$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: 3rCFi5vIUmeCblYQSFzfyRYTV0E6TnH6tpUr8xyQ3ls= Subject key identifier: 57:B8:12:0E:0D:A0:F8:9F:FF:89:B9:DF:EB:34:17:4E:06:95:D1:09 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 0D562A33021E5D7CEFB3BFA30C2A56BAA3BC9309 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 0941 Signing time: Mon 25 May 2026 16:43:58 +0000 Manifest this update: Mon 25 May 2026 16:38:58 +0000 Manifest next update: Tue 26 May 2026 18:54:58 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: d6A250Le0y6BV7+zUBcoQsiAgpQP+FZxUBqYVHnX/mk=) 3: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 4: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 5: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 6: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 18:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:56:2a:33:02:1e:5d:7c:ef:b3:bf:a3:0c:2a:56:ba:a3:bc:93:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: May 25 16:38:58 2026 GMT Not After : May 26 18:54:58 2026 GMT Subject: CN=57B8120E0DA0F89FFF89B9DFEB34174E0695D109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:42:c7:cc:ab:c2:13:ef:5d:37:e4:d1:c7: e6:ad:d1:62:22:54:42:49:64:e9:bd:23:b0:8d:4f: 50:69:72:70:43:d7:1e:7a:b1:29:42:34:93:ff:f0: da:f7:8c:8d:54:4f:b1:cc:d0:25:67:11:83:86:a9: 9d:e0:50:bc:a1:e2:bc:3a:fc:60:88:30:b7:b7:f7: 65:65:8b:30:83:60:7f:b0:b2:64:0a:5b:b8:56:9e: 8c:a6:b8:b9:9c:37:cd:81:5d:d4:c3:83:99:47:e2: 0c:a5:b2:9f:fc:f3:a7:58:b4:bf:87:3d:e1:1b:d8: 61:0b:04:50:bd:10:59:b5:47:bc:ee:4d:01:8b:2b: 82:8a:a8:cf:43:cc:e8:a5:70:bc:fc:c4:d8:40:c0: 4d:f1:17:3a:26:e5:f8:65:e3:d9:8a:c0:ff:9f:f8: a5:4f:c5:d9:26:3e:83:2f:39:1e:72:eb:c2:60:5f: fb:a6:06:19:a2:ae:36:be:f8:43:01:39:1a:85:fa: 59:a9:7c:25:6e:df:0e:bb:99:34:a0:de:7d:c6:a4: a2:43:f7:8d:5b:5b:b5:6b:5a:59:7c:ac:b9:ab:57: 00:8c:cd:90:67:38:0d:d1:7a:65:01:8b:ef:6d:5c: c3:f2:72:4e:d5:8e:5c:26:a4:12:81:6e:e4:91:66: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:12:0E:0D:A0:F8:9F:FF:89:B9:DF:EB:34:17:4E:06:95:D1:09 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:51:7b:be:ad:3d:1d:75:5e:74:b4:88:5a:b9:c6:de:2b:b5: 1f:be:1f:c3:f8:4d:c0:c3:b9:8b:af:be:e0:5d:fc:9b:fd:78: 8b:5c:ad:e1:ca:78:eb:74:cf:9d:5d:d1:bc:11:9d:c0:5f:24: 96:b5:1d:89:fd:e8:93:4a:7c:ae:a8:38:8f:80:d9:3e:07:19: 11:e9:98:5a:68:cc:8e:20:43:16:40:12:26:16:94:4c:2a:91: 40:1e:7a:fd:7f:64:a7:b1:84:f4:75:91:19:02:3e:d2:a5:52: 0a:38:19:c3:30:7a:45:6d:db:e2:46:39:6c:ff:dd:07:e5:b4: 43:28:c5:67:91:cd:91:e7:b1:58:79:46:0a:56:e8:b0:42:ae: 3f:0b:a4:d5:af:ec:8c:61:7a:b0:ce:c8:61:39:40:33:1f:92: 16:75:83:cc:92:2d:90:15:4e:5f:39:eb:a2:87:f1:75:1f:4e: ff:15:7e:71:58:d0:64:bc:c7:63:d0:cc:c7:b2:e6:a4:5f:95: 9a:25:61:42:b5:4d:f5:00:da:61:4d:27:96:a1:64:f2:38:5f: 76:fc:8f:33:01:c6:e8:07:9d:5a:15:c7:cf:03:6d:c8:f1:83: 64:ae:03:0e:fd:7f:c6:a8:74:94:10:8c:d0:a5:db:00:31:25: 8f:2b:c4:8e -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUDVYqMwIeXXzvs7+jDCpWuqO8kwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNTI1MTYzODU4WhcNMjYwNTI2MTg1NDU4 WjAzMTEwLwYDVQQDEyg1N0I4MTIwRTBEQTBGODlGRkY4OUI5REZFQjM0MTc0RTA2 OTVEMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UZCx8yrwhPv XTfk0cfmrdFiIlRCSWTpvSOwjU9QaXJwQ9ceerEpQjST//Da94yNVE+xzNAlZxGD hqmd4FC8oeK8OvxgiDC3t/dlZYswg2B/sLJkClu4Vp6Mpri5nDfNgV3Uw4OZR+IM pbKf/POnWLS/hz3hG9hhCwRQvRBZtUe87k0BiyuCiqjPQ8zopXC8/MTYQMBN8Rc6 JuX4ZePZisD/n/ilT8XZJj6DLzkecuvCYF/7pgYZoq42vvhDATkahfpZqXwlbt8O u5k0oN59xqSiQ/eNW1u1a1pZfKy5q1cAjM2QZzgN0XplAYvvbVzD8nJO1Y5cJqQS gW7kkWYJRwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFFe4Eg4NoPif/4m53+s0F04G ldEJMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKFRe76tPR11XnS0iFq5xt4r tR++H8P4TcDDuYuvvuBd/Jv9eItcreHKeOt0z51d0bwRncBfJJa1HYn96JNKfK6o OI+A2T4HGRHpmFpozI4gQxZAEiYWlEwqkUAeev1/ZKexhPR1kRkCPtKlUgo4GcMw ekVt2+JGOWz/3QfltEMoxWeRzZHnsVh5RgpW6LBCrj8LpNWv7IxherDOyGE5QDMf khZ1g8ySLZAVTl8566KH8XUfTv8VfnFY0GS8x2PQzMey5qRflZolYUK1TfUA2mFN J5ahZPI4X3b8jzMBxugHnVoVx88Dbcjxg2SuAw79f8aodJQQjNCl2wAxJY8rxI4= -----END CERTIFICATE-----Generated at Tue May 26 10:58:23 2026 by rpki-client