$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: oYZKqosrUbH0780B8w/JWun/lvdeBwc1716diEChkR8= Subject key identifier: 7A:5F:45:27:4A:9A:CE:69:36:52:C9:95:A7:B0:EA:FA:8C:27:FB:AD Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 70EF82C635D01B7B381CC2B422B128A6550741E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 08B4 Signing time: Sun 01 Mar 2026 10:31:30 +0000 Manifest this update: Sun 01 Mar 2026 10:26:30 +0000 Manifest next update: Mon 02 Mar 2026 11:35:30 +0000 Files and hashes: 1: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: VAogDGCoav78OFYJdKydXxPKKQrccZ2U04gaEFkouRk=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 4: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 5: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 6: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 11:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ef:82:c6:35:d0:1b:7b:38:1c:c2:b4:22:b1:28:a6:55:07:41:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Mar 1 10:26:30 2026 GMT Not After : Mar 2 11:35:30 2026 GMT Subject: CN=7A5F45274A9ACE693652C995A7B0EAFA8C27FBAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:58:12:b8:64:41:b0:00:3a:e9:8d:3e:0f: 4a:7a:1a:0a:21:bf:67:2a:35:3a:49:de:61:a1:ad: f7:2c:81:16:26:5a:f2:02:60:4b:bc:a3:73:a6:5d: 4d:82:ee:59:9d:bc:d9:74:62:dd:f7:5e:4f:9e:19: 76:74:62:88:82:f7:cf:93:2c:3a:bd:23:ab:86:42: f1:6a:89:fe:ef:4a:ca:09:14:d3:a2:aa:5d:49:26: 3f:f2:bd:a8:b2:de:56:b4:f3:36:b8:99:11:ad:cf: a4:fc:26:56:27:fa:40:57:c2:e7:c0:ec:79:61:3e: 3e:57:85:85:cd:75:38:35:31:1c:30:9b:2c:34:ec: 65:47:5d:cb:b7:7f:81:fe:50:c6:7f:16:a4:56:2c: e8:a0:a5:50:c8:3d:0c:79:69:01:e4:be:e5:fa:52: 13:67:f3:f2:d6:bc:0f:70:05:98:65:50:73:05:e9: d8:7b:91:92:70:a9:ea:3e:3a:66:45:0b:75:3f:53: f8:d8:f4:de:98:26:10:7b:a0:ca:2c:a4:89:f6:06: 09:e0:46:f4:1f:a3:45:4b:a1:85:dd:4d:b8:16:d3: 4d:42:8b:1f:73:20:33:66:c8:14:16:af:0b:80:a0: 59:71:2d:8c:43:25:f2:8a:20:8a:dc:06:cb:de:dc: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:45:27:4A:9A:CE:69:36:52:C9:95:A7:B0:EA:FA:8C:27:FB:AD X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:97:5f:71:29:31:ee:3c:cc:e7:92:f7:16:a6:94:3f:9a:ca: 14:e5:db:8d:9c:45:ab:a2:b5:4f:f0:96:e3:4e:c8:e3:b5:de: 20:1e:13:79:ec:03:25:5e:ec:6c:b7:b3:3e:e1:8b:04:4a:c3: 56:ad:70:4c:23:d7:fb:d3:b2:12:57:29:c2:57:be:15:1c:96: 8f:5b:9e:6b:18:c7:ec:5b:19:d2:d9:a2:da:af:63:36:c0:0f: f2:69:2e:65:5e:82:96:33:5d:dc:20:c6:fc:59:cd:cc:cc:d4: 01:81:69:92:93:a3:73:a5:df:1b:c0:dc:04:95:91:e7:39:e9: 10:ad:87:bb:c1:45:7e:40:3e:5d:aa:99:d8:9d:db:94:d2:9a: 5d:f9:1f:b5:b9:0d:ed:32:37:90:91:9d:54:d1:fe:80:f4:f7: 05:a7:48:03:0d:35:de:bd:2d:c3:11:14:c0:c5:a8:4a:fe:4b: e5:03:54:6c:35:01:42:0d:a7:ab:85:e9:b3:98:98:f8:40:ed: da:40:bc:9a:78:77:41:26:e6:36:3c:9a:2a:4c:70:48:96:e1: 09:04:23:68:71:be:27:48:e1:65:ff:16:00:96:c7:c8:45:bf: a5:a6:1c:f2:a0:9c:1e:e8:8d:43:0e:aa:01:57:ba:9c:5f:ae: d1:0f:7e:4d -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUcO+CxjXQG3s4HMK0IrEoplUHQeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwMzAxMTAyNjMwWhcNMjYwMzAyMTEzNTMw WjAzMTEwLwYDVQQDEyg3QTVGNDUyNzRBOUFDRTY5MzY1MkM5OTVBN0IwRUFGQThD MjdGQkFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqplYErhkQbAA OumNPg9KehoKIb9nKjU6Sd5hoa33LIEWJlryAmBLvKNzpl1Ngu5ZnbzZdGLd915P nhl2dGKIgvfPkyw6vSOrhkLxaon+70rKCRTToqpdSSY/8r2ost5WtPM2uJkRrc+k /CZWJ/pAV8LnwOx5YT4+V4WFzXU4NTEcMJssNOxlR13Lt3+B/lDGfxakVizooKVQ yD0MeWkB5L7l+lITZ/Py1rwPcAWYZVBzBenYe5GScKnqPjpmRQt1P1P42PTemCYQ e6DKLKSJ9gYJ4Eb0H6NFS6GF3U24FtNNQosfcyAzZsgUFq8LgKBZcS2MQyXyiiCK 3AbL3tyaLQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFHpfRSdKms5pNlLJlaew6vqM J/utMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG+XX3EpMe48zOeS9xamlD+a yhTl242cRauitU/wluNOyOO13iAeE3nsAyVe7Gy3sz7hiwRKw1atcEwj1/vTshJX KcJXvhUclo9bnmsYx+xbGdLZotqvYzbAD/JpLmVegpYzXdwgxvxZzczM1AGBaZKT o3Ol3xvA3ASVkec56RCth7vBRX5APl2qmdid25TSml35H7W5De0yN5CRnVTR/oD0 9wWnSAMNNd69LcMRFMDFqEr+S+UDVGw1AUINp6uF6bOYmPhA7dpAvJp4d0Em5jY8 mipMcEiW4QkEI2hxvidI4WX/FgCWx8hFv6WmHPKgnB7ojUMOqgFXupxfrtEPfk0= -----END CERTIFICATE-----Generated at Mon Mar 2 03:29:58 2026 by rpki-client