$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: wT8GOKdMzyHX79mq8S2JtEzdo7EwYHOFybLLse4YVPQ= Subject key identifier: 02:12:09:2A:28:21:5A:05:F5:E8:B7:25:44:FE:32:42:B3:AD:C0:C6 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 0680206B286AF96D95E9B9A5F0F2BD8BE37CC803 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 06F4 Signing time: Tue 15 Apr 2025 03:19:24 +0000 Manifest this update: Tue 15 Apr 2025 03:14:24 +0000 Manifest next update: Wed 16 Apr 2025 06:56:24 +0000 Files and hashes: 1: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: qLng8MpzKjnDKPxvRPs7uHy/TC/nPdsjMKPx+SYxa5g=) 2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 4: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 5: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 6: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:80:20:6b:28:6a:f9:6d:95:e9:b9:a5:f0:f2:bd:8b:e3:7c:c8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Apr 15 03:14:24 2025 GMT Not After : Apr 16 06:56:24 2025 GMT Subject: CN=0212092A28215A05F5E8B72544FE3242B3ADC0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:46:ff:44:3f:9a:a3:70:92:56:8c:aa:3e: 5f:68:c8:d0:57:f1:94:0f:81:b5:84:0e:0b:2b:4f: a9:0f:4f:26:3b:8a:7a:57:ec:64:2c:48:64:8d:db: 79:46:cf:24:d4:f9:b4:10:5f:84:98:9e:27:88:e3: e7:d2:0b:0e:59:72:4e:53:01:ba:5e:33:fd:10:30: 73:29:15:46:a7:dd:a4:85:84:cc:f7:cc:16:eb:0b: de:67:5a:c1:f6:d4:8b:1f:c4:7a:c8:a4:98:5d:10: 90:a0:e5:b6:69:8d:3d:65:6f:fa:f7:39:7d:43:e5: fa:ed:a7:50:52:46:9c:9c:38:40:16:e8:7e:7a:d3: 44:a9:cf:fe:81:fc:0a:8a:de:6d:a7:67:9b:25:c6: 6f:50:44:ed:8a:06:56:b7:2f:9d:fa:d9:2a:8c:a5: 60:e3:e7:d4:0c:10:8e:3a:c2:e6:40:ee:bc:ec:6b: 13:74:21:ec:d2:62:2c:5a:90:3c:83:18:6b:76:f2: c9:08:9b:54:24:be:d5:28:1f:3c:65:1f:c2:95:0b: 30:9e:01:64:30:c0:d2:f4:b4:6d:26:e1:2e:ac:04: 32:26:55:ee:7f:8d:62:cd:38:d2:26:d3:8b:6f:fa: 35:48:dd:24:f9:5c:19:50:05:8c:14:44:40:e5:b9: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:09:2A:28:21:5A:05:F5:E8:B7:25:44:FE:32:42:B3:AD:C0:C6 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:71:a9:64:f0:83:f4:78:7f:fa:9b:59:ca:7b:55:65:0c:1e: 3f:09:73:9d:68:74:b7:ab:c9:2e:5d:ee:6f:1e:7a:b9:26:7f: 8c:09:c4:bd:24:cb:69:aa:3f:fe:87:21:1e:83:0d:17:18:4f: b2:92:f7:2b:8e:47:63:35:54:34:5f:83:77:18:8b:86:98:13: c1:05:03:29:9f:72:5c:d7:ff:40:62:bf:13:44:be:6d:6a:27: dd:ed:91:d1:4e:36:20:af:24:3f:83:20:3c:1b:59:fb:da:94: f6:47:13:fd:dd:d5:3b:9e:ba:e4:4b:4d:fa:6e:88:e0:3a:59: a3:cf:97:39:e3:38:b9:56:9c:e7:14:6f:83:55:6c:df:f0:e3: a6:9a:54:0d:9f:b7:9d:5b:87:44:05:ca:8b:3f:92:c0:07:b7: 9e:df:fa:73:d7:37:4c:96:07:ba:29:26:e6:3a:4a:ae:b3:2a: f1:f5:42:54:03:4c:fc:fb:b4:c3:72:9b:2f:a3:04:d0:3e:70: a7:eb:fd:20:22:e2:db:b2:ab:1b:71:43:fc:53:56:15:67:52: 83:04:a2:78:2c:20:1f:99:d1:aa:fe:83:86:ce:97:13:85:f9: a6:7e:99:7f:34:c6:1f:79:51:f3:6c:ab:66:84:55:33:7c:c4: 71:7a:8e:e4 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUBoAgayhq+W2V6bml8PK9i+N8yAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNDE1MDMxNDI0WhcNMjUwNDE2MDY1NjI0 WjAzMTEwLwYDVQQDEygwMjEyMDkyQTI4MjE1QTA1RjVFOEI3MjU0NEZFMzI0MkIz QURDMEM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzodG/0Q/mqNw klaMqj5faMjQV/GUD4G1hA4LK0+pD08mO4p6V+xkLEhkjdt5Rs8k1Pm0EF+EmJ4n iOPn0gsOWXJOUwG6XjP9EDBzKRVGp92khYTM98wW6wveZ1rB9tSLH8R6yKSYXRCQ oOW2aY09ZW/69zl9Q+X67adQUkacnDhAFuh+etNEqc/+gfwKit5tp2ebJcZvUETt igZWty+d+tkqjKVg4+fUDBCOOsLmQO687GsTdCHs0mIsWpA8gxhrdvLJCJtUJL7V KB88ZR/ClQswngFkMMDS9LRtJuEurAQyJlXuf41izTjSJtOLb/o1SN0k+VwZUAWM FERA5bmcvQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFAISCSooIVoF9ei3JUT+MkKz rcDGMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI9xqWTwg/R4f/qbWcp7VWUM Hj8Jc51odLeryS5d7m8eerkmf4wJxL0ky2mqP/6HIR6DDRcYT7KS9yuOR2M1VDRf g3cYi4aYE8EFAymfclzX/0BivxNEvm1qJ93tkdFONiCvJD+DIDwbWfvalPZHE/3d 1TueuuRLTfpuiOA6WaPPlznjOLlWnOcUb4NVbN/w46aaVA2ft51bh0QFyos/ksAH t57f+nPXN0yWB7opJuY6Sq6zKvH1QlQDTPz7tMNymy+jBNA+cKfr/SAi4tuyqxtx Q/xTVhVnUoMEongsIB+Z0ar+g4bOlxOF+aZ+mX80xh95UfNsq2aEVTN8xHF6juQ= -----END CERTIFICATE-----Generated at Tue Apr 15 04:59:29 2025 by rpki-client