$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: myHeT3FD77fEE+WhtDv2i4MwO+fKiPaaCcAHoeyiL0Y= Subject key identifier: 88:A1:81:AC:5A:E8:4C:7B:54:62:4F:94:94:F8:7F:00:02:92:3B:E3 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 279F9EC75F0DA2BE1C477B5CD6818C1EB6EA744C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 074B Signing time: Tue 17 Jun 2025 11:31:56 +0000 Manifest this update: Tue 17 Jun 2025 11:26:56 +0000 Manifest next update: Wed 18 Jun 2025 12:35:56 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: dqFiK1gjfPaseTgzFUskylqJhCHlYurXWUtY4Kfvuu8=) 3: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 5: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9f:9e:c7:5f:0d:a2:be:1c:47:7b:5c:d6:81:8c:1e:b6:ea:74:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jun 17 11:26:56 2025 GMT Not After : Jun 18 12:35:56 2025 GMT Subject: CN=88A181AC5AE84C7B54624F9494F87F0002923BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:00:ae:d8:f8:e4:98:b8:64:47:77:5e:aa: 4a:1f:c9:c4:a4:52:48:2d:5f:63:a4:2d:1b:c1:25: 6c:25:4b:06:41:b6:4f:77:1e:b9:67:f1:73:c3:44: 21:10:fc:d1:fd:d3:e2:57:8a:69:3e:e0:fb:b0:4a: 9b:48:25:1f:28:02:58:5d:31:4a:e9:62:a9:cb:9b: 0d:5c:68:cc:58:4e:df:86:03:0a:6c:cf:8a:5f:f7: 2f:b3:6d:9c:ca:a8:5c:ca:89:81:cd:4a:c2:8f:8f: 21:a2:cc:4e:3f:01:8f:f9:db:91:4b:5b:1f:15:0d: 39:ee:85:f7:2b:2a:95:b7:26:ef:65:fa:68:9d:9b: 3e:64:f3:24:cc:18:bb:6f:57:52:65:4e:8c:98:0f: 70:46:d8:09:40:df:55:f4:2f:9a:56:50:74:b6:eb: 0e:2b:97:95:09:1e:b7:09:72:4c:51:a5:61:b5:fa: 95:e8:08:06:36:55:05:7f:fa:16:67:3c:1f:11:f5: c6:7e:75:ec:b7:2c:05:8f:32:13:d0:91:b4:92:01: 40:d2:af:8a:ec:df:e9:5d:9e:2e:35:73:bb:aa:a8: 20:b4:fe:31:bf:1d:19:de:94:93:0c:45:f7:83:b1: c0:3f:48:45:33:3f:e8:0d:8a:94:b2:de:25:f6:bf: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A1:81:AC:5A:E8:4C:7B:54:62:4F:94:94:F8:7F:00:02:92:3B:E3 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:46:33:b9:26:61:21:a2:d3:60:56:85:b3:9e:c7:c0:d3:55: 12:b6:6c:5b:1e:25:dc:aa:e4:ab:fb:6c:28:d9:44:4c:ab:7d: a9:55:02:37:fa:23:bc:6a:c1:90:1a:b6:24:43:60:72:a8:01: 4d:a4:d2:f7:e2:9c:20:d8:a1:a9:c9:73:5e:10:1e:e4:99:fd: 08:5e:fa:27:71:74:cf:9b:0a:0e:96:2a:99:33:25:d4:10:8a: 52:13:fc:54:82:cd:15:ca:ae:30:04:5a:95:b9:71:e1:68:b9: 30:90:f2:56:ff:11:26:2e:f2:da:17:a4:ed:7e:d7:d8:de:c9: 6c:cb:98:fc:e6:d2:0a:03:54:67:2a:fb:45:11:30:21:1d:fe: a7:1b:3c:d2:79:96:7f:b1:ff:22:a5:3a:13:47:fa:5d:48:ad: 9f:61:5e:84:5c:b2:a5:8e:8a:e4:c0:b9:35:41:43:b5:da:9a: 8a:58:66:75:5b:52:52:77:4a:53:7a:ef:d9:ae:dd:47:8b:ba: e7:df:a8:6a:5d:d3:41:98:64:9b:f2:cf:43:aa:c4:71:0d:e3: 85:8e:b7:5b:5d:01:fb:d2:41:2f:8a:73:f6:34:4f:2f:f8:b5: b3:a4:a2:8c:99:2e:69:2e:b9:bc:29:35:64:fa:2a:88:a9:fd: 4a:12:a0:e6 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUJ5+ex18Nor4cR3tc1oGMHrbqdEwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNjE3MTEyNjU2WhcNMjUwNjE4MTIzNTU2 WjAzMTEwLwYDVQQDEyg4OEExODFBQzVBRTg0QzdCNTQ2MjRGOTQ5NEY4N0YwMDAy OTIzQkUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytEArtj45Ji4 ZEd3XqpKH8nEpFJILV9jpC0bwSVsJUsGQbZPdx65Z/Fzw0QhEPzR/dPiV4ppPuD7 sEqbSCUfKAJYXTFK6WKpy5sNXGjMWE7fhgMKbM+KX/cvs22cyqhcyomBzUrCj48h osxOPwGP+duRS1sfFQ057oX3KyqVtybvZfponZs+ZPMkzBi7b1dSZU6MmA9wRtgJ QN9V9C+aVlB0tusOK5eVCR63CXJMUaVhtfqV6AgGNlUFf/oWZzwfEfXGfnXstywF jzIT0JG0kgFA0q+K7N/pXZ4uNXO7qqggtP4xvx0Z3pSTDEX3g7HAP0hFMz/oDYqU st4l9r+eKwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFIihgaxa6Ex7VGJPlJT4fwAC kjvjMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMJGM7kmYSGi02BWhbOex8DT VRK2bFseJdyq5Kv7bCjZREyrfalVAjf6I7xqwZAatiRDYHKoAU2k0vfinCDYoanJ c14QHuSZ/Qhe+idxdM+bCg6WKpkzJdQQilIT/FSCzRXKrjAEWpW5ceFouTCQ8lb/ ESYu8toXpO1+19jeyWzLmPzm0goDVGcq+0URMCEd/qcbPNJ5ln+x/yKlOhNH+l1I rZ9hXoRcsqWOiuTAuTVBQ7XamopYZnVbUlJ3SlN679mu3UeLuuffqGpd00GYZJvy z0OqxHEN44WOt1tdAfvSQS+Kc/Y0Ty/4tbOkooyZLmkuubwpNWT6Koip/UoSoOY= -----END CERTIFICATE-----Generated at Tue Jun 17 15:37:46 2025 by rpki-client