$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft File: 74a7fad8-dd78-48ee-b80f-33c16bd717de.mft (raw, json) Hash identifier: Pjmh/yOA6rIttKhATGKdv8wR8jToC1gCx2pjAiRAGwM= Subject key identifier: 39:03:6A:DA:6A:0B:11:3B:02:D4:12:1E:D9:0F:DB:A7:45:73:36:95 Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92 Certificate issuer: /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de Certificate serial: 010D0C9F4328584B95E2CE4E89E13B4F0E5FCCB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft Manifest number: 010D0C9F43285844E0BD886DB05C2EA8D1A47007 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 74a7fad8-dd78-48ee-b80f-33c16bd717de.crl (hash: 89NQkVgthvDzkJiE77djV+88ntPkN4ep3SLhld5xWTs=) 2: 7e78094b-5975-3917-802d-0c9f6b97e478.roa (hash: fXJh0ceQtMmhvbjvZchDiAS0AAHank9RiCRJ1AOhuYA=) 3: 8ad60976-af7d-312a-b659-7d672df91c6b.roa (hash: QLtWmHu7gkRLPzB6DeDL7k/DN1SI4EEfFjctcgHjMSE=) 4: 95d67456-7bfe-3633-bb8e-6f617a5bea59.roa (hash: dKitkJXsAifeJK14bdzi6fIa2tJ98GrOd3k7Ydebfok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:ce:4e:89:e1:3b:4f:0e:5f:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=a20da71e-a68b-4680-948e-1d57b9f777ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:e2:1c:4b:38:ad:b9:1b:32:5c:5f:08:8e: 9e:98:2f:8b:6d:47:65:9b:5a:54:0a:5d:5e:71:36: 26:fb:b3:44:5b:0d:b7:a5:2e:87:e2:a2:cb:17:bb: c5:36:e5:59:36:d6:4e:6b:4f:2e:8a:9b:38:e4:0d: bb:6b:62:7a:0f:f2:c2:b9:41:54:98:0a:45:0d:93: 1f:99:5c:b1:aa:2a:59:46:a6:e9:00:f0:63:ff:86: 91:33:81:13:74:86:36:37:de:16:b8:ed:51:19:8b: 49:16:fc:1b:c5:8a:85:bc:28:17:d5:41:14:53:63: 0b:bb:b1:51:1f:86:55:6e:4f:89:53:fc:ad:08:2d: 4f:e7:05:d5:b5:f1:6c:4f:cf:3f:47:76:cf:d6:cf: 65:33:f4:3f:6f:75:f2:b5:b6:68:c3:4c:a9:44:26: 46:c7:0e:48:9c:6f:24:b6:17:30:9a:50:91:76:b4: e5:ef:c3:e7:de:ad:8e:76:ce:ba:06:dd:6d:93:c9: 1f:86:d1:cb:16:bf:7a:17:00:3c:d2:d9:00:b5:4e: fe:f0:6a:45:75:42:92:e3:5f:2f:6c:e8:0b:b4:ef: 23:e5:7d:e8:8c:ed:83:a6:cc:fc:ac:60:62:bc:f8: 41:39:cb:91:15:b6:1f:95:19:d4:fa:7c:cb:90:b7: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:03:6A:DA:6A:0B:11:3B:02:D4:12:1E:D9:0F:DB:A7:45:73:36:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl X509v3 Authority Key Identifier: keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ad:59:1c:07:09:a4:3b:66:b7:26:eb:78:0c:90:f0:2c:73: 82:cd:de:4b:c2:50:ee:fd:27:16:13:f8:0b:ba:31:a1:be:81: 