$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft File: a1a8e018-88f4-4067-935e-ef8e20a553c5.mft (raw, json) Hash identifier: U700BG3iyhiCxvcJId5UBePe8z9Q21zdjRF0yvAXq10= Subject key identifier: EF:55:96:64:76:93:A6:EC:D2:EB:F1:AF:4E:10:73:82:82:8D:4D:FE Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 Certificate issuer: /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Certificate serial: 010D0C9F4328584BC0B14A414BA407E70050F500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft Manifest number: 010D0C9F4328584073A83009519676A292BCE35C Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 027cdea3-3e6f-3338-aa14-c0aea267feab.roa (hash: qZUu3QkcxLS0gRdnSo0r8AFWIAypL4pGLZ0jrnRNFhw=) 2: 6c89798a-5530-36f9-9c02-541abca66e24.roa (hash: 4X3DYc31/kjIESSeK3IHJ1freMoUgTfRWHmIykq4Aek=) 3: 73403b9d-387a-308b-b2e2-da2bcb661138.roa (hash: K23VSZwH0A+ACk59FWxab+3iEdNYrQE2D1sN63RKBPI=) 4: 7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa (hash: Jw4AQ1U8Ena0oQ4K3TPybYeCVuKOm9EIuNaf0/TYppI=) 5: 99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa (hash: 9MXX51Mgi/qHiRucmsUodfMc2U2Cf0E9qwU6Q4/0HQQ=) 6: a1a8e018-88f4-4067-935e-ef8e20a553c5.crl (hash: d2Xvnd4Gjg1K2Zrf9e+3jXedrOgFIrGBi9ouW/seJNI=) 7: e120d015-f5b8-3704-b4c4-afa708bc413b.roa (hash: MNluPeI4dxRRBO/axobruY2q9rD77Gkmu2Lt+DRE5lU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:4a:41:4b:a4:07:e7:00:50:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=53797218-ef6c-44a7-a381-172e530101c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:53:29:24:9f:f4:92:a1:04:e5:da:f3:ab: f7:76:29:24:bd:79:99:93:e6:ee:f6:8c:d7:29:7b: 36:83:b5:6a:4b:3f:fa:63:67:a1:48:c0:02:2e:4f: 71:e9:96:4c:3a:f9:03:48:46:54:4d:6a:89:52:bd: a3:5e:60:f7:62:cf:f4:ec:85:20:bb:ea:8b:c0:92: 02:41:fb:64:83:fd:9d:ea:f7:ec:de:12:5d:3b:74: f0:9b:76:9e:61:e6:a7:79:20:6b:1b:ff:c7:7c:69: 44:46:8b:03:b4:16:19:e6:64:b4:4b:ec:35:14:1f: 18:c2:d3:97:71:35:06:30:ec:c3:ec:5a:22:79:00: 05:ca:c2:53:50:3e:74:98:d2:0f:8d:0f:10:8d:e0: bf:e0:d4:72:4a:de:bf:5a:05:86:69:27:e7:3f:66: c2:79:78:8c:40:2d:b0:bd:10:f2:cf:d3:cd:f3:fe: 07:d7:8e:fc:39:0e:9f:01:a0:48:0a:d6:98:4f:8e: 33:22:29:08:e1:d8:99:41:53:f1:b8:41:11:f5:a1: 81:49:aa:40:25:32:da:59:fc:e5:46:d1:5c:49:0b: d7:05:2b:fd:4a:9d:e4:14:f2:70:06:c4:2b:a6:cd: dc:0b:94:c8:c0:9d:6b:a8:a7:b5:55:b9:e9:37:ab: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:55:96:64:76:93:A6:EC:D2:EB:F1:AF:4E:10:73:82:82:8D:4D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl X509v3 Authority Key