
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json)
Hash identifier: bdnaXvPqvliTVQi2ccv5OA50HT/FBmHbWBQ4aHUw7Vc=
Subject key identifier: 7D:A6:01:CA:B8:83:62:11:D6:29:61:AB:66:9B:22:E7:99:04:39:28
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial: 667E55E48144DA1142644513E3A582D00A95AC34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
Manifest number: 0960
Signing time: Wed 17 Jun 2026 00:33:59 +0000
Manifest this update: Wed 17 Jun 2026 00:28:59 +0000
Manifest next update: Thu 18 Jun 2026 01:15:59 +0000
Files and hashes: 1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=)
2: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=)
3: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=)
4: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: e1g27xfJCAVP0tyDFOu9rddi9TssdkE0MzDBHihQRrc=)
5: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=)
6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 01:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7e:55:e4:81:44:da:11:42:64:45:13:e3:a5:82:d0:0a:95:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Validity
Not Before: Jun 17 00:28:59 2026 GMT
Not After : Jun 18 01:15:59 2026 GMT
Subject: CN=7DA601CAB8836211D62961AB669B22E799043928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:92:aa:85:c4:d2:cb:e5:54:39:2f:2e:47:
a1:40:6f:cc:77:00:12:d2:5e:c3:4a:92:6d:d9:21:
d5:ef:de:82:97:38:03:a8:15:b0:65:e0:57:34:a8:
8e:4f:2d:d5:b0:f4:a7:3b:e0:8e:50:1b:c9:5f:d9:
f3:8d:af:ed:02:97:1d:cd:12:48:f1:85:77:b8:9e:
c7:f7:d3:bc:18:d5:5b:80:e8:ba:9a:29:4f:11:52:
bd:f2:43:77:c9:03:fa:17:aa:cc:65:bb:ef:10:d6:
5b:9e:ad:ac:de:57:68:c0:fd:b6:20:f1:f1:1d:01:
9c:65:1c:76:d8:74:25:64:cd:5c:28:e0:c6:0d:6d:
b7:c3:79:2f:d5:75:17:3e:81:04:59:df:9d:91:d0:
82:f9:0c:38:23:d5:14:7e:5d:27:35:58:bb:36:ff:
e9:c4:ad:5d:a8:36:20:b8:d1:4f:23:a2:d7:e3:21:
bc:c9:60:48:23:a1:38:8e:15:d2:de:c2:dc:f1:43:
c9:10:4d:ae:05:0f:cb:8b:d8:6f:60:08:b9:0c:f7:
9b:8e:90:a9:dd:15:a2:12:49:30:3b:a1:46:fd:6c:
f6:e1:ae:cd:01:23:b0:b4:a0:49:59:c6:96:7e:ff:
81:5a:6a:58:ef:f1:95:cb:ae:a6:b5:30:41:e6:57:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A6:01:CA:B8:83:62:11:D6:29:61:AB:66:9B:22:E7:99:04:39:28
X509v3 Authority Key Identifier:
keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7c:ca:c9:5c:b6:50:3d:24:1c:48:eb:4d:17:00:d2:86:e9:
76:48:c3:28:78:c5:d0:07:18:16:3a:c5:40:0e:ea:18:fa:d4:
b0:00:b0:63:38:92:32:09:bd:33:bb:54:c6:5b:2e:2d:7e:aa:
98:d6:f2:71:cd:c2:c1:ea:d2:13:84:33:04:3f:c7:e6:2c:10:
67:21:28:6b:a2:90:03:64:12:e2:2c:70:10:88:44:48:e4:a7:
35:92:73:c9:7a:50:30:13:a9:0a:7b:a5:ec:ef:27:fe:06:dd:
19:83:cb:c3:c5:2d:86:3b:53:18:53:2a:c5:64:59:26:11:b9:
39:0f:a5:1c:57:4e:e4:78:94:42:cd:95:66:3b:f5:2f:ea:ff:
af:bc:bc:7b:dc:9b:b1:39:ef:21:e2:14:99:ca:d6:79:b3:9a:
b4:d1:1d:70:bb:7b:94:52:4d:5c:02:a9:eb:b5:12:2b:9e:74:
10:40:2b:7a:5a:89:aa:d3:81:31:88:54:8c:0a:a7:db:f5:f5:
5f:d0:ad:f3:82:72:cc:be:4e:47:58:50:d4:35:51:37:45:8e:
c0:c1:5e:03:a6:6d:99:8b:a7:0d:f3:64:fd:27:1d:71:19:2c:
b8:72:cf:20:f8:a6:ae:f8:ff:cc:13:19:4d:54:74:f4:78:4a:
79:4c:ca:42
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUZn5V5IFE2hFCZEUT46WC0AqVrDQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3
NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNjE3MDAyODU5WhcNMjYwNjE4MDExNTU5
WjAzMTEwLwYDVQQDEyg3REE2MDFDQUI4ODM2MjExRDYyOTYxQUI2NjlCMjJFNzk5
MDQzOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc6SqoXE0svl
VDkvLkehQG/MdwAS0l7DSpJt2SHV796ClzgDqBWwZeBXNKiOTy3VsPSnO+COUBvJ
X9nzja/tApcdzRJI8YV3uJ7H99O8GNVbgOi6milPEVK98kN3yQP6F6rMZbvvENZb
nq2s3ldowP22IPHxHQGcZRx22HQlZM1cKODGDW23w3kv1XUXPoEEWd+dkdCC+Qw4
I9UUfl0nNVi7Nv/pxK1dqDYguNFPI6LX4yG8yWBII6E4jhXS3sLc8UPJEE2uBQ/L
i9hvYAi5DPebjpCp3RWiEkkwO6FG/Wz24a7NASOwtKBJWcaWfv+BWmpY7/GVy66m
tTBB5leD0wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFH2mAcq4g2IR1ilhq2abIueZ
BDkoMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj
Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0
NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5
Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIN8yslctlA9JBxI600XANKG
6XZIwyh4xdAHGBY6xUAO6hj61LAAsGM4kjIJvTO7VMZbLi1+qpjW8nHNwsHq0hOE
MwQ/x+YsEGchKGuikANkEuIscBCIREjkpzWSc8l6UDATqQp7pezvJ/4G3RmDy8PF
LYY7UxhTKsVkWSYRuTkPpRxXTuR4lELNlWY79S/q/6+8vHvcm7E57yHiFJnK1nmz
mrTRHXC7e5RSTVwCqeu1EiuedBBAK3paiarTgTGIVIwKp9v19V/QrfOCcsy+TkdY
UNQ1UTdFjsDBXgOmbZmLpw3zZP0nHXEZLLhyzyD4pq74/8wTGU1UdPR4SnlMykI=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:28:52 2026 by rpki-client