$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: daYJnYxv5pbPCjBfWwqxoURCLUQy17TEPWcD+b28Kxg= Subject key identifier: 70:E5:CB:FC:2C:C9:24:5E:DA:49:61:7B:4C:C5:49:B9:79:74:EA:04 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 5BB702F0DB78E56DE23B4C2254B928103926CC9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 0A Signing time: Sun 05 Apr 2026 09:21:31 +0000 Manifest this update: Sun 05 Apr 2026 09:16:31 +0000 Manifest next update: Mon 06 Apr 2026 12:14:31 +0000 Files and hashes: 1: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 2: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 3: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 4: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: HaHNs11iwV2Mx+73nyiBXvEbDNQP+mjKwZkpXprgA/4=) 5: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 12:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b7:02:f0:db:78:e5:6d:e2:3b:4c:22:54:b9:28:10:39:26:cc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Apr 5 09:16:31 2026 GMT Not After : Apr 6 12:14:31 2026 GMT Subject: CN=70E5CBFC2CC9245EDA49617B4CC549B97974EA04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:23:26:ca:b0:ea:03:c6:b0:03:8f:b7:a8: 68:54:05:76:97:46:5a:a7:72:5c:38:2b:99:93:22: 8d:64:40:46:66:a5:59:67:71:86:13:00:95:88:40: 69:ca:a4:91:4f:7f:8c:02:45:94:29:62:a9:5b:3f: 2e:6f:02:cc:86:18:47:ef:8d:ac:25:7a:06:f9:1a: ce:f8:61:83:37:7b:29:fd:9d:b2:15:7b:f7:84:93: f4:93:ac:29:89:8c:ca:df:0b:91:e2:f6:18:c4:07: 41:80:5f:6e:92:aa:8b:26:58:bb:7a:9c:7e:55:65: fd:36:53:21:cf:7f:3b:e0:b7:b4:8f:cb:e5:f7:f9: d4:de:0e:1c:6a:c2:68:e2:e0:ad:65:88:f1:fc:ad: 3c:f3:e9:8a:9f:f4:18:40:dd:cf:5b:a2:4d:43:72: 2d:02:61:26:b0:fd:6f:6f:92:84:e1:f8:0a:08:0b: 6c:a7:bf:ab:62:eb:69:c4:85:73:2a:20:61:96:9e: 55:b2:15:01:2b:0d:f4:11:a2:a5:e1:55:93:6a:25: f1:e1:28:b7:b2:d7:a1:89:fe:7b:25:b7:c7:1b:36: 20:69:8f:10:45:07:03:d7:16:0f:2f:e4:0e:1b:c3: 39:bd:fe:69:25:da:5d:77:5e:ac:c4:fb:ed:15:5a: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E5:CB:FC:2C:C9:24:5E:DA:49:61:7B:4C:C5:49:B9:79:74:EA:04 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:33:b0:a3:73:dc:49:b9:f8:66:db:39:68:4f:03:20:4e: cf:35:91:8f:6f:52:a8:b7:ae:98:15:f1:e4:64:4f:23:3f:1d: 28:b4:9d:75:fd:c4:f0:dd:00:8b:b0:03:c8:c4:71:72:60:78: 10:b7:2c:99:46:7d:92:a1:4f:20:9a:13:70:cf:21:5f:8c:df: 77:a4:df:bc:1a:85:e0:93:54:0b:3f:8b:30:48:22:7f:bc:85: be:b1:00:c1:d2:c7:14:d1:8d:b8:11:8a:e5:9b:8e:6e:fa:21: f7:a1:81:2d:ed:86:f6:8f:44:fc:cc:ec:80:53:0c:d2:f8:28: a8:1f:47:87:5e:89:86:36:ce:4b:62:ca:00:df:ae:44:b1:c0: a9:f3:96:da:74:30:fe:32:05:3f:1c:74:f1:6c:94:12:c1:26: 10:05:22:fa:77:20:56:50:cc:2c:90:7c:80:27:82:06:7f:c1: 43:84:2c:0d:db:41:d5:5e:68:86:43:fa:b0:fb:06:2a:c9:25: 3e:0e:0b:f0:ad:49:27:b3:17:e1:68:33:08:13:3a:75:a9:52: 01:8a:ed:f7:1a:6e:aa:b8:5c:d0:cd:ec:09:8c:87:49:68:24: 66:31:41:95:be:fd:29:ae:49:a9:b5:be:84:2f:35:a0:b2:18: 15:a3:4b:d1 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUW7cC8Nt45W3iO0wiVLkoEDkmzJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDQwNTA5MTYzMVoX DTI2MDQwNjEyMTQzMVowMzExMC8GA1UEAxMoNzBFNUNCRkMyQ0M5MjQ1RURBNDk2 MTdCNENDNTQ5Qjk3OTc0RUEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrgIybKsOoDxrADj7eoaFQFdpdGWqdyXDgrmZMijWRARmalWWdxhhMAlYhA acqkkU9/jAJFlCliqVs/Lm8CzIYYR++NrCV6Bvkazvhhgzd7Kf2dshV794ST9JOs KYmMyt8LkeL2GMQHQYBfbpKqiyZYu3qcflVl/TZTIc9/O+C3tI/L5ff51N4OHGrC aOLgrWWI8fytPPPpip/0GEDdz1uiTUNyLQJhJrD9b2+ShOH4CggLbKe/q2LracSF cyogYZaeVbIVASsN9BGipeFVk2ol8eEot7LXoYn+eyW3xxs2IGmPEEUHA9cWDy/k DhvDOb3+aSXaXXderMT77RVayDkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRw5cv8 LMkkXtpJYXtMxUm5eXTqBDAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtHM7Cjc9xJufhm2zloTwMgTs81kY9vUqi3 rpgV8eRkTyM/HSi0nXX9xPDdAIuwA8jEcXJgeBC3LJlGfZKhTyCaE3DPIV+M33ek 37waheCTVAs/izBIIn+8hb6xAMHSxxTRjbgRiuWbjm76IfehgS3thvaPRPzM7IBT DNL4KKgfR4deiYY2zktiygDfrkSxwKnzltp0MP4yBT8cdPFslBLBJhAFIvp3IFZQ zCyQfIAnggZ/wUOELA3bQdVeaIZD+rD7BirJJT4OC/CtSSezF+FoMwgTOnWpUgGK 7fcabqq4XNDN7AmMh0loJGYxQZW+/SmuSam1voQvNaCyGBWjS9E= -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:50 2026 by rpki-client