$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft File: 8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json) Hash identifier: A+TE+723dcTsUd1nH0RUOmycVPfHB9W9DTwDyWcEuuo= Subject key identifier: E9:78:73:91:7B:2B:E3:CF:B3:5F:91:0E:47:4A:4D:EB:2E:3D:7F:DC Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 3012589304180952C0739905B14882B796375641 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft Manifest number: 0865 Signing time: Sat 23 Aug 2025 21:00:28 +0000 Manifest this update: Sat 23 Aug 2025 20:55:28 +0000 Manifest next update: Mon 25 Aug 2025 00:46:28 +0000 Files and hashes: 1: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=) 2: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA=) 3: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: C6ANSfCiMmxAp2nyxlQAL3nzZegsUq42byuoyQoiDJA=) 4: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: Vxc8O1weZZDDEGRU8DCWJEYXZTx+VbN42K5DCc2lwok=) 5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: iWD8356EEIUhNs0mW2GYjJUZJBkDGBNUnzvFCkgErYU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:12:58:93:04:18:09:52:c0:73:99:05:b1:48:82:b7:96:37:56:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Aug 23 20:55:28 2025 GMT Not After : Aug 25 00:46:28 2025 GMT Subject: CN=E97873917B2BE3CFB35F910E474A4DEB2E3D7FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:dd:fd:b1:e4:ac:83:9d:0e:95:2d:a3:80: 60:7d:38:6d:45:d6:cc:23:c3:02:64:78:3d:2d:1a: 83:c1:a2:80:71:20:f4:14:eb:d6:0c:df:76:60:58: cf:25:89:82:dc:20:eb:6d:d6:66:0a:b7:5f:23:30: 98:e9:a3:58:b1:fe:f9:73:16:98:f2:7c:e9:79:4e: a1:21:ab:d3:49:e2:70:49:f0:d2:de:d7:82:e6:c7: ea:08:0c:ad:59:a3:dc:be:83:8d:ad:cc:aa:0d:d9: 17:52:b1:89:1d:e5:8d:ed:c8:70:b6:a2:50:30:ad: 45:99:d8:6e:d8:5e:8c:07:93:42:eb:97:fa:45:0d: 4a:f5:e7:7a:6a:ea:ac:53:c0:d6:b3:d6:c5:95:0f: 1d:2a:57:41:07:03:10:23:63:cd:fc:8d:1c:1d:cb: 9a:bd:50:14:a9:56:1f:63:a4:cc:84:a0:72:2e:e7: d4:61:02:9d:54:a2:56:b0:1a:b4:91:af:cc:e4:b2: 99:79:8e:a9:2e:f3:b4:55:14:36:35:5b:62:7e:ca: 7d:6e:ea:5d:be:f7:ca:86:9f:f7:2b:a3:db:e7:a1: e6:b6:37:e8:b0:45:6d:c7:07:16:94:b5:32:0e:d3: 30:de:0a:3f:ae:a1:e8:c5:bb:34:6d:98:8e:11:7e: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:78:73:91:7B:2B:E3:CF:B3:5F:91:0E:47:4A:4D:EB:2E:3D:7F:DC X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:38:be:ba:de:1f:4e:27:b7:9b:69:9e:98:70:6a:0d:d0:ce: ae:00:06:48:7c:3c:0b:a9:ff:bb:62:ec:65:49:30:d3:c5:2a: 2b:e1:68:46:ff:6d:a2:e5:0f:9d:bf:a3:5e:74:eb:3c:03:05: 09:5f:61:6c:36:cb:77:f4:55:aa:4e:74:b2:68:e9:8c:3c:d3: 31:b8:d0:7e:ae:1c:5f:61:a9:60:e9:23:a0:8f:67:ae:07:9f: 8c:b1:19:da:75:59:71:48:40:6d:56:49:23:1c:7f:24:77:06: f7:09:23:f2:51:14:2c:ba:ec:2a:fa:5b:f4:32:41:86:19:bf: e5:e9:8f:e9:e0:3f:76:35:31:7c:c3:ae:16:1c:85:45:a3:d4: 95:5a:66:27:73:9d:34:df:ec:7e:5a:86:e8:c0:01:2d:09:94: 57:ad:c9:f8:fd:2c:19:63:fa:5d:1a:de:15:63:ec:49:b7:a8: 58:b5:2e:e7:b3:18:44:81:0c:79:63:1b:26:72:49:17:17:11: e2:d2:9d:57:89:e6:ec:28:34:f7:7d:bc:99:d8:08:83:ad:1e: 33:7c:68:54:3f:17:71:9c:e7:59:27:c4:b8:75:54:41:08:0d: 9d:a9:ac:63:67:52:9c:ba:d7:9a:e9:74:1c:36:63:4c:9a:c6: b9:7c:5f:e4 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUMBJYkwQYCVLAc5kFsUiCt5Y3VkEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwODIzMjA1NTI4WhcNMjUwODI1MDA0NjI4 WjAzMTEwLwYDVQQDEyhFOTc4NzM5MTdCMkJFM0NGQjM1RjkxMEU0NzRBNERFQjJF M0Q3RkRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRDd/bHkrIOd DpUto4BgfThtRdbMI8MCZHg9LRqDwaKAcSD0FOvWDN92YFjPJYmC3CDrbdZmCrdf IzCY6aNYsf75cxaY8nzpeU6hIavTSeJwSfDS3teC5sfqCAytWaPcvoONrcyqDdkX UrGJHeWN7chwtqJQMK1Fmdhu2F6MB5NC65f6RQ1K9ed6auqsU8DWs9bFlQ8dKldB BwMQI2PN/I0cHcuavVAUqVYfY6TMhKByLufUYQKdVKJWsBq0ka/M5LKZeY6pLvO0 VRQ2NVtifsp9bupdvvfKhp/3K6Pb56HmtjfosEVtxwcWlLUyDtMw3go/rqHoxbs0 bZiOEX44nQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFOl4c5F7K+PPs1+RDkdKTesu PX/cMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5 NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ84vrreH04nt5tpnphwag3Q zq4ABkh8PAup/7ti7GVJMNPFKivhaEb/baLlD52/o1506zwDBQlfYWw2y3f0VapO dLJo6Yw80zG40H6uHF9hqWDpI6CPZ64Hn4yxGdp1WXFIQG1WSSMcfyR3BvcJI/JR FCy67Cr6W/QyQYYZv+Xpj+ngP3Y1MXzDrhYchUWj1JVaZidznTTf7H5ahujAAS0J lFetyfj9LBlj+l0a3hVj7Em3qFi1LuezGESBDHljGyZySRcXEeLSnVeJ5uwoNPd9 vJnYCIOtHjN8aFQ/F3Gc51knxLh1VEEIDZ2prGNnUpy615rpdBw2Y0yaxrl8X+Q= -----END CERTIFICATE-----Generated at Sun Aug 24 08:02:26 2025 by rpki-client