$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft File: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json) Hash identifier: 3nqHDEBdPhJt+ckNa+DjF4ob7hqN05TD/dkuDLKgTcU= Subject key identifier: 2F:71:D3:E7:8E:BA:2D:3C:DE:09:23:55:0A:CB:6A:87:E3:34:06:99 Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1 Certificate issuer: /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1 Certificate serial: 4D2DA9BAACECBCE60A2812F8E02430305F887FAF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft Manifest number: 069D Signing time: Mon 20 Oct 2025 05:29:54 +0000 Manifest this update: Mon 20 Oct 2025 05:24:54 +0000 Manifest next update: Tue 21 Oct 2025 06:37:54 +0000 Files and hashes: 1: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: Ga42+36DBXvhFJL9fNOGskBUD02TlB8rrrReqjfGPPc=) 2: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: iSVzEtaduQywCQdcSyMNmFI0Id4YYz6qHsCZbxVt1kQ=) 3: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: QIJI9wU426qSqI49fMQWEHAp6NBEcQVeOz0Njxx0ghE=) 4: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: cjPRK9qLuIrk2Qcz5MIry+JIAYYQot59N/+6dxX+1TU=) 5: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: M+kaKR8R1hpLE6n7CVRBmAYxGjsp1XCYpKk2aIr5Q3Q=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 06:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2d:a9:ba:ac:ec:bc:e6:0a:28:12:f8:e0:24:30:30:5f:88:7f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1 Validity Not Before: Oct 20 05:24:54 2025 GMT Not After : Oct 21 06:37:54 2025 GMT Subject: CN=2F71D3E78EBA2D3CDE0923550ACB6A87E3340699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:05:8b:68:b4:28:34:20:ee:cb:b2:1b:ad: 28:24:cd:c5:30:40:b9:45:87:a3:ce:08:57:b7:2e: 85:c5:d0:73:11:d6:ee:16:e1:a7:3a:87:00:f1:2d: ce:d0:ee:bd:de:33:e4:7b:e9:71:df:bd:c4:e9:fc: 7e:4b:81:c8:14:15:8d:c6:bb:90:49:71:6c:a5:b3: dc:10:c3:99:29:c8:00:c8:9c:f0:b4:20:a2:5d:e4: 0b:6a:1a:15:e0:ea:74:a2:d7:c9:7b:4a:8b:92:bb: 89:0e:d6:67:3c:39:70:86:10:89:ae:59:e8:60:b6: 34:fc:82:f1:6f:11:94:b0:f5:66:ce:a9:d7:1a:b6: 97:a0:94:98:bb:20:90:ab:cc:ba:50:b4:a0:3a:de: 46:00:70:d2:01:2f:33:c3:22:a3:4b:2b:c1:2d:ec: bc:b8:68:93:f3:85:46:19:3a:f1:43:a4:42:3b:b4: 52:c0:0c:4e:83:70:d0:07:c7:0f:e2:23:a9:c5:7b: c9:32:ff:17:c0:b0:ac:fe:f7:e5:d0:4d:55:00:8d: 5e:e2:c7:92:9e:1f:7c:8b:7b:54:42:fa:8a:38:fc: 41:3f:bc:de:7d:d0:5d:7d:c2:6c:d0:01:aa:b1:6c: 52:a2:51:ce:9a:3b:17:8c:bb:a6:99:ce:14:cc:e2: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:D3:E7:8E:BA:2D:3C:DE:09:23:55:0A:CB:6A:87:E3:34:06:99 