$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: nTyu8gtqgyyYvXbkpKfrw6PdaaIJt9/xU1ynCS0jVa0= Subject key identifier: 2A:E7:57:31:16:51:81:DC:5C:4F:68:30:83:9A:E5:7A:CB:DE:12:BF Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 4CE4F7D6C341B09EB852D97DFD52EAF2FBE8FDD3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 09B9 Signing time: Sat 18 Apr 2026 23:36:32 +0000 Manifest this update: Sat 18 Apr 2026 23:31:32 +0000 Manifest next update: Mon 20 Apr 2026 02:56:32 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 2: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: i60QA+/EDYRBPL5odH3dih2PLv+K26tRtwfSPQyWpYo=) 3: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 4: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 02:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e4:f7:d6:c3:41:b0:9e:b8:52:d9:7d:fd:52:ea:f2:fb:e8:fd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Apr 18 23:31:32 2026 GMT Not After : Apr 20 02:56:32 2026 GMT Subject: CN=2AE75731165181DC5C4F6830839AE57ACBDE12BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:0d:d9:99:35:9a:28:68:4d:ed:07:86:2a: 56:a7:40:48:69:e1:9a:73:af:64:7e:21:9e:9f:f3: c4:bb:98:22:9c:66:e8:f4:df:d0:4e:a2:af:73:c1: 7f:7d:2c:bd:a2:98:7e:89:49:4b:dd:30:fc:50:bb: d8:99:41:9f:91:fc:ed:0d:23:36:7d:c7:2e:c8:7a: 88:9c:b2:55:c6:dc:ff:57:7f:a4:d2:e3:ea:c6:06: 9f:0b:a5:a5:31:c1:b2:db:2b:bf:12:8a:8f:3b:7a: 2c:41:28:29:79:1f:ea:41:2e:a5:d4:e8:da:93:92: 75:73:53:4f:1f:55:21:ec:ac:1a:89:27:b2:a6:fa: be:b4:29:09:f2:66:79:d5:7c:87:c0:33:da:35:b7: 41:42:b2:2a:5e:2c:17:bc:0d:16:01:37:ea:ab:90: 17:ce:d9:60:49:1b:f3:53:04:08:a3:53:84:58:e1: 7b:79:51:df:93:77:61:df:7b:c6:13:08:ef:fd:be: 93:58:75:b5:d1:c4:26:e8:65:98:d1:01:8f:bf:3c: 37:24:a9:a0:47:87:60:5e:d1:5e:75:92:8c:21:9c: 83:c2:8c:61:63:5f:ec:e8:00:fd:17:7c:54:38:c2: a7:a2:60:d8:7f:98:0c:23:c0:83:b3:e5:94:b4:ff: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:57:31:16:51:81:DC:5C:4F:68:30:83:9A:E5:7A:CB:DE:12:BF X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:86:d4:8a:83:52:93:77:c5:15:5f:b5:5b:0e:f6:76:81:9e: f7:53:7a:c7:2b:30:a9:3b:f2:af:94:59:ec:08:37:5e:ef:ff: c9:7b:82:fe:c8:14:fe:37:1a:ac:d1:51:f9:ed:03:88:94:f2: 26:e5:65:9a:fe:1a:d2:82:b7:99:74:82:6b:9e:6f:45:ec:05: bd:9f:88:34:67:99:33:a0:0a:ca:f0:26:25:9f:9b:d4:90:4d: 8b:ca:6a:05:bc:71:d6:47:1a:49:87:40:81:30:4a:01:70:5d: 16:9b:e9:c7:03:bf:c7:5f:fe:8d:ec:f6:c2:05:14:41:4e:68: ba:c1:c8:b2:8c:e0:42:ef:19:84:bd:86:9e:ef:cf:a1:db:5c: dd:6b:ea:a3:e9:00:f4:64:84:1a:36:44:fe:20:15:64:f3:6b: 7c:bd:7a:24:57:5a:d4:ac:29:59:c2:a2:fc:2e:4a:44:51:e9: 2d:f3:de:20:e7:c5:2a:3e:20:f4:2b:d4:29:16:9c:8c:38:fc: 4b:4a:91:8c:6d:bf:48:6a:7d:b8:5e:bc:bb:e1:46:44:59:e8: 45:6d:cd:f0:19:cc:b2:ef:91:b0:82:e1:e2:72:19:75:74:ee: f5:53:02:2d:32:38:6f:5e:81:7d:85:f2:e3:69:94:ae:32:4d: 12:04:c7:df -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUTOT31sNBsJ64Utl9/VLq8vvo/dMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNDE4MjMzMTMyWhcNMjYwNDIwMDI1NjMy WjAzMTEwLwYDVQQDEygyQUU3NTczMTE2NTE4MURDNUM0RjY4MzA4MzlBRTU3QUNC REUxMkJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQIN2Zk1miho Te0HhipWp0BIaeGac69kfiGen/PEu5ginGbo9N/QTqKvc8F/fSy9oph+iUlL3TD8 ULvYmUGfkfztDSM2fccuyHqInLJVxtz/V3+k0uPqxgafC6WlMcGy2yu/EoqPO3os QSgpeR/qQS6l1Ojak5J1c1NPH1Uh7KwaiSeypvq+tCkJ8mZ51XyHwDPaNbdBQrIq XiwXvA0WATfqq5AXztlgSRvzUwQIo1OEWOF7eVHfk3dh33vGEwjv/b6TWHW10cQm 6GWY0QGPvzw3JKmgR4dgXtFedZKMIZyDwoxhY1/s6AD9F3xUOMKnomDYf5gMI8CD s+WUtP+2TwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFCrnVzEWUYHcXE9oMIOa5XrL 3hK/MB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALGG1IqDUpN3xRVftVsO9naB nvdTescrMKk78q+UWewIN17v/8l7gv7IFP43GqzRUfntA4iU8iblZZr+GtKCt5l0 gmueb0XsBb2fiDRnmTOgCsrwJiWfm9SQTYvKagW8cdZHGkmHQIEwSgFwXRab6ccD v8df/o3s9sIFFEFOaLrByLKM4ELvGYS9hp7vz6HbXN1r6qPpAPRkhBo2RP4gFWTz a3y9eiRXWtSsKVnCovwuSkRR6S3z3iDnxSo+IPQr1CkWnIw4/EtKkYxtv0hqfbhe vLvhRkRZ6EVtzfAZzLLvkbCC4eJyGXV07vVTAi0yOG9egX2F8uNplK4yTRIEx98= -----END CERTIFICATE-----Generated at Sun Apr 19 08:36:12 2026 by rpki-client