$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: kZIQLtoIH6z834Aq/qkOkhdgWYk5tgaKTBVAkeboE3c= Subject key identifier: FD:2A:90:BF:43:07:A7:A3:4C:00:72:EC:2E:61:C6:EB:EB:66:3C:5F Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 7AAF635A82974CE22605E060EEA2D0ED1FEB49A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: C8 Signing time: Tue 21 Jul 2026 16:34:57 +0000 Manifest this update: Tue 21 Jul 2026 16:29:57 +0000 Manifest next update: Wed 22 Jul 2026 19:22:57 +0000 Files and hashes: 1: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: 4cpM0cryAJUXpE7V8h3pwyakXAUjUtDBquu6Wh/CceU=) 2: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 3: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 4: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 5: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) 6: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) 7: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 8: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 9: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 10: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 11: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 12: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) 13: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 14: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:af:63:5a:82:97:4c:e2:26:05:e0:60:ee:a2:d0:ed:1f:eb:49:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jul 21 16:29:57 2026 GMT Not After : Jul 22 19:22:57 2026 GMT Subject: CN=FD2A90BF4307A7A34C0072EC2E61C6EBEB663C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:3e:3c:ba:90:f5:b7:0b:81:4b:a9:bd:89: 04:64:57:37:6e:55:a4:29:23:e5:43:ce:6d:5b:e2: a5:44:82:ea:9b:9b:eb:fd:48:91:d7:e5:27:93:59: a3:48:40:8d:25:5b:05:81:ab:05:ff:ff:06:1b:42: b2:5d:4a:fd:5d:b5:34:3d:17:ec:84:c5:88:1f:c4: 2d:ee:47:76:8c:79:bb:8f:10:d2:69:24:b6:38:a3: be:09:bc:30:e9:a5:ee:2b:dd:ce:7a:e6:68:67:d4: f6:6f:62:50:06:77:71:73:6a:38:fb:7d:4a:39:6b: b3:27:5c:7b:7f:c1:c4:56:79:0d:5e:9e:f5:9d:f3: cd:ca:86:c5:67:3d:6c:ef:e4:b0:66:92:7b:7c:4c: b9:0a:6f:f6:6c:5a:24:2d:a2:30:0d:ea:eb:05:6c: b0:46:8d:7b:d1:a3:f7:e9:b3:74:c3:fc:a0:f6:2e: bf:1b:16:c0:1f:e0:17:3d:32:b1:c7:a1:b8:5e:37: 1e:4d:2b:e9:84:6f:52:b5:c9:a4:f3:f2:22:63:b4: 78:95:25:5e:e6:d2:09:a8:e4:7a:f3:cf:de:37:84: fc:95:c6:2f:f8:57:f7:22:ac:79:d5:fb:ee:dd:e0: ff:5f:52:c4:1c:36:8c:a7:f2:55:30:83:cc:66:1e: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2A:90:BF:43:07:A7:A3:4C:00:72:EC:2E:61:C6:EB:EB:66:3C:5F X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ee:8b:85:78:11:1f:6f:8b:4e:f7:cb:ea:d3:4f:d0:27:ca: c4:c6:15:36:ed:52:eb:a0:3c:3f:bf:3d:1d:fb:63:30:60:a5: 0d:05:d2:6b:1d:17:66:38:e4:0a:b8:08:0a:38:de:d3:70:60: d2:85:3a:8f:a6:c4:ae:be:79:52:9f:f9:ae:c0:49:01:71:cf: 4d:68:83:48:67:38:1f:dd:8e:20:4a:f0:02:5c:f1:71:ef:4a: 43:da:44:12:19:76:95:84:7c:3d:eb:92:b7:72:9c:94:4b:5c: be:16:d7:a8:4d:78:13:f0:7c:d5:d6:71:02:48:23:96:48:be: 24:f5:5d:c9:64:f4:a0:cd:19:ed:68:86:79:0f:c8:17:69:9c: e4:23:40:46:04:93:d5:55:af:44:5b:19:31:99:b5:c6:0d:5f: e1:c8:10:e8:85:2e:62:ee:47:6f:30:2c:91:4d:b4:4a:6d:b0: 5d:1e:01:b1:45:2e:ff:b8:fd:d5:06:57:fb:d9:28:93:5d:4a: f4:b9:7d:a2:e0:4b:b7:d3:6f:6d:9e:4c:62:38:d7:10:ad:31: f1:df:b7:fd:cf:6a:6e:47:b0:56:f8:6d:8d:de:f0:00:18:7d: 4c:b6:14:3d:e4:13:b1:c6:a9:fd:a2:63:e2:da:85:74:5e:01: a6:ac:b0:3c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUeq9jWoKXTOImBeBg7qLQ7R/rSakwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDcyMTE2Mjk1N1oX DTI2MDcyMjE5MjI1N1owMzExMC8GA1UEAxMoRkQyQTkwQkY0MzA3QTdBMzRDMDA3 MkVDMkU2MUM2RUJFQjY2M0M1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIcrPjy6kPW3C4FLqb2JBGRXN25VpCkj5UPObVvipUSC6pub6/1IkdflJ5NZ o0hAjSVbBYGrBf//BhtCsl1K/V21ND0X7ITFiB/ELe5Hdox5u48Q0mkktjijvgm8 MOml7ivdznrmaGfU9m9iUAZ3cXNqOPt9Sjlrsydce3/BxFZ5DV6e9Z3zzcqGxWc9 bO/ksGaSe3xMuQpv9mxaJC2iMA3q6wVssEaNe9Gj9+mzdMP8oPYuvxsWwB/gFz0y scehuF43Hk0r6YRvUrXJpPPyImO0eJUlXubSCajkevPP3jeE/JXGL/hX9yKsedX7 7t3g/19SxBw2jKfyVTCDzGYe+T8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT9KpC/ Qweno0wAcuwuYcbr62Y8XzAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7ui4V4ER9vi073y+rTT9AnysTGFTbtUuug PD+/PR37YzBgpQ0F0msdF2Y45Aq4CAo43tNwYNKFOo+mxK6+eVKf+a7ASQFxz01o g0hnOB/djiBK8AJc8XHvSkPaRBIZdpWEfD3rkrdynJRLXL4W16hNeBPwfNXWcQJI I5ZIviT1Xclk9KDNGe1ohnkPyBdpnOQjQEYEk9VVr0RbGTGZtcYNX+HIEOiFLmLu R28wLJFNtEptsF0eAbFFLv+4/dUGV/vZKJNdSvS5faLgS7fTb22eTGI41xCtMfHf t/3Pam5HsFb4bY3e8AAYfUy2FD3kE7HGqf2iY+LahXReAaassDw= -----END CERTIFICATE-----Generated at Tue Jul 21 23:20:25 2026 by rpki-client