$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft File: a2ca3b16-f470-4287-8db9-b28e0667efdb.mft (raw, json) Hash identifier: ZjFzhLKBeBDfgpF0ZzbSZnzc8+DMamXjlYqZQ3sfqOY= Subject key identifier: 00:DB:D4:FD:2D:76:59:4D:05:35:0B:4C:1D:4C:6B:C1:6C:66:73:B1 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584BC01C64A440DCAF68734EA340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft Manifest number: 010D0C9F4328584357C2D36301DD18FDE6C9E845 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa (hash: A9i92wGDAKK8KX7+Tzh1bIslvL3s8CAXwQolB8Ny2bw=) 2: a2ca3b16-f470-4287-8db9-b28e0667efdb.crl (hash: sHWF/r0xIB7vJo560Nl5KdUZrsReyoMNbdWGI87t/yc=) 3: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (hash: R4VpgrDk5cFZZwhkPnt68ETgFEydbI5Y8vUXG49VcAY=) 4: d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa (hash: a/yGd2SxKurIkGfQTwXHG8DN9VWL/pLDeh8Qc98J2Bg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:a4:40:dc:af:68:73:4e:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=2e3be0e7-24aa-4fc7-a6fc-962960cb4c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:5c:af:68:df:c8:bd:8d:10:24:29:bf:57: 9f:01:fa:21:bb:a9:19:63:52:09:f0:29:1c:c5:e9: ec:1f:33:d9:fd:d1:38:2c:c7:5d:da:f5:ae:41:e0: e2:45:27:ea:33:5d:bc:30:06:86:59:5d:fa:8a:32: 74:f2:29:ef:4b:e5:3d:58:05:da:a1:9c:b4:4b:e6: a4:55:5e:d4:4b:c2:93:46:b0:a5:4a:b4:31:5f:fa: db:c7:49:04:ac:35:21:ce:42:2c:6c:93:57:1d:9f: a8:a5:f0:a1:2d:05:45:d2:78:ca:cc:3a:b0:9d:9e: 90:c7:10:c4:91:ea:20:90:b9:05:10:2c:15:e4:a9: ac:0e:bc:e3:d5:c5:6c:64:b9:83:32:7f:1e:e5:05: b5:96:25:f2:f3:61:b6:8c:2e:e4:2f:31:46:52:76: 3d:81:4e:58:19:24:ee:f6:42:54:c9:1f:99:aa:f6: 9e:02:01:4a:33:61:0f:5f:f9:22:05:0b:61:ff:f2: 3c:96:e9:75:b4:15:67:5e:bc:30:1a:0d:ee:0d:1f: cd:30:1d:22:14:c5:3d:2a:c1:e0:44:1a:1e:0f:e6: 63:99:e5:6a:e6:cf:31:39:50:fe:d3:3b:ec:fe:a4: 2b:fe:55:16:2c:9c:ec:6b:3d:7a:62:b5:b3:fc:69: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:D4:FD:2D:76:59:4D:05:35:0B:4C:1D:4C:6B:C1:6C:66:73:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ef:eb:98:79:4b:20:cd:84:16:20:07:0c:92:a4:a1:39:bb: ca:d2:77:cd:5f:62:7a:4d:de:c7:fd:89:32:59:20:62:d9:0d: 4b:59:83:7a:1e:ea:b6:65:78:0b:5f:49:98:e0:61:36:bd:36: 80:bc:8a:2b:27:a0:bf:f5:67:c7:3c:a3:0b:05:80:6d:ac:f2: a0:6b:3a:01:a2:67:03:b0:1e:3b:33:31:e9:30:98:19:95:d2: 7b:54:2c:14:62:d1:75:fe:ad:4b:e5:56:a0:51:92:b8:40:94: 15:f6:1c:14:5d:f7:00:55:0a:93:84:4f:6a:8e:92:e5:c8:76: d5:39:c5:1e:79:e4:f5:f5:ce:83:79:c1:4c:1a:aa:5c:4a:dd: af:f6:af:74:2e:bd:89:f3:84:87:64:b1:e1:58:13:e4:bb:13: c3:3e:d3:78:3b:a8:b1:5b:ab:53:68:30:c5:1d:c5:cd:14:e9: bb:a8:33:27:41:59:8c:a4:fa:63:77:d8:27:55:86:17:26:35: 47:68:f4:be:b3:0c:f0:ad:e9:4c:dc:9f:b9:f5:e1:1b:ca:b9: b7:5b:a0:dc:44:8d:f8:1d:f1:de:97:08:89:2a:03:67:ef:c8: e4:54:e8:9d:72:92:e7:a1:c2:8b:32:35:8e:ba:e3:38:1a:39: 35:f7:6e:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGSkQNyvaHNOo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk MmUzYmUwZTctMjRhYS00ZmM3LWE2ZmMtOTYyOTYwY2I0Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM5cr2jfyL2NECQpv1efAfohu6kZY1IJ8Ckc xensHzPZ/dE4LMdd2vWuQeDiRSfqM128MAaGWV36ijJ08invS+U9WAXaoZy0S+ak VV7US8KTRrClSrQxX/rbx0kErDUhzkIsbJNXHZ+opfChLQVF0njKzDqwnZ6QxxDE keogkLkFECwV5KmsDrzj1cVsZLmDMn8e5QW1liXy82G2jC7kLzFGUnY9gU5YGSTu 9kJUyR+ZqvaeAgFKM2EPX/kiBQth//I8lul1tBVnXrwwGg3uDR/NMB0iFMU9KsHg RBoeD+ZjmeVq5s8xOVD+0zvs/qQr/lUWLJzsaz16YrWz/GkxOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFADb1P0tdllNBTULTB1Ma8FsZnOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYTJjYTNiMTYtZjQ3MC00 Mjg3LThkYjktYjI4ZTA2NjdlZmRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv7+uYeUsgzYQWIAcMkqSh ObvK0nfNX2J6Td7H/YkyWSBi2Q1LWYN6Huq2ZXgLX0mY4GE2vTaAvIorJ6C/9WfH PKMLBYBtrPKgazoBomcDsB47MzHpMJgZldJ7VCwUYtF1/q1L5VagUZK4QJQV9hwU XfcAVQqThE9qjpLlyHbVOcUeeeT19c6DecFMGqpcSt2v9q90Lr2J84SHZLHhWBPk uxPDPtN4O6ixW6tTaDDFHcXNFOm7qDMnQVmMpPpjd9gnVYYXJjVHaPS+swzwrelM 3J+59eEbyrm3W6DcRI34HfHelwiJKgNn78jkVOidcpLnocKLMjWOuuM4Gjk1926n -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:37 2025 by rpki-client