$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: FS1hz7p0v5bYZh0lWZaRC6hP7K3FPMMix99qdiR4Y6o= Subject key identifier: 68:9F:DF:2E:9D:CA:01:CD:CF:9D:AA:50:D5:8D:16:A4:83:07:BD:F0 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 4734B911CE1E18E0DF34FA85115C49625EB0849C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 073D Signing time: Fri 06 Jun 2025 18:55:45 +0000 Manifest this update: Fri 06 Jun 2025 18:50:45 +0000 Manifest next update: Sat 07 Jun 2025 19:24:45 +0000 Files and hashes: 1: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: MoWENTw0O6lrcGs8KR2W/nk4bOZdFpcIYph/w+LUE5Q=) 2: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 4: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 5: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 6: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 19:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:34:b9:11:ce:1e:18:e0:df:34:fa:85:11:5c:49:62:5e:b0:84:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jun 6 18:50:45 2025 GMT Not After : Jun 7 19:24:45 2025 GMT Subject: CN=689FDF2E9DCA01CDCF9DAA50D58D16A48307BDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fd:ea:49:81:49:6f:dc:f0:9d:73:67:29:5b: 68:ba:0a:bd:b1:3a:e2:11:13:25:5d:ba:41:ba:5f: 8b:00:0d:e2:4c:ba:ed:ff:00:cc:4a:6d:5b:f4:07: a2:72:57:fd:33:9f:68:7d:05:a4:2d:d0:01:4a:6b: 2b:d3:35:aa:b1:23:98:2d:22:3b:8f:cd:fc:b7:93: 7c:db:e5:57:41:dd:b2:1f:eb:93:58:d0:79:e8:b9: 96:14:7d:ea:c8:af:55:bf:56:c5:20:54:42:4a:8e: aa:b7:6c:43:9f:d1:51:1f:2a:37:2c:17:0f:23:7f: d3:7d:83:82:ca:71:1e:af:4d:3e:ec:ae:b1:d3:d8: 96:47:4b:fc:1a:02:91:f8:f4:d0:2e:b4:49:1d:6a: 57:ed:44:d8:0d:4c:56:1f:2d:ea:68:30:0a:0d:ae: 07:1c:59:1e:42:87:11:3f:06:96:39:cd:2c:b4:82: de:88:02:58:88:30:71:ba:5c:c7:0c:f7:a9:ec:75: 09:a6:51:4a:73:ab:2b:71:28:26:ab:81:80:64:cd: 47:9d:29:69:8f:8d:33:e5:49:e0:12:9e:96:ca:97: a8:25:0d:91:b4:7f:ba:38:cb:6e:c7:2c:4b:04:46: 08:37:d6:42:d5:20:a7:84:be:3e:b8:87:89:93:3c: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9F:DF:2E:9D:CA:01:CD:CF:9D:AA:50:D5:8D:16:A4:83:07:BD:F0 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:61:7c:42:91:21:73:3a:c0:e4:d9:cf:b2:d9:0b:c3:c6:c4: cb:b8:ef:c3:90:43:76:a3:48:70:1f:92:c4:d3:1a:21:12:8e: 46:71:57:0d:70:c3:f4:89:08:5b:3e:03:a9:cf:1d:b7:cb:b8: b4:c7:b2:76:0f:82:d3:fe:d6:d1:df:85:4b:31:7d:66:76:68: c5:88:c9:ab:2a:83:70:e2:98:f2:bd:cb:ca:a1:f8:8c:59:25: fc:e2:b8:12:d2:75:0b:67:00:fe:a5:78:18:c8:0e:d5:f8:da: 79:b4:0e:7c:17:72:b6:45:e9:9e:43:e5:70:f2:5e:e0:09:0c: 6c:6b:a8:82:b5:5b:3a:7a:01:8f:8f:fb:73:03:9d:f9:2f:0b: 52:bc:2e:f4:15:84:a2:fe:4e:82:2d:ae:d8:b3:a2:6b:d2:b3: 93:14:cc:62:3d:12:ed:cf:d8:37:69:70:fb:a0:46:32:31:78: 40:96:66:a6:92:7c:5b:25:9d:6d:ba:4f:39:cb:f7:88:6e:57: 7b:7b:72:bd:a3:cd:4f:c5:a0:61:ab:84:3e:9c:ad:45:5b:95: 79:86:14:9d:fb:3f:67:86:e2:60:b9:31:05:80:52:78:ec:f4: 7a:14:ed:76:2d:56:f7:e8:93:24:49:19:1c:19:47:8e:db:7f: 2c:30:1e:0b -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIURzS5Ec4eGODfNPqFEVxJYl6whJwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNjA2MTg1MDQ1WhcNMjUwNjA3MTkyNDQ1 WjAzMTEwLwYDVQQDEyg2ODlGREYyRTlEQ0EwMUNEQ0Y5REFBNTBENThEMTZBNDgz MDdCREYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/3qSYFJb9zw nXNnKVtougq9sTriERMlXbpBul+LAA3iTLrt/wDMSm1b9Aeiclf9M59ofQWkLdAB Smsr0zWqsSOYLSI7j838t5N82+VXQd2yH+uTWNB56LmWFH3qyK9Vv1bFIFRCSo6q t2xDn9FRHyo3LBcPI3/TfYOCynEer00+7K6x09iWR0v8GgKR+PTQLrRJHWpX7UTY DUxWHy3qaDAKDa4HHFkeQocRPwaWOc0stILeiAJYiDBxulzHDPep7HUJplFKc6sr cSgmq4GAZM1HnSlpj40z5UngEp6WypeoJQ2RtH+6OMtuxyxLBEYIN9ZC1SCnhL4+ uIeJkzz9VwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFGif3y6dygHNz52qUNWNFqSD B73wMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEhhfEKRIXM6wOTZz7LZC8PG xMu478OQQ3ajSHAfksTTGiESjkZxVw1ww/SJCFs+A6nPHbfLuLTHsnYPgtP+1tHf hUsxfWZ2aMWIyasqg3DimPK9y8qh+IxZJfziuBLSdQtnAP6leBjIDtX42nm0DnwX crZF6Z5D5XDyXuAJDGxrqIK1Wzp6AY+P+3MDnfkvC1K8LvQVhKL+ToItrtizomvS s5MUzGI9Eu3P2DdpcPugRjIxeECWZqaSfFslnW26TznL94huV3t7cr2jzU/FoGGr hD6crUVblXmGFJ37P2eG4mC5MQWAUnjs9HoU7XYtVvfokyRJGRwZR47bfywwHgs= -----END CERTIFICATE-----Generated at Sat Jun 7 05:47:09 2025 by rpki-client