$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: qpvf3L24Soci47EnUHjrLAGq4t1D5GKWsnzVDCZB8c0= Subject key identifier: 99:B4:42:26:97:B1:7C:2E:CE:6F:EB:62:E6:48:21:8A:36:7E:F1:7F Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 22B7A57DCD410A0C3CBFE4BCE69295CE0AE68EDE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 07F8 Signing time: Mon 20 Oct 2025 05:13:56 +0000 Manifest this update: Mon 20 Oct 2025 05:08:56 +0000 Manifest next update: Tue 21 Oct 2025 06:32:56 +0000 Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 2: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) 3: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 5: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 6: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: QpcMRx53EAIFmkk//+vmiQplKAw0eDwuFfjwYowjH58=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b7:a5:7d:cd:41:0a:0c:3c:bf:e4:bc:e6:92:95:ce:0a:e6:8e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Oct 20 05:08:56 2025 GMT Not After : Oct 21 06:32:56 2025 GMT Subject: CN=99B4422697B17C2ECE6FEB62E648218A367EF17F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:dd:b8:36:c2:81:00:2d:bf:a7:b9:ce:29: d8:b0:31:db:63:1b:41:6c:56:5d:8c:f3:d5:ef:5e: db:4e:b4:58:9a:c4:89:f2:9e:70:e9:be:f6:5d:eb: 91:ca:ef:cd:54:10:00:03:23:ae:35:5c:84:a9:9a: 55:ea:7d:6f:fe:e7:c6:56:81:ec:d2:4b:64:96:e7: fc:38:aa:dc:64:e7:2b:ee:8b:6d:39:40:5e:e7:9b: f4:2a:d4:73:a3:2e:a8:a4:8a:d9:19:20:d8:05:b4: cb:7d:35:25:bd:f3:79:39:50:cf:9a:82:59:f2:89: d9:cc:9c:2a:83:14:b2:68:fa:dd:b0:e7:dc:b0:d5: c4:11:00:3a:77:f2:45:66:54:32:8c:a0:42:49:90: c9:75:4e:b7:24:bd:a4:ba:a6:30:1d:b7:98:c3:08: d5:fe:0f:28:3f:38:67:cc:c9:3b:d4:38:33:ce:fc: 8d:d5:72:65:56:43:95:cb:52:ae:a5:77:cb:3d:6c: 2a:a7:e8:f5:2d:d1:c6:62:a3:20:84:80:3d:b3:60: 28:98:6c:19:98:20:e5:ae:f3:33:ff:91:9c:d1:14: 83:e3:00:5e:91:4c:07:e0:82:98:67:4b:7d:3a:ea: 85:7e:dd:fc:19:f1:9a:5d:04:40:d7:d2:a0:3d:f3: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B4:42:26:97:B1:7C:2E:CE:6F:EB:62:E6:48:21:8A:36:7E:F1:7F X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:70:5e:ba:93:b5:02:4f:eb:12:68:b5:49:32:8a:f3:04:57: 7d:a8:b4:a7:ca:bf:43:a0:bc:db:e6:8d:1d:0f:89:1e:d1:fe: ed:b1:d5:48:d1:b7:cc:17:59:38:df:ba:a9:80:35:e8:db:f0: 3b:f8:0d:d4:22:e7:fe:f2:c9:55:18:88:a2:76:bc:e5:5c:24: 84:d5:21:bf:e0:63:9e:02:99:7a:0a:b9:b6:ab:e0:bf:7d:ee: 58:7b:f9:b2:07:86:59:09:13:3b:15:8d:ba:65:45:c2:f6:b0: b6:ea:1f:45:b8:3b:2a:bc:ec:35:2a:31:74:f0:e8:98:e1:09: 14:ec:0f:af:1a:ef:f4:45:11:cb:37:fc:f2:a5:d7:56:f9:0e: 80:67:66:a4:26:49:d7:75:d0:0b:6d:d0:45:91:9b:5c:50:4c: 58:35:b9:ab:1f:de:3a:83:a6:70:ab:df:1d:ea:8d:d0:0e:f9: c5:56:78:1e:c9:10:fe:75:6d:a8:ae:ee:e8:93:2d:95:4c:32: 67:60:5c:ba:fa:15:95:4c:d7:b6:fb:86:1a:d4:71:4a:50:db: 88:ea:6a:4f:5c:fd:8b:18:c5:d2:ba:f2:90:44:89:6a:49:2c: bf:5a:6a:10:93:4e:54:13:ef:76:b2:04:05:3f:ea:d0:70:a3: 3a:83:4b:b2 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUIrelfc1BCgw8v+S85pKVzgrmjt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUxMDIwMDUwODU2WhcNMjUxMDIxMDYzMjU2 WjAzMTEwLwYDVQQDEyg5OUI0NDIyNjk3QjE3QzJFQ0U2RkVCNjJFNjQ4MjE4QTM2 N0VGMTdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3enduDbCgQAt v6e5zinYsDHbYxtBbFZdjPPV717bTrRYmsSJ8p5w6b72XeuRyu/NVBAAAyOuNVyE qZpV6n1v/ufGVoHs0ktkluf8OKrcZOcr7ottOUBe55v0KtRzoy6opIrZGSDYBbTL fTUlvfN5OVDPmoJZ8onZzJwqgxSyaPrdsOfcsNXEEQA6d/JFZlQyjKBCSZDJdU63 JL2kuqYwHbeYwwjV/g8oPzhnzMk71DgzzvyN1XJlVkOVy1KupXfLPWwqp+j1LdHG YqMghIA9s2AomGwZmCDlrvMz/5Gc0RSD4wBekUwH4IKYZ0t9OuqFft38GfGaXQRA 19KgPfM2ywIDAQABo4ICazCCAmcwHQYDVR0OBBYEFJm0QiaXsXwuzm/rYuZIIYo2 fvF/MB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMZwXrqTtQJP6xJotUkyivME V32otKfKv0OgvNvmjR0PiR7R/u2x1UjRt8wXWTjfuqmANejb8Dv4DdQi5/7yyVUY iKJ2vOVcJITVIb/gY54CmXoKubar4L997lh7+bIHhlkJEzsVjbplRcL2sLbqH0W4 Oyq87DUqMXTw6JjhCRTsD68a7/RFEcs3/PKl11b5DoBnZqQmSdd10Att0EWRm1xQ TFg1uasf3jqDpnCr3x3qjdAO+cVWeB7JEP51baiu7uiTLZVMMmdgXLr6FZVM17b7 hhrUcUpQ24jqak9c/YsYxdK68pBEiWpJLL9aahCTTlQT73ayBAU/6tBwozqDS7I= -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:15 2025 by rpki-client