$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: O5I7cz6FbFEhwtOtLkl/KhJNb6ejo2rdVSKCCL/VOms= Subject key identifier: 63:1C:52:4A:BB:2E:0F:C7:2F:C1:C4:71:E8:B8:FC:2A:A4:C9:86:0A Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 168FF8A87C55C9D8796C43994A9554620AD309E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 09AA Signing time: Wed 08 Apr 2026 13:16:32 +0000 Manifest this update: Wed 08 Apr 2026 13:11:32 +0000 Manifest next update: Thu 09 Apr 2026 13:47:32 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 3: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 4: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: nTc4641Bz6Z5Qq72B6EhCY4wpDd4BQnN2z2T1lUOh+0=) 5: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 13:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8f:f8:a8:7c:55:c9:d8:79:6c:43:99:4a:95:54:62:0a:d3:09:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Apr 8 13:11:32 2026 GMT Not After : Apr 9 13:47:32 2026 GMT Subject: CN=631C524ABB2E0FC72FC1C471E8B8FC2AA4C9860A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:fb:23:c0:99:25:95:22:ce:2d:b1:ef:63: f8:21:53:85:95:8c:af:55:75:f3:a3:2b:d2:ab:e8: 1f:0f:03:66:30:1f:04:f2:29:63:bd:8a:70:53:aa: 55:1e:53:c1:ae:8b:b0:c2:62:62:ba:c4:2f:8c:4f: 7b:93:c6:38:59:70:8f:b8:1d:5d:05:d7:f9:57:b0: 12:f7:90:05:46:b4:18:ee:f8:d4:e0:35:59:e3:0c: 6f:de:30:a3:66:f3:01:9c:46:f7:1f:39:bd:ae:7b: 11:5b:78:fc:aa:54:97:c7:aa:86:13:47:3d:f1:67: 43:8a:29:af:e6:f5:a3:36:99:48:8f:3d:92:6c:8a: cc:16:e0:5a:7f:61:20:b5:c8:93:fe:96:bb:4c:a5: 77:19:4f:f4:cd:5d:a1:f2:12:a9:81:d3:6c:a8:3d: 00:b2:7b:65:20:47:2a:f4:28:3e:d3:85:ca:fb:eb: 2a:20:40:0e:f2:7d:77:1d:4e:cf:dc:34:c6:7b:1c: bf:52:5e:0c:e3:97:31:2a:80:5e:6b:28:d1:4d:bb: 64:23:83:51:33:d8:52:bc:79:ba:68:05:68:d6:39: 4c:d9:30:f4:34:1f:37:ed:7e:51:b3:a3:c1:87:ef: 30:55:6b:ca:61:19:e0:9b:53:7c:d3:0f:4f:55:ab: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:52:4A:BB:2E:0F:C7:2F:C1:C4:71:E8:B8:FC:2A:A4:C9:86:0A X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0a:21:20:ce:09:eb:1a:f5:d1:9f:34:61:0a:54:b7:18:c3: 92:32:17:bb:2f:a4:91:4c:69:0d:0b:e3:b0:71:43:9a:c9:85: 21:56:5c:24:10:77:b4:0d:28:89:0a:fa:0c:41:a2:81:35:6d: 3c:9e:3d:38:68:dc:be:c8:48:30:0d:78:3a:45:ad:13:bb:3a: 2f:6b:f1:85:1c:22:f5:a7:c4:c2:e1:ad:db:00:53:9d:b8:28: 16:5c:c3:81:5e:84:64:3c:10:8f:2b:09:26:e1:eb:e6:dc:0b: 22:31:83:37:94:6b:8e:7a:5d:84:4b:28:2c:6b:98:63:a5:ce: 9e:f7:52:5b:86:d1:a0:fc:d5:34:27:a3:24:22:a7:42:33:05: af:66:b7:bf:ea:fd:58:8a:98:01:33:cf:89:a2:5b:7e:c4:f9: b2:00:58:7e:70:b6:db:48:cc:ef:a3:14:cf:10:fd:51:30:d2: 86:2f:43:ad:3a:f5:23:2b:77:a6:73:b3:d0:7a:7e:3b:91:6f: f4:c2:23:fc:e6:24:1a:9d:a5:a7:29:17:d8:17:74:43:f0:89: 10:fe:f3:b5:4e:73:30:be:4c:be:5f:c8:21:d7:94:6f:80:68: cc:8f:e8:45:27:b1:76:c5:1e:87:3b:77:97:40:c5:39:32:96: f1:76:8e:3c -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUFo/4qHxVydh5bEOZSpVUYgrTCeUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNDA4MTMxMTMyWhcNMjYwNDA5MTM0NzMy WjAzMTEwLwYDVQQDEyg2MzFDNTI0QUJCMkUwRkM3MkZDMUM0NzFFOEI4RkMyQUE0 Qzk4NjBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cj7I8CZJZUi zi2x72P4IVOFlYyvVXXzoyvSq+gfDwNmMB8E8iljvYpwU6pVHlPBrouwwmJiusQv jE97k8Y4WXCPuB1dBdf5V7AS95AFRrQY7vjU4DVZ4wxv3jCjZvMBnEb3Hzm9rnsR W3j8qlSXx6qGE0c98WdDiimv5vWjNplIjz2SbIrMFuBaf2EgtciT/pa7TKV3GU/0 zV2h8hKpgdNsqD0AsntlIEcq9Cg+04XK++sqIEAO8n13HU7P3DTGexy/Ul4M45cx KoBeayjRTbtkI4NRM9hSvHm6aAVo1jlM2TD0NB837X5Rs6PBh+8wVWvKYRngm1N8 0w9PVav61wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFGMcUkq7Lg/HL8HEcei4/Cqk yYYKMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIsKISDOCesa9dGfNGEKVLcY w5IyF7svpJFMaQ0L47BxQ5rJhSFWXCQQd7QNKIkK+gxBooE1bTyePTho3L7ISDAN eDpFrRO7Oi9r8YUcIvWnxMLhrdsAU524KBZcw4FehGQ8EI8rCSbh6+bcCyIxgzeU a456XYRLKCxrmGOlzp73UluG0aD81TQnoyQip0IzBa9mt7/q/ViKmAEzz4miW37E +bIAWH5wtttIzO+jFM8Q/VEw0oYvQ6069SMrd6Zzs9B6fjuRb/TCI/zmJBqdpacp F9gXdEPwiRD+87VOczC+TL5fyCHXlG+AaMyP6EUnsXbFHoc7d5dAxTkylvF2jjw= -----END CERTIFICATE-----Generated at Thu Apr 9 03:48:20 2026 by rpki-client