$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft File: a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft (raw, json) Hash identifier: cyJsLLvlavEq1+x3eAM2dxc+qPgK0C3+oWlcdTtBSW4= Subject key identifier: 09:ED:B3:88:27:52:F1:56:98:79:F1:CC:DD:B4:4E:E7:7B:BF:AB:ED Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584BA46D1A2E93F4CF278F0CAF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft Manifest number: 010D0C9F4328584505F2AF5ED59DA37E5687187E Signing time: Sat 25 Oct 2025 20:00:04 +0000 Manifest this update: Sat 25 Oct 2025 20:00:04 +0000 Manifest next update: Mon 27 Oct 2025 20:00:00 +0000 Files and hashes: 1: 3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa (hash: tfPEAZc/oz4Zh+9ejXpoSZ7WuEiOTnMQkg0zZjq4ixU=) 2: 653ac14b-6f52-36b8-9423-535372503377.roa (hash: sMQv0GMTd/ICXkayReMrii12f3j57oBz9Wg7kDiv/Zg=) 3: 821d388f-a517-3721-bd73-97470ca4681b.roa (hash: dCes1jX6XoHau8TtZiu0NbAYdF61dun3KpC/M5A5WXQ=) 4: a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl (hash: W+a70pclzcvMv1f0t1DEVvYf32OeCgseYQ8e9DqjJss=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:6d:1a:2e:93:f4:cf:27:8f:0c:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Oct 25 20:00:04 2025 GMT Not After : Oct 27 20:00:00 2025 GMT Subject: CN=4e2e11e0-2cf5-4f1a-907c-bffa61599f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:97:e9:78:e1:32:5c:a9:23:bc:2d:01:1b: 04:28:be:c0:89:66:b8:1b:03:55:7f:37:a5:d5:86: 75:22:03:54:ee:3f:ea:12:d3:72:f7:59:9c:dc:0d: f1:d6:bf:92:c3:78:1f:27:81:ce:bc:76:98:dc:a0: 60:21:75:63:95:d6:52:ba:21:4c:f0:f9:7e:b8:a3: de:99:09:9c:65:3d:8f:3f:3b:67:37:c6:c1:27:3c: b5:cb:fe:a3:39:93:b1:23:8d:f1:42:3e:9f:50:26: 79:e4:2e:89:2a:83:ac:1d:4c:63:48:43:3e:45:47: 2b:ec:26:1e:88:ff:53:af:41:ff:be:3d:c6:de:77: 9e:17:f0:fa:f7:45:7d:ec:bb:53:da:66:ed:9b:c7: 61:e3:96:25:cc:e0:fb:e9:03:ee:a0:5a:40:5a:6b: 1c:fc:ab:8f:7d:54:0d:c5:1c:17:3b:10:e6:87:c9: c5:78:0a:34:21:1d:4b:24:7f:ec:29:b8:64:de:c3: 16:75:ea:1a:34:f3:ae:1d:29:df:69:e1:19:6e:7b: af:74:33:05:8f:9f:15:0c:11:83:4b:7c:6d:39:35: dd:1d:af:7f:ed:33:4e:27:f0:26:72:2a:43:4c:24: 8b:22:a0:07:d7:43:61:a5:fd:d6:de:bc:5a:87:8c: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:B3:88:27:52:F1:56:98:79:F1:CC:DD:B4:4E:E7:7B:BF:AB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:97:09:4a:d9:a2:46:a5:23:52:9a:95:35:31:d2:1c:66:6e: db:b5:76:73:9b:4a:e5:dd:b5:8b:03:b5:e9:71:70:bb:db:01: 6e:30:72:7d:b3:8b:c4:50:cb:b5:68:f0:2a:b7:f5:c9:d0:b5: 3f:3a:60:21:82:96:47:d1:ad:53:4c:30:55:3d:66:cf:31:cf: 85:51:12:25:04:d9:a0:0a:e3:11:95:cd:48:69:3b:9c:96:f5: 1e:22:f1:ea:66:d4:ad:dd:53:06:3c:f9:a0:98:58:a5:da:63: 15:ff:a5:b2:38:c2:75:93:79:99:6c:e8:5e:db:bd:43:ba:9b: e9:6f:4f:06:8b:59:9c:f1:12:d9:66:d0:aa:4d:f4:06:09:bf: a0:ff:47:b3:9b:f6:4f:e2:b6:39:d9:f3:46:99:de:26:aa:71: 6c:f1:d9:fe:64:7d:54:7a:b9:c4:02:12:5f:5a:d6:39:8d:1d: 87:6b:a7:7d:68:e5:f7:3e:f2:a4:58:70:a3:f0:43:bc:fe:67: 0b:ac:75:cb:1b:98:9d:48:0e:a4:b0:44:99:4b:4f:1f:3b:3b: 1c:a2:8a:8e:04:d9:6e:0c:58:5e:e8:e9:b3:45:c9:4b:49:95: 50:76:24:e5:26:32:14:64:cf:34:ab:38:7b:35:ee:4d:6d:09: d0:1a:01:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEukbRouk/TPJ48Mr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI1MTAyNTIwMDAwNFoXDTI1MTAyNzIwMDAwMFowLzEtMCsGA1UEAxMk NGUyZTExZTAtMmNmNS00ZjFhLTkwN2MtYmZmYTYxNTk5ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuOX6XjhMlypI7wtARsEKL7AiWa4GwNVfzel 1YZ1IgNU7j/qEtNy91mc3A3x1r+Sw3gfJ4HOvHaY3KBgIXVjldZSuiFM8Pl+uKPe mQmcZT2PPztnN8bBJzy1y/6jOZOxI43xQj6fUCZ55C6JKoOsHUxjSEM+RUcr7CYe iP9Tr0H/vj3G3neeF/D690V97LtT2mbtm8dh45YlzOD76QPuoFpAWmsc/KuPfVQN xRwXOxDmh8nFeAo0IR1LJH/sKbhk3sMWdeoaNPOuHSnfaeEZbnuvdDMFj58VDBGD S3xtOTXdHa9/7TNOJ/AmcipDTCSLIqAH10Nhpf3W3rxah4yNWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAnts4gnUvFWmHnxzN20Tud7v6vtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvYThiODRlMmItYWZiZS00 YjM1LWIwMDUtZTBkZmNhMmUyM2Q4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjlwlK2aJGpSNSmpU1MdIc Zm7btXZzm0rl3bWLA7XpcXC72wFuMHJ9s4vEUMu1aPAqt/XJ0LU/OmAhgpZH0a1T TDBVPWbPMc+FURIlBNmgCuMRlc1IaTuclvUeIvHqZtSt3VMGPPmgmFil2mMV/6Wy OMJ1k3mZbOhe271Dupvpb08Gi1mc8RLZZtCqTfQGCb+g/0ezm/ZP4rY52fNGmd4m qnFs8dn+ZH1UernEAhJfWtY5jR2Ha6d9aOX3PvKkWHCj8EO8/mcLrHXLG5idSA6k sESZS08fOzscooqOBNluDFhe6OmzRclLSZVQdiTlJjIUZM80qzh7Ne5NbQnQGgFn -----END CERTIFICATE-----Generated at Sun Oct 26 02:51:34 2025 by rpki-client