$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json) Hash identifier: 3rta1OJ5xE/48zb3Fkp17gM05xCK1tlIYRLLHjNC5Fk= Subject key identifier: 4A:91:CE:8D:41:1B:B3:DA:B7:F6:04:67:C4:0A:85:02:E1:C4:AF:EF Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 61ADEA894939A1140F8EBCB68B067F2EA95680EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft Manifest number: 07FE Signing time: Mon 20 Oct 2025 01:23:56 +0000 Manifest this update: Mon 20 Oct 2025 01:18:56 +0000 Manifest next update: Tue 21 Oct 2025 01:30:56 +0000 Files and hashes: 1: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: AooivFkPbWoTTvbxIVL1Arsa1iTCFqGb+81P570Dmls=) 2: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=) 3: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=) 4: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=) 5: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=) 6: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ad:ea:89:49:39:a1:14:0f:8e:bc:b6:8b:06:7f:2e:a9:56:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Oct 20 01:18:56 2025 GMT Not After : Oct 21 01:30:56 2025 GMT Subject: CN=4A91CE8D411BB3DAB7F60467C40A8502E1C4AFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:f1:32:da:9c:0c:04:75:d6:68:41:3a:d4: f6:b6:74:06:74:c8:ad:ac:f3:e8:04:ff:c4:a4:5f: cb:b8:9e:1c:46:3f:cc:c2:ee:cc:7d:6f:8e:20:66: ed:17:34:90:33:f5:9b:d8:37:f6:ad:3c:fe:ef:ef: 3c:4d:b6:c0:65:c9:fb:05:05:de:65:5f:3e:7f:b8: 29:9e:25:57:ec:73:5b:c4:32:89:eb:c4:d6:da:0c: 85:e5:5f:67:4e:da:fc:68:63:b8:94:ff:6b:da:d0: 9c:cc:65:ca:a3:29:f9:80:ff:f6:69:1d:3d:e8:ea: 02:43:5d:6a:da:3b:f9:56:80:27:d2:e4:8f:2b:9a: ff:7c:24:62:9a:15:83:6a:d1:4a:00:a0:9b:ba:2a: 75:43:4d:b1:6b:6f:ca:dc:1d:75:ab:60:ae:f3:e9: be:e7:8d:18:1d:c5:7d:b8:74:a8:78:45:5f:4e:06: 56:07:05:a0:53:4d:23:d0:89:e9:1a:de:c3:ee:a0: bf:07:e1:11:e5:cb:88:df:8a:fe:41:8e:f4:e2:15: 53:3f:ab:52:0e:82:32:c4:62:46:a4:95:6f:21:1b: 8c:41:a7:f2:e1:2a:a0:45:0b:80:d9:c2:3e:86:4c: db:c7:a9:a5:35:01:0e:37:1e:37:a7:f7:aa:aa:7d: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:CE:8D:41:1B:B3:DA:B7:F6:04:67:C4:0A:85:02:E1:C4:AF:EF X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:43:47:7f:cf:4c:f2:ee:3b:56:aa:fa:eb:b0:b7:07:2a:dd: 5d:6e:65:21:4e:d1:b7:bb:fb:69:e8:d4:40:4b:ef:5e:b1:fb: 3f:b5:b6:21:7a:97:d2:7c:48:71:f1:c7:0f:92:c2:4c:13:79: f8:dc:85:ad:9b:be:cf:3f:59:49:5f:65:b6:07:e4:25:45:37: 74:75:0f:41:96:38:3e:9f:19:7f:60:f3:1c:73:25:e5:42:f6: bc:d0:ef:3c:57:06:8c:43:bc:c0:07:80:9d:dd:48:a3:3d:0d: ae:32:6b:bc:43:d6:af:d3:b7:f9:52:aa:6c:64:ac:06:45:f2: 69:8d:25:33:74:a9:ae:56:78:68:8d:4d:93:af:43:64:37:b8: ba:e7:f8:7e:1f:5b:db:f0:30:f3:4e:09:69:68:aa:2d:d5:49: 52:5c:7d:e9:35:c7:fa:b7:87:1c:99:e1:35:b4:76:e3:03:76: 10:d6:f9:e6:34:19:c2:1a:84:1c:e5:3f:d9:a7:26:87:28:01: 92:a5:3c:8a:fc:92:94:70:8f:2c:d6:29:9a:34:33:64:39:b3: 87:59:49:79:d1:32:e3:0c:a6:1e:8f:f1:3c:5e:98:10:7c:ae: 05:cb:0c:b6:7b:3c:67:9f:bb:9e:b3:53:8e:ef:ae:d5:cd:1e: 1e:a3:97:b9 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUYa3qiUk5oRQPjry2iwZ/LqlWgOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjUxMDIwMDExODU2WhcNMjUxMDIxMDEzMDU2 WjAzMTEwLwYDVQQDEyg0QTkxQ0U4RDQxMUJCM0RBQjdGNjA0NjdDNDBBODUwMkUx QzRBRkVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pDxMtqcDAR1 1mhBOtT2tnQGdMitrPPoBP/EpF/LuJ4cRj/Mwu7MfW+OIGbtFzSQM/Wb2Df2rTz+ 7+88TbbAZcn7BQXeZV8+f7gpniVX7HNbxDKJ68TW2gyF5V9nTtr8aGO4lP9r2tCc zGXKoyn5gP/2aR096OoCQ11q2jv5VoAn0uSPK5r/fCRimhWDatFKAKCbuip1Q02x a2/K3B11q2Cu8+m+540YHcV9uHSoeEVfTgZWBwWgU00j0InpGt7D7qC/B+ER5cuI 34r+QY704hVTP6tSDoIyxGJGpJVvIRuMQafy4SqgRQuA2cI+hkzbx6mlNQEONx43 p/eqqn1twwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFEqRzo1BG7Pat/YEZ8QKhQLh xK/vMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlB REI1QTczMURERTJENUVBRTk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJhDR3/PTPLuO1aq+uuwtwcq 3V1uZSFO0be7+2no1EBL716x+z+1tiF6l9J8SHHxxw+SwkwTefjcha2bvs8/WUlf ZbYH5CVFN3R1D0GWOD6fGX9g8xxzJeVC9rzQ7zxXBoxDvMAHgJ3dSKM9Da4ya7xD 1q/Tt/lSqmxkrAZF8mmNJTN0qa5WeGiNTZOvQ2Q3uLrn+H4fW9vwMPNOCWloqi3V SVJcfek1x/q3hxyZ4TW0duMDdhDW+eY0GcIahBzlP9mnJocoAZKlPIr8kpRwjyzW KZo0M2Q5s4dZSXnRMuMMph6P8TxemBB8rgXLDLZ7PGefu56zU47vrtXNHh6jl7k= -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:15 2025 by rpki-client