Identifier: keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:91:ea:f5:56:cc:1a:f4:4b:20:41:e4:53:fb:56:8d:f8:c5: b7:a8:40:85:01:dd:e4:4b:9b:4a:d2:fe:5a:ba:86:cd:5a:c7: ce:74:3b:0a:ce:4e:f1:8a:39:8c:38:51:4b:ee:41:d1:ac:32: 45:37:fb:cc:a7:fa:66:2b:4e:ea:48:d9:ae:0d:d7:d6:87:46: a3:f2:c4:a7:88:ed:0f:00:39:47:c3:09:c6:08:cc:49:e5:a7: 42:15:e6:e6:2b:f8:3b:72:55:89:d7:82:d1:87:95:2d:31:24: 5f:d2:31:7a:ef:24:36:5c:06:ef:34:26:3c:70:db:94:0b:3a: 55:3f:8d:b5:95:08:33:40:11:cf:60:c5:81:43:57:e8:6f:2c: 48:0a:6a:8b:95:d7:73:ac:65:e1:4c:c2:a3:06:5a:6c:f1:23: 1b:a3:79:50:2a:60:93:d0:f0:b6:d4:15:66:b5:2a:bd:9d:79: 6f:3a:16:78:15:ae:85:b3:be:74:3f:88:75:94:df:0d:15:2a: 22:bb:83:64:18:c6:1f:dd:75:a7:57:ab:65:53:aa:6b:78:ab: fc:de:be:20:d7:39:20:31:4a:31:c0:b7:0e:53:d2:40:af:cf: c4:9d:99:75:48:0d:98:43:b9:b1:89:30:ec:03:ef:3d:46:1c: 3f:1c:30:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUpBS6QH5wBQ9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFhOGUwMTgtODhmNC00MDY3LTkzNWUtZWY4ZTIwYTU1 M2M1MB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk NTM3OTcyMTgtZWY2Yy00NGE3LWEzODEtMTcyZTUzMDEwMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2VTKSSf9JKhBOXa86v3dikkvXmZk+bu9ozX KXs2g7VqSz/6Y2ehSMACLk9x6ZZMOvkDSEZUTWqJUr2jXmD3Ys/07IUgu+qLwJIC Qftkg/2d6vfs3hJdO3Twm3aeYeaneSBrG//HfGlERosDtBYZ5mS0S+w1FB8YwtOX cTUGMOzD7FoieQAFysJTUD50mNIPjQ8QjeC/4NRySt6/WgWGaSfnP2bCeXiMQC2w vRDyz9PN8/4H1478OQ6fAaBICtaYT44zIikI4diZQVPxuEER9aGBSapAJTLaWfzl RtFcSQvXBSv9Sp3kFPJwBsQrps3cC5TIwJ1rqKe1VbnpN6updwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO9VlmR2k6bs0uvxr04Qc4KCjU3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4 ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhlMjBhNTUzYzUvYTFhOGUwMTgtODhmNC00 MDY3LTkzNWUtZWY4ZTIwYTU1M2M1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTFhOGUwMTgtODhmNC00MDY3LTkz NWUtZWY4ZTIwYTU1M2M1L2ExYThlMDE4LTg4ZjQtNDA2Ny05MzVlLWVmOGUyMGE1 NTNjNS5jcmwwHwYDVR0jBBgwFoAUdezwcZfkdSWR6NkbnryrZ+1adSMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhl MjBhNTUzYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiker1Vswa9EsgQeRT+1aN +MW3qECFAd3kS5tK0v5auobNWsfOdDsKzk7xijmMOFFL7kHRrDJFN/vMp/pmK07q SNmuDdfWh0aj8sSniO0PADlHwwnGCMxJ5adCFebmK/g7clWJ14LRh5UtMSRf0jF6 7yQ2XAbvNCY8cNuUCzpVP421lQgzQBHPYMWBQ1fobyxICmqLlddzrGXhTMKjBlps 8SMbo3lQKmCT0PC21BVmtSq9nXlvOhZ4Fa6Fs750P4h1lN8NFSoiu4NkGMYf3XWn V6tlU6preKv83r4g1zkgMUoxwLcOU9JAr8/EnZl1SA2YQ7mxiTDsA+89Rhw/HDAO -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:54 2025 by rpki-client