$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft File: a68ef886-c437-4b77-8d56-b917b6150d9a.mft (raw, json) Hash identifier: Fk8N28qb/HvfelnWLOYFxNvcoRQKduzWgX68sTvnG/0= Subject key identifier: 4D:24:A3:17:A8:F5:88:41:5D:15:75:62:41:F6:B0:8C:C4:EB:0B:40 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584BC075C2C6F26686430BCAFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft Manifest number: 010D0C9F43285840FFD13636F2170748779E295C Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (hash: 8mYeXYYZ/tZpaf+QpfgY4B5eCrelpkHVodV8gi22KD4=) 2: 4065f43f-ee36-3824-890b-4696c8253f7f.roa (hash: e2iUr2+ONCFpmyoKlrC9OFj3QqILzY4b5gOyAPTUyqI=) 3: 45d8e8b2-b06f-3b53-b63f-efb481fd3dce.roa (hash: FFMEJqNeo1KEulBwcqEVzkJMJZRkZCBQf4VWOgwulFM=) 4: 842ce387-8918-38c2-8a38-4d294a77d361.roa (hash: PsKIqyRgzHA9tryLpqeopen8FrsZVILrxJVPE6UI048=) 5: 99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa (hash: 90BwpfpWskjkZex/laGcQQsUlmIIcpLUVCqSzcdgT9E=) 6: a68ef886-c437-4b77-8d56-b917b6150d9a.crl (hash: xxUM4M2EJcV/JKNR7DJSOXM8xHeuvyLV1UDHt81cpio=) 7: b0abd619-03bb-328a-ac59-85f6eb6f070d.roa (hash: erx3qeaZTPJiZdsmbuqRLvGEMGuVaHMSfdMHL/mmb58=) 8: bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa (hash: v+wTjaO0fw0+zGn0tpS8wt4Q+/XatOJAz6jPCXAT2Kw=) 9: d38d2318-c196-35bd-940f-43a4eb1b63c8.roa (hash: lN2zEfyOkrV5Yqm9mf4xFysaEsdFQe3gcDu60ZAB9PQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c2:c6:f2:66:86:43:0b:ca:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=17fbceef-b168-4607-ac7e-257c61615e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:ba:31:11:da:43:2d:66:40:d9:0f:0e:35: d3:2d:55:8f:1c:71:a7:a7:47:49:32:7f:91:b3:06: 4b:b9:d8:11:75:10:cf:c1:3d:a3:6c:71:cf:fe:21: be:9b:ce:42:c7:51:20:9d:ba:1a:1f:a2:7f:69:1d: c9:3a:51:a6:ed:da:33:9b:e0:58:6c:0c:cc:8f:57: b9:4e:1f:2f:79:41:2a:94:23:e1:cc:de:c9:eb:8c: a3:5b:30:15:1d:b5:4e:57:10:62:3a:6c:51:30:b1: 1e:20:72:cb:90:be:7d:c2:82:7e:ba:6f:9e:d4:aa: 68:ab:54:7e:b0:a1:73:62:1b:cf:8d:39:e1:aa:3c: 4d:b8:e3:76:e3:44:2c:47:2d:e6:75:dc:50:51:24: 47:c6:d1:02:96:ae:20:5f:95:4c:38:ef:87:07:5f: fa:7c:70:16:75:1a:58:b6:c4:68:a5:15:f4:f0:81: 80:40:38:c7:45:fe:32:4b:90:6f:2b:98:eb:8b:99: bb:23:9c:82:61:c5:ae:42:5b:df:30:4a:f6:15:e2: d1:b3:17:ce:83:f0:19:2e:68:c6:43:47:d6:35:2c: 81:c1:15:77:62:90:b5:47:d1:01:fc:c6:9f:ca:2b: f3:55:6d:ef:ad:b6:c8:f5:b2:b9:f3:4a:b7:b7:cc: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:24:A3:17:A8:F5:88:41:5D:15:75:62:41:F6:B0:8C:C4:EB:0B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4d:13:ea:87:08:a4:06:c2:f2:11:87:17:b6:f6:ec:8a:b7: 5c:f3:a8:4d:a7:3c:20:21:1b:7e:9f:cc:fe:d0:f7:59:d7:21: 93:d0:8b:36:2f:87:89:80:5d:c5:d9:e7:02:0c:c3:62:73:f0: 55:90:48:b9:b3:86:ae:f4:bf:68:66:35:27:b1:6d:64:31:db: bb:57:d0:87:a5:92:58:d2:7c:c5:55:77:74:4e:f3:c8:e9:ec: 22:34:86:d4:71:8c:db:36:60:b1:b0:79:43:4e:a3:cd:e6:58: bd:a1:22:3f:43:98:8f:b8:6e:51:88:7f:26:b7:25:e9:18:0e: 56:43:10:60:df:c9:29:19:70:c8:5b:ad:83:b2:24:1d:37:60: d9:33:ea:87:4f:a3:60:6f:b2:1f:87:3c:27:47:c2:fd:4f:ef: 33:84:52:2a:ec:7d:c4:34:9b:72:47:bc:04:3e:4b:b5:2e:ea: bd:ec:a1:32:e3:db:6a:be:47:5e:d8:a7:8e:e3:bc:31:c9:04: dd:e9:14:6a:ba:2b:cf:96:f7:0a:bd:75:51:65:41:82:a2:d9: 86:ae:0c:7e:c9:15:77:1d:2f:d8:74:71:46:17:4b:95:96:25: a1:45:29:55:f9:a7:0c:d3:f3:7d:d5:8e:e8:ff:b1:07:36:56: 09:ff:2e:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcLG8maGQwvK+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk MTdmYmNlZWYtYjE2OC00NjA3LWFjN2UtMjU3YzYxNjE1ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21e6MRHaQy1mQNkPDjXTLVWPHHGnp0dJMn+R swZLudgRdRDPwT2jbHHP/iG+m85Cx1EgnboaH6J/aR3JOlGm7dozm+BYbAzMj1e5 Th8veUEqlCPhzN7J64yjWzAVHbVOVxBiOmxRMLEeIHLLkL59woJ+um+e1Kpoq1R+ sKFzYhvPjTnhqjxNuON240QsRy3mddxQUSRHxtEClq4gX5VMOO+HB1/6fHAWdRpY tsRopRX08IGAQDjHRf4yS5BvK5jri5m7I5yCYcWuQlvfMEr2FeLRsxfOg/AZLmjG Q0fWNSyBwRV3YpC1R9EB/MafyivzVW3vrbbI9bK580q3t8zrCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE0koxeo9YhBXRV1YkH2sIzE6wtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvYTY4ZWY4ODYtYzQzNy00 Yjc3LThkNTYtYjkxN2I2MTUwZDlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGTRPqhwikBsLyEYcXtvbs irdc86hNpzwgIRt+n8z+0PdZ1yGT0Is2L4eJgF3F2ecCDMNic/BVkEi5s4au9L9o ZjUnsW1kMdu7V9CHpZJY0nzFVXd0TvPI6ewiNIbUcYzbNmCxsHlDTqPN5li9oSI/ Q5iPuG5RiH8mtyXpGA5WQxBg38kpGXDIW62DsiQdN2DZM+qHT6Ngb7IfhzwnR8L9 T+8zhFIq7H3ENJtyR7wEPku1Luq97KEy49tqvkde2KeO47wxyQTd6RRquivPlvcK vXVRZUGCotmGrgx+yRV3HS/YdHFGF0uVliWhRSlV+acM0/N91Y7o/7EHNlYJ/y7S -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:07 2025 by rpki-client