$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: 3mBiQGVYLA6VOyhJrFniI/519FmBFTiyFbujJlRIadU= Subject key identifier: CF:5C:CD:C2:77:E5:A1:28:0C:F3:D1:02:0B:B3:A4:3E:DA:F1:8B:4C Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 1B49A2424D8EC1245726E2931B6C60CAE34565CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 07D4 Signing time: Sat 10 May 2025 17:21:56 +0000 Manifest this update: Sat 10 May 2025 17:16:56 +0000 Manifest next update: Sun 11 May 2025 17:49:56 +0000 Files and hashes: 1: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: VZMiOD7NyNyQBNHQ8wW9G4YXVpv5TbrNYddDiHcQtcY=) 2: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 0cNTecmkjnUfzOo0lDUBgluK59dvsGew1EUUhyFgyIw=) 3: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=) 4: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=) 5: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: lVeD0OBryZIFs0Dh4RJF4WX10ZAtCz7OAri6R4+uMEg=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:49:a2:42:4d:8e:c1:24:57:26:e2:93:1b:6c:60:ca:e3:45:65:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: May 10 17:16:56 2025 GMT Not After : May 11 17:49:56 2025 GMT Subject: CN=CF5CCDC277E5A1280CF3D1020BB3A43EDAF18B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:27:19:21:dd:c3:97:45:08:1b:f2:c7:5d: 82:dc:46:9b:7b:aa:dc:bf:96:fc:af:9f:45:0e:a8: 09:b4:07:a5:9e:2b:6b:d3:2d:e5:80:56:b5:9b:ff: 92:89:cb:bb:25:03:89:b1:c5:ca:db:fb:69:ec:8e: e5:54:55:59:8b:88:b5:22:e3:a7:7b:2c:ab:dd:56: 01:eb:c4:30:d9:8f:55:c5:bb:ed:7c:e7:fe:35:e8: fc:a7:ce:eb:69:e6:02:28:37:2a:36:84:fb:c7:80: 84:06:1c:2c:fd:a1:ef:fd:6b:55:42:32:3d:e5:fc: ff:75:df:8d:93:2c:33:ad:f1:3e:dc:bf:b0:37:64: 9f:77:3a:28:5a:7e:02:d5:5c:df:a1:ee:57:33:7b: 2f:fb:c9:7c:5b:4f:47:e8:1c:b6:fa:0b:56:35:22: 8b:52:49:3a:89:b4:bb:9d:6b:91:db:ee:9c:3b:56: 0d:27:c9:b4:66:58:db:3e:3d:78:37:ef:9d:e5:6d: 7d:ca:67:57:49:60:67:e8:ea:1d:2e:3b:b0:85:6c: dd:e2:09:72:fa:b4:b8:81:53:ea:0c:81:48:84:f2: e3:5d:c6:22:cb:64:02:5f:0e:d0:8e:a0:3d:92:a8: 7d:f1:35:68:3e:cf:8b:0c:6f:24:ea:86:cd:76:5e: f0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5C:CD:C2:77:E5:A1:28:0C:F3:D1:02:0B:B3:A4:3E:DA:F1:8B:4C X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:df:50:73:89:75:52:cf:89:a3:9f:a1:40:2e:40:d9:57:8b: 60:04:a1:a8:1d:61:e2:b2:b4:18:2b:f0:a7:42:58:4f:b0:94: 36:b6:f3:4c:69:fe:a4:ec:4c:e3:90:8b:59:b1:9a:9b:49:92: ba:11:a7:14:f7:84:0c:49:e3:88:27:d2:cb:a3:14:d6:e8:83: 96:ba:0a:e5:b2:1b:e9:d8:f2:5b:77:cf:d6:4f:ab:af:dc:f3: 02:e0:74:27:c3:ab:85:09:93:e4:95:6d:f0:63:e7:6a:dc:bc: 4f:46:b6:3a:50:af:d7:e1:a1:d1:d5:e4:9e:a9:25:23:bc:45: 67:f2:58:8b:39:68:b3:95:80:1a:fa:da:ee:16:e1:e6:75:33: ee:fb:1d:f0:a1:c9:7c:67:18:7b:dc:bc:0e:2c:1a:fe:54:d0: 5f:77:8c:0c:0f:d4:e4:4a:57:17:55:60:cb:66:b4:40:e5:2e: 6e:e4:5e:25:4d:3a:d3:a7:21:97:44:75:35:e4:d9:39:42:4a: 85:00:d7:a6:04:56:a8:a9:bb:00:70:17:36:64:36:1c:7d:3a: 5d:49:cc:ca:fc:bd:e9:b8:ef:74:04:bf:55:b1:5f:d6:50:b2: 85:d4:88:62:a1:c1:93:d5:c2:8c:f2:03:af:5e:27:f4:ed:92: f8:a4:6d:83 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUG0miQk2OwSRXJuKTG2xgyuNFZc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwNTEwMTcxNjU2WhcNMjUwNTExMTc0OTU2 WjAzMTEwLwYDVQQDEyhDRjVDQ0RDMjc3RTVBMTI4MENGM0QxMDIwQkIzQTQzRURB RjE4QjRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8cnGSHdw5dF CBvyx12C3Eabe6rcv5b8r59FDqgJtAelnitr0y3lgFa1m/+Sicu7JQOJscXK2/tp 7I7lVFVZi4i1IuOneyyr3VYB68Qw2Y9VxbvtfOf+Nej8p87raeYCKDcqNoT7x4CE Bhws/aHv/WtVQjI95fz/dd+NkywzrfE+3L+wN2SfdzooWn4C1Vzfoe5XM3sv+8l8 W09H6By2+gtWNSKLUkk6ibS7nWuR2+6cO1YNJ8m0ZljbPj14N++d5W19ymdXSWBn 6OodLjuwhWzd4gly+rS4gVPqDIFIhPLjXcYiy2QCXw7QjqA9kqh98TVoPs+LDG8k 6obNdl7wYwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFM9czcJ35aEoDPPRAguzpD7a 8YtMMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAATfUHOJdVLPiaOfoUAuQNlX i2AEoagdYeKytBgr8KdCWE+wlDa280xp/qTsTOOQi1mxmptJkroRpxT3hAxJ44gn 0sujFNbog5a6CuWyG+nY8lt3z9ZPq6/c8wLgdCfDq4UJk+SVbfBj52rcvE9GtjpQ r9fhodHV5J6pJSO8RWfyWIs5aLOVgBr62u4W4eZ1M+77HfChyXxnGHvcvA4sGv5U 0F93jAwP1ORKVxdVYMtmtEDlLm7kXiVNOtOnIZdEdTXk2TlCSoUA16YEVqipuwBw FzZkNhx9Ol1JzMr8vem473QEv1WxX9ZQsoXUiGKhwZPVwozyA69eJ/TtkvikbYM= -----END CERTIFICATE-----Generated at Sat May 10 21:12:34 2025 by rpki-client