$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: CwjmHuMosV0Wi09Uc8XgF5ATyFO8aJV2bE4zr8dRz/A= Subject key identifier: AC:E2:5B:38:74:88:12:63:08:AE:A2:A4:D7:30:A1:56:30:08:AA:31 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 30CEC9B8602460A8ECCFA87FDF756AD120A3D4D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 0705 Signing time: Sat 26 Apr 2025 09:43:23 +0000 Manifest this update: Sat 26 Apr 2025 09:38:23 +0000 Manifest next update: Sun 27 Apr 2025 10:41:23 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: E0bg5hklSVOoM8VxSkmLB2MlljejeSxc3ynrG+s8zzM=) 3: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 5: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 6: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 10:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ce:c9:b8:60:24:60:a8:ec:cf:a8:7f:df:75:6a:d1:20:a3:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Apr 26 09:38:23 2025 GMT Not After : Apr 27 10:41:23 2025 GMT Subject: CN=ACE25B387488126308AEA2A4D730A1563008AA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:c2:76:51:b5:60:c0:b4:d3:79:b6:59:72: 22:4a:43:b5:a7:cd:b3:e9:9d:f6:53:e0:13:cd:14: f4:b9:85:4c:43:41:e2:b4:7d:e7:fe:18:14:48:ed: 24:45:eb:22:31:55:fc:4f:08:2b:b0:bb:7e:93:ff: cf:3e:f7:14:0d:8e:36:b5:dc:ed:5e:f2:54:39:8b: f4:b9:e8:b7:88:d1:08:af:de:dc:24:84:81:0a:09: 76:21:1f:2b:df:f1:8d:74:b4:9e:93:aa:1a:31:e5: 1b:4b:c6:ec:91:bd:d4:b4:d4:1c:d7:a2:42:e0:1d: bb:21:16:34:e7:83:1f:35:63:d7:f5:ea:e0:22:9e: 21:af:29:a4:85:8b:18:4c:bc:cb:c0:79:06:00:3b: fd:4a:e3:53:47:17:c1:6e:a5:ba:8f:f1:4e:8f:7c: 3e:f7:c6:0a:69:62:0c:a2:d2:38:09:31:ee:b9:d7: 63:e8:62:a4:61:98:d0:2c:c7:70:87:d6:18:7c:52: 81:9d:f0:30:81:e8:d6:1a:4d:3c:7e:b0:d7:05:7b: bb:7b:d5:00:cd:6b:38:73:d1:38:b1:46:4c:63:26: c9:97:d9:70:73:0a:95:dc:1e:04:5c:17:14:c1:cc: be:99:94:84:f4:c2:95:3f:e7:06:cf:bf:6b:17:19: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E2:5B:38:74:88:12:63:08:AE:A2:A4:D7:30:A1:56:30:08:AA:31 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:09:1b:57:d4:66:07:19:52:d8:8c:98:84:d3:d0:5f:05:54: 29:e8:a6:9b:f5:7e:7d:a9:75:1f:9e:15:94:57:6a:33:9b:e4: b5:44:66:fa:d4:02:16:d7:b5:2e:fb:fb:8e:1b:b4:5d:7c:5e: 52:e1:00:f8:7a:49:a7:2e:fe:b6:ae:c9:86:1e:68:46:49:46: c1:c5:2f:aa:df:2d:19:17:84:d0:ec:17:24:0d:4a:fd:dd:b9: 6f:83:90:fe:84:ba:b5:12:ad:de:5e:8d:7b:6f:26:84:fd:9a: 2e:f3:6e:62:e5:66:e8:ab:69:68:6c:49:53:28:5b:95:d7:f1: 29:1f:4d:db:6f:c9:45:33:48:1d:0e:25:a9:ef:a5:b2:9c:7b: c3:3a:e3:0e:d8:af:fe:df:8b:91:cb:e1:6e:30:87:a7:13:ad: e3:bf:4b:8c:f1:80:a1:d2:8b:b5:07:3d:eb:81:fa:19:0f:57: 59:82:ad:8d:60:d0:dd:1d:1c:3b:83:7f:58:56:09:3c:63:a6: be:b6:64:a9:c5:d4:cd:11:65:6f:e3:23:b6:89:37:d7:e5:2e: 7d:ca:93:75:eb:ce:cb:4a:6c:07:83:33:48:92:19:a7:7a:22: f7:03:41:76:68:5f:d3:a9:a2:e7:9b:96:a8:3b:4d:2e:61:50: be:6d:54:c1 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUMM7JuGAkYKjsz6h/33Vq0SCj1NQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNDI2MDkzODIzWhcNMjUwNDI3MTA0MTIz WjAzMTEwLwYDVQQDEyhBQ0UyNUIzODc0ODgxMjYzMDhBRUEyQTRENzMwQTE1NjMw MDhBQTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1trCdlG1YMC0 03m2WXIiSkO1p82z6Z32U+ATzRT0uYVMQ0HitH3n/hgUSO0kResiMVX8TwgrsLt+ k//PPvcUDY42tdztXvJUOYv0uei3iNEIr97cJISBCgl2IR8r3/GNdLSek6oaMeUb S8bskb3UtNQc16JC4B27IRY054MfNWPX9ergIp4hrymkhYsYTLzLwHkGADv9SuNT RxfBbqW6j/FOj3w+98YKaWIMotI4CTHuuddj6GKkYZjQLMdwh9YYfFKBnfAwgejW Gk08frDXBXu7e9UAzWs4c9E4sUZMYybJl9lwcwqV3B4EXBcUwcy+mZSE9MKVP+cG z79rFxnY2wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFKziWzh0iBJjCK6ipNcwoVYw CKoxMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJkJG1fUZgcZUtiMmITT0F8F VCnoppv1fn2pdR+eFZRXajOb5LVEZvrUAhbXtS77+44btF18XlLhAPh6Sacu/rau yYYeaEZJRsHFL6rfLRkXhNDsFyQNSv3duW+DkP6EurUSrd5ejXtvJoT9mi7zbmLl ZuiraWhsSVMoW5XX8SkfTdtvyUUzSB0OJanvpbKce8M64w7Yr/7fi5HL4W4wh6cT reO/S4zxgKHSi7UHPeuB+hkPV1mCrY1g0N0dHDuDf1hWCTxjpr62ZKnF1M0RZW/j I7aJN9flLn3Kk3XrzstKbAeDM0iSGad6IvcDQXZoX9Opoueblqg7TS5hUL5tVME= -----END CERTIFICATE-----Generated at Sat Apr 26 18:28:45 2025 by rpki-client