
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier: MUrVZh/z6o2Xe16DsPU1JkMlSppDRc/5x6iB/1Mm2uI=
Subject key identifier: 99:87:49:41:3B:09:0A:0C:87:EF:8B:FB:D5:1E:0D:60:37:A8:DA:59
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 66F1BBDDB531F201B514F8114F71A1F53E1CE376
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number: 08BC
Signing time: Sun 01 Mar 2026 20:11:30 +0000
Manifest this update: Sun 01 Mar 2026 20:06:30 +0000
Manifest next update: Mon 02 Mar 2026 20:55:30 +0000
Files and hashes: 1: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
2: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
3: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
4: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: X+n+9BW5dGn0h5LCF8hG/Gv31hQkuAOBeQ2hADAvUNo=)
5: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
6: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f1:bb:dd:b5:31:f2:01:b5:14:f8:11:4f:71:a1:f5:3e:1c:e3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Mar 1 20:06:30 2026 GMT
Not After : Mar 2 20:55:30 2026 GMT
Subject: CN=998749413B090A0C87EF8BFBD51E0D6037A8DA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:98:7b:00:a3:5f:78:97:44:00:b9:0a:2c:
9e:d3:2c:4a:c3:30:d0:28:de:50:e5:e3:5b:ea:c4:
cd:93:8f:f3:56:4a:4e:8f:62:a8:8b:92:4f:56:2b:
af:3a:f6:43:5b:7b:b0:2a:e9:ba:8e:f2:c3:25:64:
15:97:dd:9c:a5:e7:53:73:f0:a5:21:d2:ad:9f:8a:
e0:c2:31:c5:8e:6a:38:1b:c2:0e:2c:0c:b9:19:e9:
94:76:b6:91:64:a3:28:87:5c:ac:31:34:cf:5d:9a:
a9:c5:63:c7:e1:bf:c2:88:b4:90:0d:47:48:79:41:
1e:50:60:75:9c:0f:3b:40:32:2e:88:91:22:ef:91:
22:d9:b8:c1:a4:8a:28:38:76:1b:af:fb:09:94:ad:
05:52:2d:1f:29:ed:4d:b8:93:cd:cd:69:9d:93:d8:
bd:72:5e:88:bc:75:37:39:4b:6a:d3:8f:2d:35:bf:
20:cc:d4:54:60:46:b1:8a:ee:cb:67:af:39:9c:40:
31:23:db:a3:f6:55:5f:c2:5e:b4:a3:1b:54:1e:29:
af:96:1d:c1:48:ec:0b:5e:43:da:c4:c7:f4:32:74:
f2:e7:cc:11:01:e2:af:24:06:10:25:69:67:55:bf:
53:d3:79:a5:e1:22:89:e3:f8:dd:f6:f9:32:d2:4a:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:87:49:41:3B:09:0A:0C:87:EF:8B:FB:D5:1E:0D:60:37:A8:DA:59
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:07:0a:f7:d6:48:8b:49:64:fa:a7:1d:33:50:43:ae:e9:
7a:4f:a4:ab:1e:33:5f:b5:66:ef:45:a2:df:3a:12:f7:51:60:
b7:b1:a0:2f:f2:fa:03:e9:4d:b7:c3:e0:fc:df:99:54:6e:2d:
39:46:93:c6:a8:cd:90:a3:a1:fb:be:ac:6a:48:16:2e:c8:1c:
8c:eb:77:ce:0f:63:db:67:e7:cd:99:5e:d0:ad:82:14:81:7c:
c2:df:fc:74:51:86:e9:62:38:64:c6:12:37:31:dc:e0:3d:37:
0c:88:5a:ba:75:6e:53:61:aa:67:3b:33:77:61:28:7a:cd:43:
3f:ef:21:67:78:77:7c:e6:12:fe:f4:7f:ed:15:28:99:c6:b7:
8a:7b:75:fd:5a:14:ec:20:b7:db:17:51:ba:0f:9e:55:d6:4c:
8f:65:92:9f:98:5a:75:9a:fd:6f:26:e5:32:33:dc:61:2c:d4:
f2:a2:57:ab:4b:fd:9e:da:ae:89:f4:fb:59:cf:5e:8f:fc:a3:
65:ae:79:dd:07:70:15:b6:0b:b3:26:b3:e7:40:ee:fa:a0:9a:
bb:bd:b8:95:84:ae:df:e2:52:ce:dc:a0:e8:83:6c:43:d4:4e:
7d:f7:0f:fe:62:ea:a9:8a:12:d9:dc:43:d5:24:2e:1f:60:3e:
3e:3e:02:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:07 2026 by rpki-client