$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: +0El2gZZ5e3u2yBH1KuVBbguPYc0RDeTNUTZOtc/tWE= Subject key identifier: 63:0A:AC:25:F5:32:28:D6:47:3C:E5:4D:5C:CD:7E:14:13:A3:A5:DD Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 1B1DBD94FB8B13566C6E65B891A737F925B4DC9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 07C0 Signing time: Tue 09 Sep 2025 09:27:21 +0000 Manifest this update: Tue 09 Sep 2025 09:22:21 +0000 Manifest next update: Wed 10 Sep 2025 09:30:21 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: SiUaLxirbtCv/lvVF8qQ6+zWA58qUoTDtWKa3oCGlgE=) 3: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 4: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 5: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 6: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 09:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1d:bd:94:fb:8b:13:56:6c:6e:65:b8:91:a7:37:f9:25:b4:dc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Sep 9 09:22:21 2025 GMT Not After : Sep 10 09:30:21 2025 GMT Subject: CN=630AAC25F53228D6473CE54D5CCD7E1413A3A5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:90:9a:7a:c2:73:4f:9a:18:51:c1:45:8e: 21:c5:7e:86:23:f8:58:50:76:fc:28:75:40:e5:b4: 35:9b:81:36:e5:58:0a:52:36:cc:2d:07:41:bb:9b: 4f:45:2e:91:85:21:0f:51:dc:d1:44:79:a1:0a:7c: 87:09:c4:be:97:78:e8:b8:2c:f9:bc:eb:33:13:4e: 20:4d:be:a7:c9:bd:f6:6e:34:8a:86:07:ec:de:72: d4:d2:6b:41:b1:d6:41:ee:2f:17:ce:75:43:f8:fb: f5:fe:05:f6:79:dc:ea:70:ea:e0:8e:36:ff:f9:cb: a8:ad:57:d8:f1:4b:72:67:dd:42:69:bd:28:d0:a7: ae:dd:c3:cf:17:0a:4f:04:1c:ef:fe:57:45:0a:6f: c3:b0:a1:7d:46:f4:81:0b:60:f1:0c:6d:af:2b:a0: 8e:2e:7a:9e:57:f5:a6:f5:a6:c9:ba:36:2c:be:f3: 65:1b:49:89:8d:5f:10:1c:e5:e2:73:fb:3e:a6:9c: d6:6d:0e:8f:df:f1:df:2b:ce:36:84:39:6f:40:4f: b3:f6:4d:20:2f:2b:74:96:9f:4f:b1:c8:15:17:8a: 43:d2:57:0d:f9:6e:ab:a0:cc:6f:1a:a1:36:f9:f7: 39:92:ee:32:4c:70:f1:4c:8d:56:72:6e:ff:08:d4: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:AC:25:F5:32:28:D6:47:3C:E5:4D:5C:CD:7E:14:13:A3:A5:DD X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:de:2e:81:f8:91:13:50:77:e9:95:5a:ce:ec:bc:c8:18:58: 3c:a3:7c:fc:b9:c5:3f:39:44:bd:f9:4e:0f:89:c6:95:8e:98: 14:0e:0a:96:79:47:a0:ae:a8:94:ee:c2:83:35:ed:40:8b:75: 7c:cf:9d:ca:c3:22:ce:71:8c:90:7f:e6:0e:8e:78:a4:fb:3d: 47:cb:ff:dd:ee:a4:d5:89:0c:4a:2d:2d:dc:dd:ad:9e:36:8f: 1f:2c:11:7e:88:3a:19:96:67:dc:a4:21:7d:f7:d5:77:d4:fc: 25:dc:db:5b:f6:22:3d:60:19:2f:4f:43:e9:33:c1:0f:e9:3c: d5:e8:fa:ac:f6:5d:f8:43:2f:3c:97:42:19:7c:25:9b:de:72: 70:35:cb:a5:99:31:88:1a:d5:e6:8e:83:17:de:a4:33:eb:3b: 7a:7a:f6:ca:27:36:6d:15:95:89:02:02:c1:5e:a9:33:82:33: 02:b7:10:ca:14:ec:89:0e:b2:78:e4:3a:6f:8f:59:58:2f:d2: 2e:f6:4b:81:b5:7d:b3:b5:de:17:bc:e3:dd:35:65:75:8b:a6: e3:d6:06:8d:53:8d:f2:38:ea:50:51:e3:b0:cc:f8:32:d3:6d: 9c:af:8d:f4:79:3a:13:ad:cf:b8:03:b7:f0:fa:4f:1f:21:e3: 90:99:7a:38 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUGx29lPuLE1ZsbmW4kac3+SW03JswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwOTA5MDkyMjIxWhcNMjUwOTEwMDkzMDIx WjAzMTEwLwYDVQQDEyg2MzBBQUMyNUY1MzIyOEQ2NDczQ0U1NEQ1Q0NEN0UxNDEz QTNBNUREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHiQmnrCc0+a GFHBRY4hxX6GI/hYUHb8KHVA5bQ1m4E25VgKUjbMLQdBu5tPRS6RhSEPUdzRRHmh CnyHCcS+l3jouCz5vOszE04gTb6nyb32bjSKhgfs3nLU0mtBsdZB7i8XznVD+Pv1 /gX2edzqcOrgjjb/+cuorVfY8UtyZ91Cab0o0Keu3cPPFwpPBBzv/ldFCm/DsKF9 RvSBC2DxDG2vK6COLnqeV/Wm9abJujYsvvNlG0mJjV8QHOXic/s+ppzWbQ6P3/Hf K842hDlvQE+z9k0gLyt0lp9PscgVF4pD0lcN+W6roMxvGqE2+fc5ku4yTHDxTI1W cm7/CNRyfwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFGMKrCX1MijWRzzlTVzNfhQT o6XdMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACjeLoH4kRNQd+mVWs7svMgY WDyjfPy5xT85RL35Tg+JxpWOmBQOCpZ5R6CuqJTuwoM17UCLdXzPncrDIs5xjJB/ 5g6OeKT7PUfL/93upNWJDEotLdzdrZ42jx8sEX6IOhmWZ9ykIX331XfU/CXc21v2 Ij1gGS9PQ+kzwQ/pPNXo+qz2XfhDLzyXQhl8JZvecnA1y6WZMYga1eaOgxfepDPr O3p69sonNm0VlYkCAsFeqTOCMwK3EMoU7IkOsnjkOm+PWVgv0i72S4G1fbO13he8 4901ZXWLpuPWBo1TjfI46lBR47DM+DLTbZyvjfR5OhOtz7gDt/D6Tx8h45CZejg= -----END CERTIFICATE-----Generated at Tue Sep 9 20:27:19 2025 by rpki-client