$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: SfrngK7WCyzzf4h4pjb26DtJr2CxAtJEsCaZ+Md6hio= Subject key identifier: 14:77:7E:D3:DD:73:1F:24:55:B7:98:66:7A:34:06:11:8F:BE:27:12 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 1479A77810DF0A848232518522095D41EC025BC2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 0794 Signing time: Fri 08 Aug 2025 12:16:17 +0000 Manifest this update: Fri 08 Aug 2025 12:11:17 +0000 Manifest next update: Sat 09 Aug 2025 12:48:17 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: W4HyxRK34KYki7fyOlVeboIDkC9PW7nyi8ZWPhlYi5U=) 3: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 4: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 5: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 6: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 12:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:79:a7:78:10:df:0a:84:82:32:51:85:22:09:5d:41:ec:02:5b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Aug 8 12:11:17 2025 GMT Not After : Aug 9 12:48:17 2025 GMT Subject: CN=14777ED3DD731F2455B798667A3406118FBE2712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:a1:85:a9:7d:b0:97:21:da:ea:9c:ed:dc: f5:0e:94:ab:8b:87:89:90:4e:f7:f1:04:08:30:af: a3:b3:07:06:35:52:c9:cd:8d:60:82:12:74:42:9d: 47:5b:37:12:1a:05:04:b4:50:f2:b5:52:bb:ee:4b: d6:f6:02:f6:19:0e:78:7b:3a:65:92:42:6d:ae:cf: a9:a4:e5:77:21:d0:86:5c:07:79:db:0d:cc:6b:8b: f3:50:f4:95:d6:e1:d0:45:e7:9d:46:e5:ec:cb:17: 1f:75:1c:83:6d:73:2c:3f:f6:c9:49:c2:c1:cc:33: 6e:06:7d:d8:d6:26:d4:2f:36:71:0c:72:04:21:90: 7b:88:b0:eb:5d:38:c0:97:96:c5:bc:6c:da:b7:df: 02:79:4d:63:f1:d8:39:78:36:81:70:52:fa:a2:40: 55:ee:38:e8:8c:01:e3:ee:ec:93:34:35:ff:5a:e4: 45:47:7a:d9:71:70:9f:6d:9e:00:5f:e0:e2:7b:79: fa:79:dd:ad:0b:99:08:1e:1a:5b:47:c3:78:fb:98: 0b:ee:b7:8a:cf:97:cb:6c:cf:33:c7:25:79:1c:c0: 27:ec:44:20:e9:c2:f4:2d:2e:93:58:55:7b:8c:01: c2:03:99:9a:c8:61:da:10:78:db:64:87:53:99:29: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:7E:D3:DD:73:1F:24:55:B7:98:66:7A:34:06:11:8F:BE:27:12 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a8:44:5e:a7:8b:3b:66:78:5e:8f:48:0a:42:1a:f2:79:3c: 55:e1:95:bb:b1:cc:1a:2a:25:74:db:d9:af:c8:48:b6:fa:0c: f2:a3:7b:a3:c8:e6:ae:72:50:78:5f:f6:84:27:2d:4c:ae:3c: 12:06:be:97:cf:a2:18:3b:64:e6:c6:db:9d:e9:dd:1d:9f:a7: 5d:9d:25:96:94:8f:5b:ce:64:0e:0a:ce:63:3d:12:51:f0:4e: bb:9d:b2:33:e6:32:21:16:95:3b:98:bd:9f:00:56:bc:76:ed: 79:ba:b7:46:42:38:03:16:7a:14:e4:28:80:91:47:66:50:b1: 81:1b:e7:77:40:b9:b5:ac:d3:a5:70:36:c1:ce:31:90:1b:62: 11:ed:a0:cd:1c:c1:98:24:60:5f:1a:83:aa:c7:2a:80:dc:13: 99:a1:34:9c:b3:68:bd:bc:46:e5:cb:ab:9c:e4:02:7b:68:1d: 04:09:3f:2a:37:2e:d8:ba:12:8a:2f:4f:41:a7:a8:c3:e7:6e: 3c:65:35:c2:2a:89:00:2c:91:ec:b9:cf:46:a9:c5:0f:cc:4a: 65:e0:d4:ae:59:95:24:32:e3:4a:7f:ab:c2:00:98:4d:6a:1e: d5:77:6d:f5:78:e0:cf:75:df:67:6a:63:a2:9d:9f:a9:79:f4: 8f:92:90:9a -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUFHmneBDfCoSCMlGFIgldQewCW8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwODA4MTIxMTE3WhcNMjUwODA5MTI0ODE3 WjAzMTEwLwYDVQQDEygxNDc3N0VEM0RENzMxRjI0NTVCNzk4NjY3QTM0MDYxMThG QkUyNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZWhhal9sJch 2uqc7dz1DpSri4eJkE738QQIMK+jswcGNVLJzY1gghJ0Qp1HWzcSGgUEtFDytVK7 7kvW9gL2GQ54ezplkkJtrs+ppOV3IdCGXAd52w3Ma4vzUPSV1uHQReedRuXsyxcf dRyDbXMsP/bJScLBzDNuBn3Y1ibULzZxDHIEIZB7iLDrXTjAl5bFvGzat98CeU1j 8dg5eDaBcFL6okBV7jjojAHj7uyTNDX/WuRFR3rZcXCfbZ4AX+Die3n6ed2tC5kI HhpbR8N4+5gL7reKz5fLbM8zxyV5HMAn7EQg6cL0LS6TWFV7jAHCA5mayGHaEHjb ZIdTmSmXTQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFBR3ftPdcx8kVbeYZno0BhGP vicSMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFeoRF6niztmeF6PSApCGvJ5 PFXhlbuxzBoqJXTb2a/ISLb6DPKje6PI5q5yUHhf9oQnLUyuPBIGvpfPohg7ZObG 253p3R2fp12dJZaUj1vOZA4KzmM9ElHwTrudsjPmMiEWlTuYvZ8AVrx27Xm6t0ZC OAMWehTkKICRR2ZQsYEb53dAubWs06VwNsHOMZAbYhHtoM0cwZgkYF8ag6rHKoDc E5mhNJyzaL28RuXLq5zkAntoHQQJPyo3Lti6EoovT0GnqMPnbjxlNcIqiQAskey5 z0apxQ/MSmXg1K5ZlSQy40p/q8IAmE1qHtV3bfV44M9132dqY6Kdn6l59I+SkJo= -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:03 2025 by rpki-client