$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft File: 8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft (raw, json) Hash identifier: my8y7bp3y/msridkNA64oUizwCg9G0nFLllrqMTbEA8= Subject key identifier: 21:C0:B2:DC:52:72:3C:9E:16:15:C4:F1:AB:3F:2A:74:84:A3:89:A9 Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Certificate serial: 010D0C9F4328584BBA8706AAB2B42D742CA89B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft Manifest number: 010D0C9F43285842599AC65E10630A4807FE987A Signing time: Sun 02 Nov 2025 18:00:03 +0000 Manifest this update: Sun 02 Nov 2025 18:00:03 +0000 Manifest next update: Wed 05 Nov 2025 18:00:00 +0000 Files and hashes: 1: 5e9ca8eb-7d6e-3139-a953-42189e507e24.roa (hash: 7A3QCIbiuJL3V03kPF8Jo7q0ZzQsIyooEqHCpghBuIg=) 2: 7530579f-b5fa-37f4-b8aa-0e1f4da06f02.roa (hash: 0YwWgQ1uBiHErkPgdHIosPoNpglirb9nGl6L0/I+WMk=) 3: 8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl (hash: eKXgawmZdoNF8dHC9oX3re5XqYovkNgNu+3MyodOPMo=) 4: ced6341d-e795-328e-9371-e1a1f59d7ca0.roa (hash: LTuyc0CQU8B1awzLjNYSmS0p4qLOXEGjdVj2waBbJlI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:87:06:aa:b2:b4:2d:74:2c:a8:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Validity Not Before: Nov 2 18:00:03 2025 GMT Not After : Nov 5 18:00:00 2025 GMT Subject: CN=cbee8b05-2971-4d54-9480-90ad59c89b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:6b:02:b9:9d:7b:d7:65:87:d2:7d:66:81: 9b:23:ec:a0:0e:14:8d:62:0d:ed:52:ec:dd:d2:ae: 9b:90:62:25:56:3f:b9:be:aa:f0:ae:b8:86:d0:17: c8:11:8b:c6:cc:d8:1b:41:77:95:30:c5:ec:42:58: 68:2a:13:ac:db:da:23:ca:90:42:9b:c9:ee:d4:5c: 22:1c:bf:82:99:49:b0:af:18:42:e5:3c:ea:58:77: 0f:00:4c:8f:48:d1:ae:92:47:d7:12:39:15:d7:ec: 24:20:5a:11:59:9f:9f:d8:4f:54:24:44:f6:57:39: b5:d8:15:02:93:c9:63:3b:cd:1b:18:80:08:7f:3e: d3:08:a2:fb:71:5e:28:e9:ec:6b:1f:76:3b:d8:97: 44:a8:bf:77:b1:9e:e0:65:00:d1:87:f2:dc:0c:d2: b7:cf:4d:62:a4:cf:73:5f:60:61:68:62:19:92:de: af:0a:7c:99:42:01:eb:9b:7d:f9:9b:48:42:1b:97: aa:75:6e:4e:a5:6b:a0:1c:40:47:ae:82:8a:48:d9: a8:eb:9a:ba:e2:3b:b0:0f:e7:dc:50:f2:a2:55:9c: 88:17:12:59:6f:f6:de:b0:3c:fc:46:6f:9c:df:56: 7c:e1:af:98:63:0e:c1:c9:2c:bc:09:27:10:82:66: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C0:B2:DC:52:72:3C:9E:16:15:C4:F1:AB:3F:2A:74:84:A3:89:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl X509v3 Authority Key Identifier: keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4a:ef:42:1c:31:70:a5:39:fc:db:c1:cb:44:8e:1e:fa:26: 