$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: o4YoPsZ+NT5vGpy7K4fd77YZVXtQwVIs3LLvWgXdPWs= Subject key identifier: 99:25:4B:C4:BA:31:19:1C:7E:86:BB:55:66:8E:C0:C4:7F:39:94:0B Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 1B42D546EEC3564FBB977E488BE683CD0A9E7DCF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 0971 Signing time: Sun 01 Mar 2026 18:51:30 +0000 Manifest this update: Sun 01 Mar 2026 18:46:30 +0000 Manifest next update: Mon 02 Mar 2026 19:40:30 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 2: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: 9I9pew+BQs3rWPdtY7GMOiRYvvyws4DK8nkNZHN/7ys=) 4: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 19:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:42:d5:46:ee:c3:56:4f:bb:97:7e:48:8b:e6:83:cd:0a:9e:7d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Mar 1 18:46:30 2026 GMT Not After : Mar 2 19:40:30 2026 GMT Subject: CN=99254BC4BA31191C7E86BB55668EC0C47F39940B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:c1:56:d2:59:e4:ac:8f:65:2c:12:c6:d5: 43:e6:4e:8a:ed:89:9c:7b:8f:8a:e0:16:94:5c:2e: 56:4b:2b:3c:24:27:77:eb:d8:b7:d1:71:da:46:4e: 24:81:8e:1b:be:9a:c3:26:a0:4c:bc:75:db:0a:5c: 32:56:b1:75:a8:17:18:0e:80:4f:51:98:82:26:40: f2:2a:cd:0c:c4:f0:59:f0:ff:e6:53:5f:e1:3f:46: da:97:58:96:6d:c6:d1:ef:bf:ec:c6:b4:de:5e:62: 46:ea:45:ad:f8:a1:be:03:50:58:ec:16:b2:c7:70: 13:fb:8c:fe:7b:86:87:4e:db:bc:4a:c0:e5:2b:8e: c7:fe:f2:72:e3:8a:b8:fa:4e:f4:cb:a4:a3:df:bc: e5:2d:ee:53:16:05:f9:7e:2b:2d:36:b5:e0:fc:3e: 7c:d0:24:ef:9a:7d:2a:23:0d:d5:c7:3e:38:86:65: a8:62:1e:a3:27:b5:60:74:10:84:27:ec:97:b5:d5: d9:5f:02:37:13:6a:88:43:aa:35:e7:51:5b:21:ee: da:7a:84:89:4a:3d:76:18:c6:d1:3a:6b:4d:cf:73: d6:a5:a4:d6:7f:db:96:12:32:7f:4d:aa:46:7e:a2: 1b:50:2e:53:be:df:0d:a1:40:8f:c6:3b:d0:d2:6c: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:25:4B:C4:BA:31:19:1C:7E:86:BB:55:66:8E:C0:C4:7F:39:94:0B X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:c5:06:1e:d4:b9:7f:bc:f3:98:f0:37:35:3f:f8:10:a5:be: b5:d8:1c:2d:f3:21:b4:bb:14:07:ad:33:ad:45:23:70:39:78: d3:64:bd:92:25:f4:7a:4d:5f:0e:4c:6f:82:5a:de:c6:62:e1: 49:32:11:30:53:39:63:98:2c:10:b7:87:50:9a:34:43:77:98: 99:3f:12:07:ad:6a:eb:4f:ef:86:6f:34:d0:f5:3d:2d:d1:e7: 1e:0e:1e:f9:af:47:8e:41:ca:eb:f5:7f:00:aa:16:2b:d0:11: dc:44:9e:1f:dc:5b:b6:b2:a0:02:07:d6:dd:cc:c4:4c:2d:da: 6b:65:99:5d:ff:28:92:b6:41:88:30:71:79:99:28:fe:31:3a: 3e:64:ce:f7:2c:6e:d9:29:eb:b8:b6:94:bf:be:62:a3:6a:13: 5b:31:cf:cd:0a:a2:77:fc:24:42:39:06:b7:9b:0c:ec:65:b9: 3a:44:cf:a0:42:9a:f7:df:35:ec:1b:d5:67:ff:ee:a5:e8:75: 2b:6a:73:80:77:82:44:15:d7:d1:b4:32:2d:e1:c6:6c:0e:cd: e8:1f:64:14:04:80:b8:fc:ea:43:65:0a:90:9c:27:0b:10:66: 38:92:82:38:1e:4d:5b:ab:29:c6:3b:10:a4:af:0a:bc:d4:4f: e7:37:ea:8e -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUG0LVRu7DVk+7l35Ii+aDzQqefc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwMzAxMTg0NjMwWhcNMjYwMzAyMTk0MDMw WjAzMTEwLwYDVQQDEyg5OTI1NEJDNEJBMzExOTFDN0U4NkJCNTU2NjhFQzBDNDdG Mzk5NDBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSrBVtJZ5KyP ZSwSxtVD5k6K7Ymce4+K4BaUXC5WSys8JCd369i30XHaRk4kgY4bvprDJqBMvHXb ClwyVrF1qBcYDoBPUZiCJkDyKs0MxPBZ8P/mU1/hP0bal1iWbcbR77/sxrTeXmJG 6kWt+KG+A1BY7Bayx3AT+4z+e4aHTtu8SsDlK47H/vJy44q4+k70y6Sj37zlLe5T FgX5fistNrXg/D580CTvmn0qIw3Vxz44hmWoYh6jJ7VgdBCEJ+yXtdXZXwI3E2qI Q6o151FbIe7aeoSJSj12GMbROmtNz3PWpaTWf9uWEjJ/TapGfqIbUC5Tvt8NoUCP xjvQ0mxPjwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFJklS8S6MRkcfoa7VWaOwMR/ OZQLMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMDFBh7UuX+885jwNzU/+BCl vrXYHC3zIbS7FAetM61FI3A5eNNkvZIl9HpNXw5Mb4Ja3sZi4UkyETBTOWOYLBC3 h1CaNEN3mJk/EgetautP74ZvNND1PS3R5x4OHvmvR45Byuv1fwCqFivQEdxEnh/c W7ayoAIH1t3MxEwt2mtlmV3/KJK2QYgwcXmZKP4xOj5kzvcsbtkp67i2lL++YqNq E1sxz80Konf8JEI5BrebDOxluTpEz6BCmvffNewb1Wf/7qXodStqc4B3gkQV19G0 Mi3hxmwOzegfZBQEgLj86kNlCpCcJwsQZjiSgjgeTVurKcY7EKSvCrzUT+c36o4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:53:24 2026 by rpki-client