$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft File: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft (raw, json) Hash identifier: DIwjEGPUXoxp36fmE4lYHbjvtEFR8RYzym/FgklrYVo= Subject key identifier: F7:E6:99:DE:17:9F:AC:37:8B:14:9E:0A:DE:DA:63:4C:E1:C7:40:A8 Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Certificate issuer: /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Certificate serial: 010D0C9F4328584BBEF29A0BBBBB359D47839E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft Manifest number: 010D0C9F4328584073A847AD55AD23FF9285423C Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 19b7c7cd-58e3-3c9e-bf71-b59ca2c837ea.roa (hash: A9px90HlKsOQh7EIf8rNzJySyNTzJ9o/b3GybFYzoo0=) 2: 73fa706f-955a-33d3-927d-050c17047b65.roa (hash: t3DbJKI0U0mAiuCcZZhxJVMuPVkpWFfZSu4ZJNrYG0E=) 3: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl (hash: uY8situh2cIVvFayGNL7dEuparIiqdQBY+c2gtPjKL4=) 4: 77652dba-b3a2-3dac-9db5-bd7c489cf68d.roa (hash: k7KO9Q0zoncEbmy/pce2mKQbUqJmG3j9/Hici9Kb2gI=) 5: b9088027-6641-3388-ab02-b3330242f7fd.roa (hash: v2VRxjj64Osj9pA2tnWBe0Sk58ZCuktUVXGjZgOEjAU=) 6: f0092439-63d5-384f-bbda-d0bd831f7a06.roa (hash: C9+FuiLIDEFjPALMlwhTRZfBDQeH+lzeyDVeB5GkctA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:0b:bb:bb:35:9d:47:83:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=787062c7-e984-4401-aab7-c3131dc557d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:20:0c:f1:55:a3:46:ea:e9:d6:e8:e3:83:dc: 16:13:eb:2c:14:f4:9d:04:ff:88:25:db:6b:5d:19: a4:2a:44:af:61:d4:b2:48:43:dd:ab:0f:c4:96:67: 67:1e:e6:04:0d:2a:6a:3b:76:00:9a:a1:6a:fd:3c: b5:94:46:17:79:5b:29:c0:1d:06:a5:61:ef:f5:c6: 67:89:dc:60:6c:8d:97:17:b9:fe:96:d0:4e:5b:11: 18:ab:23:4c:95:16:36:c4:be:1e:85:06:94:88:d3: b6:26:94:f3:46:ec:03:ae:fe:82:b3:85:b4:c5:40: 35:35:78:ae:b5:dd:be:8d:62:9f:f8:65:4a:a7:73: 83:53:2c:27:05:d3:42:0c:d7:d1:14:ea:36:70:22: 33:4d:41:db:ef:bb:27:7a:2e:30:08:d9:b9:39:64: ce:0d:89:2e:cc:8c:dd:cd:a3:9e:18:57:f1:98:e5: 98:52:fc:63:ed:52:87:91:96:31:5e:cc:cd:2c:c6: 85:69:08:4d:15:32:ff:78:06:64:64:f7:7b:4e:ae: 7c:9d:78:43:15:bf:1e:f0:78:a9:00:dc:12:17:0b: 29:d8:ae:f7:29:fc:5c:9a:b5:0a:1b:18:d7:93:c3: 35:52:0f:52:89:62:03:77:37:ac:6d:7e:eb:e4:22: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:99:DE:17:9F:AC:37:8B:14:9E:0A:DE:DA:63:4C:E1:C7:40:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl X509v3 Authority Key Identifier: keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:25:e5:2a:ea:16:75:91:d3:df:d9:d3:56:e8:2b:97:ab: 45:a0:f1:07:6c:dd:2a:46:e2:e3:b6:80:56:ce:81:c0:06:44: a4:56:9d:e5:7c:69:df:99:23:51:1a:59:ca:cf:c5:eb:0c:c9: 77:03:35:33:be:38:41:23:f3:a4:bd:03:cb:b9:f9:f9:60:de: 48:a9:eb:20:ad:cb:26:67:59:88:c4:75:53:c1:e7:55:58:37: e0:79:3d:d8:d1:b3:34:ab:45:a0:60:b7:dc:9a:31:a3:00:36: 2e:3d:fb:c9:5d:56:cf:4f:67:33:ff:d2:13:ce:63:0b:f6:ac: bf:9d:da:a0:65:d5:49:da:29:9e:7e:e4:b6:97:8f:45:f7:3c: 98:6b:ac:2a:7f:55:c7:31:de:32:46:34:8b:24:d2:1f:6e:31: b3:a8:0a:2d:85:06:68:c8:01:4d:d5:24:82:b2:20:03:df:f8: e6:bc:68:e9:64:92:d0:5f:8a:29:f2:1f:c1:92:f6:b4:42:1a: 86:84:7f:6d:b2:c0:88:bf:7f:6b:1e:16:9c:37:0a:68:2e:7d: e6:e0:ab:dc:9a:56:77:03:0d:d0:6a:21:56:65:31:0d:15:53: 77:74:ea:8b:57:b8:69:6a:dd:53:29:8b:79:f7:6a:81:15:cd: 42:05:71:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8poLu7s1nUeDngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2 OGY3MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk Nzg3MDYyYzctZTk4NC00NDAxLWFhYjctYzMxMzFkYzU1N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiAM8VWjRurp1ujjg9wWE+ssFPSdBP+IJdtr XRmkKkSvYdSySEPdqw/ElmdnHuYEDSpqO3YAmqFq/Ty1lEYXeVspwB0GpWHv9cZn idxgbI2XF7n+ltBOWxEYqyNMlRY2xL4ehQaUiNO2JpTzRuwDrv6Cs4W0xUA1NXiu td2+jWKf+GVKp3ODUywnBdNCDNfRFOo2cCIzTUHb77snei4wCNm5OWTODYkuzIzd zaOeGFfxmOWYUvxj7VKHkZYxXszNLMaFaQhNFTL/eAZkZPd7Tq58nXhDFb8e8Hip ANwSFwsp2K73KfxcmrUKGxjXk8M1Ug9SiWIDdzesbX7r5CIVWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPfmmd4Xn6w3ixSeCt7aY0zhx0CoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3 ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvNzRjN2YzMGUtNzBiZS00 ZjhjLWJjOGYtNjBiODVkMWI2OGY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRjN2YzMGUtNzBiZS00ZjhjLWJj OGYtNjBiODVkMWI2OGY3Lzc0YzdmMzBlLTcwYmUtNGY4Yy1iYzhmLTYwYjg1ZDFi NjhmNy5jcmwwHwYDVR0jBBgwFoAUvT8d3y7wTu8fXjVGgXxUE+Gl7UMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4 NWQxYjY4ZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgKiXlKuoWdZHT39nTVugr l6tFoPEHbN0qRuLjtoBWzoHABkSkVp3lfGnfmSNRGlnKz8XrDMl3AzUzvjhBI/Ok vQPLufn5YN5IqesgrcsmZ1mIxHVTwedVWDfgeT3Y0bM0q0WgYLfcmjGjADYuPfvJ XVbPT2cz/9ITzmML9qy/ndqgZdVJ2imefuS2l49F9zyYa6wqf1XHMd4yRjSLJNIf bjGzqAothQZoyAFN1SSCsiAD3/jmvGjpZJLQX4op8h/Bkva0QhqGhH9tssCIv39r HhacNwpoLn3m4KvcmlZ3Aw3QaiFWZTENFVN3dOqLV7hpat1TKYt592qBFc1CBXGf -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:23 2025 by rpki-client