$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: GFl6RwWIlim6egUx2OnYHnfarBK8ppkfOegtlg50zMU= Subject key identifier: 22:C7:B4:76:8D:00:7C:48:77:F7:2B:19:0D:00:4A:6A:C2:BE:07:9C Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 4622AAB031FEC66F14A092CD02CD7EA6F977A11D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 06A5 Signing time: Sun 16 Feb 2025 07:52:29 +0000 Manifest this update: Sun 16 Feb 2025 07:47:29 +0000 Manifest next update: Mon 17 Feb 2025 11:47:29 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 4: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 5: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 6: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: YSmwZI8gepULuLnZO6jDF8aJA9eHCjL8qJWmI5/Vf4M=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:aa:b0:31:fe:c6:6f:14:a0:92:cd:02:cd:7e:a6:f9:77:a1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Feb 16 07:47:29 2025 GMT Not After : Feb 17 11:47:29 2025 GMT Subject: CN=22C7B4768D007C4877F72B190D004A6AC2BE079C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:38:64:0f:fc:b4:e3:99:e7:b4:be:1f:3c: 0f:34:70:9c:b1:a9:b3:a9:38:53:89:d9:18:f8:c4: ca:b2:ac:13:7a:45:d6:de:68:5c:bb:8c:81:b7:ef: 48:dc:5d:8d:46:a0:fc:f1:4f:6b:c6:68:7c:dd:52: 48:ca:89:72:7c:c7:c0:5c:5a:2a:a8:d3:eb:b8:95: 58:5b:b4:98:b7:77:17:3d:72:1a:2c:57:ab:f6:c4: 64:b7:60:45:4b:16:10:a9:32:bd:59:e7:8b:15:a5: c2:f0:42:a3:73:45:f0:9f:60:b3:76:24:5a:4d:9d: 9e:9a:03:95:79:b6:d4:e6:62:8e:52:2f:29:b7:2a: f2:89:f9:f2:c3:12:c5:3d:3f:23:4f:14:04:68:07: fb:dd:a8:0b:61:0a:cb:9a:36:64:e2:9b:33:c3:3e: 8f:4a:1b:bc:fc:dc:9e:37:ae:b4:ad:1d:58:dd:5e: b5:1b:44:4c:75:9d:54:3b:da:1f:b3:9e:6d:ef:5d: f9:5f:48:61:2a:25:a6:9a:a9:b8:d1:a1:b3:f1:45: 2b:79:58:5b:87:96:f1:96:78:5a:5f:8a:b1:eb:a5: dc:f2:3a:9c:c6:c5:c4:bd:1a:ca:c1:1d:71:d8:6a: 58:b5:b2:24:b0:63:c1:a4:cb:5d:28:9b:d5:d2:0a: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:B4:76:8D:00:7C:48:77:F7:2B:19:0D:00:4A:6A:C2:BE:07:9C X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e3:ce:4c:0e:79:56:c3:a8:ce:a3:7b:12:b0:50:44:79:a2: 1a:39:dc:5b:85:54:c0:3c:02:03:a4:41:d7:16:74:7e:f2:1f: a0:9c:11:87:bf:26:81:c5:c0:3f:19:50:d0:b8:d6:5d:36:ae: 2d:6a:03:e8:0b:7e:54:de:fa:9f:2d:b9:11:c7:e1:d8:0e:36: 0e:1f:6f:5f:eb:87:b9:72:f1:bb:e6:a7:e4:39:69:cc:d0:41: 32:da:ab:b8:9f:1a:16:7e:52:e7:36:b5:40:6e:d9:28:e2:35: 4b:92:c9:c5:60:7c:c5:1b:74:51:9a:9b:94:97:1c:1d:57:4e: 80:9c:73:76:61:69:4b:15:d1:a5:08:42:0a:8d:8a:51:a4:95: 9e:47:fc:e0:e0:e4:8c:74:ec:03:26:95:9e:1f:4c:16:89:05: 92:8e:37:9d:87:1d:ff:ee:5c:38:57:90:b4:4e:b4:9a:2b:d1: e2:70:6a:49:34:44:f9:a6:35:0c:2a:a1:c7:20:b1:dd:b7:52: 79:87:45:82:f9:66:32:0c:76:d6:0e:58:5a:31:a5:47:89:d6: bb:c0:79:91:cd:cc:8a:2c:57:78:48:7f:6d:80:54:0b:db:55: f0:0c:88:87:3d:95:e5:60:c4:84:d0:cc:be:08:1f:ba:b5:06: 88:69:15:9c -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIURiKqsDH+xm8UoJLNAs1+pvl3oR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwMjE2MDc0NzI5WhcNMjUwMjE3MTE0NzI5 WjAzMTEwLwYDVQQDEygyMkM3QjQ3NjhEMDA3QzQ4NzdGNzJCMTkwRDAwNEE2QUMy QkUwNzlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJI4ZA/8tOOZ 57S+HzwPNHCcsamzqThTidkY+MTKsqwTekXW3mhcu4yBt+9I3F2NRqD88U9rxmh8 3VJIyolyfMfAXFoqqNPruJVYW7SYt3cXPXIaLFer9sRkt2BFSxYQqTK9WeeLFaXC 8EKjc0Xwn2CzdiRaTZ2emgOVebbU5mKOUi8ptyryifnywxLFPT8jTxQEaAf73agL YQrLmjZk4pszwz6PShu8/NyeN660rR1Y3V61G0RMdZ1UO9ofs55t7135X0hhKiWm mqm40aGz8UUreVhbh5bxlnhaX4qx66Xc8jqcxsXEvRrKwR1x2GpYtbIksGPBpMtd KJvV0gpxxwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFCLHtHaNAHxId/crGQ0ASmrC vgecMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALXjzkwOeVbDqM6jexKwUER5 oho53FuFVMA8AgOkQdcWdH7yH6CcEYe/JoHFwD8ZUNC41l02ri1qA+gLflTe+p8t uRHH4dgONg4fb1/rh7ly8bvmp+Q5aczQQTLaq7ifGhZ+Uuc2tUBu2SjiNUuSycVg fMUbdFGam5SXHB1XToCcc3ZhaUsV0aUIQgqNilGklZ5H/ODg5Ix07AMmlZ4fTBaJ BZKON52HHf/uXDhXkLROtJor0eJwakk0RPmmNQwqoccgsd23UnmHRYL5ZjIMdtYO WFoxpUeJ1rvAeZHNzIosV3hIf22AVAvbVfAMiIc9leVgxITQzL4IH7q1BohpFZw= -----END CERTIFICATE-----Generated at Sun Feb 16 22:08:32 2025 by rpki-client