$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: 2FLfeCYx8mmPQhT28xHg51/nBx8H8aZBQYA95vVdbMo= Subject key identifier: 86:9B:FB:F2:45:D2:99:B9:83:C8:2C:DB:E6:A5:2C:46:E1:3F:42:CE Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 45B8CFF9A8CED4F4095BCB6737501C2DB300DED5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 08FA Signing time: Thu 16 Apr 2026 18:06:32 +0000 Manifest this update: Thu 16 Apr 2026 18:01:32 +0000 Manifest next update: Fri 17 Apr 2026 18:13:32 +0000 Files and hashes: 1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: nw8IgNi0tSYMZdejAVeDNk6yr+kILF/6e3Yqp/C83aw=) 3: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 4: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 5: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 18:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b8:cf:f9:a8:ce:d4:f4:09:5b:cb:67:37:50:1c:2d:b3:00:de:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Apr 16 18:01:32 2026 GMT Not After : Apr 17 18:13:32 2026 GMT Subject: CN=869BFBF245D299B983C82CDBE6A52C46E13F42CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:ea:3a:96:a9:cf:7d:52:78:1d:dc:66:10: 2b:a9:91:ca:12:4d:60:4c:e7:d4:66:a2:d7:8f:f9: bc:9d:3a:d4:45:7b:73:b3:01:37:98:9f:9b:07:3b: b5:f8:42:9a:0f:98:dc:7d:37:62:72:3c:2c:45:b1: ec:ec:5e:61:cd:7f:a4:62:6e:61:06:d2:1e:a4:92: f1:7c:ae:5b:f3:39:a3:4e:e8:63:8c:19:aa:79:50: 9b:0f:fc:3e:f2:8f:05:87:8c:b5:bb:76:e2:a1:2f: 60:6a:a3:58:84:be:57:8f:7d:d0:d5:73:dd:cb:55: 9d:61:6a:80:22:b3:9f:ac:97:c8:8f:16:5a:e8:f9: ca:ad:3b:b2:3e:6f:52:8c:fa:c3:37:8c:57:14:d0: 57:10:54:11:58:ae:80:91:f4:e1:7f:a8:98:91:ea: 68:58:1d:e4:77:28:03:d3:c2:99:77:85:81:a2:0c: a3:e4:c0:05:5f:23:91:20:f6:8f:3c:e7:1a:38:97: a8:0b:16:21:2d:3c:25:75:d6:ed:bd:95:cf:73:cc: 46:f4:62:05:22:0f:4d:08:e7:25:bb:ad:fe:78:52: 2c:af:7d:fc:4a:34:b7:38:62:eb:7b:25:db:92:5f: ec:99:64:51:ca:e0:e5:4a:6f:0a:f1:8b:f8:db:ce: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9B:FB:F2:45:D2:99:B9:83:C8:2C:DB:E6:A5:2C:46:E1:3F:42:CE X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7c:31:d9:8a:90:16:7f:67:bc:17:1d:b5:a6:5b:b6:d4:19: c2:f8:90:c3:54:d3:bb:8f:16:6a:61:17:72:14:eb:d9:e1:e2: fa:05:22:ae:ce:93:ac:a2:53:31:ef:9a:b2:61:dd:07:9a:d1: cd:63:dd:45:1c:72:62:2c:1f:7b:13:a6:17:36:17:f8:44:7e: 74:9e:fd:68:68:29:18:bd:b2:21:3c:c9:a5:b6:1d:7f:c6:c2: 5b:9f:21:f4:cf:3c:47:d4:de:76:1d:ad:87:89:80:c0:1a:0c: 28:af:0a:b5:09:c8:a0:df:a7:47:68:d6:57:20:a1:03:97:50: 36:9a:10:bf:62:13:a0:18:1e:27:c5:2e:26:ef:f4:e8:7d:22: 09:17:4b:ee:ae:d2:0c:70:d6:2d:f2:e8:a5:8f:44:ca:a9:e1: d3:1b:0f:75:72:ef:9a:7c:9b:b7:e9:0e:91:d3:cf:65:a5:b0: 37:9b:82:db:93:0a:d5:88:b3:2c:e7:b0:b8:89:90:8c:d7:06: 3c:43:16:ad:85:c4:cb:ac:14:a2:53:64:08:aa:ed:f1:20:6f: 63:3a:0b:71:2e:de:cc:5e:6a:23:7e:27:e9:41:50:df:2a:44: 0d:87:e7:c9:fd:7c:09:b1:4a:2c:93:3f:3d:0c:7f:40:54:ea: 70:b5:05:5b -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIURbjP+ajO1PQJW8tnN1AcLbMA3tUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNDE2MTgwMTMyWhcNMjYwNDE3MTgxMzMy WjAzMTEwLwYDVQQDEyg4NjlCRkJGMjQ1RDI5OUI5ODNDODJDREJFNkE1MkM0NkUx M0Y0MkNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRXqOpapz31S eB3cZhArqZHKEk1gTOfUZqLXj/m8nTrURXtzswE3mJ+bBzu1+EKaD5jcfTdicjws RbHs7F5hzX+kYm5hBtIepJLxfK5b8zmjTuhjjBmqeVCbD/w+8o8Fh4y1u3bioS9g aqNYhL5Xj33Q1XPdy1WdYWqAIrOfrJfIjxZa6PnKrTuyPm9SjPrDN4xXFNBXEFQR WK6AkfThf6iYkepoWB3kdygD08KZd4WBogyj5MAFXyORIPaPPOcaOJeoCxYhLTwl ddbtvZXPc8xG9GIFIg9NCOclu63+eFIsr338SjS3OGLreyXbkl/smWRRyuDlSm8K 8Yv4285uoQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFIab+/JF0pm5g8gs2+alLEbh P0LOMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH18MdmKkBZ/Z7wXHbWmW7bU GcL4kMNU07uPFmphF3IU69nh4voFIq7Ok6yiUzHvmrJh3Qea0c1j3UUccmIsH3sT phc2F/hEfnSe/WhoKRi9siE8yaW2HX/GwlufIfTPPEfU3nYdrYeJgMAaDCivCrUJ yKDfp0do1lcgoQOXUDaaEL9iE6AYHifFLibv9Oh9IgkXS+6u0gxw1i3y6KWPRMqp 4dMbD3Vy75p8m7fpDpHTz2WlsDebgtuTCtWIsyznsLiJkIzXBjxDFq2FxMusFKJT ZAiq7fEgb2M6C3Eu3sxeaiN+J+lBUN8qRA2H58n9fAmxSiyTPz0Mf0BU6nC1BVs= -----END CERTIFICATE-----Generated at Fri Apr 17 07:28:56 2026 by rpki-client