$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft File: 7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft (raw, json) Hash identifier: 4pQKjgATdMr+jIc1DNywL+cMN/i3c835RiAdCLVvoGA= Subject key identifier: D6:EA:11:36:23:8D:C3:90:B0:A3:99:51:51:29:97:48:AF:1D:4C:11 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584BBFA65445A3751D0EBACD1F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft Manifest number: 010D0C9F4328584073A842F7211975CB6D1E16B3 Signing time: Tue 04 Nov 2025 14:02:08 +0000 Manifest this update: Tue 04 Nov 2025 14:02:08 +0000 Manifest next update: Thu 06 Nov 2025 06:00:00 +0000 Files and hashes: 1: 2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa (hash: o8QJiDSnFMGTifoG/GNimjPgsThjrnVLlrfDTZ6sGz4=) 2: 481e6446-0bc6-31ec-845c-a168a1f29c35.roa (hash: P1oz1h7QI1uzNny6ZrjLgBhEDc/xbvacF50+ryIEVVc=) 3: 7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl (hash: X8v2AbS71CAz/qQ4UPvIOtOCTEhz603CS6sSq1vPswQ=) 4: 851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa (hash: Uhh/Y/MUHtZydg1mqQBBqL5oEFLLUg4swhW6MNJrPzc=) 5: 96cde41d-12c1-30ee-91b7-f29b118999ba.roa (hash: pQOBEAwDKzdJsmgGVCpOSa0cG8qzi8teOZPzRaiZ4nI=) 6: ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa (hash: xdJeE4RammsqMaPEC65D++UNMTZV88XAR5sHJRdytzE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a6:54:45:a3:75:1d:0e:ba:cd:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Nov 4 14:02:08 2025 GMT Not After : Nov 6 06:00:00 2025 GMT Subject: CN=7795cfc8-af44-41c5-8a04-bf23746258e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:36:bf:5c:99:a8:3f:e6:b8:23:85:89:25: 3f:fd:18:c0:b1:b6:76:41:b8:30:05:a1:2e:b8:19: 94:36:70:5f:10:11:35:17:a1:42:e0:c0:78:d0:b2: ce:da:22:92:fd:1b:74:23:79:14:3c:b6:f3:9a:3f: 82:0f:9b:cf:07:3c:6c:5e:8c:ad:aa:75:53:86:fe: 6e:36:52:9c:12:99:14:06:eb:d8:c6:47:a9:fd:30: 0f:73:e0:14:77:7f:6f:f2:17:5e:37:ce:1d:32:d6: 7b:a7:aa:ff:06:d8:f1:13:66:2a:92:53:38:08:1b: bc:b2:3e:91:62:0d:aa:89:41:26:c1:ad:a1:04:e6: a5:aa:0a:29:89:25:93:df:07:f5:92:c8:3c:c1:68: 1a:a9:a1:29:a0:f2:fc:f5:26:04:60:9e:3f:ad:d3: 8e:5e:e0:25:e7:61:78:99:9a:21:20:65:b6:59:7c: 20:50:76:70:0d:4b:aa:c5:bf:1e:e2:2b:60:05:9f: e3:1f:ed:85:b3:65:bb:08:e3:b8:6b:9f:9c:91:99: 51:2c:89:77:b1:8d:ba:95:7b:af:9e:7d:0e:8e:d0: f0:e4:eb:5f:2c:44:c4:12:45:9a:6d:0e:b6:30:96: dd:c5:d6:a9:00:9b:e5:e5:0a:25:4e:20:5c:36:b0: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:11:36:23:8D:C3:90:B0:A3:99:51:51:29:97:48:AF:1D:4C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ce:d4:9e:55:77:a3:5a:fb:1e:f6:51:61:20:1b:c5:98:dd: ab:01:ea:b0:b5:b5:85:2e:7e:0a:6d:a7:b2:2e:2b:ad:0d:45: c0:9d:de:af:8f:ee:44:9d:9d:b8:38:0d:32:9b:83:2e:e1:5c: fd:56:67:25:e5:cb:c4:29:78:0a:2e:18:ec:b0:a5:d9:82:af: 61:cb:a1:3d:c8:0c:f0:84:b8:e8:7d:83:2d:d0:fe:e2:e3:15: d9:0c:ff:1b:ae:c8:63:0b:34:8d:e7:4e:c9:ca:51:6b:13:d9: ea:47:3c:5c:bb:2f:cf:21:b1:91:67:22:61:0b:91:74:b2:46: 10:99:34:67:f5:e8:83:c2:a9:56:e1:eb:b5:df:8d:34:20:7f: 60:f2:e6:68:1c:77:58:dc:75:f1:b4:3e:51:dc:db:36:10:41: 90:f4:f0:00:ca:a4:8f:60:fd:fc:5f:68:17:f8:9f:81:39:d6: b0:5d:3f:4f:c8:f2:c5:43:cf:d6:3c:ab:ee:99:4b:e9:c0:2d: ab:29:56:f0:21:f5:5d:c5:dc:1f:4f:fd:b3:7a:66:c6:7d:26: c3:c2:bd:57:d0:c9:de:55:a1:59:c4:47:6c:72:99:5f:39:56: 1b:51:a7:8a:21:12:59:6e:ed:67:36:52:5e:bf:ec:e7:86:e8: 2c:50:fa:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/plRFo3UdDrrNH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MTEwNDE0MDIwOFoXDTI1MTEwNjA2MDAwMFowLzEtMCsGA1UEAxMk Nzc5NWNmYzgtYWY0NC00MWM1LThhMDQtYmYyMzc0NjI1OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHE2v1yZqD/muCOFiSU//RjAsbZ2QbgwBaEu uBmUNnBfEBE1F6FC4MB40LLO2iKS/Rt0I3kUPLbzmj+CD5vPBzxsXoytqnVThv5u NlKcEpkUBuvYxkep/TAPc+AUd39v8hdeN84dMtZ7p6r/BtjxE2YqklM4CBu8sj6R Yg2qiUEmwa2hBOalqgopiSWT3wf1ksg8wWgaqaEpoPL89SYEYJ4/rdOOXuAl52F4 mZohIGW2WXwgUHZwDUuqxb8e4itgBZ/jH+2Fs2W7COO4a5+ckZlRLIl3sY26lXuv nn0OjtDw5OtfLETEEkWabQ62MJbdxdapAJvl5QolTiBcNrABjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNbqETYjjcOQsKOZUVEpl0ivHUwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvN2E2MjBkNDUtMWYyNi00 NjBjLTlhM2UtOWJjMGNjNGE1ZDU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwztSeVXejWvse9lFhIBvF mN2rAeqwtbWFLn4KbaeyLiutDUXAnd6vj+5EnZ24OA0ym4Mu4Vz9Vmcl5cvEKXgK LhjssKXZgq9hy6E9yAzwhLjofYMt0P7i4xXZDP8brshjCzSN507JylFrE9nqRzxc uy/PIbGRZyJhC5F0skYQmTRn9eiDwqlW4eu13400IH9g8uZoHHdY3HXxtD5R3Ns2 EEGQ9PAAyqSPYP38X2gX+J+BOdawXT9PyPLFQ8/WPKvumUvpwC2rKVbwIfVdxdwf T/2zembGfSbDwr1X0MneVaFZxEdscplfOVYbUaeKIRJZbu1nNlJev+znhugsUPpF -----END CERTIFICATE-----Generated at Wed Nov 5 04:51:37 2025 by rpki-client