$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: 8LvkKDRNYqvtbVAZ27tsKl6XM3H55lwQDBdTZBNWTjU= Subject key identifier: 60:36:37:98:E3:58:46:C1:C3:0E:A8:9A:FC:C5:49:BA:28:03:07:9E Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 1ED3F862A692FDA7E6E9B70798E5E52059F914D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: CA Signing time: Thu 23 Jul 2026 04:24:57 +0000 Manifest this update: Thu 23 Jul 2026 04:19:57 +0000 Manifest next update: Fri 24 Jul 2026 07:59:57 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 2: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 3: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 4: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) 5: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 6: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 7: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 8: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 9: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) 10: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: s5Wa/OXldjolugqORsVBE1fbjN40LbOrTJ9XvsuBC/4=) 11: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 12: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 13: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) 14: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 07:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d3:f8:62:a6:92:fd:a7:e6:e9:b7:07:98:e5:e5:20:59:f9:14:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 23 04:19:57 2026 GMT Not After : Jul 24 07:59:57 2026 GMT Subject: CN=60363798E35846C1C30EA89AFCC549BA2803079E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:b6:74:87:84:82:02:e1:81:0f:aa:1b:b8: 3d:4b:c3:fb:cd:73:50:4f:14:01:14:49:42:dc:4f: af:ce:d3:f3:71:7d:69:32:0e:f0:9b:14:9d:a8:53: 6e:70:9d:19:ef:f1:ec:9b:ad:bc:88:a5:4b:17:4b: 30:60:62:5c:41:1b:df:a1:de:77:4e:e3:9f:26:a8: 40:4b:ea:af:e0:e2:bd:6a:38:fc:95:a4:8c:6b:fb: 8d:a2:8c:9d:43:f9:8a:6d:6b:1d:43:aa:f6:f8:45: 77:f0:a2:e5:5a:c4:6d:25:2e:5b:48:d0:f9:f2:fd: ec:aa:95:49:0f:9b:06:10:d0:0d:a1:0c:c5:31:43: f1:fc:af:17:b7:29:76:67:b1:57:58:f4:94:b6:c6: e0:d6:95:b6:c4:c4:1d:cd:7f:0f:e0:dd:0c:4b:dc: fe:1f:a6:75:6a:50:50:d0:57:a0:d5:d4:77:6b:5c: 60:96:cc:ee:df:4f:f0:c3:50:d9:a6:6b:2e:36:53: 0d:52:d0:b6:56:80:87:e3:3d:59:f6:0f:ed:5d:85: ff:47:1b:13:ec:ff:60:6c:64:33:cf:19:4e:78:ae: 7d:0e:35:8d:b2:ea:83:d6:4a:d5:4f:61:46:37:36: f8:52:f7:06:e7:7d:93:3d:82:82:f6:18:5e:eb:1a: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:36:37:98:E3:58:46:C1:C3:0E:A8:9A:FC:C5:49:BA:28:03:07:9E X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a5:9b:b5:1d:18:77:f9:9a:c0:c1:45:59:ca:38:23:27:10: f7:62:21:b1:61:e0:6e:d8:6f:9a:9b:4f:bc:28:37:ed:56:21: e3:71:e8:11:d3:76:55:27:06:a1:49:78:cb:0e:55:24:e3:8c: 5a:99:65:17:e8:f6:5e:e5:2c:6e:25:69:77:7d:0b:b2:58:bf: e0:61:93:8d:31:ec:41:3d:d8:0a:6e:aa:3f:b4:a8:85:91:ff: 82:ef:19:f4:fe:31:b8:d9:ac:e4:e0:fa:bc:22:a4:a3:c4:0b: 27:d1:e1:7b:89:9b:ba:2b:a9:06:1b:3e:8c:c1:3a:30:8c:da: 64:ed:f4:b9:28:fc:73:ce:5a:68:33:24:3c:39:02:6b:06:2c: 85:e3:cb:42:b4:e7:af:4a:54:3b:e6:e5:b4:fd:f3:f0:10:e1: ec:d3:2a:3f:21:f4:cc:d1:ff:d2:27:dc:c3:97:f5:ff:9b:f1: be:79:fa:10:96:7f:e8:51:e6:9d:fb:a5:6f:3f:83:ba:27:48: 69:e4:33:22:d6:9f:9a:39:74:6d:96:d8:86:a7:d2:e8:06:85: 44:f1:31:55:a3:9e:d3:47:42:5b:1e:58:92:9d:19:37:50:65: 31:18:5c:f8:57:eb:f6:c0:db:ea:ea:b4:ac:53:61:92:f6:db: 1d:32:b5:7b -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUHtP4YqaS/afm6bcHmOXlIFn5FNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcyMzA0MTk1N1oX DTI2MDcyNDA3NTk1N1owMzExMC8GA1UEAxMoNjAzNjM3OThFMzU4NDZDMUMzMEVB ODlBRkNDNTQ5QkEyODAzMDc5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6/tnSHhIIC4YEPqhu4PUvD+81zUE8UARRJQtxPr87T83F9aTIO8JsUnahT bnCdGe/x7JutvIilSxdLMGBiXEEb36Hed07jnyaoQEvqr+DivWo4/JWkjGv7jaKM nUP5im1rHUOq9vhFd/Ci5VrEbSUuW0jQ+fL97KqVSQ+bBhDQDaEMxTFD8fyvF7cp dmexV1j0lLbG4NaVtsTEHc1/D+DdDEvc/h+mdWpQUNBXoNXUd2tcYJbM7t9P8MNQ 2aZrLjZTDVLQtlaAh+M9WfYP7V2F/0cbE+z/YGxkM88ZTniufQ41jbLqg9ZK1U9h Rjc2+FL3Bud9kz2CgvYYXusaD10CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRgNjeY 41hGwcMOqJr8xUm6KAMHnjAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6lm7UdGHf5msDBRVnKOCMnEPdiIbFh4G7Y b5qbT7woN+1WIeNx6BHTdlUnBqFJeMsOVSTjjFqZZRfo9l7lLG4laXd9C7JYv+Bh k40x7EE92Apuqj+0qIWR/4LvGfT+MbjZrOTg+rwipKPECyfR4XuJm7orqQYbPozB OjCM2mTt9Lko/HPOWmgzJDw5AmsGLIXjy0K0569KVDvm5bT98/AQ4ezTKj8h9MzR /9In3MOX9f+b8b55+hCWf+hR5p37pW8/g7onSGnkMyLWn5o5dG2W2Ian0ugGhUTx MVWjntNHQlseWJKdGTdQZTEYXPhX6/bA2+rqtKxTYZL22x0ytXs= -----END CERTIFICATE-----Generated at Thu Jul 23 22:40:24 2026 by rpki-client