$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: qzBDvp65qgIAwLLCSXFAk1qgMSk8jZhsc8bhLK6HqIc= Subject key identifier: 7D:64:F1:F3:5F:2A:ED:E6:BE:7A:3A:ED:AC:58:BE:A3:EE:F8:DD:B3 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 71A3E982DA34D71F59B18D764BDC863312597AC2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 09B6 Signing time: Thu 16 Apr 2026 15:26:32 +0000 Manifest this update: Thu 16 Apr 2026 15:21:32 +0000 Manifest next update: Fri 17 Apr 2026 18:15:32 +0000 Files and hashes: 1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 2: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: uK7jlecLejku61XHkUQu9fI/2nI6jloYn0f61gNFssA=) 3: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 4: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 5: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 18:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a3:e9:82:da:34:d7:1f:59:b1:8d:76:4b:dc:86:33:12:59:7a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Apr 16 15:21:32 2026 GMT Not After : Apr 17 18:15:32 2026 GMT Subject: CN=7D64F1F35F2AEDE6BE7A3AEDAC58BEA3EEF8DDB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:02:c4:4a:67:93:fc:bc:bb:4e:f9:ed:b9:db: 5c:cf:98:94:a7:f5:ac:87:de:30:58:8e:8e:dc:5e: f9:a6:69:55:91:92:b4:6c:38:95:84:49:cd:bc:ac: fc:67:92:ab:43:fb:75:1c:d7:5f:ba:0c:e0:ed:24: 61:7c:4f:37:29:a3:20:8b:e4:1b:2c:75:28:39:3a: 4d:f0:75:7a:47:cc:f5:15:75:7e:50:ef:a0:09:03: b2:1a:10:16:b2:f6:7d:59:6d:24:47:bf:15:cb:0e: 03:9a:fa:ea:8d:b3:1c:74:97:04:6b:cb:bb:1c:43: fe:f9:cb:02:c0:5a:ab:b5:ae:bb:68:38:bc:44:cd: 63:15:16:db:7b:fe:39:a7:9d:26:fc:55:c6:cc:6a: c6:10:e8:a7:28:f9:2e:06:68:2e:c5:45:e0:b0:7e: 7f:d2:45:6d:d3:4f:5a:07:6e:d1:92:08:6e:b5:ea: a9:c3:fa:d7:22:90:ae:77:10:86:d9:cc:5d:2a:d2: 46:6c:22:ff:fc:30:3a:a4:bd:6a:ac:02:7e:4e:ba: 38:a3:f7:41:21:32:e8:a2:0c:2f:9f:b3:f0:7d:55: 88:fb:33:a4:af:fa:7b:7a:69:aa:06:0d:17:2f:8e: c8:37:35:32:1a:81:b0:b3:17:1d:be:b3:a9:c9:3c: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:64:F1:F3:5F:2A:ED:E6:BE:7A:3A:ED:AC:58:BE:A3:EE:F8:DD:B3 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:06:b6:71:bf:27:a2:54:b7:70:fb:53:ee:ea:7b:1c:2c:1c: 03:2e:44:fc:7c:6c:4a:11:bb:a5:dd:87:ec:66:94:74:0b:d7: 94:ab:df:b7:1f:af:7a:72:12:7e:c7:c2:5e:b1:df:64:1e:25: 4c:c0:15:66:56:45:43:3b:14:85:ae:3e:f9:80:b5:38:63:57: d9:af:38:53:71:e9:ad:9a:c4:2d:75:19:8e:94:b5:0b:e8:4f: 2f:88:c9:b5:f4:da:9c:a4:3e:d9:6c:2f:59:c6:8c:72:c5:50: ee:ce:1e:7e:1d:ba:90:91:ac:b7:eb:b6:fe:09:72:7a:31:e4: ee:9b:af:c6:7b:41:57:7a:1a:0d:e0:15:a6:35:1e:ab:ad:ca: fb:e9:47:29:7d:24:99:1e:0a:1b:ef:a7:0f:fc:d5:fc:5d:73: 92:41:60:31:fd:3f:ba:f6:0d:01:a0:c7:76:d4:b9:ce:41:f7: 20:49:3f:a5:08:65:6e:08:44:a6:ce:22:95:e6:f4:15:d6:db: 72:e8:2e:ee:f9:28:ce:73:da:69:0e:9d:34:92:61:0f:b7:bd: 22:a6:8e:92:68:d7:b1:75:ac:b4:6a:ac:ec:ea:2d:93:fa:2f: 4f:62:07:65:49:63:c4:dc:60:c6:37:35:7d:fe:37:2f:61:79: 0c:63:39:28 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUcaPpgto01x9ZsY12S9yGMxJZesIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNDE2MTUyMTMyWhcNMjYwNDE3MTgxNTMy WjAzMTEwLwYDVQQDEyg3RDY0RjFGMzVGMkFFREU2QkU3QTNBRURBQzU4QkVBM0VF RjhEREIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ALESmeT/Ly7 Tvntudtcz5iUp/Wsh94wWI6O3F75pmlVkZK0bDiVhEnNvKz8Z5KrQ/t1HNdfugzg 7SRhfE83KaMgi+QbLHUoOTpN8HV6R8z1FXV+UO+gCQOyGhAWsvZ9WW0kR78Vyw4D mvrqjbMcdJcEa8u7HEP++csCwFqrta67aDi8RM1jFRbbe/45p50m/FXGzGrGEOin KPkuBmguxUXgsH5/0kVt009aB27Rkghuteqpw/rXIpCudxCG2cxdKtJGbCL//DA6 pL1qrAJ+Tro4o/dBITLoogwvn7PwfVWI+zOkr/p7emmqBg0XL47INzUyGoGwsxcd vrOpyTyJcwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFH1k8fNfKu3mvno67axYvqPu +N2zMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHgGtnG/J6JUt3D7U+7qexws HAMuRPx8bEoRu6Xdh+xmlHQL15Sr37cfr3pyEn7Hwl6x32QeJUzAFWZWRUM7FIWu PvmAtThjV9mvOFNx6a2axC11GY6UtQvoTy+IybX02pykPtlsL1nGjHLFUO7OHn4d upCRrLfrtv4Jcnox5O6br8Z7QVd6Gg3gFaY1HqutyvvpRyl9JJkeChvvpw/81fxd c5JBYDH9P7r2DQGgx3bUuc5B9yBJP6UIZW4IRKbOIpXm9BXW23LoLu75KM5z2mkO nTSSYQ+3vSKmjpJo17F1rLRqrOzqLZP6L09iB2VJY8TcYMY3NX3+Ny9heQxjOSg= -----END CERTIFICATE-----Generated at Fri Apr 17 07:38:15 2026 by rpki-client