$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft File: 8322c61d-99cf-48fc-b867-b2c2cce4d324.mft (raw, json) Hash identifier: QKlFV3w4y4SJdFYRxLMLQSxS84C864TNcJDcgiq8kdg= Subject key identifier: 2B:95:6D:F2:CC:69:D6:A5:A3:B2:B6:A3:39:7C:B8:B7:3F:B0:E4:36 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584BBE22310BB404C70ED37F5800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft Manifest number: 010D0C9F4328584073A834B047174291E7698BD5 Signing time: Tue 04 Nov 2025 01:00:08 +0000 Manifest this update: Tue 04 Nov 2025 01:00:08 +0000 Manifest next update: Thu 06 Nov 2025 01:00:00 +0000 Files and hashes: 1: 12121739-ba19-3a49-a1ce-88a3e9cad17f.roa (hash: ghPHdlN0jz+37AuvHDUFU4i2Z1F/SvJpdlqb5ELgAO4=) 2: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (hash: Tk255FrMHoNBcnNjMYhFFFC3gAx/V2iDmgeyTHOx+kI=) 3: 36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (hash: 1LkuxulvSiGTOhnwL5oosqXP97664KZlN1GKdt9a2hY=) 4: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (hash: 0s3HDNnIObJCHFxmh23FpXKRmjEgezlyGjgHVaeP+C8=) 5: 8322c61d-99cf-48fc-b867-b2c2cce4d324.crl (hash: rMPFfj9Wcd7+XImu43iMN0caFdglxyxGNQdUp5m+vOM=) 6: dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa (hash: 7xw5BhU1nfD6c8gQC8HZ79UBeOCVJ9cTRI8LTDS4PBE=) 7: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (hash: DoHkreyRjqL8OaYw0dHoAvxu/uej6aqE7hD2Q6gEibU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:22:31:0b:b4:04:c7:0e:d3:7f:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Nov 4 01:00:08 2025 GMT Not After : Nov 6 01:00:00 2025 GMT Subject: CN=f158b270-4fb0-47fd-a392-c8bdc5124c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:89:cf:0e:cb:3e:98:02:ac:ee:56:fb:b4: b6:1a:53:f5:a9:97:31:6e:ca:25:3a:27:ea:ba:15: a6:6a:a1:67:8b:c4:ec:fa:25:d3:b3:ae:f3:ed:be: 95:45:84:15:d8:72:10:96:a7:c7:1e:96:b2:aa:cb: 79:fc:b0:1c:80:61:50:cb:53:aa:76:f6:f5:a3:99: 0c:d5:2c:c2:4d:78:dd:a0:1c:e7:33:26:e1:60:a2: 64:86:1d:11:5e:32:70:45:8f:f6:92:50:42:10:fa: 8b:b0:b9:5f:7b:fd:20:3b:e1:9e:99:f5:7f:04:6a: 9f:61:37:b5:a1:12:d8:02:a7:0b:a9:ed:18:23:d9: bf:06:8d:2a:b6:62:2a:c2:4f:56:1f:37:a1:bb:74: eb:a8:54:7f:40:ad:4a:f8:28:3d:32:26:6c:c6:4c: fa:62:83:a3:41:f0:00:80:14:be:99:76:a9:10:86: ea:e1:51:43:7f:92:36:f0:e3:db:4d:9e:2c:2c:31: d6:69:6f:2d:10:83:8e:9e:66:7d:c7:a1:67:3e:c6: 16:82:de:e7:e7:09:ea:ac:6e:71:04:3a:40:1a:56: 47:45:1f:f6:2e:90:c3:d0:38:37:87:6a:5e:63:5b: 27:3c:e7:2d:cf:3e:bb:fd:3b:9f:b6:12:2d:2a:c1: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:6D:F2:CC:69:D6:A5:A3:B2:B6:A3:39:7C:B8:B7:3F:B0:E4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d4:23:6e:76:ac:4d:e0:08:a1:1e:e9:fd:52:dc:e4:ef:d2: f7:7d:95:fb:43:8b:89:4a:81:57:92:ad:6a:38:93:a8:2b:c6: 84:de:98:a8:67:09:0d:a7:68:a9:c4:c6:6e:e8:a2:d3:83:0b: dc:90:6f:61:64:a7:43:25:53:a2:7c:a4:47:d3:0f:f4:06:3f: 8c:38:16:ff:d1:06:3e:1e:52:6d:cb:71:3e:6d:b8:9f:2d:9e: 1a:49:c5:23:e4:89:ad:58:90:78:82:27:c4:78:fe:80:98:46: c9:60:e7:3b:0e:62:67:28:f9:ee:a9:f8:df:09:8e:17:ee:40: a7:86:9c:00:38:0a:2f:d0:f8:cc:53:3a:09:a2:e7:8b:e1:71: 58:2c:b9:1b:8b:24:a2:03:d8:cf:a1:82:19:05:06:9a:8b:11: 13:43:c3:65:9c:e8:de:51:cc:da:13:b1:ba:27:4b:05:db:c7: 01:22:2e:d5:cd:95:2d:35:f6:8a:5a:d3:a2:b1:30:95:0f:23: 61:59:39:4f:a7:e2:22:23:2c:fa:a2:b2:bd:ab:ea:93:13:3e: c5:d8:66:7b:c9:a6:3e:88:3c:a9:0d:35:10:94:58:da:30:91: fa:ae:ba:45:87:c8:f9:0f:2a:5d:ff:c4:aa:9c:d0:1b:56:94: d4:2a:2c:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+IjELtATHDtN/WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MTEwNDAxMDAwOFoXDTI1MTEwNjAxMDAwMFowLzEtMCsGA1UEAxMk ZjE1OGIyNzAtNGZiMC00N2ZkLWEzOTItYzhiZGM1MTI0Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAmJzw7LPpgCrO5W+7S2GlP1qZcxbsolOifq uhWmaqFni8Ts+iXTs67z7b6VRYQV2HIQlqfHHpayqst5/LAcgGFQy1Oqdvb1o5kM 1SzCTXjdoBznMybhYKJkhh0RXjJwRY/2klBCEPqLsLlfe/0gO+GemfV/BGqfYTe1 oRLYAqcLqe0YI9m/Bo0qtmIqwk9WHzehu3TrqFR/QK1K+Cg9MiZsxkz6YoOjQfAA gBS+mXapEIbq4VFDf5I28OPbTZ4sLDHWaW8tEIOOnmZ9x6FnPsYWgt7n5wnqrG5x BDpAGlZHRR/2LpDD0Dg3h2peY1snPOctzz67/TufthItKsF5FQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCuVbfLMadalo7K2ozl8uLc/sOQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvODMyMmM2MWQtOTljZi00 OGZjLWI4NjctYjJjMmNjZTRkMzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBK1CNudqxN4AihHun9Utzk 79L3fZX7Q4uJSoFXkq1qOJOoK8aE3pioZwkNp2ipxMZu6KLTgwvckG9hZKdDJVOi fKRH0w/0Bj+MOBb/0QY+HlJty3E+bbifLZ4aScUj5ImtWJB4gifEeP6AmEbJYOc7 DmJnKPnuqfjfCY4X7kCnhpwAOAov0PjMUzoJoueL4XFYLLkbiySiA9jPoYIZBQaa ixETQ8NlnOjeUczaE7G6J0sF28cBIi7VzZUtNfaKWtOisTCVDyNhWTlPp+IiIyz6 orK9q+qTEz7F2GZ7yaY+iDypDTUQlFjaMJH6rrpFh8j5Dypd/8SqnNAbVpTUKiyc -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:04 2025 by rpki-client