$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: FwRJrHBWdTBXq3eJCiXSqElgp+PdWIHOwF1TdgdNl00= Subject key identifier: C5:09:72:DE:83:87:18:05:9E:DA:E1:F6:A6:02:B6:18:ED:D7:26:D7 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 7A77D2C28898AF9130FAABD18D857CC68C0750A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 0805 Signing time: Mon 16 Jun 2025 07:06:16 +0000 Manifest this update: Mon 16 Jun 2025 07:01:16 +0000 Manifest next update: Tue 17 Jun 2025 09:05:16 +0000 Files and hashes: 1: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: SI7KXhoc6V+FDuhVwKlg+a4Ix+IhLJrA3zvrLOixDbo=) 2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=) 3: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=) 4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 0cNTecmkjnUfzOo0lDUBgluK59dvsGew1EUUhyFgyIw=) 5: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: lVeD0OBryZIFs0Dh4RJF4WX10ZAtCz7OAri6R4+uMEg=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:77:d2:c2:88:98:af:91:30:fa:ab:d1:8d:85:7c:c6:8c:07:50:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jun 16 07:01:16 2025 GMT Not After : Jun 17 09:05:16 2025 GMT Subject: CN=C50972DE838718059EDAE1F6A602B618EDD726D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:0f:dd:34:4d:86:c0:af:fe:db:d4:73:dd: b2:89:43:9d:12:13:ba:28:c2:c0:8d:4d:4e:35:cb: 19:bb:f8:08:74:23:4e:fd:56:02:a1:c4:28:dd:1c: 3c:15:bd:14:fb:c0:b2:d1:7a:b2:d0:ab:7a:c9:96: 43:a2:8d:91:7c:cb:8b:bc:dc:6f:02:88:f7:52:73: 4f:9c:16:56:a2:65:53:e6:78:2e:64:d9:33:9d:41: 70:b0:e4:d8:87:e5:b2:6d:7b:be:53:2a:9c:35:3a: 7d:8d:9b:36:fd:c4:10:c0:5d:2f:00:b8:f1:3d:b5: 6f:c9:a2:0d:22:37:10:48:05:85:0d:26:1d:15:e0: 87:26:52:4f:c9:9f:50:1e:58:6a:8f:1a:ab:da:f1: ef:5b:d8:57:77:33:8c:34:a8:b4:e5:bf:f3:4a:e7: 85:b0:6b:f5:b4:f8:e9:21:d9:39:cc:e1:f3:71:4c: 39:f1:ff:48:5a:00:fd:e3:b1:6d:cf:55:09:f1:b4: 66:c5:0f:0c:f2:31:6e:76:01:b1:e8:3f:3a:fa:55: 6f:bb:05:0b:fb:e3:9f:0c:34:7b:4e:6d:2e:b0:b8: d9:3b:53:28:8f:4b:64:5f:96:60:5c:52:ed:b4:62: 77:2f:cf:fa:8a:6d:97:8b:81:6f:92:89:0f:43:25: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:72:DE:83:87:18:05:9E:DA:E1:F6:A6:02:B6:18:ED:D7:26:D7 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b6:e9:76:02:26:80:f9:a4:bb:36:c9:8b:54:3e:67:4c:83: e2:2a:93:1f:ec:85:53:84:8a:0a:90:87:22:51:bc:27:e7:df: c6:f7:44:fd:97:1a:78:e1:cd:dc:37:28:aa:c9:0d:ea:fc:9d: 17:6e:9b:e1:62:22:80:8d:11:65:e3:cc:01:86:80:48:e5:52: 18:2c:9f:83:17:c0:ca:bb:95:ff:ca:d4:0e:37:57:53:4c:52: b9:c8:b0:cd:ba:66:d8:28:88:a6:98:a2:28:85:15:17:0c:07: 49:95:ba:fc:9d:a0:92:d9:6f:48:3a:10:1f:99:90:a7:34:5a: 4c:87:f6:56:43:2c:f5:24:45:9b:2e:04:b4:93:c9:b9:a2:1d: 97:e3:e3:a2:48:01:13:89:02:da:81:de:10:2a:d3:7b:44:c5: 1c:fb:f5:53:15:c6:be:5b:d3:40:b8:c3:ac:07:65:49:60:fc: 53:43:af:da:e8:dc:25:75:25:28:84:b8:90:ca:72:6d:18:10: 6c:10:1d:2d:58:e4:f4:74:e6:de:7d:58:cf:a4:ae:73:e6:7c: b4:15:d8:9e:7e:09:2b:88:52:db:15:5d:8b:9b:cd:1f:18:d6: dd:11:70:19:09:1b:a4:bc:69:37:1d:f3:99:60:d7:d4:22:18: 54:e8:64:13 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUenfSwoiYr5Ew+qvRjYV8xowHUKYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwNjE2MDcwMTE2WhcNMjUwNjE3MDkwNTE2 WjAzMTEwLwYDVQQDEyhDNTA5NzJERTgzODcxODA1OUVEQUUxRjZBNjAyQjYxOEVE RDcyNkQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvEP3TRNhsCv /tvUc92yiUOdEhO6KMLAjU1ONcsZu/gIdCNO/VYCocQo3Rw8Fb0U+8Cy0Xqy0Kt6 yZZDoo2RfMuLvNxvAoj3UnNPnBZWomVT5nguZNkznUFwsOTYh+WybXu+UyqcNTp9 jZs2/cQQwF0vALjxPbVvyaINIjcQSAWFDSYdFeCHJlJPyZ9QHlhqjxqr2vHvW9hX dzOMNKi05b/zSueFsGv1tPjpIdk5zOHzcUw58f9IWgD947Ftz1UJ8bRmxQ8M8jFu dgGx6D86+lVvuwUL++OfDDR7Tm0usLjZO1Moj0tkX5ZgXFLttGJ3L8/6im2Xi4Fv kokPQyUhpwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFMUJct6DhxgFntrh9qYCthjt 1ybXMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJy26XYCJoD5pLs2yYtUPmdM g+Iqkx/shVOEigqQhyJRvCfn38b3RP2XGnjhzdw3KKrJDer8nRdum+FiIoCNEWXj zAGGgEjlUhgsn4MXwMq7lf/K1A43V1NMUrnIsM26ZtgoiKaYoiiFFRcMB0mVuvyd oJLZb0g6EB+ZkKc0WkyH9lZDLPUkRZsuBLSTybmiHZfj46JIAROJAtqB3hAq03tE xRz79VMVxr5b00C4w6wHZUlg/FNDr9ro3CV1JSiEuJDKcm0YEGwQHS1Y5PR05t59 WM+krnPmfLQV2J5+CSuIUtsVXYubzR8Y1t0RcBkJG6S8aTcd85lg19QiGFToZBM= -----END CERTIFICATE-----Generated at Mon Jun 16 09:25:09 2025 by rpki-client