$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: Z+vAYqlHc0ER3wGp9+eKn4FylOMYFtC4SqaOV3htMj4= Subject key identifier: EA:58:07:00:2D:75:C8:F2:6A:3A:19:97:90:8A:1C:40:31:E0:FD:C6 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 0D51F8EED8AE96918FF69C1FA9F3104AE6B73481 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 0804 Signing time: Tue 28 Oct 2025 17:50:28 +0000 Manifest this update: Tue 28 Oct 2025 17:45:28 +0000 Manifest next update: Wed 29 Oct 2025 19:01:28 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 2: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 3: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 4: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 5: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: 4CZ9bfZTthw3B+DtoWoJ78dXxNwq5C8OlPflHIYgPzE=) 6: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:51:f8:ee:d8:ae:96:91:8f:f6:9c:1f:a9:f3:10:4a:e6:b7:34:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Oct 28 17:45:28 2025 GMT Not After : Oct 29 19:01:28 2025 GMT Subject: CN=EA5807002D75C8F26A3A1997908A1C4031E0FDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:4e:36:fe:f2:de:c7:2b:fc:07:a2:98:13: 26:3d:88:e2:11:e2:f6:ff:54:78:73:e6:d3:46:64: 87:23:ae:51:e2:03:9c:72:6b:c8:29:de:1e:df:cf: 50:dc:d5:e8:50:60:39:cc:32:97:ce:f8:d5:93:7b: 07:a9:70:eb:c0:f3:72:e8:1d:01:d8:3b:5c:57:46: a5:d4:77:9d:53:ec:8e:f2:50:27:32:50:06:38:71: cd:0d:cb:bd:fa:62:d7:a5:ec:f6:e6:be:8c:ec:c6: 64:eb:e2:41:f1:cc:17:d7:0c:05:b8:77:64:95:47: 65:bf:3c:0f:48:e4:7e:c1:52:78:41:cc:86:7f:87: 86:0f:fe:3b:e6:df:13:09:e1:11:3d:9a:38:97:08: df:b4:2e:5a:b6:f9:aa:a1:dd:22:e3:44:56:f5:0b: d8:85:97:07:f0:24:44:1b:10:f3:a8:41:e6:c5:97: 9e:59:47:a4:6f:4f:a4:db:59:62:22:30:20:9a:7c: 43:0e:db:1b:47:2a:f3:69:cc:16:d8:9d:b9:4e:8e: 7e:31:1e:a0:e8:2b:7f:aa:51:d0:84:48:13:ea:ac: 7c:8e:4f:f8:9d:ec:6e:69:e3:79:d3:96:92:0f:3b: 2f:24:b9:f5:ac:3c:c7:e0:a6:5c:a0:8d:42:e1:df: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:07:00:2D:75:C8:F2:6A:3A:19:97:90:8A:1C:40:31:E0:FD:C6 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:90:3d:40:09:3e:0d:3f:88:e4:57:a0:b0:48:d7:04:77: c3:7b:32:77:81:b5:43:31:80:6f:03:ae:63:4d:51:35:6e:eb: 9a:3b:bb:bf:bf:d9:9a:7d:b8:0d:56:48:ee:0d:14:41:1e:cd: ac:85:d9:10:82:45:c4:ec:a1:18:07:ea:7d:ae:4a:cb:64:92: 09:fb:36:51:c4:32:ff:06:ff:53:68:9e:1e:af:54:ba:e2:9d: 70:44:80:d6:b1:c7:6f:1d:a9:d3:78:c8:ca:d6:8e:f7:ba:53: 2d:52:44:a4:89:b3:4d:6d:0c:33:2d:67:2a:cb:18:03:bd:1c: b4:24:da:d0:93:0b:16:f4:40:dd:ca:c6:78:28:8d:e4:72:86: 1a:65:c6:66:ce:6f:9d:3d:e0:4d:5c:f3:20:fe:cb:01:b0:2d: 2f:97:38:22:38:3c:a4:bc:42:f2:31:26:bb:96:c1:c4:fc:c7: 1a:99:51:b2:8b:c7:0e:5e:7a:51:29:52:33:ad:59:5b:c1:9d: 27:12:5e:fc:c7:2f:c2:7b:08:98:b4:1c:93:75:97:52:d7:6e: 5e:ba:08:16:c2:d0:54:a2:a4:2c:62:a1:b6:d8:3e:bc:97:5e: 7f:a4:93:25:ee:4a:bc:e1:25:f3:13:f9:3e:d5:1d:a2:6e:d0: 1a:e9:41:4e -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUDVH47tiulpGP9pwfqfMQSua3NIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMDI4MTc0NTI4WhcNMjUxMDI5MTkwMTI4 WjAzMTEwLwYDVQQDEyhFQTU4MDcwMDJENzVDOEYyNkEzQTE5OTc5MDhBMUM0MDMx RTBGREM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9lONv7y3scr /AeimBMmPYjiEeL2/1R4c+bTRmSHI65R4gOccmvIKd4e389Q3NXoUGA5zDKXzvjV k3sHqXDrwPNy6B0B2DtcV0al1HedU+yO8lAnMlAGOHHNDcu9+mLXpez25r6M7MZk 6+JB8cwX1wwFuHdklUdlvzwPSOR+wVJ4QcyGf4eGD/475t8TCeERPZo4lwjftC5a tvmqod0i40RW9QvYhZcH8CREGxDzqEHmxZeeWUekb0+k21liIjAgmnxDDtsbRyrz acwW2J25To5+MR6g6Ct/qlHQhEgT6qx8jk/4nexuaeN505aSDzsvJLn1rDzH4KZc oI1C4d+tRQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFOpYBwAtdcjyajoZl5CKHEAx 4P3GMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAISwkD1ACT4NP4jkV6CwSNcE d8N7MneBtUMxgG8DrmNNUTVu65o7u7+/2Zp9uA1WSO4NFEEezayF2RCCRcTsoRgH 6n2uSstkkgn7NlHEMv8G/1Nonh6vVLrinXBEgNaxx28dqdN4yMrWjve6Uy1SRKSJ s01tDDMtZyrLGAO9HLQk2tCTCxb0QN3KxngojeRyhhplxmbOb5094E1c8yD+ywGw LS+XOCI4PKS8QvIxJruWwcT8xxqZUbKLxw5eelEpUjOtWVvBnScSXvzHL8J7CJi0 HJN1l1LXbl66CBbC0FSipCxiobbYPryXXn+kkyXuSrzhJfMT+T7VHaJu0BrpQU4= -----END CERTIFICATE-----Generated at Wed Oct 29 00:18:11 2025 by rpki-client