$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft File: ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft (raw, json) Hash identifier: TPn5+W+3Ao6PzAeVRaHVCfPqq+iycsptHf/lQny2YFM= Subject key identifier: D2:20:B5:F3:C4:88:9E:BC:12:D6:E7:A4:27:F8:47:C6:15:1C:FC:7E Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584BC0CF1B75274D68DD68B9E100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft Manifest number: 010D0C9F4328584073A83248FCB1AFDD41298766 Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Sat 08 Nov 2025 00:00:00 +0000 Files and hashes: 1: 02b3d6de-dde7-3c25-aba8-656086e431bd.roa (hash: xMnOBSKunOr0XozNsxjHPWKWkjFM8LjUeakCY7JE55w=) 2: 29d649ff-7028-3767-8327-8c4721bf56a8.roa (hash: PyJEQoO2CQd/kzpcgu3N5uSK+0irCFjlLnu5c4NQWI4=) 3: 4d21e3cc-251d-359f-9ce2-465d97234a8a.roa (hash: rZh8AHeJghjebzftDmegyI2rTMuKXFnzMWXFxHgPsbg=) 4: 6a37db04-c374-339b-a7c3-989e21aa23f4.roa (hash: JgSpcEyxqjwjj5/8oUlZuTc++y2qRXaN+GJS4HztjI8=) 5: a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (hash: ZMJpY+tjNcovquOshS8KrW+GPtH/izpRW4RTtxNnmDk=) 6: ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl (hash: ceLXwDNuXy3SdgWNvUrZ3zqCxD8PIznWYC2LD8Vq1pE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:1b:75:27:4d:68:dd:68:b9:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 8 00:00:00 2025 GMT Subject: CN=5ac16c68-4142-4e66-b6f4-ea54d419b7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:31:b0:68:f9:e4:32:a1:9a:08:27:b0:4a: 52:ac:a2:ef:4e:b5:57:b6:0e:70:55:fa:3b:0c:96: 56:ba:8b:33:f0:41:ee:66:ee:9e:70:69:c2:d3:9d: 21:1e:c0:8f:37:d4:67:7a:c3:a9:42:df:5f:35:49: 5f:c9:25:08:a1:87:d1:1e:7a:7d:fd:e3:1b:0f:cc: 17:ed:df:e4:b6:77:76:8e:ce:e0:a5:fc:13:52:f3: 66:76:58:c2:c8:79:5a:f2:ef:19:df:31:0c:60:3c: 92:9b:77:1e:12:5d:39:be:9d:74:88:2e:f8:b7:e6: c3:90:66:e4:db:34:bc:11:7b:48:9b:8f:4c:63:74: bd:fd:1f:88:a0:e6:b9:7e:b8:d0:75:bc:c5:01:f3: 65:06:79:d3:d1:76:cc:4b:80:b0:71:e7:5f:5a:6b: 8e:1c:f1:97:7b:36:50:24:ba:14:df:54:c8:4a:e6: 9d:8b:eb:15:5f:e2:0a:72:1b:93:d3:de:3d:f9:16: 83:05:2d:da:e5:36:fe:c0:77:40:36:a9:89:24:05: 5e:81:2c:e9:95:c4:e2:34:f9:17:44:66:40:f4:8e: 2c:aa:51:83:3b:28:c2:08:08:25:0d:2d:22:ef:07: 35:94:a1:ba:5c:c2:88:a2:e9:ef:b1:6b:5d:99:f0: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:20:B5:F3:C4:88:9E:BC:12:D6:E7:A4:27:F8:47:C6:15:1C:FC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6f:36:48:d2:de:91:4a:0b:ed:6d:c0:c9:9a:37:18:18:71: ae:40:ff:e4:16:68:32:52:e0:c3:45:52:43:ec:d5:18:a3:12: 5d:99:4a:15:ed:f4:0b:21:66:3d:8f:0a:64:80:67:f1:72:0d: e9:26:ff:1c:c5:b8:3c:b5:51:e9:a7:98:81:a4:e2:f4:63:2c: 3d:0f:a4:53:c7:0c:a6:c7:b0:51:fe:ee:e0:c5:e4:1e:28:9a: 69:22:e0:a3:ee:48:b6:18:e1:5e:f6:e1:cc:74:69:39:78:eb: 49:40:a7:fa:e5:c6:4e:35:c8:ba:b3:2b:1f:88:6d:33:c2:7c: 50:ed:ab:e2:03:3a:01:6b:f8:f8:ae:a2:23:f3:b3:8c:9f:c5: 84:85:b9:d2:47:ba:ad:03:69:c6:4f:09:12:d1:3b:90:68:bc: 13:bd:72:24:87:9a:fa:7e:a8:de:e5:8f:0d:25:a2:59:d0:90: 4a:82:3d:8f:fe:99:03:1f:a3:29:92:fb:9d:c5:22:83:09:ea: c4:a2:b8:58:50:29:60:8e:c0:5d:3f:66:23:b4:c1:c5:03:6e: b0:f7:8e:e8:91:fc:27:ec:6d:88:70:fa:98:53:54:cc:34:1c: dc:21:c8:37:82:06:3d:91:06:c5:21:4e:1e:da:73:be:5d:58: 43:4c:8e:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzxt1J01o3Wi54QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwODAwMDAwMFowLzEtMCsGA1UEAxMk NWFjMTZjNjgtNDE0Mi00ZTY2LWI2ZjQtZWE1NGQ0MTliN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxAxsGj55DKhmggnsEpSrKLvTrVXtg5wVfo7 DJZWuosz8EHuZu6ecGnC050hHsCPN9RnesOpQt9fNUlfySUIoYfRHnp9/eMbD8wX 7d/ktnd2js7gpfwTUvNmdljCyHla8u8Z3zEMYDySm3ceEl05vp10iC74t+bDkGbk 2zS8EXtIm49MY3S9/R+IoOa5frjQdbzFAfNlBnnT0XbMS4CwcedfWmuOHPGXezZQ JLoU31TISuadi+sVX+IKchuT0949+RaDBS3a5Tb+wHdANqmJJAVegSzplcTiNPkX RGZA9I4sqlGDOyjCCAglDS0i7wc1lKG6XMKIounvsWtdmfC/pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIgtfPEiJ68EtbnpCf4R8YVHPx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvYWI4NTY4NmItYmFjMy00 MGQyLWI0NmUtZjI1OTNmYjBiYzZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsbzZI0t6RSgvtbcDJmjcY GHGuQP/kFmgyUuDDRVJD7NUYoxJdmUoV7fQLIWY9jwpkgGfxcg3pJv8cxbg8tVHp p5iBpOL0Yyw9D6RTxwymx7BR/u7gxeQeKJppIuCj7ki2GOFe9uHMdGk5eOtJQKf6 5cZONci6sysfiG0zwnxQ7aviAzoBa/j4rqIj87OMn8WEhbnSR7qtA2nGTwkS0TuQ aLwTvXIkh5r6fqje5Y8NJaJZ0JBKgj2P/pkDH6MpkvudxSKDCerEorhYUClgjsBd P2YjtMHFA26w947okfwn7G2IcPqYU1TMNBzcIcg3ggY9kQbFIU4e2nO+XVhDTI6R -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:32 2025 by rpki-client