$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft File: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json) Hash identifier: Qa+WpCcyLY0RBhqu0MH00trM9Ja/bv8P874KaPYmgW8= Subject key identifier: 33:2F:7E:8A:34:A9:E0:76:7A:13:62:DD:E7:2F:0D:21:02:2C:A2:65 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 3DEB79B6DFFBAA89756DC1B9494CFCD7472A9B47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft Manifest number: 07A8 Signing time: Sat 29 Mar 2025 05:43:24 +0000 Manifest this update: Sat 29 Mar 2025 05:38:24 +0000 Manifest next update: Sun 30 Mar 2025 06:01:24 +0000 Files and hashes: 1: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: rrISbsCtEnimnofMMvgGj0FxtsaUbnOC5+KJRQbLfHk=) 2: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: +Pjx51eEXOpxm1J8vexGgphqxhR9IXG5FbXTZK5zJmQ=) 3: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: LWed9Rzs/E3FpbUuUHuGcznFEfyy/hMHuF8qh8yj/Jk=) 4: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: rpG176mq+Hz0ATWW9+e61ZLrSrpzkMO/+wQlXX8v8ZU=) 5: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: wBOqtkvpiOecj4e9IalrDt/1tgnOJOarTPyacCkkRqQ=) 6: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: 8WZiiARP34rsVV/fJ1SdzWD+kELbuKRgTXKuVh47r0Y=) 7: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: jHkaVLNAdW9lo8zt42tA5xcsgmOhm7V0BOVpGQA4ieo=) 8: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: GxhrfMYbrIorIZx7sAuAdXT2L2AlBHK6bwQj24J+2XM=) 9: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: SD8eSbNpC+j2ob1Lnp5qYAO0x7aCbcCbnqNr2jZFro0=) 10: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: 5bRZUpWmhIQUAhiN95HpRdn7fSN+Ft8oNPypKcjOs0Q=) 11: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: vfmli06bOJwMeVbD79RgvbsBesVEFOkLsQPXGyZeRhg=) 12: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: Uaez6iZritL8qNb8zashZZRXPOsrbSHSEJJRbEionds=) 13: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 0WYqo5igyKkDLhLeGNETpW87dUrlfRLrVabhhC6LhW4=) 14: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: 8QFGxo0ziOX84hkhYcQL2uBAbpvLPoPY71QwOCLSfSQ=) 15: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: MlAIwNvpU9pLqPm5GeqhwAydZcRl+n9fF0MyIYdunng=) 16: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: b29zK4U8Mcq+XxDLVK6zeqp99cVMrTm1iEY248+v7GQ=) 17: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: Zp2dLdflPopZRz2wCBvQ323kQWGGkQirp3/oJFp4gtE=) 18: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: 2mm1m6Q1iZ3+kukwyxhPE/1ZIdE+eJ3Y1a97MNv75b4=) 19: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: 57nYp6h/6E+SHSpEE52l7J3TWn+o2NI5EucTi82ES0I=) 20: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 9pniSLjFRQJ+eqL4yaOaOLJswVTB5vXeN3pUAVMb9/Q=) 21: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: 96o5E3l8VX2A9M6Mv6rN9cqwbqxcVJnLdu+NXHSrwR0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3d:eb:79:b6:df:fb:aa:89:75:6d:c1:b9:49:4c:fc:d7:47:2a:9b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Mar 29 05:38:24 2025 GMT Not After : Mar 30 06:01:24 2025 GMT Subject: CN=332F7E8A34A9E0767A1362DDE72F0D21022CA265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:46:42:bc:cb:d1:8a:79:ee:76:c1:56:bd: c7:17:92:ce:ba:53:57:14:ed:c6:5f:08:93:5f:e5: 5f:dd:50:67:1c:63:81:d0:c8:e1:77:95:32:18:d9: d2:67:1a:e3:bb:18:43:a7:6a:0c:f7:51:d9:02:22: 41:d0:63:2e:3f:72:84:7a:c4:b3:a2:3e:25:30:f6: f7:5a:e6:79:02:00:88:a4:de:3e:2d:94:8f:11:7f: 2f:b2:fb:72:fb:31:c5:3d:e1:15:60:56:d5:06:22: 54:9a:42:26:b2:9a:e9:3e:71:6c:54:60:88:82:51: b2:a6:93:47:84:ba:43:7d:57:e4:cc:b3:15:50:e3: a9:20:e1:90:3b:9d:c3:48:44:7c:6d:7c:f5:86:af: 5a:3d:3e:24:1a:ad:a3:32:cb:ff:72:8d:49:94:4e: db:05:0d:b0:82:ca:be:4f:12:7f:3e:c3:5d:83:8f: d7:10:2a:15:22:93:4a:3c:ba:8d:f9:21:c9:96:bd: 6f:b1:2b:bc:1c:ed:f8:8b:5f:f5:6e:b1:56:fd:27: bd:2f:71:71:83:be:ed:57:d4:48:a0:6e:42:b3:a5: 55:f3:e0:9e:72:c0:93:8e:02:08:57:dd:c6:ac:10: e3:95:56:d7:4f:5d:41:e3:05:02:a7:cd:c2:33:76: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2F:7E:8A:34:A9:E0:76:7A:13:62:DD:E7:2F:0D:21:02:2C:A2:65 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f3:20:4e:1c:41:c6:06:b0:a9:07:ae:bc:d9:d1:82:27:ba: 7f:0a:a7:0b:14:52:05:2b:5e:05:58:19:fb:55:b1:54:2d:c3: 1d:c8:2a:94:40:00:5a:f6:a3:4d:fd:ae:49:66:e9:09:b9:ef: 25:c3:36:68:57:3e:65:c3:9b:f6:98:fc:b0:9b:65:f0:12:1a: 07:35:a7:7e:db:08:54:ce:5e:c4:b8:f0:d1:e7:8c:99:42:46: 1c:ae:a6:da:92:ad:25:54:3c:84:61:32:b8:25:15:04:e6:f5: 4e:bc:c0:54:cc:e4:a8:00:dc:89:14:aa:73:56:3c:14:87:3f: fd:e6:9e:1a:f0:a9:dd:dd:f2:09:24:a8:7f:14:2f:29:68:cb: f3:10:40:cf:17:dd:d6:31:08:10:7d:d2:6d:17:2d:d2:f5:45: c5:73:41:04:aa:3f:5e:b8:39:fb:bc:64:1d:de:8e:e3:75:59: d0:4d:22:ca:d4:ce:4c:de:95:b5:c8:1a:a9:42:a8:c9:35:a7: 61:c3:af:b1:9a:8d:20:97:e2:b0:44:b3:47:41:35:ee:5e:9d: 74:f4:dd:13:71:e0:57:62:3e:bc:0c:67:46:9e:6b:53:9f:37: 9d:0f:ce:0d:a2:9a:59:eb:51:cd:93:0a:4b:a0:81:84:40:60: 04:09:34:39 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUPet5tt/7qol1bcG5SUz810cqm0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwMzI5MDUzODI0WhcNMjUwMzMwMDYwMTI0 WjAzMTEwLwYDVQQDEygzMzJGN0U4QTM0QTlFMDc2N0ExMzYyRERFNzJGMEQyMTAy MkNBMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71ZGQrzL0Yp5 7nbBVr3HF5LOulNXFO3GXwiTX+Vf3VBnHGOB0Mjhd5UyGNnSZxrjuxhDp2oM91HZ AiJB0GMuP3KEesSzoj4lMPb3WuZ5AgCIpN4+LZSPEX8vsvty+zHFPeEVYFbVBiJU mkImsprpPnFsVGCIglGyppNHhLpDfVfkzLMVUOOpIOGQO53DSER8bXz1hq9aPT4k Gq2jMsv/co1JlE7bBQ2wgsq+TxJ/PsNdg4/XECoVIpNKPLqN+SHJlr1vsSu8HO34 i1/1brFW/Se9L3Fxg77tV9RIoG5Cs6VV8+CecsCTjgIIV93GrBDjlVbXT11B4wUC p83CM3aGAwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFDMvfoo0qeB2ehNi3ecvDSEC LKJlMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNG REEyQkNGNzNDMTlBNjI0OEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAITzIE4cQcYGsKkHrrzZ0YIn un8KpwsUUgUrXgVYGftVsVQtwx3IKpRAAFr2o039rklm6Qm57yXDNmhXPmXDm/aY /LCbZfASGgc1p37bCFTOXsS48NHnjJlCRhyuptqSrSVUPIRhMrglFQTm9U68wFTM 5KgA3IkUqnNWPBSHP/3mnhrwqd3d8gkkqH8ULyloy/MQQM8X3dYxCBB90m0XLdL1 RcVzQQSqP164Ofu8ZB3ejuN1WdBNIsrUzkzelbXIGqlCqMk1p2HDr7GajSCX4rBE s0dBNe5enXT03RNx4FdiPrwMZ0aea1OfN50Pzg2imlnrUc2TCkuggYRAYAQJNDk= -----END CERTIFICATE-----Generated at Sun Apr 6 18:15:22 2025 by rpki-client