24:6a:07:43:62:6a:70:73:5f:90:13:76:1f:c6:ba:0c:8b:24: 68:68:0f:ee:eb:c1:4e:7c:e6:22:1f:1f:bc:a2:1d:1b:18:46: 79:1e:61:89:d8:97:c7:6e:c9:00:e2:e1:87:af:57:48:bf:c5: 54:d9:5f:78:bc:d3:af:54:c6:e8:f0:dc:79:e8:22:98:f3:e5: 30:35:2d:d2:13:ed:fd:cb:b6:a1:ae:f3:81:b2:1a:5c:7b:46: 98:aa:28:6a:59:2d:1a:f8:49:01:fb:d0:2f:97:fd:a8:7e:56: 99:b8:bf:e2:ec:e9:7b:be:1a:66:0a:1e:15:19:01:ed:65:f9: cc:79:a4:f9:00:a5:37:9d:ca:14:a3:48:e0:3b:df:fa:88:40: 07:ee:32:7a:f0:55:25:16:5e:45:8c:a7:66:cf:bc:99:14:3e: b7:9f:c6:89:d2:26:59:d3:ed:32:c5:4d:4c:e6:ca:6b:2e:07: 57:70:be:db:3e:5c:4f:16:ee:8d:47:94:15:72:d7:7c:92:12: 60:fc:19:d6:6d:40:43:b2:90:b1:e2:ba:78:9d:32:21:f4:31: 7e:ea:67:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s5OieE7Tw5fzLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhN2ZhZDgtZGQ3OC00OGVlLWI4MGYtMzNjMTZiZDcx N2RlMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk YTIwZGE3MWUtYTY4Yi00NjgwLTk0OGUtMWQ1N2I5Zjc3N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoniHEs4rbkbMlxfCI6emC+LbUdlm1pUCl1e cTYm+7NEWw23pS6H4qLLF7vFNuVZNtZOa08uips45A27a2J6D/LCuUFUmApFDZMf mVyxqipZRqbpAPBj/4aRM4ETdIY2N94WuO1RGYtJFvwbxYqFvCgX1UEUU2MLu7FR H4ZVbk+JU/ytCC1P5wXVtfFsT88/R3bP1s9lM/Q/b3XytbZow0ypRCZGxw5InG8k thcwmlCRdrTl78Pn3q2Ods66Bt1tk8kfhtHLFr96FwA80tkAtU7+8GpFdUKS418v bOgLtO8j5X3ojO2Dpsz8rGBivPhBOcuRFbYflRnU+nzLkLfgJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDkDatpqCxE7AtQSHtkP26dFczaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NGE3 ZmFkOC1kZDc4LTQ4ZWUtYjgwZi0zM2MxNmJkNzE3ZGUvNzRhN2ZhZDgtZGQ3OC00 OGVlLWI4MGYtMzNjMTZiZDcxN2RlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzRhN2ZhZDgtZGQ3OC00OGVlLWI4 MGYtMzNjMTZiZDcxN2RlLzc0YTdmYWQ4LWRkNzgtNDhlZS1iODBmLTMzYzE2YmQ3 MTdkZS5jcmwwHwYDVR0jBBgwFoAUMoN56V6X/OSClyA78NcdwjSTr5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NGE3ZmFkOC1kZDc4LTQ4ZWUtYjgwZi0zM2Mx NmJkNzE3ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwrVkcBwmkO2a3Jut4DJDw LHOCzd5LwlDu/ScWE/gLujGhvoEkagdDYmpwc1+QE3YfxroMiyRoaA/u68FOfOYi Hx+8oh0bGEZ5HmGJ2JfHbskA4uGHr1dIv8VU2V94vNOvVMbo8Nx56CKY8+UwNS3S E+39y7ahrvOBshpce0aYqihqWS0a+EkB+9Avl/2oflaZuL/i7Ol7vhpmCh4VGQHt ZfnMeaT5AKU3ncoUo0jgO9/6iEAH7jJ68FUlFl5FjKdmz7yZFD63n8aJ0iZZ0+0y xU1M5sprLgdXcL7bPlxPFu6NR5QVctd8khJg/BnWbUBDspCx4rp4nTIh9DF+6mf9 -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:15 2025 by rpki-client