$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json) Hash identifier: +/+KoRjwT0x9kkNzJjDOrWOYygB0Kp2Npgzl0H/E7wM= Subject key identifier: 84:A2:55:09:E1:32:CA:5F:72:32:AC:A3:33:C5:63:32:40:C6:61:AB Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Certificate serial: 6D7222E5843D70B223FAB9BB39B87B73B12EAEE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft Manifest number: 0107 Signing time: Fri 04 Sep 2026 14:09:58 +0000 Manifest this update: Fri 04 Sep 2026 14:04:58 +0000 Manifest next update: Sat 05 Sep 2026 16:01:58 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=) 2: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=) 3: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=) 4: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=) 5: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=) 6: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=) 7: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=) 8: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=) 9: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=) 10: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: ZaxxkYokX7UYF7dlrHTHjQX1wrZnDTLmBQUXOqvpQVo=) 11: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=) 12: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=) 13: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=) 14: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 16:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:72:22:e5:84:3d:70:b2:23:fa:b9:bb:39:b8:7b:73:b1:2e:ae:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113 Validity Not Before: Sep 4 14:04:58 2026 GMT Not After : Sep 5 16:01:58 2026 GMT Subject: CN=84A25509E132CA5F7232ACA333C5633240C661AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:00:83:e0:cc:92:a0:f3:5c:cb:f3:80:67:a3: 2a:62:79:5e:2b:56:84:9f:6a:9f:2f:dd:0f:dc:e6: 17:3c:22:18:05:8b:7b:c8:5a:ce:16:fa:fa:da:eb: 59:ac:48:5f:2d:24:be:0e:a0:f1:41:2b:fc:f7:9b: 68:9d:1b:e9:e8:22:04:7a:86:4b:b9:67:30:da:4f: 9f:33:4b:d4:2f:c4:62:3e:b2:27:b6:2d:e1:58:f8: 43:44:ee:ad:16:61:da:84:b3:37:6a:66:ca:3f:ad: ef:ad:50:d5:8e:ac:4a:e8:06:ad:15:9d:21:1d:97: 95:c7:b1:a3:47:83:bc:30:b3:5a:9c:fc:3c:6c:1c: e4:9d:3c:5b:2a:b9:75:d9:63:9d:17:84:47:a2:25: 7c:e9:2a:55:67:cc:56:52:eb:dd:8f:cb:7f:21:a5: bd:05:cc:61:80:5c:bc:e9:ff:1b:b1:28:0b:3c:d8: 50:e1:3c:9d:fc:9c:64:f1:f2:97:61:60:98:68:f4: bd:10:9b:64:16:6d:7d:01:82:03:88:ad:43:2b:e1: 22:c6:3c:8e:bf:3f:d0:f4:b7:72:07:59:89:c8:00: d8:c2:ce:5c:02:98:39:ac:4a:a3:15:09:34:38:9a: 46:16:96:bb:ba:5c:67:a7:61:46:9b:20:4b:9a:29: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:55:09:E1:32:CA:5F:72:32:AC:A3:33:C5:63:32:40:C6:61:AB X509v3 Authority Key Identifier: keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:89:9a:a7:80:6d:85:8e:6d:ad:b9:56:ab:85:a0:3e:90:4a: 43:71:26:49:37:34:d1:40:a7:b5:c8:50:24:9a:bd:8b:53:2c: 8e:6c:1f:dd:3d:fc:07:66:6b:d7:5e:80:97:6d:32:27:2b:dc: b7:7f:98:9b:63:f0:08:67:a3:c3:6e:2d:d8:e0:de:e9:2f:5e: 5d:82:18:fb:e2:e0:c2:95:31:2e:41:bf:38:c5:6a:5a:bf:33: 7e:8b:78:00:6a:e3:8c:6a:cb:7b:31:79:06:3d:c3:52:78:b1: e8:d7:d5:79:87:d0:a7:cf:7c:2f:61:94:9f:88:45:bb:0c:43: aa:50:97:37:e1:42:7f:31:d3:37:52:12:da:8a:60:8a:b9:51: 89:6a:04:5e:8e:36:d7:3b:b2:21:45:ab:c4:0d:17:66:9d:51: 2b:f9:8d:6b:92:34:79:ce:a7:5f:41:d3:ff:f3:62:53:ef:19: 89:17:e8:1a:ca:0c:bb:42:b2:ca:5a:18:29:94:2c:98:6b:17: cc:51:89:69:8c:b9:5b:eb:82:fd:c9:a1:50:c1:15:03:c3:e4: 14:2a:02:ac:36:d2:9b:d5:f1:61:06:ff:d6:0e:a4:ff:a6:63: f5:97:23:f0:c4:b6:6d:d0:78:7a:52:57:9b:44:92:b8:62:53: c5:47:14:53 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUbXIi5YQ9cLIj+rm7Obh7c7EurukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2 NEIzRjIwMTU4MjA2OTMyMzFGMjQwMDJBREMyMTEzMB4XDTI2MDkwNDE0MDQ1OFoX DTI2MDkwNTE2MDE1OFowMzExMC8GA1UEAxMoODRBMjU1MDlFMTMyQ0E1RjcyMzJB Q0EzMzNDNTYzMzI0MEM2NjFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4Ag+DMkqDzXMvzgGejKmJ5XitWhJ9qny/dD9zmFzwiGAWLe8hazhb6+trr WaxIXy0kvg6g8UEr/PebaJ0b6egiBHqGS7lnMNpPnzNL1C/EYj6yJ7Yt4Vj4Q0Tu rRZh2oSzN2pmyj+t761Q1Y6sSugGrRWdIR2Xlcexo0eDvDCzWpz8PGwc5J08Wyq5 ddljnReER6IlfOkqVWfMVlLr3Y/LfyGlvQXMYYBcvOn/G7EoCzzYUOE8nfycZPHy l2FgmGj0vRCbZBZtfQGCA4itQyvhIsY8jr8/0PS3cgdZicgA2MLOXAKYOaxKoxUJ NDiaRhaWu7pcZ6dhRpsgS5opJY8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSEolUJ 4TLKX3IyrKMzxWMyQMZhqzAfBgNVHSMEGDAWgBTa6vs3Fks/IBWCBpMjHyQAKtwh EzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3MTY0QjNGMjAxNTgyMDY5MzIz MUYyNDAwMkFEQzIxMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzJ1cjdOeFpMUHlBVmdnYVRJeDhrQUNyY0lSTS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNjIvREFFQUZCMzcxNjRCM0YyMDE1ODIwNjkzMjMxRjI0 MDAyQURDMjExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuJmqeAbYWOba25VquFoD6QSkNxJkk3NNFA p7XIUCSavYtTLI5sH909/Adma9degJdtMicr3Ld/mJtj8Ahno8NuLdjg3ukvXl2C GPvi4MKVMS5BvzjFalq/M36LeABq44xqy3sxeQY9w1J4sejX1XmH0KfPfC9hlJ+I RbsMQ6pQlzfhQn8x0zdSEtqKYIq5UYlqBF6ONtc7siFFq8QNF2adUSv5jWuSNHnO p19B0//zYlPvGYkX6BrKDLtCsspaGCmULJhrF8xRiWmMuVvrgv3JoVDBFQPD5BQq Aqw20pvV8WEG/9YOpP+mY/WXI/DEtm3QeHpSV5tEkrhiU8VHFFM= -----END CERTIFICATE-----Generated at Sat Sep 5 05:17:38 2026 by rpki-client