
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json)
Hash identifier: VE+CYraKQk126U8FrUIvPdIHagS4UEwZ0KIOqb7HtzY=
Subject key identifier: F4:F1:51:11:96:74:8E:1A:9F:C7:ED:62:C6:75:74:1A:AD:75:9D:AB
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial: 289C9E9CE227360B1922F5B0A9CA8EC40AEC3901
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
Manifest number: 0ABC
Signing time: Tue 22 Sep 2026 17:49:58 +0000
Manifest this update: Tue 22 Sep 2026 17:44:58 +0000
Manifest next update: Wed 23 Sep 2026 21:37:58 +0000
Files and hashes: 1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: URjxs2pYXMgSsRubS4bTPCGcSFCNZx3JFBExBL8gEVU=)
2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: vT1Bi1E42esOqDhk6jaaZaT7b++scr5Ql7nsLVhnpFw=)
3: 323630343a653863303a3a2f33322d3438203d3e2038383838.roa (hash: glekDeUgXWlI8WExfCgOlnFZXkLmuhBsXXbJb/HS10Q=)
4: 323630343a653863303a3a2f33322d3438203d3e2039333132.roa (hash: Gx4JSdXhsb3t6cRlU5pcEof2tSSnaoYVAUmDF07dqWM=)
5: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 1L3r9dAb4ArTs+JwVFqTc6fBNWbhuqIUWzPbtIV0XLM=)
6: 323630343a653863303a3a2f33322d3438203d3e2033323034.roa (hash: 6Pp54gQT3IByeqo+WuS3or3CblQUutD2QvvflyjOfCo=)
7: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: wElBQ2J8Npd+aQ0+qgvvzRNMA0Gs9g0abGDOi6K8G/c=)
8: 323630343a653863303a3a2f33322d3438203d3e2034373835.roa (hash: t6Lqf90fM+B1Alaz+AUSvgl8z7na7/3WnB/tp3E/5LA=)
9: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: aPcairJzpYP/EQ9G2E+s+69rjrG2KaX8vdqp0ISsIkA=)
10: 323630343a653863303a3a2f33322d3438203d3e2033323538.roa (hash: tihNcymQDG5rLDuTNdu8vKzzLueFMEP6ix9PxPTPBPo=)
11: 323630343a653863303a3a2f33322d3438203d3e2033323134.roa (hash: wB7fCIOvBoo2CFeKFSOnjURbXONS2wJ8mbqMhBnRDL8=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:9c:9e:9c:e2:27:36:0b:19:22:f5:b0:a9:ca:8e:c4:0a:ec:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Validity
Not Before: Sep 22 17:44:58 2026 GMT
Not After : Sep 23 21:37:58 2026 GMT
Subject: CN=F4F1511196748E1A9FC7ED62C675741AAD759DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:99:53:7c:66:2d:34:36:2c:c2:6c:d3:f5:
67:3b:fc:ac:9d:79:bd:7b:fe:0f:8c:79:26:fc:d6:
c6:44:5e:bc:d1:a3:79:2b:9f:b6:6e:99:7b:a7:6a:
2a:01:d0:1b:9a:8e:b7:65:78:0f:53:bc:0e:82:94:
50:94:35:39:f0:27:f0:de:f3:86:62:f2:0a:47:e7:
e2:b6:15:31:dc:fd:ea:69:03:cf:2b:5c:2f:23:87:
c1:8f:70:de:da:2e:27:8d:d7:5a:64:67:02:1b:70:
1a:e7:47:54:61:56:95:47:f6:0e:9a:cc:a3:56:42:
69:17:70:d4:a6:6a:f2:02:22:a4:01:a4:1e:83:29:
68:e8:62:5a:8c:ce:5e:06:18:0b:36:9e:fa:9f:4a:
f2:dd:78:f2:79:17:cf:12:e5:8f:81:24:f7:f6:c9:
4f:fc:48:bb:25:03:01:31:9c:94:0f:ff:07:8b:2c:
1d:5b:64:6b:db:83:20:70:cc:db:13:c1:79:48:54:
