$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: sMJO5q3W7S23eWBEpzLufpSke2Q+rkd43oIUc+Z0kPQ= Subject key identifier: 0A:2F:06:26:81:D6:E5:F5:12:33:62:27:E8:A0:2B:FB:EB:17:8C:49 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 1AEAE006E7B568FAB3E05AFE0530EF441156A059 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 09EB Signing time: Tue 12 May 2026 13:36:33 +0000 Manifest this update: Tue 12 May 2026 13:31:33 +0000 Manifest next update: Wed 13 May 2026 15:20:33 +0000 Files and hashes: 1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) 3: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 5: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: McRaab3jxRoU4Q2IZAmlYHRX8yHjPhSRPZfLJ/HVoY8=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 15:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ea:e0:06:e7:b5:68:fa:b3:e0:5a:fe:05:30:ef:44:11:56:a0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: May 12 13:31:33 2026 GMT Not After : May 13 15:20:33 2026 GMT Subject: CN=0A2F062681D6E5F512336227E8A02BFBEB178C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:8b:09:f2:7e:ae:56:f6:21:b3:f2:a8:5f: d8:6c:e3:30:d4:5e:d9:d6:8e:c1:2d:00:1a:24:8d: d1:b9:3c:d4:0d:8f:4c:a3:0f:66:da:76:05:13:35: b0:c7:1e:1d:6c:f2:8a:b6:cf:a0:b8:04:c0:94:95: 24:f9:c0:1c:be:45:82:00:ba:58:59:59:fc:28:3d: 34:5f:0f:92:32:68:e7:90:fc:7b:b0:0b:72:42:6d: 36:a2:62:35:c0:b9:06:18:40:4e:ab:7e:c1:2f:c4: 69:16:16:dc:2c:54:6c:29:81:d8:85:24:08:f5:51: 0e:d7:31:88:d2:b6:77:6b:56:48:94:39:f5:93:4e: cd:ab:cc:d2:b5:a3:29:30:02:9f:9a:e2:07:da:0b: fd:08:0a:25:ae:b2:b4:71:6a:1e:5a:05:ba:fa:9a: 21:50:9b:8a:f2:44:57:14:ba:94:fc:f8:87:c2:b0: ce:0c:a5:aa:b3:b4:d0:47:0b:8a:ad:16:e5:cc:f9: af:ff:47:ca:e3:58:12:b4:8f:fa:f3:36:52:41:5d: 85:f1:38:e0:f8:08:3c:a0:3c:60:45:84:82:a4:9d: 11:4c:1c:1a:32:2c:3b:e1:75:90:75:27:84:1c:e3: c8:b7:d0:bc:61:25:da:6b:95:10:d4:bc:da:70:b5: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:06:26:81:D6:E5:F5:12:33:62:27:E8:A0:2B:FB:EB:17:8C:49 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b8:f0:81:20:e2:4e:c5:c7:7d:b3:d5:21:e8:3a:4d:51:6d: eb:de:ac:75:6e:78:b4:b0:c3:23:c8:2f:92:a3:50:fa:b5:75: e7:00:e3:de:a1:83:c6:97:8f:ff:9c:ad:07:3a:fa:30:81:5b: c8:8c:61:ab:6a:60:3a:74:01:2f:32:64:46:9c:26:a5:71:89: 43:31:f4:fd:49:fa:7d:8a:e1:99:d5:57:13:c8:6b:d6:da:64: 74:05:c5:2d:a0:62:08:0b:51:78:71:c9:a8:03:ab:5b:c1:04: 5b:b7:47:8a:96:24:fb:85:5f:c5:48:5f:b3:98:6f:db:cf:d3: 04:3a:83:83:a2:ff:21:66:c3:8b:fa:df:a4:81:7c:a4:5c:a2: 52:ae:87:b2:a4:79:01:6a:b0:67:55:45:01:6b:8f:b9:a7:1b: 19:f8:1c:ee:97:34:06:29:48:9d:f8:e0:19:a3:2c:a1:12:35: 5a:a9:f7:45:60:65:f0:dd:cb:bf:04:0f:56:fd:4c:ea:52:62: 53:c9:30:c5:b4:4b:ed:05:86:d8:21:79:7b:43:ba:eb:f7:3c: 95:7a:b8:3d:06:c0:87:78:d3:64:5c:d6:55:ba:3f:8a:1c:a4: 17:05:58:30:22:b4:f9:24:b8:e8:fd:cd:23:61:2c:a8:3d:18: 00:a1:3e:0f -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUGurgBue1aPqz4Fr+BTDvRBFWoFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNTEyMTMzMTMzWhcNMjYwNTEzMTUyMDMz WjAzMTEwLwYDVQQDEygwQTJGMDYyNjgxRDZFNUY1MTIzMzYyMjdFOEEwMkJGQkVC MTc4QzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjOLCfJ+rlb2 IbPyqF/YbOMw1F7Z1o7BLQAaJI3RuTzUDY9Mow9m2nYFEzWwxx4dbPKKts+guATA lJUk+cAcvkWCALpYWVn8KD00Xw+SMmjnkPx7sAtyQm02omI1wLkGGEBOq37BL8Rp FhbcLFRsKYHYhSQI9VEO1zGI0rZ3a1ZIlDn1k07Nq8zStaMpMAKfmuIH2gv9CAol rrK0cWoeWgW6+pohUJuK8kRXFLqU/PiHwrDODKWqs7TQRwuKrRblzPmv/0fK41gS tI/68zZSQV2F8Tjg+Ag8oDxgRYSCpJ0RTBwaMiw74XWQdSeEHOPIt9C8YSXaa5UQ 1LzacLXo3QIDAQABo4ICazCCAmcwHQYDVR0OBBYEFAovBiaB1uX1EjNiJ+igK/vr F4xJMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGC48IEg4k7Fx32z1SHoOk1R beverHVueLSwwyPIL5KjUPq1decA496hg8aXj/+crQc6+jCBW8iMYatqYDp0AS8y ZEacJqVxiUMx9P1J+n2K4ZnVVxPIa9baZHQFxS2gYggLUXhxyagDq1vBBFu3R4qW JPuFX8VIX7OYb9vP0wQ6g4Oi/yFmw4v636SBfKRcolKuh7KkeQFqsGdVRQFrj7mn Gxn4HO6XNAYpSJ344BmjLKESNVqp90VgZfDdy78ED1b9TOpSYlPJMMW0S+0Fhtgh eXtDuuv3PJV6uD0GwId402Rc1lW6P4ocpBcFWDAitPkkuOj9zSNhLKg9GAChPg8= -----END CERTIFICATE-----Generated at Tue May 12 23:35:21 2026 by rpki-client