$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft File: a07401de-4b0a-4532-ac08-dba8b0588c48.mft (raw, json) Hash identifier: GtdgPlZE66LnthS8nnt08i9ijQ4FG2JBTKYg0AE8wiM= Subject key identifier: D2:2A:14:1C:28:1C:3B:75:D8:08:BF:6A:6E:21:81:20:41:68:60:E7 Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Certificate serial: 010D0C9F4328584B963C2C30BFE3F15E9DE20E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft Manifest number: 010D0C9F4328584073A82070BAB7CA2688933616 Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 1a3caee3-86b7-3edc-b666-a4985f7273af.roa (hash: nIRz2/VG7AvjFGOdAqaPnlU8omtcJ1BVKoDisVXtwUE=) 2: 2871d28b-2672-36d2-8d46-0df272837595.roa (hash: 1wAhxJs2ZTdLaINvmQjYSVSRq4gRHfeM9y+35IKnhxk=) 3: 3125937d-10bf-347b-bf28-785512b3e771.roa (hash: 3CWd4Qw5fTcKv0jF8Zk3afAH59uWwa6PerAx4Pq4gyM=) 4: 7139e3ba-723e-3916-9355-4bc0c92fe671.roa (hash: cCML67lYwhHaM8HIAajX0EplaA+sR4fhdb8zHNvRP10=) 5: a07401de-4b0a-4532-ac08-dba8b0588c48.crl (hash: TJDFkuJm/raPKnBH4EUH0dINVX5hDF+KeyzxWoqQugA=) 6: b287c706-2d12-3e67-bc19-1bb937299cb7.roa (hash: We91NQPxFWrn4XJOZdH3HP6qCPt8YAlppAeuopBSVMA=) 7: c5492a25-61e2-3397-848b-141163ce58ef.roa (hash: 4M/lKVod9iAg/oJ+xBs+wx6udhhZBsdprbIe5HHuBNA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2c:30:bf:e3:f1:5e:9d:e2:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=1157439d-4fbc-4a8c-b2ca-7b1f4e85cb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:83:a6:dd:53:3c:fd:7e:18:0a:bc:7c:32: b4:3d:83:69:3b:e2:22:6c:27:fb:ab:85:82:0b:6b: ee:6c:87:f7:10:05:ff:0c:b7:d3:15:6b:6a:fa:70: f5:d9:4a:b2:96:3c:47:31:24:94:52:65:9b:e9:40: 7b:ec:ef:2f:29:b1:69:5a:25:8c:c7:bd:89:fe:7f: f6:63:a6:42:b7:0f:08:54:39:d6:32:8c:de:98:c6: 40:eb:9f:4e:6a:17:2f:1d:cf:83:0a:f6:10:fa:4e: bf:18:22:2a:5e:b0:d2:f0:62:9d:a2:33:71:9c:00: 37:6d:aa:76:a4:37:67:b2:3d:d9:34:b8:3d:86:1b: 9c:7e:ec:05:2b:ce:0b:16:02:80:80:76:8e:60:cc: 1a:dc:ef:3f:82:65:e6:da:b4:b2:a0:bd:be:bd:7c: 28:b2:c2:e4:1e:9c:fd:35:de:86:e3:13:02:51:e2: 0f:a3:c9:f8:94:9f:21:c7:8c:a9:75:64:ab:a1:5d: 2e:4d:12:84:cb:1d:76:27:11:54:11:f4:89:c7:74: 33:2e:68:ba:62:f9:40:07:a0:94:d9:4a:3e:c9:42: 3a:3c:97:3b:3a:1b:d2:5c:16:49:e7:66:e2:d1:ba: 1b:76:b7:d0:2b:a9:09:21:43:ed:bc:c6:da:29:1e: 3f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2A:14:1C:28:1C:3B:75:D8:08:BF:6A:6E:21:81:20:41:68:60:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl X509v3 Authority Key Identifier: keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9c:fa:10:9d:36:5e:b3:96:8a:50:63:3d:86:56:f0:41:73: fd:bc:f4:c9:ce:21:f8:23:f4:96:49:60:01:fa:66:4c:da:17: 61:49:5a:2b:60:dc:c6:81:75:f9:04:66:b5:04:4e:74:32:29: 59:fa:16:52:ab:e2:1e:ef:2d:8f:12:70:ef:e7:83:e9:5a:d4: 52:86:c1:81:f9:6e:2c:ca:47:76:3e:c0:04:ae:4b:f4:16:2c: ea:00:c2:47:d2:8a:f7:10:b2:f6:25:9b:12:f3:8e:3e:ee:ad: 9e:6a:84:5b:b2:2e:ed:87:1f:83:7a:27:95:7e:89:eb:8e:ab: 99:65:88:ce:e1:e9:43:21:15:6f:cf:1b:21:ba:c6:05:1e:e5: b3:83:94:9f:9e:13:b2:de:7f:7d:a0:1d:05:1d:39:b0:e5:bb: 17:a8:b2:32:54:6b:52:36:71:33:2f:73:2d:a0:5c:bb:cd:c0: 8b:52:79:33:19:85:9b:14:8f:3f:3c:d4:23:8c:75:91:d5:18: 0e:ca:33:5a:72:26:76:3f:53:2f:f8:e9:40:ae:7f:c6:39:70: c7:ca:f2:16:8c:7f:ba:5a:0a:55:0f:43:5a:0f:52:ad:43:2f: a6:d9:6e:28:a2:5a:ba:28:b5:7c:e0:f7:aa:25:33:3b:9f:04: d9:cf:39:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPCwwv+PxXp3iDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3NDAxZGUtNGIwYS00NTMyLWFjMDgtZGJhOGIwNTg4 YzQ4MB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk MTE1NzQzOWQtNGZiYy00YThjLWIyY2EtN2IxZjRlODVjYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1+Dpt1TPP1+GAq8fDK0PYNpO+IibCf7q4WC C2vubIf3EAX/DLfTFWtq+nD12UqyljxHMSSUUmWb6UB77O8vKbFpWiWMx72J/n/2 Y6ZCtw8IVDnWMozemMZA659OahcvHc+DCvYQ+k6/GCIqXrDS8GKdojNxnAA3bap2 pDdnsj3ZNLg9hhucfuwFK84LFgKAgHaOYMwa3O8/gmXm2rSyoL2+vXwossLkHpz9 Nd6G4xMCUeIPo8n4lJ8hx4ypdWSroV0uTRKEyx12JxFUEfSJx3QzLmi6YvlAB6CU 2Uo+yUI6PJc7OhvSXBZJ52bi0bobdrfQK6kJIUPtvMbaKR4/rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIqFBwoHDt12Ai/am4hgSBBaGDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0 MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4YjA1ODhjNDgvYTA3NDAxZGUtNGIwYS00 NTMyLWFjMDgtZGJhOGIwNTg4YzQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTA3NDAxZGUtNGIwYS00NTMyLWFj MDgtZGJhOGIwNTg4YzQ4L2EwNzQwMWRlLTRiMGEtNDUzMi1hYzA4LWRiYThiMDU4 OGM0OC5jcmwwHwYDVR0jBBgwFoAULvOxC87kwzSIVBcirGl2pVE0A4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4 YjA1ODhjNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABnPoQnTZes5aKUGM9hlbw QXP9vPTJziH4I/SWSWAB+mZM2hdhSVorYNzGgXX5BGa1BE50MilZ+hZSq+Ie7y2P EnDv54PpWtRShsGB+W4sykd2PsAErkv0FizqAMJH0or3ELL2JZsS844+7q2eaoRb si7thx+DeieVfonrjquZZYjO4elDIRVvzxshusYFHuWzg5SfnhOy3n99oB0FHTmw 5bsXqLIyVGtSNnEzL3MtoFy7zcCLUnkzGYWbFI8/PNQjjHWR1RgOyjNaciZ2P1Mv +OlArn/GOXDHyvIWjH+6WgpVD0NaD1KtQy+m2W4oolq6KLV84PeqJTM7nwTZzzmI -----END CERTIFICATE-----Generated at Mon Oct 20 23:30:30 2025 by rpki-client