$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: SHre/stpQuk0BwebMj5aE5LqyO+c1P3bym18TKDKxG4= Subject key identifier: 00:A7:BB:E0:5C:53:D1:8E:F6:76:EF:6A:CA:B8:52:0B:CA:41:52:DA Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 5CC127C5F7CBE8369D984C90213BE762283CA0B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 080D Signing time: Tue 04 Nov 2025 12:03:34 +0000 Manifest this update: Tue 04 Nov 2025 11:58:34 +0000 Manifest next update: Wed 05 Nov 2025 13:16:34 +0000 Files and hashes: 1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 3: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: gthYtR3CtJCRCYtqx8lYuL2f2zEWXRfKUsEsEQC7ybE=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 5: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 13:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c1:27:c5:f7:cb:e8:36:9d:98:4c:90:21:3b:e7:62:28:3c:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Nov 4 11:58:34 2025 GMT Not After : Nov 5 13:16:34 2025 GMT Subject: CN=00A7BBE05C53D18EF676EF6ACAB8520BCA4152DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:af:33:c4:dc:ad:02:3b:5a:45:b0:1e:97: 7b:4b:7d:71:9f:46:86:4d:98:c8:2c:11:c4:79:fe: b1:ff:c8:8e:06:c6:d0:26:21:b1:58:4b:ce:91:4c: 4a:65:4d:87:bc:ff:b6:5e:3b:fa:b5:70:72:1c:16: f6:7a:3e:9e:43:2b:8c:8c:04:eb:43:a7:68:b6:55: dc:45:c4:06:9d:17:11:b0:60:07:70:76:40:77:ce: 37:b3:b7:ec:c9:14:73:db:53:ef:84:db:b3:0f:49: aa:bf:b9:a2:78:13:dc:96:b0:21:22:3e:f7:06:ef: ae:14:63:ba:71:e8:94:be:bb:af:d1:a9:36:d4:9a: 5b:b4:2f:5d:fa:9c:44:d3:c7:00:bd:ec:ec:62:89: 55:7e:a9:b2:46:62:fb:8d:9a:fe:e3:72:0b:33:cd: 81:2e:27:20:de:28:87:65:c6:b3:f2:99:85:01:b7: 0f:70:76:39:75:d0:fa:07:46:75:6e:fe:d7:d1:12: 02:91:62:af:50:30:77:c2:49:ea:76:63:e5:b0:53: 96:a7:1c:d2:fb:da:4c:c1:5a:29:42:d8:b7:ea:b2: 5e:19:26:7f:95:03:c2:3d:17:3a:49:ad:2a:6b:f0: fc:27:e3:6a:22:0d:ca:93:72:c3:0a:b9:22:0f:4a: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A7:BB:E0:5C:53:D1:8E:F6:76:EF:6A:CA:B8:52:0B:CA:41:52:DA X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:bb:a7:9e:34:18:fb:d8:b0:db:bd:21:2d:7d:c1:0a:58:e4: c3:0a:f1:40:b0:71:e2:80:3c:e5:d3:8c:95:ed:12:56:6c:71: e0:96:13:68:c1:59:36:34:93:ee:6c:07:40:e5:8b:99:a8:a6: 2b:a6:39:e0:3b:4a:3f:e2:85:c0:73:7a:df:1d:86:24:00:28: 31:bb:0d:97:06:06:45:c1:44:87:35:ae:fc:e7:1b:ab:16:6c: 5e:51:5b:f1:51:98:7c:90:6f:6d:c6:98:71:41:17:6e:b8:c9: 22:41:07:f3:45:e9:56:ea:a5:0b:ae:33:a0:62:7b:e0:30:ff: 52:aa:97:e3:41:87:e8:ec:14:0c:c7:e7:4c:6e:a4:ca:c4:f6: 1d:2d:c8:85:ee:0c:ed:d0:fd:24:f3:17:47:88:9e:09:93:9d: 34:55:2d:87:05:ea:0c:22:9b:d8:3f:8a:b7:8c:d5:77:51:a1: 0c:90:92:ee:51:71:a1:7f:f5:8a:7e:5d:7a:e0:f0:d8:23:8f: f9:0b:23:85:d6:1e:cb:9c:fe:d0:e5:f5:d0:ca:8c:4f:e1:9f: c6:c6:9d:46:97:4b:c5:bf:e5:51:a7:73:f1:da:14:d0:3a:dd: 31:26:8b:71:02:1e:96:40:1b:87:9b:f5:8d:c7:40:bd:fc:29: 44:f8:9b:84 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUXMEnxffL6DadmEyQITvnYig8oLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMTA0MTE1ODM0WhcNMjUxMTA1MTMxNjM0 WjAzMTEwLwYDVQQDEygwMEE3QkJFMDVDNTNEMThFRjY3NkVGNkFDQUI4NTIwQkNB NDE1MkRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA796vM8TcrQI7 WkWwHpd7S31xn0aGTZjILBHEef6x/8iOBsbQJiGxWEvOkUxKZU2HvP+2Xjv6tXBy HBb2ej6eQyuMjATrQ6dotlXcRcQGnRcRsGAHcHZAd843s7fsyRRz21PvhNuzD0mq v7mieBPclrAhIj73Bu+uFGO6ceiUvruv0ak21JpbtC9d+pxE08cAvezsYolVfqmy RmL7jZr+43ILM82BLicg3iiHZcaz8pmFAbcPcHY5ddD6B0Z1bv7X0RICkWKvUDB3 wknqdmPlsFOWpxzS+9pMwVopQti36rJeGSZ/lQPCPRc6Sa0qa/D8J+NqIg3Kk3LD CrkiD0plZwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFACnu+BcU9GO9nbvasq4UgvK QVLaMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMG7p540GPvYsNu9IS19wQpY 5MMK8UCwceKAPOXTjJXtElZsceCWE2jBWTY0k+5sB0Dli5mopiumOeA7Sj/ihcBz et8dhiQAKDG7DZcGBkXBRIc1rvznG6sWbF5RW/FRmHyQb23GmHFBF264ySJBB/NF 6VbqpQuuM6Bie+Aw/1Kql+NBh+jsFAzH50xupMrE9h0tyIXuDO3Q/STzF0eIngmT nTRVLYcF6gwim9g/ireM1XdRoQyQku5RcaF/9Yp+XXrg8Ngjj/kLI4XWHsuc/tDl 9dDKjE/hn8bGnUaXS8W/5VGnc/HaFNA63TEmi3ECHpZAG4eb9Y3HQL38KUT4m4Q= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:56 2025 by rpki-client