$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json) Hash identifier: jj1WoMFVvT76f99sSsBgjKNNFCA5afyc7DFhovWYn0w= Subject key identifier: 82:81:D2:2A:E1:37:8E:F4:FE:DE:F9:B4:F6:44:70:C8:95:EF:CF:A5 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 2ABD8FDAEB710C2BB27A5A0ACDB064F7B88D7B5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft Manifest number: 08D7 Signing time: Thu 26 Mar 2026 06:21:31 +0000 Manifest this update: Thu 26 Mar 2026 06:16:31 +0000 Manifest next update: Fri 27 Mar 2026 07:07:31 +0000 Files and hashes: 1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=) 2: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: dOicmTigXbXf0xIIwK1h5dVSZyI/U+eWuB2K4EdxuBo=) 3: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=) 4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=) 5: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=) 6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bd:8f:da:eb:71:0c:2b:b2:7a:5a:0a:cd:b0:64:f7:b8:8d:7b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Mar 26 06:16:31 2026 GMT Not After : Mar 27 07:07:31 2026 GMT Subject: CN=8281D22AE1378EF4FEDEF9B4F64470C895EFCFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:35:d9:5f:3a:ce:57:6f:27:87:c1:d3:e2: 78:2c:81:13:f8:63:09:19:b5:32:6a:bf:65:24:b6: 8b:6f:50:d6:13:72:00:0e:59:cb:ad:ec:ab:8d:e1: 51:6e:18:d8:86:7f:ed:82:49:76:32:3a:55:b0:6f: 4d:b5:d9:00:c2:99:97:71:c7:d1:34:0e:7b:d0:62: 8e:5b:f7:fc:30:2f:6c:52:90:40:dc:77:eb:fb:ad: e2:d5:53:09:d1:ee:3f:cc:56:cc:2c:93:fb:7d:6f: 1d:40:bb:fe:53:7b:68:75:26:1f:85:05:04:d2:7d: b4:51:02:00:9f:d5:58:9a:24:f5:ae:59:87:85:3f: ee:b1:5a:61:9e:93:f9:65:8d:78:44:12:67:fc:d0: 4a:c6:02:e9:69:10:66:7c:84:64:ab:eb:b3:9e:a5: 0b:d9:a6:44:54:79:c1:3a:a4:d6:1e:43:5e:c0:c7: 1b:54:4d:b9:9e:6d:b3:26:00:d7:44:b2:66:fe:dc: d5:ab:23:e1:1d:92:4e:a7:84:7e:be:2a:fc:27:ef: 6c:e7:13:39:28:d1:1e:ed:e1:9d:a5:fd:b1:12:9f: d6:23:b2:ee:df:c0:70:f1:6e:10:c3:ee:12:d9:72: 62:8b:f3:58:ca:6e:01:68:0c:0a:b4:55:0f:5a:e3: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:81:D2:2A:E1:37:8E:F4:FE:DE:F9:B4:F6:44:70:C8:95:EF:CF:A5 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:14:ff:0b:3b:99:6e:a4:fb:fe:91:66:d8:9f:96:9f:d8:50: fc:dc:d4:f0:b7:fc:aa:7e:ca:1f:eb:de:37:1b:ad:06:f5:e8: 4b:06:6f:07:0d:ca:34:fc:f8:a3:6f:ba:b5:41:c1:79:de:b1: f7:18:ce:c8:d9:fc:a3:9d:01:76:95:5e:6d:6e:fd:80:f6:95: ac:d9:8f:27:75:4e:3d:1e:17:ca:30:8e:f5:18:85:d6:ab:7f: 40:4a:63:3a:70:a8:8f:d1:ee:84:24:03:db:42:c5:8f:f7:f2: 54:29:81:52:e4:0c:a0:c2:2a:a7:e0:06:1e:99:6d:95:16:05: 2b:3a:97:61:3a:f6:6d:31:dd:99:d9:51:47:2d:2f:c7:63:33: 75:22:6d:5f:41:57:0e:af:9d:28:06:6f:d2:42:dc:f4:f1:ae: 4b:eb:f7:de:74:39:dd:82:dd:28:89:e5:98:68:ce:d9:e4:e2: bc:dd:23:c5:fc:70:0f:f1:22:98:9f:80:cb:8f:41:9b:92:6c: b9:93:28:d7:96:95:7e:2c:fd:12:b2:e9:8e:eb:e2:2a:1e:25: d5:a2:ca:68:29:89:ce:c8:e3:eb:32:80:cc:1a:01:db:dd:80: 23:ff:ec:59:7d:ca:9a:4d:21:4d:aa:36:17:32:f0:86:bb:da: d4:32:05:b0 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUKr2P2utxDCuyeloKzbBk97iNe10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwMzI2MDYxNjMxWhcNMjYwMzI3MDcwNzMx WjAzMTEwLwYDVQQDEyg4MjgxRDIyQUUxMzc4RUY0RkVERUY5QjRGNjQ0NzBDODk1 RUZDRkE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DY12V86zldv J4fB0+J4LIET+GMJGbUyar9lJLaLb1DWE3IADlnLreyrjeFRbhjYhn/tgkl2MjpV sG9NtdkAwpmXccfRNA570GKOW/f8MC9sUpBA3Hfr+63i1VMJ0e4/zFbMLJP7fW8d QLv+U3todSYfhQUE0n20UQIAn9VYmiT1rlmHhT/usVphnpP5ZY14RBJn/NBKxgLp aRBmfIRkq+uznqUL2aZEVHnBOqTWHkNewMcbVE25nm2zJgDXRLJm/tzVqyPhHZJO p4R+vir8J+9s5xM5KNEe7eGdpf2xEp/WI7Lu38Bw8W4Qw+4S2XJii/NYym4BaAwK tFUPWuOelQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFIKB0irhN470/t75tPZEcMiV 78+lMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5 Q0NCMDVERkQ1MEIyM0E4QkVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACMU/ws7mW6k+/6RZtiflp/Y UPzc1PC3/Kp+yh/r3jcbrQb16EsGbwcNyjT8+KNvurVBwXnesfcYzsjZ/KOdAXaV Xm1u/YD2lazZjyd1Tj0eF8owjvUYhdarf0BKYzpwqI/R7oQkA9tCxY/38lQpgVLk DKDCKqfgBh6ZbZUWBSs6l2E69m0x3ZnZUUctL8djM3UibV9BVw6vnSgGb9JC3PTx rkvr9950Od2C3SiJ5Zhoztnk4rzdI8X8cA/xIpifgMuPQZuSbLmTKNeWlX4s/RKy 6Y7r4ioeJdWiymgpic7I4+sygMwaAdvdgCP/7Fl9yppNIU2qNhcy8Ia72tQyBbA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:30:58 2026 by rpki-client