$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft File: 4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft (raw, json) Hash identifier: 9iOCQMtMDEWGHojA5o7nLJ+yXpf/icq+7KM4Tz93Pgw= Subject key identifier: 09:59:81:44:14:48:1D:3B:FA:3D:A9:27:87:08:26:00:48:ED:ED:10 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584BC03A2F75A9DDB7377E0A8720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft Manifest number: 010D0C9F4328584073A821C16306B4600A5954DB Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 15695d7d-5655-3250-ba9f-dea695ff46a8.roa (hash: 9bYlH/5XtyVbM9GFGVmEjcGcjN8qpqa046pJGNSj+mc=) 2: 499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa (hash: P4NRjLMPdCdcIArAKLduKBkQ7yiECbs3hQI6PpYntwM=) 3: 4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl (hash: f1y5mDZFo4QIH4o9wqvPXhsibMFk1bcjyVFMuYifL94=) 4: 82bb00f5-b592-37a1-8e68-c14feb40c92d.roa (hash: Ky5KfafmXGi7+nuxj68HkpSQT4uj1JvJwJ53b6rNz/Q=) 5: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (hash: A0RYZf+MyknDafmpalwUpbS2682xPhUZpCHYBa8ODXA=) 6: de3ea48a-afe6-3f81-ac77-01bdc995874d.roa (hash: NmEPJihDqUHI4IBgQTJB3emsGP6JbJYw7sueoaQKmbA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2f:75:a9:dd:b7:37:7e:0a:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=67c23e0d-89a2-472a-a20f-d9b8b21476c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2a:3b:d9:e7:29:a4:0a:03:1b:c7:a7:fb:9f: 0e:32:ba:90:4d:f6:b0:c0:d9:28:46:70:e9:e5:d4: 9f:d9:30:ee:47:6f:9b:5a:4c:25:72:71:cb:0d:2f: 05:e0:f4:95:05:35:55:ef:af:31:51:98:77:1d:3c: 9e:61:cd:e2:c1:e4:3b:af:51:e1:00:7f:d3:20:2c: ec:8b:c1:ca:de:35:4d:f6:37:48:8c:b4:f2:27:16: 8e:5c:9d:94:33:c2:8e:d0:8d:df:4b:6b:31:16:4e: 5d:3c:c9:b4:43:7d:f7:c0:8d:af:d9:c4:db:9b:e2: de:ac:d2:6a:c9:75:a4:b2:70:e9:ad:df:6b:28:d6: d0:ee:ce:84:e7:a2:99:30:ee:8e:5b:5b:64:42:65: a0:41:8d:1e:b0:2f:4d:a3:95:e2:56:87:ce:6e:c6: e9:b9:54:63:53:48:ac:b8:45:47:89:39:ac:72:25: fa:3f:4f:8d:d6:9c:d8:1f:42:24:1f:98:6f:ef:48: 0f:80:2d:64:b1:7c:60:1a:9d:28:d4:8b:e7:93:51: 9f:b4:41:b3:d4:bd:5f:0e:06:eb:e9:60:c3:d0:2a: d9:d1:e3:2c:25:03:2a:5f:09:77:e2:4e:77:89:08: 8f:27:d9:27:21:71:dd:4b:f9:7c:02:31:82:d8:4e: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:81:44:14:48:1D:3B:FA:3D:A9:27:87:08:26:00:48:ED:ED:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:80:9f:46:cb:b8:22:09:dc:b9:b1:76:a2:f0:ab:4d:58:2d: fd:ac:1f:cf:0f:d2:9a:3f:b1:f1:30:3a:f1:0f:d7:6e:ea:b6: fa:c0:83:01:f0:a3:75:0f:f0:f4:60:ff:b4:08:d7:2c:e9:7d: 57:7d:20:c8:96:6d:9a:70:24:de:df:65:b9:dd:f2:15:fc:71: 19:2a:b3:3b:55:9a:9a:ed:0e:d1:08:4c:db:71:38:74:1b:67: 1a:2e:b7:66:26:67:66:0e:ef:9b:24:e3:31:cf:df:7a:36:0e: 29:21:70:c6:79:f1:3c:a1:67:f9:f0:6d:a7:c9:99:5c:1d:c8: ca:ad:a5:f5:4b:a7:ac:ce:f2:55:8a:1b:9b:07:d7:a4:50:80: 1a:2b:7c:8e:d5:31:c0:2d:41:45:d2:df:9e:6e:1f:fa:15:06: c1:5c:e3:25:66:c6:aa:d7:79:02:0f:7a:91:fa:c8:eb:d8:44: 16:95:43:3a:5d:f9:8c:90:3c:23:3f:d1:45:ed:34:1b:1b:68: 5b:69:44:8b:07:3b:ba:44:55:f9:fc:2f:6c:bd:ef:34:7e:58: 28:88:67:c9:82:ed:de:00:a1:47:cb:c7:ad:3d:22:64:e3:67: fb:a7:d1:fa:df:0f:db:1f:32:78:43:24:2c:57:63:94:50:7d: 9a:de:29:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi91qd23N34KhyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NjdjMjNlMGQtODlhMi00NzJhLWEyMGYtZDliOGIyMTQ3NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkio72ecppAoDG8en+58OMrqQTfawwNkoRnDp 5dSf2TDuR2+bWkwlcnHLDS8F4PSVBTVV768xUZh3HTyeYc3iweQ7r1HhAH/TICzs i8HK3jVN9jdIjLTyJxaOXJ2UM8KO0I3fS2sxFk5dPMm0Q333wI2v2cTbm+LerNJq yXWksnDprd9rKNbQ7s6E56KZMO6OW1tkQmWgQY0esC9No5XiVofObsbpuVRjU0is uEVHiTmsciX6P0+N1pzYH0IkH5hv70gPgC1ksXxgGp0o1Ivnk1GftEGz1L1fDgbr 6WDD0CrZ0eMsJQMqXwl34k53iQiPJ9knIXHdS/l8AjGC2E5nywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAlZgUQUSB07+j2pJ4cIJgBI7e0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvNGFkYzlmNDItODIwMS00 YWYyLWEzYzItMjIzZDFlMjY4N2EyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOgJ9Gy7giCdy5sXai8KtN WC39rB/PD9KaP7HxMDrxD9du6rb6wIMB8KN1D/D0YP+0CNcs6X1XfSDIlm2acCTe 32W53fIV/HEZKrM7VZqa7Q7RCEzbcTh0G2caLrdmJmdmDu+bJOMxz996Ng4pIXDG efE8oWf58G2nyZlcHcjKraX1S6eszvJVihubB9ekUIAaK3yO1THALUFF0t+ebh/6 FQbBXOMlZsaq13kCD3qR+sjr2EQWlUM6XfmMkDwjP9FF7TQbG2hbaUSLBzu6RFX5 /C9sve80flgoiGfJgu3eAKFHy8etPSJk42f7p9H63w/bHzJ4QyQsV2OUUH2a3imY -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:23 2025 by rpki-client