$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: 1fsA6SjcB7S5IQvLqtzpSSg1bmnpszDh8T5jwUNOcbs= Subject key identifier: E9:CB:CE:C4:6C:15:8F:E3:6A:7A:62:57:95:FA:95:C2:BA:AF:E8:68 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 3ED86C24488A4B4162FC358BEB17C80C266A5A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 077E Signing time: Fri 25 Jul 2025 03:54:58 +0000 Manifest this update: Fri 25 Jul 2025 03:49:58 +0000 Manifest next update: Sat 26 Jul 2025 05:47:58 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: HWvrQFRI56bBfzqrDJmPbIbe0lDhcITo2jP2ZNB3IyA=) 3: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 4: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 5: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 05:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d8:6c:24:48:8a:4b:41:62:fc:35:8b:eb:17:c8:0c:26:6a:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 25 03:49:58 2025 GMT Not After : Jul 26 05:47:58 2025 GMT Subject: CN=E9CBCEC46C158FE36A7A625795FA95C2BAAFE868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:c2:ff:d5:41:a0:03:a4:fb:3d:ee:32:22: 47:c5:b2:86:d5:7c:bd:51:61:32:08:43:cd:71:2c: 32:4b:2d:4d:02:4b:71:e7:4f:c3:c0:61:53:6c:d1: 32:aa:7a:a7:44:8e:a4:76:07:82:52:4d:13:12:0e: 93:39:3e:be:28:ef:09:b3:79:36:ca:6f:36:2f:61: b1:dc:90:c5:fc:33:95:18:6a:b8:e9:b2:0f:56:de: f6:91:d8:eb:4d:34:ce:f6:8a:3d:ee:d5:04:25:ee: 27:09:ed:0f:2a:e8:ab:a1:a0:42:2f:c3:91:7e:d0: 06:94:35:63:7a:82:68:2f:0a:9e:67:20:81:dc:ff: 4e:60:44:04:0b:66:10:f7:31:5b:2e:02:84:f2:dc: 83:16:e2:ad:d7:ef:72:ac:31:c7:80:bf:d2:c2:d4: eb:c5:6a:47:c1:ae:57:da:2b:9f:b2:ac:a7:1d:30: 1b:06:08:f5:86:0a:a0:4d:89:fe:40:c9:2e:06:6c: 24:dc:63:6f:c8:61:a6:d7:93:cf:04:d9:33:16:dd: b4:31:a9:2f:8f:b7:25:91:fd:d3:42:04:d7:2f:ac: 6d:7e:f1:5e:a6:e9:15:d5:d7:be:06:ee:34:ce:46: 1d:e9:cc:e8:e4:1a:88:17:9e:fe:e8:cd:f2:c3:5d: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CB:CE:C4:6C:15:8F:E3:6A:7A:62:57:95:FA:95:C2:BA:AF:E8:68 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3e:2b:9e:33:a3:a4:d3:8b:34:2d:5a:70:aa:37:bb:bb:c7: 53:5d:8c:57:fc:28:2c:f1:80:1e:34:78:67:49:9c:7f:14:47: 26:7d:ca:05:9c:12:6b:0d:d8:c7:40:de:99:d8:0f:b2:fd:3e: 01:fe:2f:cb:97:ac:3d:5c:44:b8:d4:9a:60:85:eb:86:b8:7b: ff:65:3b:bd:9d:9a:f9:4b:2c:ba:84:e2:f6:48:f5:70:a2:fb: 53:4e:20:f0:51:cd:67:0b:af:ff:0c:09:6f:92:cb:24:00:e9: 84:b9:17:5d:50:fc:37:ae:41:54:be:66:b6:12:0f:8e:cf:e4: ba:7c:88:63:0d:3f:8e:49:ce:79:66:b0:93:b2:c9:59:1a:25: db:8e:68:29:6f:d3:52:fa:49:b7:f1:9d:18:9f:a1:d3:7e:96: 80:eb:9d:2d:9c:b8:aa:44:f6:31:8f:17:02:63:84:b7:90:6c: aa:1f:55:fd:65:b8:0a:0f:f3:9a:9d:f7:44:45:b0:db:ab:cd: 98:e7:ee:e7:d9:82:c4:2e:28:9f:ad:da:3b:66:57:5e:2a:b7: 39:86:b7:ea:6b:45:9e:81:a5:45:8b:cd:41:a5:d1:2e:6a:8b: 75:68:0c:43:4f:5b:41:9f:ca:ec:f8:9c:bc:d6:3a:55:50:3d: cc:e7:db:45 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUPthsJEiKS0Fi/DWL6xfIDCZqWkAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNzI1MDM0OTU4WhcNMjUwNzI2MDU0NzU4 WjAzMTEwLwYDVQQDEyhFOUNCQ0VDNDZDMTU4RkUzNkE3QTYyNTc5NUZBOTVDMkJB QUZFODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/7C/9VBoAOk +z3uMiJHxbKG1Xy9UWEyCEPNcSwySy1NAktx50/DwGFTbNEyqnqnRI6kdgeCUk0T Eg6TOT6+KO8Js3k2ym82L2Gx3JDF/DOVGGq46bIPVt72kdjrTTTO9oo97tUEJe4n Ce0PKuiroaBCL8ORftAGlDVjeoJoLwqeZyCB3P9OYEQEC2YQ9zFbLgKE8tyDFuKt 1+9yrDHHgL/SwtTrxWpHwa5X2iufsqynHTAbBgj1hgqgTYn+QMkuBmwk3GNvyGGm 15PPBNkzFt20Makvj7clkf3TQgTXL6xtfvFepukV1de+Bu40zkYd6czo5BqIF57+ 6M3yw12f+QIDAQABo4ICazCCAmcwHQYDVR0OBBYEFOnLzsRsFY/janpiV5X6lcK6 r+hoMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADs+K54zo6TTizQtWnCqN7u7 x1NdjFf8KCzxgB40eGdJnH8URyZ9ygWcEmsN2MdA3pnYD7L9PgH+L8uXrD1cRLjU mmCF64a4e/9lO72dmvlLLLqE4vZI9XCi+1NOIPBRzWcLr/8MCW+SyyQA6YS5F11Q /DeuQVS+ZrYSD47P5Lp8iGMNP45JznlmsJOyyVkaJduOaClv01L6SbfxnRifodN+ loDrnS2cuKpE9jGPFwJjhLeQbKofVf1luAoP85qd90RFsNurzZjn7ufZgsQuKJ+t 2jtmV14qtzmGt+prRZ6BpUWLzUGl0S5qi3VoDENPW0Gfyuz4nLzWOlVQPczn20U= -----END CERTIFICATE-----Generated at Fri Jul 25 20:52:53 2025 by rpki-client