$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: LVo08yWBkxnV6nuhWbR2H/Hr3bLWJi/TJFoAdwkK/NE= Subject key identifier: E1:E3:26:D1:D4:72:1A:2C:D4:3A:7F:7B:5F:20:84:83:50:88:F9:59 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 7FED9936E274992BB09777AB30FE68CCDC79C5D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 075D Signing time: Tue 01 Jul 2025 01:12:00 +0000 Manifest this update: Tue 01 Jul 2025 01:07:00 +0000 Manifest next update: Wed 02 Jul 2025 01:44:00 +0000 Files and hashes: 1: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=) 2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=) 3: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=) 5: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: m5Qt0MonR1k6jIDWsvdx7S9vfIe3VJXn0FwWWV3ptAs=) 6: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ed:99:36:e2:74:99:2b:b0:97:77:ab:30:fe:68:cc:dc:79:c5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 1 01:07:00 2025 GMT Not After : Jul 2 01:44:00 2025 GMT Subject: CN=E1E326D1D4721A2CD43A7F7B5F2084835088F959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:f6:ac:67:78:4a:fe:95:a5:08:89:1a:0a: 40:7d:ea:0a:31:64:a6:90:35:5f:69:2f:2b:95:bd: 75:91:79:7c:b8:d0:94:3f:b4:37:43:60:f2:e0:ac: 4d:84:ef:d5:89:e4:e8:4f:44:15:fb:5b:09:d6:f6: 8b:35:93:89:22:8b:b1:ae:24:09:e1:98:af:e5:b3: 59:7f:5d:30:e1:30:f4:7a:05:09:6f:8d:4b:50:91: 4e:30:88:50:cf:e5:8c:9c:7f:be:05:19:93:94:51: 3e:7f:a6:33:ad:c5:1a:1a:27:f9:3c:be:fa:9a:db: 67:ba:d2:2a:a4:00:a0:59:44:12:cc:a0:4e:56:fe: 42:57:aa:bd:4a:a4:87:9d:a7:8b:60:19:93:ed:42: ca:0c:9a:6a:38:43:0c:dc:5f:4d:7a:2f:03:75:90: 6c:cc:83:be:d4:43:7b:6c:d0:ba:1d:fc:d8:48:aa: 9d:d8:3e:bc:54:13:5f:b7:b2:90:2e:3e:98:ee:3a: cf:8f:90:5a:0a:21:63:8d:e3:52:a1:60:c7:68:3b: d8:24:48:28:2d:ea:cd:64:35:a3:8c:d0:f4:20:68: d8:52:be:d5:da:de:f3:38:30:fb:f1:6a:4e:aa:fa: 24:43:e8:bf:72:ef:52:bd:97:1d:42:58:5e:01:f7: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E3:26:D1:D4:72:1A:2C:D4:3A:7F:7B:5F:20:84:83:50:88:F9:59 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:82:f4:09:ed:d8:86:3f:68:5d:72:dd:d2:07:21:ef:6e:8e: 5a:39:ff:31:74:4f:95:3b:37:05:7d:d2:ee:2c:9c:5f:76:25: fd:cf:5a:b5:68:87:60:26:ac:04:c9:b3:29:02:e9:fb:62:3b: ef:75:ce:43:27:00:93:90:10:5f:b3:07:3b:5f:cc:cc:01:fd: c9:4c:e0:96:5e:8e:49:00:16:ea:6b:09:63:0e:3b:b8:70:70: d2:5b:20:29:45:56:4c:52:c4:4d:25:c2:f7:cd:f5:a5:89:56: 15:30:61:8a:bf:3e:41:1e:2a:64:09:b7:7e:d4:7a:6d:a9:d1: d8:9d:90:45:65:38:c0:fa:e8:af:2f:ee:64:a6:73:8b:e7:4a: 93:c0:8f:db:73:3a:65:0b:f7:a0:25:b3:79:27:eb:81:4b:f2: e0:f3:bc:0c:0e:47:71:95:ab:d1:f7:9a:ac:32:32:07:14:6d: 4e:84:34:9f:3a:cb:e2:99:ea:48:13:24:f9:4f:ce:46:1d:21: ea:5e:7e:4d:86:09:38:9c:11:82:c7:7a:6e:a3:d7:ca:c6:9b: a0:58:f2:95:ff:26:ea:a3:3f:a1:03:f8:e9:aa:94:57:f3:a4: 1e:c2:89:e0:0f:d8:d4:a1:81:a1:ed:37:eb:a9:64:a5:84:3e: 9d:ca:89:79 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUf+2ZNuJ0mSuwl3erMP5ozNx5xdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwNzAxMDEwNzAwWhcNMjUwNzAyMDE0NDAw WjAzMTEwLwYDVQQDEyhFMUUzMjZEMUQ0NzIxQTJDRDQzQTdGN0I1RjIwODQ4MzUw ODhGOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls/2rGd4Sv6V pQiJGgpAfeoKMWSmkDVfaS8rlb11kXl8uNCUP7Q3Q2Dy4KxNhO/VieToT0QV+1sJ 1vaLNZOJIouxriQJ4Ziv5bNZf10w4TD0egUJb41LUJFOMIhQz+WMnH++BRmTlFE+ f6YzrcUaGif5PL76mttnutIqpACgWUQSzKBOVv5CV6q9SqSHnaeLYBmT7ULKDJpq OEMM3F9Nei8DdZBszIO+1EN7bNC6HfzYSKqd2D68VBNft7KQLj6Y7jrPj5BaCiFj jeNSoWDHaDvYJEgoLerNZDWjjND0IGjYUr7V2t7zODD78WpOqvokQ+i/cu9SvZcd QlheAfcYnQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFOHjJtHUchos1Dp/e18ghINQ iPlZMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHmC9Ant2IY/aF1y3dIHIe9u jlo5/zF0T5U7NwV90u4snF92Jf3PWrVoh2AmrATJsykC6ftiO+91zkMnAJOQEF+z BztfzMwB/clM4JZejkkAFuprCWMOO7hwcNJbIClFVkxSxE0lwvfN9aWJVhUwYYq/ PkEeKmQJt37Uem2p0didkEVlOMD66K8v7mSmc4vnSpPAj9tzOmUL96Als3kn64FL 8uDzvAwOR3GVq9H3mqwyMgcUbU6ENJ86y+KZ6kgTJPlPzkYdIepefk2GCTicEYLH em6j18rGm6BY8pX/JuqjP6ED+OmqlFfzpB7CieAP2NShgaHtN+upZKWEPp3KiXk= -----END CERTIFICATE-----Generated at Tue Jul 1 15:37:32 2025 by rpki-client