$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft File: 1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft (raw, json) Hash identifier: NlV4PcmFVTgLOcPKtP56UFzFUNqHz07ocX21pSG3/H0= Subject key identifier: 5A:35:BC:FC:AF:AA:95:45:2C:43:F7:58:DA:A4:F8:D5:E4:DB:7D:E0 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584B958976215FEF6D6BDA92A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft Manifest number: 010D0C9F4328584073A852CAC8FB461B77D2F069 Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Thu 23 Oct 2025 12:00:00 +0000 Files and hashes: 1: 1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl (hash: lF27u07ky4XrJVrzi/f/uoOlyloPAVYWw83iF5CnX0Y=) 2: 1b6579d8-95e2-3cdb-ae21-72bf1d10f9ef.roa (hash: BJ2Ud1Zd1cAxuZPWTzcsaUy/yU1JLpy0vF0jTKLB7gA=) 3: 1effb335-be49-3c5a-83a0-40a99c95a39e.roa (hash: Xy35sfHJ8+9Q75xHQqpxu0AHJKNzXtL4kzwcB8w8Kow=) 4: 24193cda-dfba-3da1-a667-f8eeba423d0a.roa (hash: Y7cnSGuKI5SMZfW7ERS751AiuJHRBw1Z89T6daJfrJg=) 5: 2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa (hash: qoFAobbPsKK/b+WW/w2Iu5JOYNYTo1hZfVPbSTh7PC8=) 6: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (hash: R8+Gm4mcBaDXEDL59wkI2Niwj6WM9Tk30O2vcXyyIF8=) 7: 636fe258-29db-3ab1-9122-bcd648393e79.roa (hash: qOBY4ZcQOfQi3n6yzf9irvvTKX/qYsg2ZYsVgknnYxo=) 8: 6719af09-6236-3020-ae52-9a9de5dd536f.roa (hash: IZXQ8JMlRisEe2AzWkeU3chz994ws3NgCk5E9Cp7fL4=) 9: 6dbaf374-3c53-3e34-aab4-5884bed871ee.roa (hash: f8Q1d+rBu4LPpbzU2vot1xP+/9k1fxhoHx4nQmr6g2U=) 10: 83e6a022-36ec-38c3-8f95-349b73ff935a.roa (hash: hn0ljXN8ZH26mH1/pYxYI0T5e27IvVuvPXP7AapSB/w=) 11: 87362f3d-4cea-3ee0-967a-02095d0f35bf.roa (hash: nywofA5Sb1FR/nWKPl/aDBh/rxggfuqwOXUHO0xpGN8=) 12: 89cbdbb2-14b8-3187-878e-9d37888c582c.roa (hash: eEpM4pnnma8ias7d4HcHin9yw8e+ueafgbqVJB7RPCA=) 13: 9ef4612d-7b7a-351b-8aef-e70168dc2292.roa (hash: Aqypv4J8SNpTlo+eXEafr3tO+6mGlOEdu8bp3sbwSy8=) 14: ac35c2b5-65fd-34d7-8216-230376162d02.roa (hash: 50qm4KERMctVpxO29pRNBdxEoH1ZgwMS0qBGaY7OrRg=) 15: b737c496-4672-34aa-b061-ed83ae9c485f.roa (hash: nwkG0ouSLKTlTnSWbyNyAGJUoyGtCn0U032q/eMDF90=) 16: cc3f750d-0905-3e47-862f-b41ca36a1c13.roa (hash: dqRr22wonpTerFe2ylA7mLImExHLQSPQjzD6k3HsjHc=) 17: d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa (hash: Ms9qG7YYPk5cCs2QMk5HkqYX1A10Hiqfb4crqdB+WJ8=) 18: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (hash: u+4Rl3/mmrdJ32O2Q32beE52+RR2NRF0y2GoXEP3gO0=) 19: eafe0940-5c5a-31fe-adf8-4d7bc944edda.roa (hash: mTTQ4Zaj/zgPcN3VJsxZnSjVH7rvsv4VD+dlNBi+OUM=) 20: f6f6bc98-2bd7-3223-bb93-05d0cebbf43a.roa (hash: Cv5VxyG02j+XK7/70kzhEDemH0BSGgyltHTXo4orRZk=) 21: f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa (hash: k7lWJtPAc4yvjzd7wgFI/llZ2v96ScBwqaIG/n8Gjo8=) 22: fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa (hash: Vc0EbxyxNSKlZE+7wIQUoJEESbYrvAM9QOkmdMs9ObI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:76:21:5f:ef:6d:6b:da:92:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 23 12:00:00 2025 GMT Subject: