$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: dflbfwffWyqbLhFjs5WTe+gVqz9Kb7l9pLQEleTvkGQ= Subject key identifier: B1:1E:69:9E:82:20:A5:EF:1D:9B:2E:AB:86:4B:D5:F0:CD:2D:B0:C2 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 1899671B1C580409BC4CFD44F9959570AD990722 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 08B3 Signing time: Mon 20 Oct 2025 00:13:56 +0000 Manifest this update: Mon 20 Oct 2025 00:08:56 +0000 Manifest next update: Tue 21 Oct 2025 04:10:56 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 2: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 3: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 5: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: 9rdw1sqPvsBVua93FxD8VWPoEdaSfyErh1PbI9xE1P8=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:99:67:1b:1c:58:04:09:bc:4c:fd:44:f9:95:95:70:ad:99:07:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Oct 20 00:08:56 2025 GMT Not After : Oct 21 04:10:56 2025 GMT Subject: CN=B11E699E8220A5EF1D9B2EAB864BD5F0CD2DB0C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:6a:72:ba:78:9b:48:f8:f6:ba:ac:8d:11: dd:bc:24:88:1c:40:f7:6d:64:c0:94:0e:08:31:2a: 3d:df:ad:b5:68:26:cb:55:91:de:70:26:0a:cf:e6: 99:27:34:75:b2:a6:c3:97:c5:9d:4d:55:d2:a1:c0: fe:cf:d7:ae:1b:00:ec:56:10:ed:47:b5:06:e5:10: 8d:72:e3:eb:a4:40:22:07:5b:01:fe:a9:7b:23:da: 6c:72:8a:69:5d:46:c8:a9:b1:9d:b7:9a:da:52:0b: fa:bb:71:f9:21:0e:1a:5f:d3:c2:ba:e2:72:dc:13: e1:aa:42:5e:1f:c2:98:cf:9e:30:95:1b:85:a5:e4: 2c:13:07:b7:e9:d3:9a:5c:4d:06:ac:86:46:21:2b: c5:a5:83:0b:59:e4:90:d9:0e:f4:64:84:a2:5d:88: 29:e5:1f:e7:94:d5:e5:32:b8:30:14:5d:b5:04:4c: c0:11:6f:78:ea:14:7e:d6:8a:74:2d:14:c1:55:43: 81:e5:aa:ac:51:7d:fc:55:b2:31:70:5f:47:26:71: a9:2e:d7:94:58:a2:33:67:21:fb:6c:c9:e9:57:a5: 43:03:47:bb:5f:60:0e:29:28:9d:73:6d:23:bc:0a: cb:e3:16:d4:55:bc:88:7d:6d:e6:d5:a0:b2:fa:b8: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:69:9E:82:20:A5:EF:1D:9B:2E:AB:86:4B:D5:F0:CD:2D:B0:C2 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f0:5f:9e:2e:c0:2b:91:d6:7f:a9:c7:01:fc:7c:e4:40:d0: b2:10:de:96:8e:f2:58:2a:b1:e8:d6:5d:16:78:1a:61:4a:93: 40:4d:19:fd:64:69:9a:a3:11:f1:b9:db:19:3b:ee:c7:7f:0b: dd:10:ca:6b:8d:82:b8:09:bd:6b:d6:b1:dc:ec:70:07:e5:f2: 86:b3:58:87:8c:9e:5f:59:07:c4:6f:c3:ad:bc:f2:ed:18:66: 7a:44:8c:f1:3e:c6:f2:3b:e8:48:14:14:d5:ad:74:f5:35:cf: c0:92:68:1b:54:e9:8d:9b:dd:b5:5a:d8:53:0c:11:9b:b6:cd: 71:17:f1:59:27:5c:17:56:96:d1:f2:87:32:2a:b5:2b:65:06: 82:6c:21:da:ed:88:f4:51:c5:9a:02:29:0c:69:c5:34:ee:ce: 7b:24:d7:0a:42:d3:4d:2b:f4:6b:6e:e9:6d:49:43:28:80:0a: 24:99:06:a5:7c:9d:31:63:4a:6d:6a:78:c3:6e:37:46:b1:98: 23:bf:04:a3:dd:c6:8d:16:41:bc:e6:15:d3:9a:01:56:72:b0: 28:fa:86:70:ad:3e:02:31:da:92:bd:e4:38:89:73:03:20:49: 7f:3d:9b:1b:18:1d:24:c6:92:9c:6a:3a:ed:c1:0a:76:1d:6e: 08:07:47:3a -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUGJlnGxxYBAm8TP1E+ZWVcK2ZByIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUxMDIwMDAwODU2WhcNMjUxMDIxMDQxMDU2 WjAzMTEwLwYDVQQDEyhCMTFFNjk5RTgyMjBBNUVGMUQ5QjJFQUI4NjRCRDVGMENE MkRCMEMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzpqcrp4m0j4 9rqsjRHdvCSIHED3bWTAlA4IMSo93621aCbLVZHecCYKz+aZJzR1sqbDl8WdTVXS ocD+z9euGwDsVhDtR7UG5RCNcuPrpEAiB1sB/ql7I9pscoppXUbIqbGdt5raUgv6 u3H5IQ4aX9PCuuJy3BPhqkJeH8KYz54wlRuFpeQsEwe36dOaXE0GrIZGISvFpYML WeSQ2Q70ZISiXYgp5R/nlNXlMrgwFF21BEzAEW946hR+1op0LRTBVUOB5aqsUX38 VbIxcF9HJnGpLteUWKIzZyH7bMnpV6VDA0e7X2AOKSidc20jvArL4xbUVbyIfW3m 1aCy+riFzQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFLEeaZ6CIKXvHZsuq4ZL1fDN LbDCMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKPwX54uwCuR1n+pxwH8fORA 0LIQ3paO8lgqsejWXRZ4GmFKk0BNGf1kaZqjEfG52xk77sd/C90QymuNgrgJvWvW sdzscAfl8oazWIeMnl9ZB8Rvw6288u0YZnpEjPE+xvI76EgUFNWtdPU1z8CSaBtU 6Y2b3bVa2FMMEZu2zXEX8VknXBdWltHyhzIqtStlBoJsIdrtiPRRxZoCKQxpxTTu znsk1wpC000r9Gtu6W1JQyiACiSZBqV8nTFjSm1qeMNuN0axmCO/BKPdxo0WQbzm FdOaAVZysCj6hnCtPgIx2pK95DiJcwMgSX89mxsYHSTGkpxqOu3BCnYdbggHRzo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:16 2025 by rpki-client