$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: OKszMH9lKkQzoSmUKiNh7LFjkyDsNGRZdVan/Iy/Xlw= Subject key identifier: 66:97:3C:98:F4:AB:9B:39:D2:47:64:F3:16:BA:EF:27:04:78:CF:47 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 2BF53F146393059600ADB8D8C29A69272A8284C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 092F Signing time: Tue 12 May 2026 08:26:33 +0000 Manifest this update: Tue 12 May 2026 08:21:33 +0000 Manifest next update: Wed 13 May 2026 11:29:33 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: 50ILiCUs8I2l9FqKKDzhBhuFrsdkz4xvmSAQyh3ArlA=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 4: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 5: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 6: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 11:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f5:3f:14:63:93:05:96:00:ad:b8:d8:c2:9a:69:27:2a:82:84:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: May 12 08:21:33 2026 GMT Not After : May 13 11:29:33 2026 GMT Subject: CN=66973C98F4AB9B39D24764F316BAEF270478CF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:95:c8:21:fd:b8:37:7d:df:b0:e4:39:4a: 86:b1:ee:18:e8:3c:aa:b1:8b:2b:60:e5:68:94:64: 21:c8:52:b8:98:fa:27:f8:c5:43:99:c7:77:48:b6: 84:d2:f9:16:ea:6a:90:95:6d:70:85:28:e2:8c:b5: 03:23:15:ed:05:2d:39:1c:54:39:ff:ed:95:06:75: 0d:47:40:2e:25:a5:3b:39:e0:59:c2:68:5b:62:2d: 13:47:1b:f6:a6:47:73:1c:49:55:5b:2d:18:1a:74: ea:4f:8c:04:0c:7a:d0:fa:20:9d:33:3e:dd:51:68: cd:76:04:54:c5:13:20:15:8b:88:50:e6:40:b2:66: bf:1a:8d:2c:24:b1:a9:dd:bb:2f:54:c4:7f:3c:12: a7:99:90:23:57:56:cd:d7:54:1f:09:6f:50:9d:65: 9d:19:c9:4e:cf:c8:96:d5:94:18:ee:d2:6f:e6:33: bc:18:c6:de:27:18:7e:c1:0b:2f:67:66:3b:a4:d8: 63:8d:be:16:92:e1:ca:29:b0:1c:7d:25:d7:63:9a: ea:82:50:68:fd:0e:34:0e:f4:f6:a1:31:23:b0:f1: 44:7f:e1:7a:7f:9f:9d:4c:27:cc:36:bc:89:3e:39: d5:f9:d4:f5:62:77:59:49:61:1f:09:59:59:dc:6d: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:3C:98:F4:AB:9B:39:D2:47:64:F3:16:BA:EF:27:04:78:CF:47 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ae:34:16:e5:e9:c0:93:5d:e8:86:6b:d8:f3:06:3b:7e:00: 4f:ec:49:eb:1b:82:c7:ab:00:73:47:4b:05:da:c3:6a:8e:cd: c8:60:db:6f:e1:7c:44:74:8e:70:1a:5c:4a:16:c1:ea:de:ff: 3d:63:be:95:e3:ce:99:61:1c:a6:dd:4e:35:5e:57:8a:9a:0e: 23:b8:86:19:1c:89:2f:b7:29:6d:ab:e1:ca:71:2c:e2:69:4d: b2:77:ee:91:6d:ee:4a:4b:f9:9a:62:22:dd:55:46:9d:a4:57: a0:1f:58:4e:bd:fc:98:9e:77:74:94:e5:0c:5a:4b:0f:9d:19: 29:3f:2a:13:09:a5:aa:7b:d7:9f:80:23:b7:3f:6e:86:21:7d: 4b:de:df:eb:8d:02:c1:74:ca:02:e6:ca:61:fe:61:bd:f1:5a: 52:53:70:48:27:1c:95:26:f8:57:7b:f9:c4:6e:85:b2:7a:ba: 0f:c2:1e:77:33:d4:bb:f9:b1:67:9a:83:68:3e:d6:73:d7:ad: 64:b5:97:d5:a5:69:87:0b:57:97:cb:49:1c:25:66:0f:97:5c: 6d:43:cc:59:71:87:5e:a0:6f:f8:41:d8:08:39:80:e4:21:01: 9e:d1:5d:8a:71:7a:f5:ef:8f:c0:86:70:07:a9:07:44:87:63: 3c:f1:f0:50 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUK/U/FGOTBZYArbjYwpppJyqChMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNTEyMDgyMTMzWhcNMjYwNTEzMTEyOTMz WjAzMTEwLwYDVQQDEyg2Njk3M0M5OEY0QUI5QjM5RDI0NzY0RjMxNkJBRUYyNzA0 NzhDRjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YWVyCH9uDd9 37DkOUqGse4Y6DyqsYsrYOVolGQhyFK4mPon+MVDmcd3SLaE0vkW6mqQlW1whSji jLUDIxXtBS05HFQ5/+2VBnUNR0AuJaU7OeBZwmhbYi0TRxv2pkdzHElVWy0YGnTq T4wEDHrQ+iCdMz7dUWjNdgRUxRMgFYuIUOZAsma/Go0sJLGp3bsvVMR/PBKnmZAj V1bN11QfCW9QnWWdGclOz8iW1ZQY7tJv5jO8GMbeJxh+wQsvZ2Y7pNhjjb4WkuHK KbAcfSXXY5rqglBo/Q40DvT2oTEjsPFEf+F6f5+dTCfMNryJPjnV+dT1YndZSWEf CVlZ3G1iRQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFGaXPJj0q5s50kdk8xa67ycE eM9HMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL+uNBbl6cCTXeiGa9jzBjt+ AE/sSesbgserAHNHSwXaw2qOzchg22/hfER0jnAaXEoWwere/z1jvpXjzplhHKbd TjVeV4qaDiO4hhkciS+3KW2r4cpxLOJpTbJ37pFt7kpL+ZpiIt1VRp2kV6AfWE69 /Jied3SU5QxaSw+dGSk/KhMJpap715+AI7c/boYhfUve3+uNAsF0ygLmymH+Yb3x WlJTcEgnHJUm+Fd7+cRuhbJ6ug/CHncz1Lv5sWeag2g+1nPXrWS1l9WlaYcLV5fL SRwlZg+XXG1DzFlxh16gb/hB2Ag5gOQhAZ7RXYpxevXvj8CGcAepB0SHYzzx8FA= -----END CERTIFICATE-----Generated at Wed May 13 00:11:23 2026 by rpki-client