$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: OJ2PD2AxQbQs2dnMvC8E7Kr8HORXyR7XyLXR0PUs5Yk= Subject key identifier: 87:6E:EE:7E:7B:29:D3:75:6C:C5:63:6A:C4:75:7A:44:D1:33:B4:AC Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584BBFE0D934BB45EADBCA4E8C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A01627 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: 7VjvdLSabUjdJqurngf5x6nt52dKkYsYFg4UAqOuD1U=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 0WxYByBYlMQIIh5LMA+Hf1T8bIqqiU6tmGI2XtpdK7I=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: Nc5Toc66fnqZl4CW0KYRuzxneteLba0zdJ/NpurzUUs=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: woiYGe3mktKfsGSUtRcvDjo1sRLYf5ekMrjY0JaemJs=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: mRuDcZnGnip3Q5QRpMVaWBGwzkgGROKJPMr4XpEO5os=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d9:34:bb:45:ea:db:ca:4e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=72997e1e-da33-4481-b357-9c0a61ecb6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:e6:25:0e:c9:1d:08:75:f5:84:69:2f:3f: 2c:44:56:81:57:6d:3b:2d:dc:04:af:87:e7:0d:82: 08:eb:64:c2:70:59:9c:50:93:c7:97:22:14:d3:39: e8:d8:7f:2d:bb:83:a0:23:a0:a4:ec:e8:bb:c3:56: 7f:a6:55:8d:e7:40:2e:a3:3e:f8:7d:88:5f:8c:7d: 78:cf:b9:88:a3:5d:e9:e9:2b:98:28:d1:b2:6e:da: da:1e:f8:d8:2c:14:41:01:a3:51:18:a8:72:55:3e: a7:25:0c:51:13:57:ef:62:ce:0c:84:45:48:41:3b: a5:63:ba:62:85:88:91:71:d8:40:10:01:70:50:2a: 3a:98:7a:63:b2:8e:41:4d:27:2b:32:0e:e6:1a:c4: eb:85:f2:96:61:fa:4c:95:40:3a:6c:3c:74:5d:c9: 21:ef:73:1c:57:11:02:67:4b:c5:98:91:38:34:1c: af:e8:aa:34:b6:c0:f2:10:27:83:7c:cb:11:aa:1a: 6c:bf:c6:ab:9c:06:d4:f6:93:49:c3:e5:d4:88:2b: cd:41:f8:6b:79:44:b9:25:6a:45:0b:fd:01:cd:2c: 5d:bd:cc:4a:11:65:0d:f0:2e:0b:46:ab:09:bd:1b: ac:95:ae:3e:2f:13:19:e5:8a:ea:24:05:26:be:d7: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6E:EE:7E:7B:29:D3:75:6C:C5:63:6A:C4:75:7A:44:D1:33:B4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:5e:28:6f:40:25:10:d6:2f:5b:26:4b:59:e6:4b:3a:7c:a9: 48:d0:01:23:84:0c:7b:99:f7:51:ab:51:86:37:c9:cd:ca:59: cd:c8:be:b7:3b:a6:11:9e:0f:06:21:79:ce:d2:7a:65:51:1b: 67:ac:eb:fc:d1:f4:0b:07:da:65:b5:05:9e:8c:96:05:7f:3c: ab:2a:18:3a:26:59:cf:4b:ed:7f:46:2e:b9:27:3d:98:fb:d2: 6d:0b:54:ba:f2:0c:01:f7:5f:53:4f:f6:30:b1:37:9f:f1:33: 72:57:96:27:e7:e0:35:4e:e7:7e:3e:46:91:88:2a:f1:90:4f: fb:a0:4b:1b:f5:e7:34:1f:b4:8c:73:fb:4d:d9:0d:8f:11:12: e7:1e:a8:af:1a:49:3c:ad:a1:a9:6d:73:d4:c1:85:ed:eb:04: cc:3c:d7:b4:08:3a:ae:22:64:f0:2c:b7:50:40:4b:f7:52:81: 3b:42:b0:3c:d6:cd:f2:3a:2d:d1:14:9d:14:ca:85:8a:ea:7b: e4:c8:59:12:7e:e1:b1:3b:d9:ec:a1:c4:c1:f6:6a:27:95:ed: b8:23:2d:cf:00:fe:a4:c7:d1:cb:5b:6b:dd:65:4b:c3:0b:2e: 94:51:85:df:52:74:fe:ed:77:55:fa:b7:16:1b:2a:9b:0e:ec: c7:a3:5d:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nk0u0Xq28pOjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NzI5OTdlMWUtZGEzMy00NDgxLWIzNTctOWMwYTYxZWNiNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqvmJQ7JHQh19YRpLz8sRFaBV207LdwEr4fn DYII62TCcFmcUJPHlyIU0zno2H8tu4OgI6Ck7Oi7w1Z/plWN50Auoz74fYhfjH14 z7mIo13p6SuYKNGybtraHvjYLBRBAaNRGKhyVT6nJQxRE1fvYs4MhEVIQTulY7pi hYiRcdhAEAFwUCo6mHpjso5BTScrMg7mGsTrhfKWYfpMlUA6bDx0Xckh73McVxEC Z0vFmJE4NByv6Ko0tsDyECeDfMsRqhpsv8arnAbU9pNJw+XUiCvNQfhreUS5JWpF C/0BzSxdvcxKEWUN8C4LRqsJvRusla4+LxMZ5YrqJAUmvtcmHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIdu7n57KdN1bMVjasR1ekTRM7SsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXXihvQCUQ1i9bJktZ5ks6 fKlI0AEjhAx7mfdRq1GGN8nNylnNyL63O6YRng8GIXnO0nplURtnrOv80fQLB9pl tQWejJYFfzyrKhg6JlnPS+1/Ri65Jz2Y+9JtC1S68gwB919TT/YwsTef8TNyV5Yn 5+A1Tud+PkaRiCrxkE/7oEsb9ec0H7SMc/tN2Q2PERLnHqivGkk8raGpbXPUwYXt 6wTMPNe0CDquImTwLLdQQEv3UoE7QrA81s3yOi3RFJ0UyoWK6nvkyFkSfuGxO9ns ocTB9monle24Iy3PAP6kx9HLW2vdZUvDCy6UUYXfUnT+7XdV+rcWGyqbDuzHo12+ -----END CERTIFICATE-----Generated at Wed Nov 5 07:32:13 2025 by rpki-client