$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: vcEbru0ZiktI+kbN0et5fvbCpyvhQMkmOv4GhzUDc/Y= Subject key identifier: 79:B9:32:3C:4D:E0:B8:D6:33:0B:45:F0:BB:5A:52:8E:24:97:2E:06 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 4B8A4712B96A1C0DE8C9DC8779EAC774B018831F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 08EE Signing time: Wed 08 Apr 2026 20:31:32 +0000 Manifest this update: Wed 08 Apr 2026 20:26:32 +0000 Manifest next update: Fri 10 Apr 2026 00:13:32 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 2: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 3: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 5: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: GdxPlS0WoxZaCvKrc3dLsAuCDCLNYTAQsBh/5e05QH4=) 6: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 00:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8a:47:12:b9:6a:1c:0d:e8:c9:dc:87:79:ea:c7:74:b0:18:83:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Apr 8 20:26:32 2026 GMT Not After : Apr 10 00:13:32 2026 GMT Subject: CN=79B9323C4DE0B8D6330B45F0BB5A528E24972E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:bc:4f:46:6b:c2:e8:b4:ce:2b:65:9b:91: 64:45:d0:08:d5:f4:2a:c4:e4:24:e2:48:6f:a2:d0: df:ce:70:10:3e:35:96:e4:80:ff:9f:70:41:cb:b7: 2a:34:4f:22:2a:17:e0:c5:b7:72:ff:43:84:ad:c4: 56:3d:1b:4f:cb:64:e7:14:3e:0a:55:9f:e2:e6:37: f3:f6:fd:23:31:38:1d:ba:23:ab:83:36:e9:e6:4c: 54:55:b4:bd:e7:27:0c:20:32:97:5f:18:51:58:cd: f9:68:e3:86:0b:50:fb:54:43:4f:fd:fb:8a:65:52: 54:04:14:4b:12:29:20:cb:be:7c:b6:85:6c:e0:09: 3c:b0:3b:17:25:8c:15:0e:07:0b:84:20:2f:50:d4: e5:3d:8a:aa:53:0d:5f:82:76:b3:52:85:2b:17:9f: b5:3e:4d:fd:33:3a:90:a1:6d:70:92:06:07:87:53: 46:19:81:3e:77:46:ce:bb:40:b7:29:b3:74:f2:8c: 5b:95:a3:cb:54:22:0e:61:3b:fe:9a:0d:11:22:b5: d6:90:cb:80:5e:d1:a0:88:67:3d:80:bd:f4:27:f5: ac:38:5c:cb:60:9f:43:9f:47:7a:e4:5f:4c:b5:27: 82:fc:18:76:b8:ae:0e:6b:69:5e:c0:a0:db:2e:7f: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B9:32:3C:4D:E0:B8:D6:33:0B:45:F0:BB:5A:52:8E:24:97:2E:06 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7c:68:5d:3d:15:f7:7e:13:55:dc:6b:61:e6:39:8c:3e:e8: c4:b0:0f:13:d0:da:da:97:6d:90:ec:be:dc:73:94:df:0e:2b: 62:be:e0:70:a4:a5:b8:b1:43:eb:a3:5a:31:42:8a:4f:b4:bd: 90:29:50:74:8b:a8:25:f3:a1:0e:cc:6f:44:44:7c:74:5a:05: ac:b5:e8:8a:90:99:00:35:1c:3e:0c:01:78:14:38:63:c8:64: 08:6c:05:57:26:3e:03:42:81:c1:2b:53:35:69:d3:29:dd:0e: 5d:cd:39:1b:8f:f4:f7:e4:52:45:bd:e5:c3:c7:91:ec:d3:f1: 1a:e0:b0:5e:e9:c3:7c:2a:09:13:0a:48:42:6b:94:03:f4:c4: a0:79:3d:09:d4:63:10:d2:b0:7b:b0:d1:e3:a0:8f:90:ad:94: ac:5f:90:af:76:a3:ea:24:dd:af:02:d2:41:44:0e:b7:32:11: 00:79:70:af:54:f1:fa:d2:b4:5f:41:c1:97:aa:14:d0:5d:ae: 08:0b:fc:bc:8e:c8:18:60:c8:79:13:6b:10:4d:bd:3b:d6:52: 78:e7:4a:c3:a8:15:cb:d4:85:50:a5:f4:42:4b:ec:7c:1e:b4: 48:a3:1b:78:5d:1e:69:1a:aa:7b:2b:67:8c:b2:72:42:8a:38: 8e:db:8b:f3 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUS4pHErlqHA3oydyHeerHdLAYgx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNDA4MjAyNjMyWhcNMjYwNDEwMDAxMzMy WjAzMTEwLwYDVQQDEyg3OUI5MzIzQzRERTBCOEQ2MzMwQjQ1RjBCQjVBNTI4RTI0 OTcyRTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDK8T0Zrwui0 zitlm5FkRdAI1fQqxOQk4khvotDfznAQPjWW5ID/n3BBy7cqNE8iKhfgxbdy/0OE rcRWPRtPy2TnFD4KVZ/i5jfz9v0jMTgduiOrgzbp5kxUVbS95ycMIDKXXxhRWM35 aOOGC1D7VENP/fuKZVJUBBRLEikgy758toVs4Ak8sDsXJYwVDgcLhCAvUNTlPYqq Uw1fgnazUoUrF5+1Pk39MzqQoW1wkgYHh1NGGYE+d0bOu0C3KbN08oxblaPLVCIO YTv+mg0RIrXWkMuAXtGgiGc9gL30J/WsOFzLYJ9Dn0d65F9MtSeC/Bh2uK4Oa2le wKDbLn9RdwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFHm5MjxN4LjWMwtF8LtaUo4k ly4GMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAd8aF09Ffd+E1Xca2HmOYw+ 6MSwDxPQ2tqXbZDsvtxzlN8OK2K+4HCkpbixQ+ujWjFCik+0vZApUHSLqCXzoQ7M b0REfHRaBay16IqQmQA1HD4MAXgUOGPIZAhsBVcmPgNCgcErUzVp0yndDl3NORuP 9PfkUkW95cPHkezT8RrgsF7pw3wqCRMKSEJrlAP0xKB5PQnUYxDSsHuw0eOgj5Ct lKxfkK92o+ok3a8C0kFEDrcyEQB5cK9U8frStF9BwZeqFNBdrggL/LyOyBhgyHkT axBNvTvWUnjnSsOoFcvUhVCl9EJL7HwetEijG3hdHmkaqnsrZ4yyckKKOI7bi/M= -----END CERTIFICATE-----Generated at Thu Apr 9 09:38:25 2026 by rpki-client