CN=34d6b49d-e808-423f-afad-4ef0d715c6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:07:80:cb:a9:6e:ed:49:d1:3e:b8:4a:ee: 32:5d:75:a8:de:bd:29:d8:4a:93:b3:2a:0e:06:e8: 48:e5:dd:cf:38:ef:1e:fe:ad:6b:d3:61:0d:f9:2b: 90:e4:dc:fa:4e:44:1c:72:aa:52:4c:e5:5b:88:5f: 7d:a5:26:30:2c:d0:e3:5a:e9:20:60:a9:08:db:c1: 88:07:5a:67:70:94:88:7a:76:de:02:60:b3:58:d7: 79:f9:00:85:9f:f4:3d:66:b3:15:1e:11:2e:75:7c: ed:b8:15:bb:c8:01:04:f9:1c:cc:04:cd:19:24:39: 09:d0:03:08:6d:b3:5e:c8:4e:82:3b:95:03:4b:cb: 4e:b9:7d:aa:a8:f1:fa:f9:e0:38:5a:76:d7:a3:cc: 51:11:78:af:50:76:9c:e5:cd:59:ff:5c:97:a0:13: 43:65:3b:72:4e:88:92:9a:3f:53:87:1b:24:8d:61: a1:d5:f4:95:f6:0a:61:3e:5d:7a:08:96:da:53:85: 08:1d:65:18:38:af:d6:1b:be:6c:62:95:e0:f5:df: 66:60:7d:4d:92:9c:e5:83:ab:be:08:55:79:ea:7c: 2a:e6:2d:0b:f9:de:24:42:75:ab:98:92:93:00:bf: 13:26:4c:ef:be:e8:86:ce:2a:c7:7f:a6:a5:a3:79: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:BC:FC:AF:AA:95:45:2C:43:F7:58:DA:A4:F8:D5:E4:DB:7D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:00:59:1c:e6:9e:e1:ab:95:88:61:87:9b:7b:02:47:4f:5f: bd:1a:26:31:c1:10:ff:10:ee:f3:21:4b:30:90:0f:2d:80:d5: 7e:44:8d:99:1d:ac:fd:f9:47:42:0d:d8:5d:00:bf:c9:52:cb: 03:f4:80:6a:39:d0:ed:1e:7d:cb:a1:6b:09:fd:8c:a1:e9:13: b5:06:a4:00:e2:99:f8:e5:34:1f:66:16:68:03:37:0c:91:5e: 2e:56:81:2d:be:f2:9b:76:f4:88:68:42:7c:eb:37:98:e4:a0: 4e:87:c3:d2:3e:60:1f:ba:d6:0a:37:a4:95:da:da:5f:f4:bd: 71:e8:89:fd:56:f7:22:89:8b:e8:a7:d9:29:9b:37:be:a7:cf: 8c:24:67:5d:81:62:fc:3e:06:5a:d7:bd:47:80:f8:47:cd:14: bb:9f:b2:10:d2:37:d2:f8:27:a2:88:3b:e9:f7:9e:cb:c1:30: d5:72:24:a4:4b:84:4b:7d:5e:90:60:b8:05:f3:74:6d:14:34: 36:38:e5:b7:8e:77:ad:69:9e:7c:14:c2:31:97:b3:45:28:24: 7d:d2:99:f0:9a:c8:e4:2b:7e:76:65:55:39:8b:54:99:21:d2: b8:9b:fa:b5:bc:a1:a3:a9:ac:c1:b8:cf:6b:1f:a0:ec:c4:2a: fc:07:0c:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXYhX+9ta9qSpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMzEyMDAwMFowLzEtMCsGA1UEAxMk MzRkNmI0OWQtZTgwOC00MjNmLWFmYWQtNGVmMGQ3MTVjNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDYHgMupbu1J0T64Su4yXXWo3r0p2EqTsyoO BuhI5d3POO8e/q1r02EN+SuQ5Nz6TkQccqpSTOVbiF99pSYwLNDjWukgYKkI28GI B1pncJSIenbeAmCzWNd5+QCFn/Q9ZrMVHhEudXztuBW7yAEE+RzMBM0ZJDkJ0AMI bbNeyE6CO5UDS8tOuX2qqPH6+eA4WnbXo8xREXivUHac5c1Z/1yXoBNDZTtyToiS mj9ThxskjWGh1fSV9gphPl16CJbaU4UIHWUYOK/WG75sYpXg9d9mYH1Nkpzlg6u+ CFV56nwq5i0L+d4kQnWrmJKTAL8TJkzvvuiGzirHf6alo3nccwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFo1vPyvqpVFLEP3WNqk+NXk233gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMWE2ODliODUtZGZlMS00 MTdkLWJlN2ItZTlkNGJjZGQ1OGQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhAFkc5p7hq5WIYYebewJH T1+9GiYxwRD/EO7zIUswkA8tgNV+RI2ZHaz9+UdCDdhdAL/JUssD9IBqOdDtHn3L oWsJ/Yyh6RO1BqQA4pn45TQfZhZoAzcMkV4uVoEtvvKbdvSIaEJ86zeY5KBOh8PS PmAfutYKN6SV2tpf9L1x6In9VvciiYvop9kpmze+p8+MJGddgWL8PgZa171HgPhH zRS7n7IQ0jfS+CeiiDvp957LwTDVciSkS4RLfV6QYLgF83RtFDQ2OOW3jnetaZ58 FMIxl7NFKCR90pnwmsjkK352ZVU5i1SZIdK4m/q1vKGjqazBuM9rH6DsxCr8BwwA -----END CERTIFICATE-----Generated at Mon Oct 20 16:55:42 2025 by rpki-client