$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: r+ewvP9dxBPHP79GCgDyBuTyQY2gO5mj8Iz+jnqss4U= Subject key identifier: D0:2F:60:7D:A5:FB:EA:36:28:F3:67:77:73:2D:C3:A5:8F:03:8D:6A Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 5DC904A1A242A0EA39655491653BC1FB882A65EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 07AA Signing time: Sat 23 Aug 2025 19:15:28 +0000 Manifest this update: Sat 23 Aug 2025 19:10:28 +0000 Manifest next update: Sun 24 Aug 2025 22:54:28 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 2: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 3: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 4: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 5: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 6: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: es8+ygsn3QNOV3yff+Z9tgSrJ3sIvNPF/YDhurrqsUY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 22:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c9:04:a1:a2:42:a0:ea:39:65:54:91:65:3b:c1:fb:88:2a:65:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Aug 23 19:10:28 2025 GMT Not After : Aug 24 22:54:28 2025 GMT Subject: CN=D02F607DA5FBEA3628F36777732DC3A58F038D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:28:88:54:e2:97:56:02:e9:ff:72:82:cb: 50:1d:64:65:c0:99:2b:40:a3:04:00:53:82:7f:c7: 27:ce:a1:b6:78:2c:85:70:f9:ae:22:36:d6:7a:10: 3d:a8:88:df:4f:46:56:ba:7b:35:f0:d7:60:62:f1: 2e:9b:a8:c1:d8:3a:3e:15:ed:1f:de:71:86:31:e4: 2c:84:6d:c2:ce:2a:67:c4:c2:11:a1:e2:8a:d8:bc: 0c:d6:ed:8f:f2:77:9b:4c:5a:94:b3:d8:42:b1:c1: 3b:4f:b9:f4:4d:87:f6:df:01:ab:3a:12:e4:a1:b6: 37:ac:98:04:18:e5:d9:2f:3e:40:ed:cd:86:49:27: a7:31:b4:23:ed:f2:4a:9b:a2:2b:80:11:e9:e2:fc: f7:50:96:e7:6d:77:b9:0c:39:4a:f1:08:91:21:2a: bf:f7:26:8b:d0:53:fa:ac:31:29:26:96:89:16:0f: 32:d4:91:19:98:19:8c:e1:04:cb:75:11:d7:29:c2: 73:ca:e5:2d:9b:7d:ed:bb:84:f2:6e:9a:54:1a:ee: bf:e7:d5:ae:dc:fb:db:54:79:05:83:c1:73:c3:1e: 7a:db:a9:46:ad:82:3c:04:9f:37:47:0c:9d:22:d3: b8:79:5e:05:bb:87:5a:ab:3e:ff:03:40:13:bc:e9: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2F:60:7D:A5:FB:EA:36:28:F3:67:77:73:2D:C3:A5:8F:03:8D:6A X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:66:7a:39:ee:b9:41:a2:91:f0:d7:e4:36:4a:9a:b6:05:1e: c9:02:0c:1f:df:bc:81:aa:df:de:30:dd:19:72:c3:70:58:ca: cf:2d:d6:93:17:b2:0d:69:63:f5:c6:a4:f9:e9:c8:27:96:3e: ee:65:f7:e6:28:c5:7e:f1:d3:cc:d8:2b:d1:c5:39:87:20:fc: 8c:c3:74:25:81:10:bd:88:cf:07:1a:7e:73:c4:62:a6:82:c0: b0:e6:02:55:40:52:3d:03:6a:31:1b:3c:b9:68:bf:42:7f:17: 7d:7e:58:13:2d:f5:9b:97:fa:b4:2a:54:92:9f:7a:32:2c:0d: 9b:ff:3c:e8:3b:80:f9:c6:a5:e5:5e:a4:e5:40:34:e8:a1:1d: e5:cb:70:02:0e:42:bd:c1:b1:96:98:a7:ec:90:6c:f1:d1:82: e6:e3:68:43:a2:ec:00:29:88:0a:c0:94:aa:25:5b:05:11:db: e3:a0:fb:e9:8e:bf:53:79:fc:5f:e6:2a:72:59:87:ff:70:a7: 4d:92:9a:d7:e9:5e:99:65:48:6b:f5:ee:51:a3:ff:24:94:06: dd:c1:d9:84:dd:6b:49:3a:48:23:c9:15:67:c8:c9:4d:4b:5c: 99:bf:d6:65:34:30:18:09:7b:8e:66:04:86:58:da:cb:02:03: c7:5b:2f:74 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUXckEoaJCoOo5ZVSRZTvB+4gqZe4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwODIzMTkxMDI4WhcNMjUwODI0MjI1NDI4 WjAzMTEwLwYDVQQDEyhEMDJGNjA3REE1RkJFQTM2MjhGMzY3Nzc3MzJEQzNBNThG MDM4RDZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWcoiFTil1YC 6f9ygstQHWRlwJkrQKMEAFOCf8cnzqG2eCyFcPmuIjbWehA9qIjfT0ZWuns18Ndg YvEum6jB2Do+Fe0f3nGGMeQshG3CzipnxMIRoeKK2LwM1u2P8nebTFqUs9hCscE7 T7n0TYf23wGrOhLkobY3rJgEGOXZLz5A7c2GSSenMbQj7fJKm6IrgBHp4vz3UJbn bXe5DDlK8QiRISq/9yaL0FP6rDEpJpaJFg8y1JEZmBmM4QTLdRHXKcJzyuUtm33t u4TybppUGu6/59Wu3PvbVHkFg8Fzwx5626lGrYI8BJ83RwydItO4eV4Fu4daqz7/ A0ATvOneBwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFNAvYH2l++o2KPNnd3Mtw6WP A41qMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABxmejnuuUGikfDX5DZKmrYF HskCDB/fvIGq394w3Rlyw3BYys8t1pMXsg1pY/XGpPnpyCeWPu5l9+YoxX7x08zY K9HFOYcg/IzDdCWBEL2IzwcafnPEYqaCwLDmAlVAUj0DajEbPLlov0J/F31+WBMt 9ZuX+rQqVJKfejIsDZv/POg7gPnGpeVepOVANOihHeXLcAIOQr3BsZaYp+yQbPHR gubjaEOi7AApiArAlKolWwUR2+Og++mOv1N5/F/mKnJZh/9wp02SmtfpXpllSGv1 7lGj/ySUBt3B2YTda0k6SCPJFWfIyU1LXJm/1mU0MBgJe45mBIZY2ssCA8dbL3Q= -----END CERTIFICATE-----Generated at Sun Aug 24 04:18:22 2025 by rpki-client