$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: kuVG0wCZGYn5g/sTnc+B8ueDlLzwOsZMqUl0BQzys7k= Subject key identifier: 1D:08:A6:08:A5:4B:EE:02:D4:B9:55:A2:DE:A3:BA:11:27:6C:73:BF Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 3EEC05401C42ABE10FBC4AAD2544EA6796CCBC19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 0837 Signing time: Wed 23 Jul 2025 19:13:27 +0000 Manifest this update: Wed 23 Jul 2025 19:08:27 +0000 Manifest next update: Thu 24 Jul 2025 21:53:27 +0000 Files and hashes: 1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=) 2: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: lVeD0OBryZIFs0Dh4RJF4WX10ZAtCz7OAri6R4+uMEg=) 3: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 0cNTecmkjnUfzOo0lDUBgluK59dvsGew1EUUhyFgyIw=) 4: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: +EAoko0DiDaKU0I0b//D7J9OQ9S4efjeIp5xpfTIbbI=) 5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ec:05:40:1c:42:ab:e1:0f:bc:4a:ad:25:44:ea:67:96:cc:bc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 23 19:08:27 2025 GMT Not After : Jul 24 21:53:27 2025 GMT Subject: CN=1D08A608A54BEE02D4B955A2DEA3BA11276C73BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:32:e1:3e:f7:a4:fd:8b:68:bc:c2:7c:c6: 17:1a:92:e6:5b:35:7f:2e:06:fe:bf:47:f7:69:22: 16:ea:fe:9e:4b:46:b8:fc:21:f2:80:69:a3:3b:37: 8e:b6:20:69:59:24:84:ad:77:c5:89:fe:0a:62:49: 5f:c9:9b:21:95:89:69:31:4a:22:5d:11:c7:db:33: cc:2a:73:57:b0:2b:84:df:bb:92:34:1b:8c:a8:4b: fd:1f:c0:6a:7b:d3:1c:8d:d2:68:71:01:d9:9d:02: 97:5b:b7:f0:f3:36:5e:f8:70:2b:9e:7f:2d:9f:db: c8:af:77:9e:43:14:71:b7:2e:f5:7e:85:8e:f3:71: f3:cc:58:92:eb:74:2e:68:d6:02:64:83:4e:a2:0b: 77:6e:39:1a:75:a8:01:8a:0f:81:26:e7:4d:f7:f3: fb:3a:ac:6d:3a:11:bb:20:57:e4:e1:24:b6:b3:9c: 60:85:3d:fc:c0:81:12:e9:aa:a0:6c:b6:f8:8e:c4: 48:de:01:c7:aa:fb:56:59:2f:10:df:b7:b8:60:5f: 2d:f0:cf:62:27:e0:b0:09:b5:34:b8:50:cf:bd:c1: a5:e7:ea:48:7b:b2:da:67:0e:c7:b6:8b:7f:66:0c: 49:ac:68:c2:ae:e5:68:ee:6a:15:de:cd:50:67:d7: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:A6:08:A5:4B:EE:02:D4:B9:55:A2:DE:A3:BA:11:27:6C:73:BF X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c3:79:1a:23:a2:1b:20:8b:eb:3d:73:2b:96:c1:84:1b:cb: 03:b0:86:7b:40:fc:6d:b5:51:89:cc:bd:d3:26:d9:f1:7a:13: 02:77:b9:4c:75:58:27:4d:d8:33:df:45:90:2f:56:b5:2a:9c: b4:84:b4:04:f9:b4:13:85:18:38:43:db:f8:80:4f:a6:9d:66: 90:f7:89:13:6e:09:30:d0:b8:af:97:90:34:e7:68:10:6a:59: a2:a3:15:44:66:da:79:11:40:4b:64:2f:7f:73:a2:43:bc:26: 1e:36:b9:3a:b9:2f:d9:37:3f:5a:d0:31:0c:11:e6:9b:56:ed: 71:33:62:9f:ea:34:1b:77:c2:b2:9d:4f:11:cd:06:ea:d6:e4: ed:f0:37:5c:7c:1c:f1:78:ca:69:8e:f8:98:f2:08:35:fa:c8: 2d:a9:8c:6f:10:69:eb:d2:d6:31:f4:df:c8:c5:55:49:9b:9c: f2:3c:92:3b:99:65:8f:88:df:ff:4c:e2:83:b4:1a:5b:10:16: 00:7c:d3:c5:69:1d:23:af:00:1b:a8:a3:b6:af:bb:c5:f0:63: b3:a3:8d:69:b9:fb:a9:58:dc:14:c9:e9:68:e5:dc:43:92:a1: 63:41:5e:1f:a2:14:0f:7c:7c:f2:da:64:0a:05:0a:a2:ff:6f: 8c:2f:f8:e2 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUPuwFQBxCq+EPvEqtJUTqZ5bMvBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwNzIzMTkwODI3WhcNMjUwNzI0MjE1MzI3 WjAzMTEwLwYDVQQDEygxRDA4QTYwOEE1NEJFRTAyRDRCOTU1QTJERUEzQkExMTI3 NkM3M0JGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw0y4T73pP2L aLzCfMYXGpLmWzV/Lgb+v0f3aSIW6v6eS0a4/CHygGmjOzeOtiBpWSSErXfFif4K YklfyZshlYlpMUoiXRHH2zPMKnNXsCuE37uSNBuMqEv9H8Bqe9McjdJocQHZnQKX W7fw8zZe+HArnn8tn9vIr3eeQxRxty71foWO83HzzFiS63QuaNYCZINOogt3bjka dagBig+BJudN9/P7OqxtOhG7IFfk4SS2s5xghT38wIES6aqgbLb4jsRI3gHHqvtW WS8Q37e4YF8t8M9iJ+CwCbU0uFDPvcGl5+pIe7LaZw7Htot/ZgxJrGjCruVo7moV 3s1QZ9cm5wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFB0IpgilS+4C1LlVot6juhEn bHO/MB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGnDeRojohsgi+s9cyuWwYQb ywOwhntA/G21UYnMvdMm2fF6EwJ3uUx1WCdN2DPfRZAvVrUqnLSEtAT5tBOFGDhD 2/iAT6adZpD3iRNuCTDQuK+XkDTnaBBqWaKjFURm2nkRQEtkL39zokO8Jh42uTq5 L9k3P1rQMQwR5ptW7XEzYp/qNBt3wrKdTxHNBurW5O3wN1x8HPF4ymmO+JjyCDX6 yC2pjG8QaevS1jH038jFVUmbnPI8kjuZZY+I3/9M4oO0GlsQFgB808VpHSOvABuo o7avu8XwY7OjjWm5+6lY3BTJ6Wjl3EOSoWNBXh+iFA98fPLaZAoFCqL/b4wv+OI= -----END CERTIFICATE-----Generated at Wed Jul 23 23:45:46 2025 by rpki-client