$ rpki-client -vvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: bkzHDQPq7m6UWcX1fr+2I9SKr0afUTISWBPpd7h+2r4= Subject key identifier: 9C:FE:BE:FB:5B:07:C7:E9:CA:B6:25:3E:F7:82:30:D6:12:15:7A:E8 Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 2E1F1EE26C68C996E4013EC436D26D1299E38329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 71 Signing time: Fri 05 Jun 2026 23:33:59 +0000 Manifest this update: Fri 05 Jun 2026 23:28:59 +0000 Manifest next update: Sun 07 Jun 2026 03:08:59 +0000 Files and hashes: 1: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 2: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 3: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 4: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 5: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 6: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: 5QxpBBNLCNTM4Tt95KMrzNPuf5heJN5XQXMeq1Mo40k=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 03:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1f:1e:e2:6c:68:c9:96:e4:01:3e:c4:36:d2:6d:12:99:e3:83:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Jun 5 23:28:59 2026 GMT Not After : Jun 7 03:08:59 2026 GMT Subject: CN=9CFEBEFB5B07C7E9CAB6253EF78230D612157AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:a9:b9:db:74:0a:96:9e:a4:b6:8c:1f:57: 70:55:82:77:4c:92:2c:e5:c6:63:a3:f0:72:63:4f: d8:30:bd:eb:ae:e1:51:49:1c:66:d7:82:7f:1e:7a: 74:23:7f:da:30:3e:ef:48:ba:4d:21:11:e7:6b:2c: 7b:68:9c:f5:02:4e:91:58:93:b0:63:b4:85:49:2d: 0a:8a:2c:46:b8:23:25:80:97:10:68:92:8a:05:a5: c3:e0:9b:a2:1c:31:43:c4:07:8e:ce:8c:ea:4e:23: 50:57:84:8e:af:af:41:02:e8:0f:c1:86:98:95:c6: f0:c0:e9:56:3e:c5:2e:ea:bf:9f:46:c7:53:df:c0: d8:73:48:b1:f2:71:0a:3c:4a:7c:93:f0:eb:d8:9f: cd:71:cf:0a:51:0d:04:85:e8:e7:27:fa:5e:1d:f3: 01:f6:70:06:80:4d:c8:5e:42:a7:9e:08:ed:ae:a8: c5:e2:c9:77:f1:e9:62:3e:9e:cf:77:c0:7e:28:c6: 89:69:13:9b:3d:60:d0:95:48:10:ce:e4:f7:d6:fc: cd:34:65:be:be:19:74:fb:4a:8b:0d:7a:d4:76:15: fa:d6:5a:88:c9:1d:49:1a:e2:e2:2c:f7:99:ee:25: 46:8c:3f:e9:51:ea:4b:19:71:01:76:f1:1a:c6:4c: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:BE:FB:5B:07:C7:E9:CA:B6:25:3E:F7:82:30:D6:12:15:7A:E8 X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:b6:c4:a1:c1:7a:88:ad:97:04:a0:be:ed:37:f4:37:13: 76:77:57:23:32:28:33:54:ec:56:08:88:8a:bb:78:d0:8e:30: 4e:ec:db:03:2a:91:6d:7c:fc:1b:b2:14:32:07:e8:eb:f4:d6: 5c:b2:fd:9c:25:1c:89:42:8e:de:0a:4c:54:ba:36:2a:a9:47: ce:c0:73:ed:80:7e:61:5a:9f:3b:b6:34:e6:f9:3f:ec:c2:d3: d5:e1:e2:6e:e0:6b:2b:3c:93:46:4c:c6:20:d2:0a:b6:d0:ee: c2:10:f4:c5:01:0d:13:a8:35:4d:0a:2e:36:95:97:af:25:23: 0f:53:f5:b6:e0:5f:41:db:bc:f5:5c:02:e4:46:04:17:c8:46: e3:80:fe:a3:7f:d8:20:93:8e:d1:40:cc:63:1a:47:a3:48:63: d9:2f:54:a2:3e:be:d1:0e:d2:85:b7:51:6d:26:d1:86:7b:00: 9e:b9:45:68:6b:09:f1:42:e8:ef:59:4f:a8:65:00:00:af:88: 96:4a:69:97:d8:7e:b1:f3:4f:83:7d:51:fe:0a:32:e9:28:ee: a5:1d:01:fb:2d:87:2b:b9:1f:f0:37:26:21:cf:be:e8:b9:be: 4b:f1:cc:0f:ca:7c:e7:1f:1c:23:16:14:90:4c:d0:44:39:ee: 95:46:bb:95 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIULh8e4mxoyZbkAT7ENtJtEpnjgykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDYwNTIzMjg1OVoX DTI2MDYwNzAzMDg1OVowMzExMC8GA1UEAxMoOUNGRUJFRkI1QjA3QzdFOUNBQjYy NTNFRjc4MjMwRDYxMjE1N0FFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmbqbnbdAqWnqS2jB9XcFWCd0ySLOXGY6PwcmNP2DC9667hUUkcZteCfx56 dCN/2jA+70i6TSER52sse2ic9QJOkViTsGO0hUktCoosRrgjJYCXEGiSigWlw+Cb ohwxQ8QHjs6M6k4jUFeEjq+vQQLoD8GGmJXG8MDpVj7FLuq/n0bHU9/A2HNIsfJx CjxKfJPw69ifzXHPClENBIXo5yf6Xh3zAfZwBoBNyF5Cp54I7a6oxeLJd/HpYj6e z3fAfijGiWkTmz1g0JVIEM7k99b8zTRlvr4ZdPtKiw161HYV+tZaiMkdSRri4iz3 me4lRow/6VHqSxlxAXbxGsZMBysCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSc/r77 WwfH6cq2JT73gjDWEhV66DAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeVtsShwXqIrZcEoL7tN/Q3E3Z3VyMyKDNU 7FYIiIq7eNCOME7s2wMqkW18/BuyFDIH6Ov01lyy/ZwlHIlCjt4KTFS6NiqpR87A c+2AfmFanzu2NOb5P+zC09Xh4m7gays8k0ZMxiDSCrbQ7sIQ9MUBDROoNU0KLjaV l68lIw9T9bbgX0HbvPVcAuRGBBfIRuOA/qN/2CCTjtFAzGMaR6NIY9kvVKI+vtEO 0oW3UW0m0YZ7AJ65RWhrCfFC6O9ZT6hlAACviJZKaZfYfrHzT4N9Uf4KMuko7qUd Afsthyu5H/A3JiHPvui5vkvxzA/KfOcfHCMWFJBM0EQ57pVGu5U= -----END CERTIFICATE-----Generated at Sat Jun 6 14:57:05 2026 by rpki-client