2d:43:6d:cd:56:ee:9a:33:0f:eb:36:a1:ed:9a:5d:bf:ee:b0: fc:ba:78:a3:30:fc:88:a2:fa:79:ba:93:29:5f:ff:f7:ca:55: 49:53:d4:89:9d:62:8a:4d:47:34:aa:26:99:f7:1f:db:ce:dd: 8d:29:61:3e:44:43:c5:42:17:be:96:2e:0b:81:a5:f1:52:d8: 2f:94:f9:81:88:8e:62:9f:d9:92:39:fd:ce:31:3a:7b:9d:6f: 18:a6:34:ac:dd:3f:3e:dc:61:db:5b:b8:01:78:94:7d:23:ab: c9:21:a1:96:cf:6a:66:17:24:dd:8f:35:e3:a5:4b:bc:a8:94: f8:26:38:2f:d4:11:db:d0:59:85:da:37:b4:86:1b:9b:0c:cf: ef:27:0c:2e:23:f3:b3:04:75:b0:6b:17:d0:f1:77:a2:94:8e: 9d:f3:a5:62:5b:c7:3f:37:84:bc:58:96:be:19:2f:a3:7b:8f: de:cd:9e:8a:c3:90:a2:53:90:c6:a4:e3:27:f4:01:d5:2f:d1: 1f:09:4f:d0:f2:26:0f:52:bb:44:83:b5:ed:97:00:b3:00:c5: 0b:b9:8b:ba:e8:bc:17:90:ab:72:9c:e9:85:a8:f8:4f:5c:8f: 4e:58:8b:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6hwaqsrQtdCyom4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyNjk1YjctZTgyMy00Zjc0LTkzYjgtOThkYmJmNzc1 YmNmMB4XDTI1MTEwMjE4MDAwM1oXDTI1MTEwNTE4MDAwMFowLzEtMCsGA1UEAxMk Y2JlZThiMDUtMjk3MS00ZDU0LTk0ODAtOTBhZDU5Yzg5YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV1rArmde9dlh9J9ZoGbI+ygDhSNYg3tUuzd 0q6bkGIlVj+5vqrwrriG0BfIEYvGzNgbQXeVMMXsQlhoKhOs29ojypBCm8nu1Fwi HL+CmUmwrxhC5TzqWHcPAEyPSNGukkfXEjkV1+wkIFoRWZ+f2E9UJET2Vzm12BUC k8ljO80bGIAIfz7TCKL7cV4o6exrH3Y72JdEqL93sZ7gZQDRh/LcDNK3z01ipM9z X2BhaGIZkt6vCnyZQgHrm335m0hCG5eqdW5OpWugHEBHroKKSNmo65q64juwD+fc UPKiVZyIFxJZb/besDz8Rm+c31Z84a+YYw7BySy8CScQgmat8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCHAstxScjyeFhXE8as/KnSEo4mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2 OTViNy1lODIzLTRmNzQtOTNiOC05OGRiYmY3NzViY2YvOGEyNjk1YjctZTgyMy00 Zjc0LTkzYjgtOThkYmJmNzc1YmNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGEyNjk1YjctZTgyMy00Zjc0LTkz YjgtOThkYmJmNzc1YmNmLzhhMjY5NWI3LWU4MjMtNGY3NC05M2I4LTk4ZGJiZjc3 NWJjZi5jcmwwHwYDVR0jBBgwFoAUQwpY7vmeeMU73CWitIOTgUZpxGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2OTViNy1lODIzLTRmNzQtOTNiOC05OGRi YmY3NzViY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBSu9CHDFwpTn828HLRI4e +iYtQ23NVu6aMw/rNqHtml2/7rD8unijMPyIovp5upMpX//3ylVJU9SJnWKKTUc0 qiaZ9x/bzt2NKWE+REPFQhe+li4LgaXxUtgvlPmBiI5in9mSOf3OMTp7nW8YpjSs 3T8+3GHbW7gBeJR9I6vJIaGWz2pmFyTdjzXjpUu8qJT4Jjgv1BHb0FmF2je0hhub DM/vJwwuI/OzBHWwaxfQ8XeilI6d86ViW8c/N4S8WJa+GS+je4/ezZ6Kw5CiU5DG pOMn9AHVL9EfCU/Q8iYPUrtEg7XtlwCzAMULuYu66LwXkKtynOmFqPhPXI9OWIsg -----END CERTIFICATE-----Generated at Mon Nov 3 07:59:23 2025 by rpki-client