$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: RvWKyDWQrHF9lek2Msg9j3OABEH/1Hg9gX3P2B+ea2U= Subject key identifier: DD:5C:DE:45:EE:3A:44:00:6D:1D:09:2E:52:01:39:8E:C9:9C:81:09 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 4D0901D077AB14E6728C8BDC309389FE3569196D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 080E Signing time: Wed 05 Nov 2025 05:18:34 +0000 Manifest this update: Wed 05 Nov 2025 05:13:34 +0000 Manifest next update: Thu 06 Nov 2025 08:31:34 +0000 Files and hashes: 1: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: eQAjJhedrZ3BILNPQU837gHYcwO6etv6IT2APH3TGBA=) 2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 4: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 5: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 6: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:09:01:d0:77:ab:14:e6:72:8c:8b:dc:30:93:89:fe:35:69:19:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Nov 5 05:13:34 2025 GMT Not After : Nov 6 08:31:34 2025 GMT Subject: CN=DD5CDE45EE3A44006D1D092E5201398EC99C8109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:20:aa:bb:13:31:1a:60:f5:fd:5d:71:49: aa:51:4b:4a:db:63:74:50:53:05:d7:6a:cd:4b:ae: 97:26:6b:86:a3:39:16:53:05:78:97:88:4e:64:74: 84:82:76:e7:bf:7b:c5:14:6b:a9:fc:89:ec:b1:55: 8f:34:da:b9:8c:46:9f:39:86:c5:4b:b1:28:25:01: 70:7b:ab:69:e9:79:26:7f:b7:63:53:d1:f8:4b:29: 9e:ae:55:44:3c:6c:d3:0f:39:fc:b2:8b:58:96:d3: 3a:27:fb:4f:01:4d:2c:a4:53:99:3a:3f:cb:d4:fc: ce:6a:39:d0:18:a9:2b:82:d6:bf:1e:40:78:2a:b4: e7:44:a6:59:20:41:18:f1:41:d2:7e:b0:74:2b:a4: de:ff:9a:1c:e4:0e:44:10:c0:40:5c:9a:57:b8:46: 8c:6b:77:1e:27:a2:09:27:8c:87:e1:6e:87:d4:96: 35:c6:76:5f:69:13:d0:b7:54:87:88:3b:f3:4b:55: e2:0b:08:93:73:88:cf:87:15:94:2e:8c:e8:78:af: e4:1f:5b:a6:46:e1:ef:b3:68:6c:2a:8b:e1:f7:c7: ff:ca:ce:9b:74:29:bf:91:8a:a9:31:9d:39:49:5e: c8:d7:46:f0:4c:1f:ca:81:d3:c1:2e:8a:8b:cc:95: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5C:DE:45:EE:3A:44:00:6D:1D:09:2E:52:01:39:8E:C9:9C:81:09 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f6:a6:8b:a4:6a:77:ae:f2:b1:63:d0:ab:ff:9b:17:c5:87: ea:0f:6f:86:50:cd:49:a3:a3:05:f2:ef:f0:5a:f9:75:45:4c: 7b:bd:c6:89:b6:7f:fa:af:94:31:85:07:c2:59:ae:cd:29:d4: 8a:7d:76:23:1c:58:1e:64:32:10:81:76:35:fd:cd:63:c2:28: 9b:3c:9e:4b:3b:5d:09:cb:e7:6f:75:9a:27:6d:8b:20:9c:a5: 66:cc:16:5d:2a:62:d2:4d:44:c9:b5:ea:3b:64:0c:12:c1:41: cb:1f:68:f2:5e:24:61:6d:bc:35:33:6b:a0:0d:91:cd:90:8b: 65:cc:cb:b7:8e:60:92:cb:64:8f:0d:73:85:a8:dd:df:8b:03: ec:8f:3f:fb:32:77:d9:4d:3c:49:e0:a6:8d:35:7c:1f:9a:c9: b6:6d:20:63:07:95:1b:e2:74:35:89:57:32:a1:a6:da:fe:1e: cd:fa:b8:11:08:20:1e:34:63:d0:04:12:82:c0:d9:8a:5a:12: 30:04:0f:75:65:f4:cc:a8:aa:f8:f5:80:c2:fb:81:bf:74:7a: a0:cd:e9:22:d9:9c:ea:17:1d:00:1f:34:a2:29:23:33:0f:fc: 06:4d:46:b4:0a:93:4b:6e:34:83:0d:ee:d7:96:15:3b:3a:dc: 4a:ba:e8:6e -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUTQkB0HerFOZyjIvcMJOJ/jVpGW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMTA1MDUxMzM0WhcNMjUxMTA2MDgzMTM0 WjAzMTEwLwYDVQQDEyhERDVDREU0NUVFM0E0NDAwNkQxRDA5MkU1MjAxMzk4RUM5 OUM4MTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KEgqrsTMRpg 9f1dcUmqUUtK22N0UFMF12rNS66XJmuGozkWUwV4l4hOZHSEgnbnv3vFFGup/Ins sVWPNNq5jEafOYbFS7EoJQFwe6tp6Xkmf7djU9H4SymerlVEPGzTDzn8sotYltM6 J/tPAU0spFOZOj/L1PzOajnQGKkrgta/HkB4KrTnRKZZIEEY8UHSfrB0K6Te/5oc 5A5EEMBAXJpXuEaMa3ceJ6IJJ4yH4W6H1JY1xnZfaRPQt1SHiDvzS1XiCwiTc4jP hxWULozoeK/kH1umRuHvs2hsKovh98f/ys6bdCm/kYqpMZ05SV7I10bwTB/KgdPB LoqLzJU2hwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFN1c3kXuOkQAbR0JLlIBOY7J nIEJMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMP2poukaneu8rFj0Kv/mxfF h+oPb4ZQzUmjowXy7/Ba+XVFTHu9xom2f/qvlDGFB8JZrs0p1Ip9diMcWB5kMhCB djX9zWPCKJs8nks7XQnL5291midtiyCcpWbMFl0qYtJNRMm16jtkDBLBQcsfaPJe JGFtvDUza6ANkc2Qi2XMy7eOYJLLZI8Nc4Wo3d+LA+yPP/syd9lNPEngpo01fB+a ybZtIGMHlRvidDWJVzKhptr+Hs36uBEIIB40Y9AEEoLA2YpaEjAED3Vl9Myoqvj1 gML7gb90eqDN6SLZnOoXHQAfNKIpIzMP/AZNRrQKk0tuNIMN7teWFTs63Eq66G4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:31 2025 by rpki-client