$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: JlM56Llk75t5aCS3XfRVsXta3b4HDZvr/+bm5QcYNyQ= Subject key identifier: A4:25:6C:91:87:F1:C3:A5:C5:52:5A:AB:07:A8:A4:72:44:68:E0:33 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 1A0D6F571557EDFDAE62A4DDFB117BA299554147 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 084B Signing time: Wed 06 Aug 2025 13:01:43 +0000 Manifest this update: Wed 06 Aug 2025 12:56:43 +0000 Manifest next update: Thu 07 Aug 2025 13:47:43 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=) 2: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=) 3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: HbbhtJYDNG1M9b4WQrxGY+YdpYIoLAlmbWYP2oplGmY=) 4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 0cNTecmkjnUfzOo0lDUBgluK59dvsGew1EUUhyFgyIw=) 5: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: lVeD0OBryZIFs0Dh4RJF4WX10ZAtCz7OAri6R4+uMEg=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 13:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0d:6f:57:15:57:ed:fd:ae:62:a4:dd:fb:11:7b:a2:99:55:41:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Aug 6 12:56:43 2025 GMT Not After : Aug 7 13:47:43 2025 GMT Subject: CN=A4256C9187F1C3A5C5525AAB07A8A4724468E033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:03:86:36:2e:d0:7b:00:de:6f:bf:e6:b1: 4a:f9:2e:14:08:fc:39:59:16:f6:87:df:af:0d:60: 8e:02:41:20:48:91:09:ab:14:e6:84:a7:99:24:b0: 8b:1a:5b:36:a0:a3:c5:a1:dd:b6:e5:f0:5e:11:fb: c7:6b:54:a0:2e:55:61:40:21:e1:11:f0:be:e6:a0: 13:b8:e3:20:62:4c:35:f6:e8:81:95:20:2f:15:eb: de:3f:0c:55:b2:25:43:c0:7e:13:94:00:0f:f1:4d: 22:6a:e5:8a:f2:32:a5:7e:85:cb:11:12:58:37:2c: 69:c1:ed:37:b7:80:d4:16:50:84:39:14:b9:91:06: 53:22:6b:8a:1b:dc:81:f3:a6:fe:54:23:da:72:c2: 8f:59:cf:c4:ae:f6:51:ff:c2:9f:90:a1:11:8a:d4: 82:5e:b3:c6:4f:66:f8:65:ee:98:4e:d2:fe:b0:b4: 8b:f4:f6:e2:c1:26:3c:bc:15:a5:de:6d:29:12:13: cc:fa:b8:a8:25:41:7d:39:f4:fa:35:c0:6e:5d:a3: 4c:0a:7e:b7:f5:f5:ae:49:a4:6a:a5:c0:a9:24:e1: e5:09:c2:02:82:db:29:c8:5c:33:08:8e:4e:82:0f: 86:1f:9a:24:ff:40:10:8f:b6:cd:04:91:e5:65:af: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:25:6C:91:87:F1:C3:A5:C5:52:5A:AB:07:A8:A4:72:44:68:E0:33 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3d:23:7c:51:32:56:78:d9:85:ba:ef:dc:2f:51:70:9c:f1: 22:4f:8c:74:27:6a:b6:16:bd:37:84:43:5b:ee:26:71:07:27: a5:9a:c5:93:e7:4e:83:0e:82:42:5c:6b:2f:56:16:fb:48:45: 63:07:fc:26:33:80:8a:94:85:41:6e:c2:3f:dd:a1:28:00:78: ed:2f:2d:c0:bd:c6:71:78:8b:d0:07:30:ca:2e:7e:59:ff:ed: 2e:18:da:69:8e:35:33:cb:c4:3a:2f:cf:fd:c4:80:b7:15:19: 9d:d1:ad:fc:c5:85:8f:d8:18:8e:a7:cc:0f:28:bf:57:80:71: 15:01:4e:dd:98:01:a1:5a:27:af:61:4b:33:b5:7f:34:b5:f8: 15:38:45:06:18:8d:9b:1c:4c:9c:85:49:2b:ef:a1:32:99:e5: 63:46:cb:82:0d:62:69:84:16:c8:50:e2:0c:73:f9:48:38:64: 99:ac:42:4c:3c:fc:cc:92:ba:d0:de:3e:1d:f9:2a:08:d6:f6: 35:ab:59:06:8c:e4:51:7f:06:a7:c8:96:38:5c:8e:95:bb:29: 55:8c:d6:ef:6b:df:b4:06:3c:16:53:0c:13:9b:8f:7e:be:f6: e3:81:7b:6c:74:07:16:0e:82:78:92:86:18:f5:e7:66:47:4e: f9:79:e2:b7 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUGg1vVxVX7f2uYqTd+xF7oplVQUcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwODA2MTI1NjQzWhcNMjUwODA3MTM0NzQz WjAzMTEwLwYDVQQDEyhBNDI1NkM5MTg3RjFDM0E1QzU1MjVBQUIwN0E4QTQ3MjQ0 NjhFMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8oDhjYu0HsA 3m+/5rFK+S4UCPw5WRb2h9+vDWCOAkEgSJEJqxTmhKeZJLCLGls2oKPFod225fBe EfvHa1SgLlVhQCHhEfC+5qATuOMgYkw19uiBlSAvFevePwxVsiVDwH4TlAAP8U0i auWK8jKlfoXLERJYNyxpwe03t4DUFlCEORS5kQZTImuKG9yB86b+VCPacsKPWc/E rvZR/8KfkKERitSCXrPGT2b4Ze6YTtL+sLSL9PbiwSY8vBWl3m0pEhPM+rioJUF9 OfT6NcBuXaNMCn639fWuSaRqpcCpJOHlCcICgtspyFwzCI5Ogg+GH5ok/0AQj7bN BJHlZa9RSQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFKQlbJGH8cOlxVJaqweopHJE aOAzMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALs9I3xRMlZ42YW679wvUXCc 8SJPjHQnarYWvTeEQ1vuJnEHJ6WaxZPnToMOgkJcay9WFvtIRWMH/CYzgIqUhUFu wj/doSgAeO0vLcC9xnF4i9AHMMoufln/7S4Y2mmONTPLxDovz/3EgLcVGZ3RrfzF hY/YGI6nzA8ov1eAcRUBTt2YAaFaJ69hSzO1fzS1+BU4RQYYjZscTJyFSSvvoTKZ 5WNGy4INYmmEFshQ4gxz+Ug4ZJmsQkw8/MySutDePh35KgjW9jWrWQaM5FF/BqfI ljhcjpW7KVWM1u9r37QGPBZTDBObj36+9uOBe2x0BxYOgniShhj152ZHTvl54rc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:18 2025 by rpki-client