+y+QZXA7wI6Jk/1wbKogAg3XxJ0LDCqAKmiY2MGvimf KVUXWz6QMP+YdbvC2tQv1seQ+R6+I1S3shkSsy5Ohz4ndI0sY8o= -----END CERTIFICATE-----Generated at Sat Nov 14 23:48:56 2026 by rpki-client