X509v3 Authority Key Identifier: keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:5e:1a:a7:86:70:73:13:c2:cc:ae:29:68:20:27:cc:ba:5c: c7:a4:fa:ab:18:47:45:89:fc:34:6c:a6:77:cc:2c:d3:9c:64: 8d:9d:06:ba:6d:ac:17:5c:b0:21:e2:a0:96:65:4a:3d:bc:ef: 1f:65:41:df:69:cf:2b:1b:1b:70:5f:e4:21:70:ec:39:b6:2f: 72:3f:57:f4:74:62:c7:73:06:2f:ad:af:75:2f:5f:3b:ce:02: 6a:cd:8b:b7:b4:61:61:73:61:87:41:f9:1b:3f:c9:d0:f1:8f: 3d:15:13:63:19:e5:6b:85:97:fd:9a:7a:a8:45:b9:0e:cd:6e: c3:ea:71:06:c8:1b:22:d9:b0:a0:0f:11:40:b3:d7:4c:63:da: 9d:e2:cb:b0:d4:0f:40:f7:11:19:e1:20:c2:a1:4e:71:b1:3f: 7f:f4:1b:07:3f:2d:dc:70:ef:ff:59:f5:e5:ad:fd:1c:b3:c3: eb:b7:31:f0:f2:3a:f4:cd:6b:c7:32:9c:e2:3d:2b:eb:7e:03: 10:b6:04:8c:1f:99:bd:61:5e:5c:3a:d4:cf:e5:a1:c6:d3:08: 71:47:f8:8d:37:b5:c2:28:d5:e6:47:da:fe:91:d9:40:cf:89: 6d:f6:a8:92:61:9c:48:a9:58:af:be:26:96:0a:b6:5e:15:9e: 94:ee:54:d2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTS2puqzsvOYKKBL44CQwMF+If68wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg1RUQ1Rjc5MjFB Qzg2NTQxRDkyOTM2RjY5MUNCMUNEQkY2RDVDMkExMB4XDTI1MTAyMDA1MjQ1NFoX DTI1MTAyMTA2Mzc1NFowMzExMC8GA1UEAxMoMkY3MUQzRTc4RUJBMkQzQ0RFMDky MzU1MEFDQjZBODdFMzM0MDY5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMStBYtotCg0IO7LshutKCTNxTBAuUWHo84IV7cuhcXQcxHW7hbhpzqHAPEt ztDuvd4z5Hvpcd+9xOn8fkuByBQVjca7kElxbKWz3BDDmSnIAMic8LQgol3kC2oa FeDqdKLXyXtKi5K7iQ7WZzw5cIYQia5Z6GC2NPyC8W8RlLD1Zs6p1xq2l6CUmLsg kKvMulC0oDreRgBw0gEvM8Mio0srwS3svLhok/OFRhk68UOkQju0UsAMToNw0AfH D+IjqcV7yTL/F8CwrP735dBNVQCNXuLHkp4ffIt7VEL6ijj8QT+83n3QXX3CbNAB qrFsUqJRzpo7F4y7ppnOFMzi9mcCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQvcdPn jrotPN4JI1UKy2qH4zQGmTAfBgNVHSMEGDAWgBRe1feSGshlQdkpNvaRyxzb9tXC oTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8yLzVFRDVGNzkyMUFDODY1NDFEOTI5MzZGNjkxQ0IxQ0RCRjZE NUMyQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL1h0WDNraHJJWlVIWktUYjJrY3NjMl9iVndxRS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2 LzIvNUVENUY3OTIxQUM4NjU0MUQ5MjkzNkY2OTFDQjFDREJGNkQ1QzJBMS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAMleGqeGcHMTwsyuKWggJ8y6XMek+qsYR0WJ/DRspnfMLNOcZI2dBrpt rBdcsCHioJZlSj287x9lQd9pzysbG3Bf5CFw7Dm2L3I/V/R0YsdzBi+tr3UvXzvO AmrNi7e0YWFzYYdB+Rs/ydDxjz0VE2MZ5WuFl/2aeqhFuQ7NbsPqcQbIGyLZsKAP EUCz10xj2p3iy7DUD0D3ERnhIMKhTnGxP3/0Gwc/Ldxw7/9Z9eWt/Ryzw+u3MfDy OvTNa8cynOI9K+t+AxC2BIwfmb1hXlw61M/locbTCHFH+I03tcIo1eZH2v6R2UDP iW32qJJhnEipWK++JpYKtl4VnpTuVNI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:52 2025 by rpki-client