02:96:a9:a6:0e:fe:6a:28:4a:2a:b3:12:78:55:c6:
0d:44:5c:be:c4:72:13:6c:15:61:1e:8b:7e:76:a9:
bc:f0:00:c4:dd:b5:5e:32:f9:fb:c5:bb:ba:60:b4:
8b:79:a9:dc:7d:8a:7f:2f:6c:13:22:df:fa:d1:9f:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:51:11:96:74:8E:1A:9F:C7:ED:62:C6:75:74:1A:AD:75:9D:AB
X509v3 Authority Key Identifier:
keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bc:ca:30:0e:61:9e:fa:67:c4:a8:71:0a:17:29:ff:b2:9d:
a7:f6:81:89:f6:56:71:29:9c:f9:59:5d:42:b6:8e:4e:41:b1:
a9:e1:6a:c6:64:3a:be:ac:25:6c:83:34:73:ac:0d:8f:8b:57:
3e:08:2e:e7:b8:3e:bf:91:1a:fc:b0:3e:06:79:87:7e:bf:bf:
e5:1e:69:0f:32:ce:49:79:02:75:a7:4b:9b:d9:be:2a:29:3e:
36:3a:b7:c5:c1:08:41:42:47:83:d3:bd:29:37:d2:ba:0d:6a:
d2:20:23:65:af:7d:3d:82:96:a4:7f:21:4d:e1:4b:c7:09:97:
79:1f:3d:31:60:ac:13:06:14:bd:f6:a0:aa:4c:4e:d6:0c:05:
a0:19:95:fd:e6:d4:2c:83:08:ba:11:00:f6:5f:87:12:df:16:
5c:34:77:7a:39:ed:4e:0f:72:3e:24:0e:43:eb:d1:c4:ff:25:
e3:06:d2:94:8e:a8:c0:cc:ee:4d:0e:b3:77:bd:40:cf:d4:1c:
9f:f5:68:c6:89:5e:81:4b:78:ec:25:df:8f:78:ee:cc:0c:e4:
a5:d2:b5:e0:ca:5e:7c:4e:55:35:3c:a8:1e:05:f4:d1:16:5a:
12:b5:61:9a:2f:19:98:6f:a8:2b:87:ee:af:d1:f9:94:4d:0b:
20:88:b4:cc
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUKJyenOInNgsZIvWwqcqOxArsOQEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2
ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwOTIyMTc0NDU4WhcNMjYwOTIzMjEzNzU4
WjAzMTEwLwYDVQQDEyhGNEYxNTExMTk2NzQ4RTFBOUZDN0VENjJDNjc1NzQxQUFE
NzU5REFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYKZU3xmLTQ2
LMJs0/VnO/ysnXm9e/4PjHkm/NbGRF680aN5K5+2bpl7p2oqAdAbmo63ZXgPU7wO
gpRQlDU58Cfw3vOGYvIKR+fithUx3P3qaQPPK1wvI4fBj3De2i4njddaZGcCG3Aa
50dUYVaVR/YOmsyjVkJpF3DUpmryAiKkAaQegylo6GJajM5eBhgLNp76n0ry3Xjy
eRfPEuWPgST39slP/Ei7JQMBMZyUD/8HiywdW2Rr24MgcMzbE8F5SFQClqmmDv5q
KEoqsxJ4VcYNRFy+xHITbBVhHot+dqm88ADE3bVeMvn7xbu6YLSLeancfYp/L2wT
It/60Z8IPQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFPTxURGWdI4an8ftYsZ1dBqt
dZ2rMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw
Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz
YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4
MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5
NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHq8yjAOYZ76Z8SocQoXKf+y
naf2gYn2VnEpnPlZXUK2jk5BsanhasZkOr6sJWyDNHOsDY+LVz4ILue4Pr+RGvyw
PgZ5h36/v+UeaQ8yzkl5AnWnS5vZviopPjY6t8XBCEFCR4PTvSk30roNatIgI2Wv
fT2ClqR/IU3hS8cJl3kfPTFgrBMGFL32oKpMTtYMBaAZlf3m1CyDCLoRAPZfhxLf
Flw0d3o57U4Pcj4kDkPr0cT/JeMG0pSOqMDM7k0Os3e9QM/UHJ/1aMaJXoFLeOwl
34947swM5KXSteDKXnxOVTU8qB4F9NEWWhK1YZovGZhvqCuH7q/R+ZRNCyCItMw=
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:34:48 2026 by rpki-client