$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: 3rTbWJEU1pMa9u3Ojpw5+8PNdw6AEE/fXcVUDZkgxnQ= Subject key identifier: CC:74:69:E9:44:73:8F:7B:97:7A:50:1A:8E:23:32:2A:CE:97:5F:8B Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584BBD1635567D77C79C044A2380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A01626 Signing time: Mon 03 Nov 2025 16:00:08 +0000 Manifest this update: Mon 03 Nov 2025 16:00:08 +0000 Manifest next update: Wed 05 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: 7VjvdLSabUjdJqurngf5x6nt52dKkYsYFg4UAqOuD1U=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 0WxYByBYlMQIIh5LMA+Hf1T8bIqqiU6tmGI2XtpdK7I=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: Nc5Toc66fnqZl4CW0KYRuzxneteLba0zdJ/NpurzUUs=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: woiYGe3mktKfsGSUtRcvDjo1sRLYf5ekMrjY0JaemJs=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: e8QFV3NBEfRv1+wbupjF7CxtY/IirL5WOowo2mzACIs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:16:35:56:7d:77:c7:9c:04:4a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Nov 3 16:00:08 2025 GMT Not After : Nov 5 16:00:00 2025 GMT Subject: CN=503d81e9-5755-4d9e-b871-2a71fe2da3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:59:02:43:3c:fd:6a:b9:40:13:f2:56:e3: f1:b8:31:28:ba:12:98:b2:a1:61:6d:db:f3:c0:18: 99:91:10:e3:3f:f6:ed:0a:b4:2a:f3:f9:6a:05:e7: b4:30:74:7b:64:18:44:2e:b7:6a:c6:f6:45:1e:43: 59:02:c8:a5:03:7c:a4:3b:7b:63:26:39:cd:6b:28: 4d:a1:f0:e5:ef:93:33:8a:b9:b4:88:48:56:bd:f6: b6:51:98:d6:19:44:74:e3:89:1d:df:01:29:43:57: 65:44:98:5d:a0:28:cf:52:c6:ec:e6:75:b1:42:85: 0d:d6:df:f8:ac:34:3e:73:30:47:6a:1e:b8:a4:9a: 4b:f8:ca:8c:40:26:dc:55:06:a7:9c:05:e3:3c:b3: 3e:24:80:4b:6f:d3:cf:bd:95:70:33:05:ae:43:ce: 13:05:6d:de:28:35:08:8a:9a:02:3c:d3:59:3c:f0: 91:f4:20:84:2f:46:48:87:5b:67:3c:ef:45:45:0d: 1f:23:5f:68:ad:58:e5:24:84:cf:53:ff:20:a1:6b: 54:58:63:06:cd:40:a5:2e:21:bb:0d:25:30:1b:3d: b3:c0:11:2b:5a:3d:f1:fb:e6:70:1e:3b:76:de:7a: 00:26:0e:16:47:68:4a:fd:67:d3:0a:1c:e7:27:7b: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:74:69:E9:44:73:8F:7B:97:7A:50:1A:8E:23:32:2A:CE:97:5F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ed:02:41:a0:f3:41:03:a0:d1:64:1d:b9:5e:04:29:92:b4: b5:80:a2:25:6a:32:2c:4d:62:92:8c:ac:dc:b0:93:e0:c2:a4: 68:bc:99:28:a0:0d:3c:23:7b:20:e9:11:9d:a6:de:14:ac:07: c1:6d:cf:44:6d:56:0c:7e:95:85:09:1e:2d:49:14:ac:43:32: d6:15:a1:f4:a9:84:36:85:a1:31:1f:ae:01:74:30:eb:94:9c: 36:66:39:ec:94:99:35:df:84:5c:db:6a:e9:f1:12:6d:3f:3e: 3a:3f:29:88:5b:3f:3e:e2:e8:3b:d1:42:d1:4d:ac:c8:d6:44: bc:b5:48:c2:b6:13:32:2a:e7:c7:5c:d8:52:eb:a1:a6:b0:d2: 9e:f1:3f:8b:e0:09:c7:ae:14:ad:07:1c:64:5c:57:c3:69:84: e6:d0:22:e7:72:c4:12:74:0b:f5:5e:21:87:18:5c:c4:e3:bd: f4:1a:f0:3b:de:3f:a9:ba:4d:44:e7:b1:99:49:bd:ef:15:fb: 6f:a8:e6:c4:e8:98:3a:2b:df:a6:0d:5b:da:65:05:a4:12:72: e1:4e:a2:53:f9:dd:42:98:fe:8c:b4:4c:11:64:c8:0a:49:a0: ab:bf:1f:24:f8:37:2c:7e:dc:f0:2e:1d:05:16:c6:a8:20:05: 4c:e7:75:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9FjVWfXfHnARKI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MTEwMzE2MDAwOFoXDTI1MTEwNTE2MDAwMFowLzEtMCsGA1UEAxMk NTAzZDgxZTktNTc1NS00ZDllLWI4NzEtMmE3MWZlMmRhM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXZZAkM8/Wq5QBPyVuPxuDEouhKYsqFhbdvz wBiZkRDjP/btCrQq8/lqBee0MHR7ZBhELrdqxvZFHkNZAsilA3ykO3tjJjnNayhN ofDl75Mzirm0iEhWvfa2UZjWGUR044kd3wEpQ1dlRJhdoCjPUsbs5nWxQoUN1t/4 rDQ+czBHah64pJpL+MqMQCbcVQannAXjPLM+JIBLb9PPvZVwMwWuQ84TBW3eKDUI ipoCPNNZPPCR9CCEL0ZIh1tnPO9FRQ0fI19orVjlJITPU/8goWtUWGMGzUClLiG7 DSUwGz2zwBErWj3x++ZwHjt23noAJg4WR2hK/WfTChznJ3uRuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMx0aelEc497l3pQGo4jMirOl1+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi7QJBoPNBA6DRZB25XgQp krS1gKIlajIsTWKSjKzcsJPgwqRovJkooA08I3sg6RGdpt4UrAfBbc9EbVYMfpWF CR4tSRSsQzLWFaH0qYQ2haExH64BdDDrlJw2ZjnslJk134Rc22rp8RJtPz46PymI Wz8+4ug70ULRTazI1kS8tUjCthMyKufHXNhS66GmsNKe8T+L4AnHrhStBxxkXFfD aYTm0CLncsQSdAv1XiGHGFzE4730GvA73j+puk1E57GZSb3vFftvqObE6Jg6K9+m DVvaZQWkEnLhTqJT+d1CmP6MtEwRZMgKSaCrvx8k+DcsftzwLh0FFsaoIAVM53XE -----END CERTIFICATE-----Generated at Tue Nov 4 05:29:18 2025 by rpki-client