$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: hltdrQ1C0T3RtY8w5v6lQdX6UdhYA7ieIzDRXjW7tIY= Subject key identifier: 2E:48:4D:F7:7B:6C:E0:F8:F9:ED:DE:C4:A0:29:92:CA:94:92:D5:48 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 7ADA48B768984BF9E6E4D951FE7998CE86B321E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 071A Signing time: Sun 11 May 2025 17:11:43 +0000 Manifest this update: Sun 11 May 2025 17:06:43 +0000 Manifest next update: Mon 12 May 2025 18:06:43 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: jDruNzRq86rS7WNqurKOPPQ8RV4tXeA00iIHnoEJ798=) 3: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 4: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 5: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 6: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 18:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:da:48:b7:68:98:4b:f9:e6:e4:d9:51:fe:79:98:ce:86:b3:21:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: May 11 17:06:43 2025 GMT Not After : May 12 18:06:43 2025 GMT Subject: CN=2E484DF77B6CE0F8F9EDDEC4A02992CA9492D548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:86:a6:d2:2c:5b:00:62:dc:38:76:65:83: cf:37:77:c3:eb:e4:55:e0:67:b2:a5:50:40:bb:b5: 59:c9:4c:b7:9e:bd:e4:ae:36:99:60:db:74:04:3c: 26:50:20:4a:05:69:46:39:d7:1f:69:39:f9:8e:2a: 9a:c6:47:56:7e:6d:03:82:bc:bc:fa:9d:d3:71:70: c3:f1:78:08:e0:11:c3:88:80:a3:45:de:b2:33:44: 50:51:1c:0f:ac:cc:9e:dc:88:c5:30:25:d2:cf:05: 4a:ae:ae:7d:b1:ce:56:c7:92:c0:06:16:8a:f7:f8: 04:44:12:31:76:d7:0d:88:bf:7f:50:0c:f8:0b:bf: 7b:df:f6:48:b2:4b:61:b4:cb:86:45:7c:03:a0:07: 35:49:c1:81:54:9c:6c:21:dc:b4:4d:98:d1:53:70: a4:c3:ed:c3:d5:1f:05:48:81:55:98:54:a6:1c:f8: f6:52:54:40:bd:2a:d8:4b:04:df:d8:26:48:40:74: c4:2f:55:90:f1:64:a2:d0:4d:84:87:20:2a:c3:3a: 15:39:71:43:e1:87:db:a9:51:a7:8f:e6:f4:09:a6: 2f:da:66:c4:f2:84:09:bb:36:9d:a0:82:62:d7:46: 06:64:b1:90:24:45:20:76:db:8b:5d:6f:bb:b5:4c: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:4D:F7:7B:6C:E0:F8:F9:ED:DE:C4:A0:29:92:CA:94:92:D5:48 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:76:9d:14:10:58:52:03:2d:78:67:b3:ef:26:35:e8:e0:6a: eb:75:27:00:02:09:c6:7b:40:6d:94:ee:0a:45:b1:32:ba:d0: 57:bf:9b:cf:00:a1:8a:67:7c:36:54:8a:f5:db:4a:e8:aa:f6: 3e:46:ee:7d:37:75:7b:43:25:bc:7e:6e:34:3a:e7:10:f3:e0: ba:5b:c6:9d:d4:63:ab:61:fd:15:65:38:74:dd:3b:3a:94:55: 5b:cb:e1:0b:67:7b:3b:d3:c8:43:ba:9e:73:00:0f:1f:67:f2: bc:e8:e3:27:c8:7a:c1:f8:ad:ae:95:95:df:7a:35:8a:f5:6f: 6e:fd:fa:c8:4e:77:cb:ab:bf:cb:6f:92:87:6b:95:81:e8:09: 03:85:b3:47:b2:01:db:10:4a:44:2f:94:5c:43:0f:91:4b:d8: 65:be:55:e5:11:80:2b:52:51:e1:3a:37:d7:d9:c5:35:11:6b: c0:67:64:84:95:e3:66:7c:ec:fc:1a:8c:96:db:0e:99:03:0b: c2:82:b2:33:d4:d3:8d:bc:9f:84:58:04:f4:75:67:05:3f:11: de:a1:78:e7:79:89:9f:1f:77:35:e9:17:18:1a:87:1d:83:ad: ff:48:0c:3d:5e:fe:d9:6f:4a:05:84:dc:5d:8c:e5:94:6c:0f: ea:7d:42:30 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUetpIt2iYS/nm5NlR/nmYzoazIeYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNTExMTcwNjQzWhcNMjUwNTEyMTgwNjQz WjAzMTEwLwYDVQQDEygyRTQ4NERGNzdCNkNFMEY4RjlFRERFQzRBMDI5OTJDQTk0 OTJENTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32OGptIsWwBi 3Dh2ZYPPN3fD6+RV4GeypVBAu7VZyUy3nr3krjaZYNt0BDwmUCBKBWlGOdcfaTn5 jiqaxkdWfm0Dgry8+p3TcXDD8XgI4BHDiICjRd6yM0RQURwPrMye3IjFMCXSzwVK rq59sc5Wx5LABhaK9/gERBIxdtcNiL9/UAz4C7973/ZIskthtMuGRXwDoAc1ScGB VJxsIdy0TZjRU3Ckw+3D1R8FSIFVmFSmHPj2UlRAvSrYSwTf2CZIQHTEL1WQ8WSi 0E2EhyAqwzoVOXFD4YfbqVGnj+b0CaYv2mbE8oQJuzadoIJi10YGZLGQJEUgdtuL XW+7tUxxeQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFC5ITfd7bOD4+e3exKApksqU ktVIMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACp2nRQQWFIDLXhns+8mNejg aut1JwACCcZ7QG2U7gpFsTK60Fe/m88AoYpnfDZUivXbSuiq9j5G7n03dXtDJbx+ bjQ65xDz4Lpbxp3UY6th/RVlOHTdOzqUVVvL4QtnezvTyEO6nnMADx9n8rzo4yfI esH4ra6Vld96NYr1b279+shOd8urv8tvkodrlYHoCQOFs0eyAdsQSkQvlFxDD5FL 2GW+VeURgCtSUeE6N9fZxTURa8BnZISV42Z87PwajJbbDpkDC8KCsjPU0428n4RY BPR1ZwU/Ed6heOd5iZ8fdzXpFxgahx2Drf9IDD1e/tlvSgWE3F2M5ZRsD+p9QjA= -----END CERTIFICATE-----Generated at Mon May 12 07:38:08 2025 by rpki-client