$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: 7IM7b4/3plM5HSVdsrOjz8FWnsw+xhTZv+5P8p6RLlc= Subject key identifier: 73:25:63:4A:C9:70:1C:F9:8A:60:79:97:E5:4F:94:AC:7A:E4:97:14 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 6E478AE942BBD3343DF2BEEA7F6C059417511E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 08BF Signing time: Tue 28 Oct 2025 15:20:28 +0000 Manifest this update: Tue 28 Oct 2025 15:15:28 +0000 Manifest next update: Wed 29 Oct 2025 15:41:28 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 2: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 3: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 4: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 5: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: Qd/ccooBXtctEwCVnUNNZ2pq3ppKejTrpHgLXnGhPNo=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 15:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:47:8a:e9:42:bb:d3:34:3d:f2:be:ea:7f:6c:05:94:17:51:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Oct 28 15:15:28 2025 GMT Not After : Oct 29 15:41:28 2025 GMT Subject: CN=7325634AC9701CF98A607997E54F94AC7AE49714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:bb:77:9f:3c:43:fc:a2:61:6a:fd:5e:cb: ad:01:91:fe:a1:e7:6b:fd:63:2f:cc:65:d9:a1:46: bf:92:a2:f2:0a:40:9f:71:78:e6:fc:48:b6:f5:c0: fd:a1:0f:88:78:9e:2d:e7:ba:ad:15:64:1e:82:f3: 05:0d:2d:8e:1b:4d:11:d6:fb:2b:60:08:cc:0d:a2: 9c:fc:32:6c:a1:fa:55:6c:fc:40:40:a7:f6:1e:36: 35:32:51:1f:b9:04:06:a5:e1:af:9e:23:8f:7d:e5: 6e:bf:b6:17:7f:61:2c:8f:fe:46:c9:9b:ca:5f:7e: cc:e8:14:44:81:69:c5:0f:f7:45:c9:39:ef:24:18: 47:66:b9:f3:3d:c9:c2:00:4d:c3:92:fd:f2:30:2e: fe:0a:9d:0a:7a:35:eb:b5:0a:7c:44:00:1a:e8:f7: fe:8f:bc:cb:5d:02:ef:ed:46:51:2d:30:cb:46:35: 04:c2:4c:b9:55:92:87:e8:e5:70:99:58:27:1a:49: d4:d1:36:97:6c:3a:ed:4e:76:49:87:1c:40:da:be: 0f:09:ab:4d:b4:14:a3:c7:c2:77:0f:09:87:5a:32: 38:d7:b5:ab:73:27:fd:33:36:d0:f6:d0:b1:28:c2: 2f:29:25:dd:eb:64:d9:cb:c6:17:fe:25:70:60:1d: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:25:63:4A:C9:70:1C:F9:8A:60:79:97:E5:4F:94:AC:7A:E4:97:14 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1e:9d:6b:fd:bb:59:02:d3:04:47:ca:a3:d5:f7:c0:1c:32: 89:5c:c0:3a:fe:22:e2:8b:b7:dd:3f:fa:2c:92:79:10:88:9a: 3f:e5:b6:cc:ea:f1:b2:41:16:6e:41:b6:18:f2:23:c4:42:48: c3:6f:3d:fb:f9:5e:cd:90:99:8b:c1:c1:5a:62:e1:1e:55:a8: f2:69:9e:05:62:bc:59:ba:97:a5:c6:38:db:58:a1:64:a4:b9: 40:ca:20:e6:f7:41:4f:4e:62:b2:ed:c2:fc:f4:23:a9:89:f0: 34:e1:9c:22:8f:2f:2c:2f:99:16:f4:e9:5f:6f:85:f9:d0:32: 1a:ca:9a:f1:36:1b:cf:ea:41:19:4e:b1:bf:0b:d7:ef:3b:62: b9:6b:f6:fa:22:c0:d3:24:d8:bf:1a:a4:5f:1a:e0:6f:5f:e2: ad:4b:68:5d:f3:7e:13:90:52:74:7a:b4:3e:d9:9e:eb:0e:f2: 96:e7:16:78:31:07:28:32:85:53:cc:ed:17:46:a2:cd:92:bb: ac:48:ac:15:86:47:5c:9e:76:14:a1:6a:d8:82:95:b3:2e:2d: b5:f0:b2:17:b2:8f:33:f6:09:7c:1e:f0:cf:91:ee:3a:2f:38: 15:be:0c:7b:2a:86:ed:4f:64:c1:0e:3c:56:cd:84:cd:f3:7d: 23:bf:0b:0b -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUbkeK6UK70zQ98r7qf2wFlBdRHmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUxMDI4MTUxNTI4WhcNMjUxMDI5MTU0MTI4 WjAzMTEwLwYDVQQDEyg3MzI1NjM0QUM5NzAxQ0Y5OEE2MDc5OTdFNTRGOTRBQzdB RTQ5NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7W7d588Q/yi YWr9XsutAZH+oedr/WMvzGXZoUa/kqLyCkCfcXjm/Ei29cD9oQ+IeJ4t57qtFWQe gvMFDS2OG00R1vsrYAjMDaKc/DJsofpVbPxAQKf2HjY1MlEfuQQGpeGvniOPfeVu v7YXf2Esj/5GyZvKX37M6BREgWnFD/dFyTnvJBhHZrnzPcnCAE3Dkv3yMC7+Cp0K ejXrtQp8RAAa6Pf+j7zLXQLv7UZRLTDLRjUEwky5VZKH6OVwmVgnGknU0TaXbDrt TnZJhxxA2r4PCatNtBSjx8J3DwmHWjI417Wrcyf9MzbQ9tCxKMIvKSXd62TZy8YX /iVwYB00nwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFHMlY0rJcBz5imB5l+VPlKx6 5JcUMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACcenWv9u1kC0wRHyqPV98Ac MolcwDr+IuKLt90/+iySeRCImj/ltszq8bJBFm5BthjyI8RCSMNvPfv5Xs2QmYvB wVpi4R5VqPJpngVivFm6l6XGONtYoWSkuUDKIOb3QU9OYrLtwvz0I6mJ8DThnCKP LywvmRb06V9vhfnQMhrKmvE2G8/qQRlOsb8L1+87Yrlr9voiwNMk2L8apF8a4G9f 4q1LaF3zfhOQUnR6tD7ZnusO8pbnFngxBygyhVPM7RdGos2Su6xIrBWGR1yedhSh atiClbMuLbXwsheyjzP2CXwe8M+R7jovOBW+DHsqhu1PZMEOPFbNhM3zfSO/Cws= -----END CERTIFICATE-----Generated at Wed Oct 29 00:20:57 2025 by rpki-client