
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier: UYI0ScnAFqqx2ckscs7PuIim9gNXfTN/ZuzRjZZaUaw=
Subject key identifier: 87:93:0E:FC:17:D9:C5:63:0B:2C:60:C1:09:9F:1F:5C:F8:84:D5:12
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 24AEED9C6EA5A911A8255C5DC2D18C23F0F6520D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number: 0813
Signing time: Tue 04 Nov 2025 18:38:34 +0000
Manifest this update: Tue 04 Nov 2025 18:33:34 +0000
Manifest next update: Wed 05 Nov 2025 18:44:34 +0000
Files and hashes: 1: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
2: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
3: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
4: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: 9xkjymgJszZ4RyaAjJgC/JxNI/w6MVBcUmI/XTHbIXE=)
5: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
6: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 18:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ae:ed:9c:6e:a5:a9:11:a8:25:5c:5d:c2:d1:8c:23:f0:f6:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Nov 4 18:33:34 2025 GMT
Not After : Nov 5 18:44:34 2025 GMT
Subject: CN=87930EFC17D9C5630B2C60C1099F1F5CF884D512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:0a:b1:54:41:55:07:64:25:10:46:26:80:
f0:f1:4a:e3:08:79:c3:fa:12:b1:bd:9e:af:a9:4b:
70:41:36:e0:8e:ae:b1:73:c8:0b:26:68:c8:08:80:
b9:68:76:6a:a0:c5:86:4d:2b:db:d6:79:22:42:22:
c1:16:60:1f:ea:c7:57:7a:b5:30:65:7d:c1:49:96:
0b:19:60:0b:7a:5d:74:dc:19:0b:ea:cf:11:93:2f:
18:ba:ae:4d:62:45:f4:e0:bc:fd:c3:c8:f1:42:83:
4e:98:f4:cb:5b:30:f6:a5:35:39:72:e2:61:f3:3b:
75:6e:29:70:81:e2:ae:52:99:2e:e5:37:80:d9:f0:
29:79:4a:55:26:3b:4c:07:14:82:58:34:f8:4c:73:
70:9c:af:68:c6:73:ef:d7:0a:78:f9:4a:a3:da:9e:
a2:42:c6:e2:5f:21:c0:5c:18:d2:4a:e0:86:19:22:
c2:68:8b:1a:ad:d1:92:95:2c:d3:38:1d:28:02:f9:
9b:ec:f2:f6:f8:4d:b7:af:2c:d2:7a:a7:b7:f0:3b:
34:43:ec:b1:89:d7:ec:7f:c3:ca:ef:c3:1c:78:3e:
b3:13:e0:ae:da:a1:59:47:1d:20:59:43:06:12:ea:
72:0b:2e:47:d7:5c:df:74:cd:3a:72:f3:7d:88:c3:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:0E:FC:17:D9:C5:63:0B:2C:60:C1:09:9F:1F:5C:F8:84:D5:12
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:63:74:75:c3:d3:f7:11:51:1e:f4:9c:ee:ee:ca:33:1e:9c:
e9:27:a2:38:b5:9d:39:84:df:ca:94:70:4c:69:64:37:45:81:
d8:6d:f8:ff:1d:c7:8d:f6:c7:3e:f7:ff:ea:29:7a:f3:32:e1:
79:1a:4b:88:3d:ee:bc:c2:7c:04:fb:28:d3:0c:96:ff:58:34:
bd:25:2c:bf:c7:d5:58:1a:be:74:0b:fa:3d:6d:09:a2:aa:18:
e4:e8:0d:6f:e6:e2:36:d9:5c:18:94:cc:79:ce:6d:cb:57:9a:
5a:9f:f7:cf:8a:fa:17:eb:04:a8:4a:f8:64:cd:bd:d1:2f:75:
7b:61:50:82:1f:0a:0b:b9:82:fe:3e:6c:bf:40:7f:c2:74:68:
e2:bd:5b:98:6d:d7:88:a5:3f:00:fc:2f:a7:59:e1:65:12:e7:
c8:df:1c:ad:1f:e5:d6:6b:a6:ef:c0:d7:ee:ce:ac:12:4a:92:
f4:dd:88:c5:e7:bf:3b:2b:ed:45:8d:05:cf:21:05:6f:9d:d1:
00:01:d9:5c:a0:41:2a:79:75:8b:2a:53:aa:ab:ef:c2:6f:8d:
8a:43:0e:b1:ad:c0:4f:15:3f:70:73:58:87:6a:b2:86:c2:2e:
84:88:3e:a3:f7:e7:fc:71:54:09:9a:ca:28:8a:e8:55:0a:bb:
f6:89:cd:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:18:44 2025 by rpki-client