$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json) Hash identifier: kdLw+bEAlmPDUjridnz0MGAkPCXfj1+kCnriaSaRvPY= Subject key identifier: 99:6A:81:EA:FD:6D:F0:A4:1E:EF:A9:55:89:07:2E:6B:A0:6C:4A:D4 Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 61AD12D71C90494EBE0617E3D65494F96FCFAA87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft Manifest number: 070A Signing time: Sat 26 Apr 2025 12:43:59 +0000 Manifest this update: Sat 26 Apr 2025 12:38:59 +0000 Manifest next update: Sun 27 Apr 2025 15:41:59 +0000 Files and hashes: 1: 32332e3134312e33322e302f32342d3332203d3e2030.roa (hash: DRLCfqd2Q6EBfCrS8pBe3mGPKdnuGyqugTYBtZYLZug=) 2: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: pF8XKsjjle9Uhi663T7qfu1VS7LZuUgZt6wttadWjzI=) 3: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=) 4: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: 21dOxHtL2FriZes2OJNToxjdVd6pUTwfA2UcE6pYmdc=) 5: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=) 6: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: sbyK0p+HCjIk5y9gh3iBzEeOfgAjk+IJvosCQYdFhIg=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ad:12:d7:1c:90:49:4e:be:06:17:e3:d6:54:94:f9:6f:cf:aa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Apr 26 12:38:59 2025 GMT Not After : Apr 27 15:41:59 2025 GMT Subject: CN=996A81EAFD6DF0A41EEFA95589072E6BA06C4AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:49:f9:68:54:0a:f1:0e:16:c7:86:a0:5c: eb:1a:73:35:b6:58:e8:22:b0:68:b3:c9:be:d7:95: 4f:88:dc:ca:7b:fa:81:04:5b:d6:3a:91:ed:ec:3a: f0:a6:c6:28:09:db:7a:f3:bc:5c:3b:fd:49:98:1f: 0b:4c:bd:87:8c:ba:31:cb:4d:9a:32:e2:18:8e:6f: 71:a1:27:da:47:18:5f:09:57:e9:50:c1:0b:d9:a3: 1a:30:f7:9a:20:e9:0d:22:d4:3d:28:7a:49:ea:4e: 33:de:42:3b:c0:47:5c:92:23:de:63:e9:16:55:1b: 9f:d7:a4:f1:fa:f6:25:b6:b2:d3:b6:1c:a2:b6:de: c1:bd:f6:36:da:ca:48:ae:74:bf:13:90:d3:97:0f: b7:9f:cb:4a:f9:6f:25:77:96:57:b3:bd:d4:d0:b6: 8d:0c:b8:55:01:29:b7:76:b5:5d:43:04:8c:0a:98: 89:0e:c6:aa:9b:6d:aa:12:0f:46:77:db:93:1d:45: a2:e0:a4:63:1b:7b:a4:24:6e:69:48:c4:ae:cd:42: 3b:03:23:68:da:3c:27:41:7e:67:62:2d:1d:05:1e: 4f:7c:65:c4:4e:5c:6a:fe:b2:c8:ff:c9:c4:b8:2a: 9a:98:04:7e:fc:a1:00:00:45:d0:aa:37:44:05:db: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:81:EA:FD:6D:F0:A4:1E:EF:A9:55:89:07:2E:6B:A0:6C:4A:D4 X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:57:9b:02:16:c4:59:6a:c8:37:17:76:f3:44:7d:14:af:07: 34:91:0d:e9:7e:bd:d6:8f:ad:1d:a2:28:93:40:3a:c8:c5:46: cf:6f:f5:04:46:d6:c3:51:df:bd:e0:0b:51:a2:c6:c4:3d:9c: e7:a9:5e:c1:a2:e8:e0:8e:f0:22:26:eb:f0:7a:ea:ce:f0:dc: 01:f5:dc:b4:43:b6:04:9a:77:78:8b:b0:92:08:71:fa:c3:73: 89:dc:c7:44:ff:a4:28:c3:ac:81:f3:f9:9f:d3:73:96:db:5b: df:f7:8e:56:34:bf:e5:9f:d7:f5:37:3a:ae:74:21:d1:41:3e: 1f:43:c3:11:21:34:dc:e1:c6:dd:79:81:dc:da:e0:a0:02:1d: a7:c3:3b:88:cc:d6:52:fe:2b:83:3b:a3:bb:b3:3f:a2:1d:51: 67:35:b6:58:3f:92:59:c0:43:c1:37:db:bb:d2:7d:b9:ea:cc: 0f:82:77:f9:c3:e3:f1:95:90:f9:f3:b9:3b:7a:84:82:0e:8c: b4:d5:92:28:40:32:78:d2:15:19:b2:1b:27:6e:20:1a:46:c0: 47:9b:db:8a:cd:0c:c4:eb:bb:5a:8a:30:d0:2d:4d:70:1a:4b: 38:80:ac:ce:40:01:d6:75:6b:4e:b5:25:7a:39:3a:91:ed:f9: c7:0f:6a:77 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUYa0S1xyQSU6+Bhfj1lSU+W/PqocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjUwNDI2MTIzODU5WhcNMjUwNDI3MTU0MTU5 WjAzMTEwLwYDVQQDEyg5OTZBODFFQUZENkRGMEE0MUVFRkE5NTU4OTA3MkU2QkEw NkM0QUQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14hJ+WhUCvEO FseGoFzrGnM1tljoIrBos8m+15VPiNzKe/qBBFvWOpHt7DrwpsYoCdt687xcO/1J mB8LTL2HjLoxy02aMuIYjm9xoSfaRxhfCVfpUMEL2aMaMPeaIOkNItQ9KHpJ6k4z 3kI7wEdckiPeY+kWVRuf16Tx+vYltrLTthyitt7BvfY22spIrnS/E5DTlw+3n8tK +W8ld5ZXs73U0LaNDLhVASm3drVdQwSMCpiJDsaqm22qEg9Gd9uTHUWi4KRjG3uk JG5pSMSuzUI7AyNo2jwnQX5nYi0dBR5PfGXETlxq/rLI/8nEuCqamAR+/KEAAEXQ qjdEBdtnNQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFJlqger9bfCkHu+pVYkHLmug bErUMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlB REI1QTczMURERTJENUVBRTk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJZXmwIWxFlqyDcXdvNEfRSv BzSRDel+vdaPrR2iKJNAOsjFRs9v9QRG1sNR373gC1GixsQ9nOepXsGi6OCO8CIm 6/B66s7w3AH13LRDtgSad3iLsJIIcfrDc4ncx0T/pCjDrIHz+Z/Tc5bbW9/3jlY0 v+Wf1/U3Oq50IdFBPh9DwxEhNNzhxt15gdza4KACHafDO4jM1lL+K4M7o7uzP6Id UWc1tlg/klnAQ8E327vSfbnqzA+Cd/nD4/GVkPnzuTt6hIIOjLTVkihAMnjSFRmy GyduIBpGwEeb24rNDMTru1qKMNAtTXAaSziArM5AAdZ1a061JXo5OpHt+ccPanc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:53:19 2025 by rpki-client