
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier: 9/tBWroDasM8ZcjLvdgzA7L/EcjJg+thZUvmEcrCSHM=
Subject key identifier: 98:5A:66:2B:F7:AC:CA:9D:2A:B0:7A:4E:63:37:34:97:F3:0F:88:EF
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 2522BA4C7C5528A0005B94E1ECB454A5FC2D6F45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number: 08DE
Signing time: Wed 25 Mar 2026 12:56:13 +0000
Manifest this update: Wed 25 Mar 2026 12:51:13 +0000
Manifest next update: Thu 26 Mar 2026 14:01:13 +0000
Files and hashes: 1: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: TCcn0Y+BfTRByqvYafvKOIuV1D0e6Ui8goXdVFQHQp0=)
2: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
3: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
4: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: ct70OMYN58IWou/2UmuEuoBrJZ5XFkVutpGyiSVt8NU=)
5: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
6: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: obM3yww/OYkdSvzLGv70CoTv61kkZZmjZhlrfmSg8rg=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:22:ba:4c:7c:55:28:a0:00:5b:94:e1:ec:b4:54:a5:fc:2d:6f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Mar 25 12:51:13 2026 GMT
Not After : Mar 26 14:01:13 2026 GMT
Subject: CN=985A662BF7ACCA9D2AB07A4E63373497F30F88EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:7d:c8:ef:31:16:5e:20:35:d1:1c:93:2f:
4a:51:4f:2c:f4:94:32:63:81:36:4e:71:cc:52:3d:
a2:0d:cc:64:e1:38:3b:26:e7:d0:34:ca:42:25:58:
b1:a0:63:e8:fc:22:00:10:df:4c:25:e7:26:d6:5c:
4e:6c:36:33:9f:06:41:12:b4:cd:f8:f9:60:b9:74:
44:6d:d3:f6:67:06:6d:54:73:3b:c0:fc:1d:a6:2d:
80:59:2d:c5:29:f4:a0:17:7d:c9:45:fe:39:f5:92:
3b:cf:82:a1:c7:d5:07:94:c8:de:ce:d6:72:d5:f0:
92:64:b1:ae:6c:44:7d:4c:c6:8a:cf:68:ca:ca:c7:
56:d8:3f:fa:44:54:42:f2:c1:9f:fd:4b:67:b8:bc:
07:ab:ae:3f:cd:4b:bd:00:e2:f2:26:2a:a8:d9:a5:
ec:62:68:8b:3d:16:63:c0:a7:bc:3c:19:c7:3d:46:
c7:1d:4d:70:26:0d:ee:84:ca:1f:d2:5b:fa:39:d6:
84:1d:db:47:e9:dd:37:7b:63:fb:44:25:90:87:b3:
9b:57:ca:87:b2:4c:32:6b:b2:ad:c4:93:28:f5:57:
83:81:b5:2d:0f:4c:f3:fb:71:15:80:8e:8f:f7:6c:
60:49:a8:e3:3b:c6:d2:5b:1c:c3:24:a1:ec:cc:2e:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:66:2B:F7:AC:CA:9D:2A:B0:7A:4E:63:37:34:97:F3:0F:88:EF
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fe:20:ea:09:ce:4e:7f:6f:84:a2:5a:94:c4:27:f7:cb:ad:
7c:f0:e7:b4:8f:80:2b:3f:79:a0:b6:8b:9c:cb:cb:19:9d:dd:
e1:5b:a9:bc:ec:69:05:4f:32:6a:d5:ac:40:a2:14:d0:26:90:
0f:97:99:19:bf:19:cc:a1:c4:79:e5:2b:be:04:92:0c:3b:05:
d9:9a:5c:f0:57:d0:4e:97:0f:20:26:38:a1:56:e9:87:da:b0:
80:b0:25:c3:db:47:95:2d:89:20:0e:a5:10:4f:74:ed:a9:b5:
f6:99:9a:b6:4d:1b:e9:bd:e1:14:1f:e8:6c:8c:d2:f6:95:58:
f6:83:a2:e6:bf:03:20:91:47:ab:4e:6d:9d:84:55:3e:2c:16:
60:f4:d5:9b:1c:08:35:51:67:ac:10:41:55:6c:78:ed:a7:8e:
d5:ff:d9:b5:94:cb:20:09:08:ef:26:b2:40:9d:f3:b6:c4:60:
83:84:de:f0:fc:30:b7:17:97:91:03:a6:6d:15:28:cf:c6:75:
04:64:7e:83:96:3c:5f:79:26:b6:e3:ba:3a:15:9e:73:85:31:
96:26:5f:75:48:05:cc:57:06:aa:07:60:6a:ec:1e:62:61:82:
68:6a:c4:a9:fb:cd:7b:c0:99:62:12:86:b2:4a:14:23:16:58:
7f:87:6d:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:28 2026 by rpki-client