$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft File: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft (raw, json) Hash identifier: 5D+S1SqUkiAZrAtPZsYC1VWvy+LMRdonyRbdOhT2UzE= Subject key identifier: BA:5C:89:7B:12:71:20:52:98:12:05:B1:D3:56:16:03:AB:F4:E0:37 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584B74093FCECF87237A853F9F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft Manifest number: 010D0C9F4328584073A851A9D5E916254E2FBC22 Signing time: Wed 08 Oct 2025 12:00:03 +0000 Manifest this update: Wed 08 Oct 2025 12:00:03 +0000 Manifest next update: Sat 11 Oct 2025 12:00:00 +0000 Files and hashes: 1: 7be3ce67-426a-397a-9a74-e2c03aae3762.roa (hash: NaD3uy8UUY9VGT4t+YdPClUqlUCxwtwbkP4pGQQe0r8=) 2: 842ecda0-182f-3843-adab-4bdda84d6875.roa (hash: YxKBeBamilK6I6Ym0vWizZtgdwDtJleogg85zvSpSJs=) 3: 9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa (hash: zOU1XtWZaN9knNgbh8ufJCzsqQ4V2ysboqgkm/OH+wU=) 4: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (hash: SAPhk28cPlJgpwWyPOLq7MDcxOYCQJDfTawyeu0hCRE=) 5: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl (hash: O57b7G0Pyn70bIG9MUQ92xxZFdML7OievuJnU7MfDcw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:09:3f:ce:cf:87:23:7a:85:3f:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Oct 8 12:00:03 2025 GMT Not After : Oct 11 12:00:00 2025 GMT Subject: CN=e12f192a-7998-4bd6-b267-487997b4cd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:11:71:66:20:b8:7f:8b:78:c0:f9:74:fc: ea:fc:46:2c:45:24:2c:f3:89:dc:d3:a1:7e:93:98: 40:c3:7c:cc:3b:88:49:1d:b0:a7:34:7d:0b:68:a7: ca:e3:b6:60:38:c4:15:45:12:9d:15:ae:44:35:98: 20:8b:81:dd:f2:49:4b:56:8e:be:79:ee:dc:c7:8e: 2a:3e:5e:6d:45:c3:8d:40:d4:65:55:e6:05:2a:a6: e0:91:c2:68:10:30:75:e6:cc:24:b4:fe:cd:3b:eb: 62:03:c3:70:71:2a:1f:8f:67:af:e0:b8:8c:b7:9c: 34:e8:a6:45:1e:53:de:53:74:38:21:de:39:29:36: 7c:04:97:1a:d6:d9:8b:e3:6b:53:3b:13:20:32:98: 76:a2:bd:30:37:16:48:53:d9:a6:1f:21:25:9c:4b: 6c:8c:d6:e5:f3:c9:cf:f0:64:82:ba:1b:a7:c6:bc: 3e:fe:d1:c4:7a:78:cb:9a:ed:a9:a2:e8:f1:5b:9d: d2:9c:f8:12:ce:84:61:33:6b:15:6c:eb:ab:8a:3e: ba:35:e6:64:50:e2:ee:b4:76:88:b4:9d:98:bc:ca: bf:21:30:67:00:1e:ed:42:37:b8:57:f4:f2:93:19: 19:6b:2b:5d:b7:94:fe:0c:74:73:80:1e:78:3f:7d: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5C:89:7B:12:71:20:52:98:12:05:B1:D3:56:16:03:AB:F4:E0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5e:b5:7a:87:83:ef:44:e4:3a:aa:4e:85:a5:8e:58:26:f5: f0:0d:65:44:bb:32:ae:76:28:01:35:44:fb:00:10:40:44:6e: 80:6c:30:80:fd:df:dc:8e:35:25:8e:19:ab:3c:a0:e4:e6:b8: a4:79:89:a7:2e:ce:93:9c:02:c3:65:22:8d:70:f5:d2:87:5d: 0d:f9:ed:0f:9c:cc:6d:d6:c7:9f:ea:9d:67:bd:df:8e:71:70: 17:9f:ad:bf:82:10:d4:a0:4b:58:4a:7f:68:fe:c2:77:6a:21: 29:20:6d:34:3e:6a:a6:cb:b2:c1:f7:07:e0:d6:bc:e8:c9:44: a1:de:3f:76:b8:b3:3a:91:8c:45:a8:59:ae:e4:00:1b:c7:6c: 00:f1:17:b8:14:88:3b:54:fe:b7:2a:bd:a1:fa:b7:01:a2:92: 31:c0:e7:7f:d8:dd:65:f1:f8:3c:bb:cf:d7:89:b0:25:f1:14: 85:10:99:e2:2a:88:c3:ff:56:3b:72:71:dc:f8:0d:07:dc:58: 04:5a:24:7e:1d:30:a1:28:6f:e4:7e:b3:3e:de:bb:f4:c7:47: fb:29:3c:e8:04:3a:e2:6a:10:06:a3:2d:50:82:f7:c0:4a:76: 35:e2:3f:5e:77:f7:c7:32:6e:35:8b:90:de:ed:eb:e4:90:a1: f4:99:25:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0CT/Oz4cjeoU/n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MTAwODEyMDAwM1oXDTI1MTAxMTEyMDAwMFowLzEtMCsGA1UEAxMk ZTEyZjE5MmEtNzk5OC00YmQ2LWIyNjctNDg3OTk3YjRjZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+wRcWYguH+LeMD5dPzq/EYsRSQs84nc06F+ k5hAw3zMO4hJHbCnNH0LaKfK47ZgOMQVRRKdFa5ENZggi4Hd8klLVo6+ee7cx44q Pl5tRcONQNRlVeYFKqbgkcJoEDB15swktP7NO+tiA8NwcSofj2ev4LiMt5w06KZF HlPeU3Q4Id45KTZ8BJca1tmL42tTOxMgMph2or0wNxZIU9mmHyElnEtsjNbl88nP 8GSCuhunxrw+/tHEenjLmu2poujxW53SnPgSzoRhM2sVbOurij66NeZkUOLutHaI tJ2YvMq/ITBnAB7tQje4V/TykxkZaytdt5T+DHRzgB54P32lWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLpciXsScSBSmBIFsdNWFgOr9OA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvYWQzZjY2MjAtMDU3Ni00 NmQ4LWIwNWQtM2UyY2RkMDZhZmEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8XrV6h4PvROQ6qk6FpY5Y JvXwDWVEuzKudigBNUT7ABBARG6AbDCA/d/cjjUljhmrPKDk5rikeYmnLs6TnALD ZSKNcPXSh10N+e0PnMxt1sef6p1nvd+OcXAXn62/ghDUoEtYSn9o/sJ3aiEpIG00 Pmqmy7LB9wfg1rzoyUSh3j92uLM6kYxFqFmu5AAbx2wA8Re4FIg7VP63Kr2h+rcB opIxwOd/2N1l8fg8u8/XibAl8RSFEJniKojD/1Y7cnHc+A0H3FgEWiR+HTChKG/k frM+3rv0x0f7KTzoBDriahAGoy1QgvfASnY14j9ed/fHMm41i5De7evkkKH0mSV0 -----END CERTIFICATE-----Generated at Wed Oct 8 21:31:57 2025 by rpki-client