$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft File: 0f521759-b880-4a7d-be8b-3ce70e4aba83.mft (raw, json) Hash identifier: bmqX4+Rq6HdxQwHZbYQ70ej2CzxL8BmTMrzdMjY07kU= Subject key identifier: A5:DF:EC:74:67:09:CD:9B:99:60:71:FC:B9:5D:99:FD:F2:C9:F1:E3 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F4328584B74629B0108E7486236072580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft Manifest number: 010D0C9F4328584073A85A96D486E13A4FDC1312 Signing time: Wed 08 Oct 2025 15:00:03 +0000 Manifest this update: Wed 08 Oct 2025 15:00:03 +0000 Manifest next update: Sat 11 Oct 2025 15:00:00 +0000 Files and hashes: 1: 02a8e93d-4b39-3a91-adfe-964d98253c4a.roa (hash: uy499ggO6ZcaPEiB7M9btLSSIfySpXb2HVLVrWMsQVA=) 2: 0f521759-b880-4a7d-be8b-3ce70e4aba83.crl (hash: FP6BHIwSrLknbiq5PqhSSWA/I8ERZ4vylxI5xD2pbBM=) 3: 21e1f23d-5f1f-317b-8982-26cebe1a6742.roa (hash: yDLfxF+XYAooabZNG7CHauKsbslWY1oQR/KEBmEgo9w=) 4: 7d789fe7-d176-37a2-ba55-fe1a9a434262.roa (hash: sSjwJCsiBfumYCFmspPCVMpJFWJjOofXKU5FdiyjJjA=) 5: d996b7fe-6633-3640-ab98-181795bed551.roa (hash: 8YcPdoDGmtbnYbJ2XCimsZ76TjwYZyWtYHDQ1ChVA2E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:62:9b:01:08:e7:48:62:36:07:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: Oct 8 15:00:03 2025 GMT Not After : Oct 11 15:00:00 2025 GMT Subject: CN=39fb7d38-bda5-4b57-bd5d-c83627dbffd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:46:08:d7:38:51:29:57:2c:33:dd:1d:ba: 12:8f:e5:73:75:bb:6a:77:e7:cc:76:3e:ac:99:dc: 8f:f0:4c:d5:de:cf:10:a5:0d:5c:e3:b5:de:f3:40: 8e:d3:78:5a:34:01:10:0c:50:c4:e2:9f:ea:b0:7c: ef:e2:ac:00:1c:19:0d:22:d7:4d:b5:ee:c7:85:d5: b6:3f:07:cd:a4:dc:c0:ab:31:70:3a:70:60:d1:c7: e3:b9:84:95:b3:05:24:d3:c5:56:4f:77:2d:95:33: 75:fa:4c:ed:a1:62:0a:7a:3e:16:a8:82:b2:9f:11: c2:cb:49:f6:c4:49:db:1b:b6:79:71:b0:67:72:48: 0c:94:6e:a3:76:a0:78:51:60:9a:e2:52:82:52:f4: 78:7a:3c:23:d0:d1:10:4d:82:16:e3:47:0d:15:8e: de:53:05:b9:8c:7c:14:89:9a:d2:9c:c4:0c:c3:46: 8e:ff:b9:63:17:8a:ac:63:f3:99:62:77:b7:2d:6d: 79:9a:57:a5:11:b8:4d:25:9c:a7:73:8f:45:81:6a: 54:bb:64:a2:6e:b1:9a:a7:82:ed:07:94:64:a6:15: f9:04:08:08:28:36:f1:11:8f:45:d4:72:28:0f:07: c3:7c:b5:16:7c:6c:bb:53:b1:e4:7c:af:62:64:4b: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DF:EC:74:67:09:CD:9B:99:60:71:FC:B9:5D:99:FD:F2:C9:F1:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:5d:a9:83:94:ec:0d:b8:7f:e8:c1:1b:81:ad:da:9d:de:3f: 8b:c3:5f:21:da:4c:bf:ea:13:2e:50:8b:f1:ab:3d:52:b8:d0: e6:dd:1d:b1:8d:cc:79:fc:35:69:03:e9:6e:5e:10:9f:c7:e2: 92:54:d4:81:e3:71:3b:ad:f9:dc:57:f8:48:44:73:48:83:c6: 73:90:4e:29:72:c8:b4:be:b2:aa:47:7f:be:de:5e:1e:7e:14: 59:3b:c9:23:18:1d:ba:a0:f4:a7:b0:a0:4c:4a:b2:28:86:94: 84:12:6e:7b:b7:96:16:eb:3c:47:de:e7:c3:d0:51:a5:ad:c8: 3e:86:e3:e8:63:41:a2:cb:3a:db:ae:22:69:e7:25:6f:41:f6: ec:ba:fb:b0:5e:fd:92:cb:30:ce:16:aa:b8:f7:54:c7:c8:e4: fc:b9:2e:97:96:5f:43:1d:b4:e8:4f:6b:c3:ba:76:8d:c6:0d: ad:3b:ed:85:11:bd:6b:4b:35:15:8d:96:ba:17:a0:09:8a:b5: 9c:e2:09:79:30:7c:00:bc:8a:c6:f8:74:b9:9a:58:51:57:98: e0:67:8f:1b:c7:79:da:c0:69:84:7c:26:8d:e3:49:16:63:c9: f7:1f:c3:06:eb:b1:f9:b0:01:a8:44:18:d5:6e:40:8a:54:b2: 73:bd:6a:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0YpsBCOdIYjYHJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI1MTAwODE1MDAwM1oXDTI1MTAxMTE1MDAwMFowLzEtMCsGA1UEAxMk MzlmYjdkMzgtYmRhNS00YjU3LWJkNWQtYzgzNjI3ZGJmZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIpGCNc4USlXLDPdHboSj+Vzdbtqd+fMdj6s mdyP8EzV3s8QpQ1c47Xe80CO03haNAEQDFDE4p/qsHzv4qwAHBkNItdNte7HhdW2 PwfNpNzAqzFwOnBg0cfjuYSVswUk08VWT3ctlTN1+kztoWIKej4WqIKynxHCy0n2 xEnbG7Z5cbBnckgMlG6jdqB4UWCa4lKCUvR4ejwj0NEQTYIW40cNFY7eUwW5jHwU iZrSnMQMw0aO/7ljF4qsY/OZYne3LW15mlelEbhNJZync49FgWpUu2SibrGap4Lt B5RkphX5BAgIKDbxEY9F1HIoDwfDfLUWfGy7U7HkfK9iZEuA/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKXf7HRnCc2bmWBx/Lldmf3yyfHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvMGY1MjE3NTktYjg4MC00 YTdkLWJlOGItM2NlNzBlNGFiYTgzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgXamDlOwNuH/owRuBrdqd 3j+Lw18h2ky/6hMuUIvxqz1SuNDm3R2xjcx5/DVpA+luXhCfx+KSVNSB43E7rfnc V/hIRHNIg8ZzkE4pcsi0vrKqR3++3l4efhRZO8kjGB26oPSnsKBMSrIohpSEEm57 t5YW6zxH3ufD0FGlrcg+huPoY0GiyzrbriJp5yVvQfbsuvuwXv2SyzDOFqq491TH yOT8uS6Xll9DHbToT2vDunaNxg2tO+2FEb1rSzUVjZa6F6AJirWc4gl5MHwAvIrG +HS5mlhRV5jgZ48bx3nawGmEfCaN40kWY8n3H8MG67H5sAGoRBjVbkCKVLJzvWpc -----END CERTIFICATE-----Generated at Thu Oct 9 15:36:39 2025 by rpki-client