$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: M1ExgD8giQMuKLBCNtBAirrP1Te/WtU2LHbGXhdgP2k= Subject key identifier: D4:88:15:39:AF:0B:95:77:A4:16:5D:5B:E0:EA:A3:2F:E2:1D:B5:D0 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 73CD2F5993BAECB334812FEEBEB018C6ED17D172 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 08C9 Signing time: Wed 05 Nov 2025 06:13:34 +0000 Manifest this update: Wed 05 Nov 2025 06:08:34 +0000 Manifest next update: Thu 06 Nov 2025 09:50:34 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: EgYQSPpv8BNO+zKfEigOlCZRLCKdcBHKBGUG91kLAjw=) 4: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 5: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cd:2f:59:93:ba:ec:b3:34:81:2f:ee:be:b0:18:c6:ed:17:d1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Nov 5 06:08:34 2025 GMT Not After : Nov 6 09:50:34 2025 GMT Subject: CN=D4881539AF0B9577A4165D5BE0EAA32FE21DB5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:a9:de:72:bf:f3:2a:94:97:eb:a6:a3:93: 57:41:41:2d:2e:9e:ab:39:81:58:a7:98:15:99:93: 08:43:ed:01:4e:0c:69:ba:20:16:00:b0:c1:f3:89: ac:4c:40:18:dc:20:e6:c4:87:6b:d1:2f:03:45:87: fe:94:4f:3d:50:a2:ea:86:7f:24:77:32:b0:54:4b: 78:da:d2:1d:82:c4:b1:f6:5a:7a:6e:c2:53:28:54: f2:09:d5:ab:89:73:9e:19:c0:6c:45:71:06:d0:8a: d8:7b:c2:4b:38:a9:33:44:82:fe:9d:a0:c6:95:4f: 1d:a3:2d:7d:e1:2d:77:e6:f8:0b:cf:32:15:ec:c2: 59:18:a5:ba:9d:5b:89:ee:4c:6a:a5:16:36:06:0a: 76:f5:5a:0a:74:c7:32:53:66:b7:20:60:ee:21:e0: 5c:92:06:df:cc:05:44:f6:cb:ab:92:5c:c7:2b:7d: 4c:a5:72:4c:83:b1:2d:e6:c5:ee:9d:d2:f4:5a:c1: fd:00:2f:50:41:1f:3d:18:b5:7c:23:c0:cb:aa:71: 5d:7d:39:f3:84:fe:1b:78:3c:65:0c:0d:97:a6:14: cf:00:23:bd:2d:de:2a:b5:2c:5b:c9:50:5c:bc:96: 3b:d2:ee:e4:68:15:ae:8d:c2:f0:df:bb:7c:7f:51: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:15:39:AF:0B:95:77:A4:16:5D:5B:E0:EA:A3:2F:E2:1D:B5:D0 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ce:58:39:bc:9f:d5:37:5b:cf:72:df:87:2c:58:41:2e:cb: 79:59:61:7d:61:a5:e4:e8:ca:25:6d:5c:8f:2a:09:f1:48:cd: 50:67:d9:14:59:5d:09:d2:15:84:90:f1:8f:b4:ac:9b:fd:47: b5:45:0b:f8:b8:bc:19:a0:32:51:47:74:61:77:a9:79:87:a3: 44:4a:ed:de:8c:a7:86:9d:a7:37:89:61:af:51:1e:8a:e9:46: d2:b7:03:f0:74:c6:28:a5:04:ee:70:ef:47:f3:78:15:f1:8b: 1e:f0:9c:9f:84:d4:d8:69:05:97:78:c9:80:4f:fb:3a:66:6b: 95:47:e0:15:67:ca:26:e3:29:71:ef:44:28:ba:e1:67:fd:11: 10:99:61:a0:2a:f7:66:6a:05:7e:82:ce:c2:34:23:f5:b7:32: 00:9e:8d:12:10:a8:bb:bf:95:fe:f4:1a:20:36:9f:27:de:14: 45:6b:58:58:c5:8f:e9:29:87:d6:14:9f:da:46:c3:7b:0e:6b: ce:47:9f:d1:bb:bf:91:bf:fc:60:08:29:03:6c:53:b9:27:38: b1:9f:ec:ea:28:80:85:f5:de:15:8c:e1:31:90:0f:9f:d6:87: 73:73:32:7d:55:e5:1d:d3:78:c4:b3:13:1a:dd:b8:6d:4c:b8: b0:1f:a5:2f -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUc80vWZO67LM0gS/uvrAYxu0X0XIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUxMTA1MDYwODM0WhcNMjUxMTA2MDk1MDM0 WjAzMTEwLwYDVQQDEyhENDg4MTUzOUFGMEI5NTc3QTQxNjVENUJFMEVBQTMyRkUy MURCNUQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV6p3nK/8yqU l+umo5NXQUEtLp6rOYFYp5gVmZMIQ+0BTgxpuiAWALDB84msTEAY3CDmxIdr0S8D RYf+lE89UKLqhn8kdzKwVEt42tIdgsSx9lp6bsJTKFTyCdWriXOeGcBsRXEG0IrY e8JLOKkzRIL+naDGlU8doy194S135vgLzzIV7MJZGKW6nVuJ7kxqpRY2Bgp29VoK dMcyU2a3IGDuIeBckgbfzAVE9surklzHK31MpXJMg7Et5sXundL0WsH9AC9QQR89 GLV8I8DLqnFdfTnzhP4beDxlDA2XphTPACO9Ld4qtSxbyVBcvJY70u7kaBWujcLw 37t8f1GTBwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFNSIFTmvC5V3pBZdW+Dqoy/i HbXQMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHDOWDm8n9U3W89y34csWEEu y3lZYX1hpeToyiVtXI8qCfFIzVBn2RRZXQnSFYSQ8Y+0rJv9R7VFC/i4vBmgMlFH dGF3qXmHo0RK7d6Mp4adpzeJYa9RHorpRtK3A/B0xiilBO5w70fzeBXxix7wnJ+E 1NhpBZd4yYBP+zpma5VH4BVnyibjKXHvRCi64Wf9ERCZYaAq92ZqBX6CzsI0I/W3 MgCejRIQqLu/lf70GiA2nyfeFEVrWFjFj+kph9YUn9pGw3sOa85Hn9G7v5G//GAI KQNsU7knOLGf7OoogIX13hWM4TGQD5/Wh3NzMn1V5R3TeMSzExrduG1MuLAfpS8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:47 2025 by rpki-client