$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: KkUa6hc2tr3LrbtsjMiNZ9mGVxdvqSECFKFkNwNL9zw= Subject key identifier: 6F:70:20:92:60:B8:FE:CB:03:EE:AA:44:2C:4F:DC:48:19:A6:02:AA Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 0CC9078A12BBA58C3E07A585EE9C4870C88BB112 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 07FA Signing time: Sun 08 Jun 2025 02:42:05 +0000 Manifest this update: Sun 08 Jun 2025 02:37:05 +0000 Manifest next update: Mon 09 Jun 2025 04:32:05 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 0cNTecmkjnUfzOo0lDUBgluK59dvsGew1EUUhyFgyIw=) 2: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=) 3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: xObYa+BLdA8/17sFSBG9wJ/Htn19xwU9XrvHbOedNYY=) 4: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=) 5: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: lVeD0OBryZIFs0Dh4RJF4WX10ZAtCz7OAri6R4+uMEg=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 04:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c9:07:8a:12:bb:a5:8c:3e:07:a5:85:ee:9c:48:70:c8:8b:b1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jun 8 02:37:05 2025 GMT Not After : Jun 9 04:32:05 2025 GMT Subject: CN=6F70209260B8FECB03EEAA442C4FDC4819A602AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:08:0f:e7:8e:c8:d5:03:e3:83:9b:62:da: 9e:37:0b:28:14:2c:e1:20:c6:3c:27:1d:b2:ae:99: 65:1a:f9:98:01:b0:b1:f5:26:40:e9:ea:da:35:c6: eb:13:d4:ed:3f:83:8c:43:db:f3:fe:83:5e:f9:5f: 19:4e:0c:c7:6e:eb:3f:60:23:b3:92:ae:fc:09:51: 1e:46:42:31:23:d0:36:d2:91:4a:74:e6:7d:04:ef: 44:c8:bb:bf:6d:5d:10:e9:30:0e:53:79:a1:67:f5: 31:43:02:fb:5b:0a:c2:df:85:e1:97:37:17:92:fd: 1f:56:f2:c4:cc:53:a1:86:6b:e5:49:8f:36:24:43: 5e:ae:7d:f0:a5:13:d9:1b:0f:46:78:18:20:68:6c: 8b:ef:11:04:87:5e:ce:59:00:dd:69:45:ce:8a:b4: f9:e7:7f:20:90:bd:80:7a:cb:4a:91:e5:c8:5a:73: aa:7c:f2:41:f6:fc:ae:f8:b2:56:1c:dc:82:dd:d5: 06:fa:05:f9:b4:b4:c2:9a:aa:3b:84:b5:20:20:ab: d1:af:1d:76:56:11:ae:df:f2:d7:b4:9d:89:a5:13: 64:28:fa:f9:dc:31:e5:bd:27:fd:fa:59:c8:b8:4e: ef:0d:ca:6e:8a:c7:dc:00:af:8f:28:ba:d2:4b:e5: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:70:20:92:60:B8:FE:CB:03:EE:AA:44:2C:4F:DC:48:19:A6:02:AA X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:57:4c:ee:39:56:8a:b7:09:a6:f4:95:5d:60:85:09:db:c6: bc:d3:0b:38:9a:2b:07:f4:5e:db:12:5f:09:21:52:b8:82:35: c8:a1:fc:cd:ad:bf:30:ed:bc:d3:c7:28:5f:4f:93:7a:70:52: eb:0f:61:fa:1e:bf:30:28:ae:41:91:a0:45:93:25:b9:fa:ae: 95:a2:33:6a:17:2d:9a:13:4e:87:96:79:68:f5:bc:1e:91:97: 79:cf:6a:6a:86:e2:8b:9c:3e:15:dc:7f:69:e0:8b:ca:5a:8e: da:c4:92:83:43:b4:e0:43:66:f9:2f:9f:fa:79:89:74:17:74: 0d:79:a9:7e:87:b0:87:4e:6f:52:1c:e8:bc:10:47:6f:5c:a0: 95:10:eb:bc:b4:47:34:cf:55:9b:d7:2f:ff:68:91:1c:cc:15: 96:3d:5d:92:e4:6e:13:6e:d7:b3:a5:4d:b1:d3:3b:c5:5a:64: ec:b7:ab:82:4c:70:c4:cc:04:0e:17:f6:0b:ca:b8:25:e0:51: a7:0e:19:81:dc:3b:ea:04:67:96:bf:61:fa:81:5b:d3:7a:e8: 0e:15:e4:06:96:7e:e6:1b:00:42:23:c6:57:e7:2f:0f:e3:4b: d7:24:d0:d2:cc:3b:17:f0:0b:b3:e3:84:e5:4f:8c:2b:fb:fe: cd:4f:3f:03 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUDMkHihK7pYw+B6WF7pxIcMiLsRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwNjA4MDIzNzA1WhcNMjUwNjA5MDQzMjA1 WjAzMTEwLwYDVQQDEyg2RjcwMjA5MjYwQjhGRUNCMDNFRUFBNDQyQzRGREM0ODE5 QTYwMkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QcID+eOyNUD 44ObYtqeNwsoFCzhIMY8Jx2yrpllGvmYAbCx9SZA6eraNcbrE9TtP4OMQ9vz/oNe +V8ZTgzHbus/YCOzkq78CVEeRkIxI9A20pFKdOZ9BO9EyLu/bV0Q6TAOU3mhZ/Ux QwL7WwrC34XhlzcXkv0fVvLEzFOhhmvlSY82JENern3wpRPZGw9GeBggaGyL7xEE h17OWQDdaUXOirT5538gkL2AestKkeXIWnOqfPJB9vyu+LJWHNyC3dUG+gX5tLTC mqo7hLUgIKvRrx12VhGu3/LXtJ2JpRNkKPr53DHlvSf9+lnIuE7vDcpuisfcAK+P KLrSS+UXKwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFG9wIJJguP7LA+6qRCxP3EgZ pgKqMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAINXTO45Voq3Cab0lV1ghQnb xrzTCziaKwf0XtsSXwkhUriCNcih/M2tvzDtvNPHKF9Pk3pwUusPYfoevzAorkGR oEWTJbn6rpWiM2oXLZoTToeWeWj1vB6Rl3nPamqG4oucPhXcf2ngi8pajtrEkoND tOBDZvkvn/p5iXQXdA15qX6HsIdOb1Ic6LwQR29coJUQ67y0RzTPVZvXL/9okRzM FZY9XZLkbhNu17OlTbHTO8VaZOy3q4JMcMTMBA4X9gvKuCXgUacOGYHcO+oEZ5a/ YfqBW9N66A4V5AaWfuYbAEIjxlfnLw/jS9ck0NLMOxfwC7PjhOVPjCv7/s1PPwM= -----END CERTIFICATE-----Generated at Sun Jun 8 13:35:32 2025 by rpki-client