$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: jJk5CYfIuKAHDE42nX9cWiIU6veO6EUZG/QA1LOehWo= Subject key identifier: F5:99:65:6E:29:71:D1:42:1D:EF:A5:E5:19:4C:D6:01:20:6E:22:26 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 7B498066EB7CBAFB3E54F83F30E5185C474C6F92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 0994 Signing time: Thu 26 Mar 2026 05:16:31 +0000 Manifest this update: Thu 26 Mar 2026 05:11:31 +0000 Manifest next update: Fri 27 Mar 2026 06:03:31 +0000 Files and hashes: 1: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: 3LxFo8EzH4snqdJWr0jU/sulnVUfflkBoRHhwL3Xt8k=) 2: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 3: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 4: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 5: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 06:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:49:80:66:eb:7c:ba:fb:3e:54:f8:3f:30:e5:18:5c:47:4c:6f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Mar 26 05:11:31 2026 GMT Not After : Mar 27 06:03:31 2026 GMT Subject: CN=F599656E2971D1421DEFA5E5194CD601206E2226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:d0:f0:e5:ca:c8:cf:11:a4:e8:9d:ec:17: a8:e1:fd:04:92:83:c9:6e:08:7b:cb:95:6b:f7:83: 25:02:d2:8e:79:84:96:2b:21:3f:c6:57:a8:cd:1f: 9c:bf:3b:c2:e3:3f:40:45:5a:c6:e6:62:1e:cb:1a: 11:ee:88:6c:9c:b5:e7:80:cf:a4:0c:9b:50:a9:d4: f4:83:ff:4d:7b:91:f6:88:cc:94:8d:c6:e9:48:a1: ca:9d:58:d7:29:71:e7:12:57:22:5f:e4:9a:11:16: 21:c6:8d:77:2c:8b:76:f8:8d:6a:56:0a:13:25:03: 46:e0:8a:f2:b6:c6:ca:e8:60:b4:8d:4c:0c:3f:46: c2:ef:03:bf:46:e4:2d:0d:f7:23:f5:45:dd:18:f4: a2:e3:2b:8d:aa:32:e9:dd:1c:4f:5d:4d:c7:41:d9: ed:e2:ed:bb:3f:b6:52:91:46:b5:1e:f8:62:a0:4b: cb:40:7f:e8:ec:0a:fe:94:f0:67:a6:88:35:94:f7: 80:55:ea:38:a4:aa:9f:47:d0:b6:8f:c2:37:ed:10: 08:ea:b8:fd:c0:74:35:9e:ac:9b:e3:91:69:09:46: 24:24:af:fd:a4:ee:b4:da:c3:19:70:24:8f:89:24: 4f:2c:1b:5d:74:a0:dc:39:17:bf:d6:a1:fc:67:ad: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:65:6E:29:71:D1:42:1D:EF:A5:E5:19:4C:D6:01:20:6E:22:26 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ca:31:dd:80:62:21:f0:d3:aa:f5:12:9b:8c:63:7d:a0:ca: db:25:16:87:82:7c:9c:79:2c:d9:1d:d6:e2:0d:c4:9e:70:95: 31:16:93:e3:9a:60:49:7b:77:b0:26:46:50:b0:e7:65:c2:8f: fb:12:05:02:84:3d:e7:15:10:fe:3f:a4:bc:a7:af:d0:7f:81: d9:f9:bb:92:dd:19:a4:9b:b0:86:24:7e:85:7f:a7:24:f5:e6: 17:79:10:b1:86:4d:ce:d5:02:21:52:2e:33:4a:82:0b:69:45: b9:65:1b:1b:24:4b:97:8d:0b:25:21:53:0a:c9:78:c8:fb:32: 9b:f9:b8:15:2e:fb:42:3d:ea:2a:f2:cf:25:50:fb:36:50:fa: 59:d3:64:8f:eb:f1:cc:49:dd:c5:38:af:2c:d9:c5:89:3d:84: cd:32:c5:38:d6:c0:45:d2:10:c3:5a:f0:5f:2d:b8:8c:75:80: 42:3d:26:f5:37:ee:88:b8:09:67:c4:21:c9:90:49:27:94:53: 38:1a:02:bf:8a:4d:51:b7:d9:ab:4e:76:f0:78:a8:20:e6:1b: 0a:d5:06:2f:8e:95:8d:b1:2b:ea:0b:bb:a8:25:94:f8:68:67: 8b:f3:a7:f1:f1:38:a4:8b:4b:b7:1d:97:ba:01:cd:2a:fb:e0: 9c:e4:7d:71 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUe0mAZut8uvs+VPg/MOUYXEdMb5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwMzI2MDUxMTMxWhcNMjYwMzI3MDYwMzMx WjAzMTEwLwYDVQQDEyhGNTk5NjU2RTI5NzFEMTQyMURFRkE1RTUxOTRDRDYwMTIw NkUyMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumHQ8OXKyM8R pOid7Beo4f0EkoPJbgh7y5Vr94MlAtKOeYSWKyE/xleozR+cvzvC4z9ARVrG5mIe yxoR7ohsnLXngM+kDJtQqdT0g/9Ne5H2iMyUjcbpSKHKnVjXKXHnElciX+SaERYh xo13LIt2+I1qVgoTJQNG4IrytsbK6GC0jUwMP0bC7wO/RuQtDfcj9UXdGPSi4yuN qjLp3RxPXU3HQdnt4u27P7ZSkUa1HvhioEvLQH/o7Ar+lPBnpog1lPeAVeo4pKqf R9C2j8I37RAI6rj9wHQ1nqyb45FpCUYkJK/9pO602sMZcCSPiSRPLBtddKDcORe/ 1qH8Z62FKQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFPWZZW4pcdFCHe+l5RlM1gEg biImMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALHKMd2AYiHw06r1EpuMY32g ytslFoeCfJx5LNkd1uINxJ5wlTEWk+OaYEl7d7AmRlCw52XCj/sSBQKEPecVEP4/ pLynr9B/gdn5u5LdGaSbsIYkfoV/pyT15hd5ELGGTc7VAiFSLjNKggtpRbllGxsk S5eNCyUhUwrJeMj7Mpv5uBUu+0I96iryzyVQ+zZQ+lnTZI/r8cxJ3cU4ryzZxYk9 hM0yxTjWwEXSEMNa8F8tuIx1gEI9JvU37oi4CWfEIcmQSSeUUzgaAr+KTVG32atO dvB4qCDmGwrVBi+OlY2xK+oLu6gllPhoZ4vzp/HxOKSLS7cdl7oBzSr74JzkfXE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:50:03 2026 by rpki-client