$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft File: a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft (raw, json) Hash identifier: e30zmxASHK15K1sabDBRJAdUQjX89eQy3sULMinuwFE= Subject key identifier: C9:BB:BB:A1:6B:04:2F:DA:FC:38:F0:72:9C:AD:7F:EB:85:C8:00:8A Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584B9677B13F7B45E5151DB26180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft Manifest number: 010D0C9F4328584505F2AF5ED59DA37E56871879 Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Thu 23 Oct 2025 20:00:00 +0000 Files and hashes: 1: 3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa (hash: tfPEAZc/oz4Zh+9ejXpoSZ7WuEiOTnMQkg0zZjq4ixU=) 2: 653ac14b-6f52-36b8-9423-535372503377.roa (hash: sMQv0GMTd/ICXkayReMrii12f3j57oBz9Wg7kDiv/Zg=) 3: 821d388f-a517-3721-bd73-97470ca4681b.roa (hash: dCes1jX6XoHau8TtZiu0NbAYdF61dun3KpC/M5A5WXQ=) 4: a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl (hash: 5jpNnyZYsaWClMR/y4NaNsHv53ndM+zgUERAImG0TzQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b1:3f:7b:45:e5:15:1d:b2:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 23 20:00:00 2025 GMT Subject: CN=e2a4b989-dfe1-4a41-81b5-323082197d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:0a:10:fc:ac:37:5f:5d:3f:59:34:59:f4: dd:09:da:96:e7:a0:8b:54:62:13:c8:fe:e0:81:ce: a3:a9:2c:2b:85:b1:6e:e9:4e:06:c2:06:36:ac:68: f3:8a:d1:57:5f:94:d3:f0:9c:91:21:8d:59:30:51: e0:bf:05:5b:ad:69:5d:63:19:f2:d8:fb:fa:fe:58: f3:62:86:44:45:9b:ab:45:a0:fb:be:a9:fc:ec:e1: d1:62:01:de:70:46:7a:58:58:5a:64:47:1c:86:93: 1a:6b:bb:40:44:56:da:ed:bf:00:cb:4c:6a:66:9d: 52:ac:b1:6e:2e:d1:af:f4:2a:72:b8:08:16:a8:e0: 98:c3:e2:c4:a8:1a:ae:df:68:7b:92:54:96:9f:7a: 89:db:42:d6:3f:5f:99:f5:aa:0b:89:4e:ce:b4:c3: e4:2a:99:4e:06:9f:46:8b:4c:fc:2b:4f:f2:2f:94: ef:ed:c6:87:58:02:62:63:a8:3d:6e:29:9b:95:65: 59:11:4c:35:04:c9:12:b0:ec:39:08:df:3b:18:c1: 68:95:41:a1:f6:c1:65:d4:b6:0c:43:1f:b8:2a:cb: 4d:c0:c4:c0:a1:1e:07:ad:06:0e:29:af:df:c1:c2: 64:4f:25:1d:a0:97:f7:4a:aa:a1:5c:c0:71:60:09: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:BB:A1:6B:04:2F:DA:FC:38:F0:72:9C:AD:7F:EB:85:C8:00:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ae:8f:7d:3b:98:5b:5d:5d:7a:2e:67:e5:ae:75:18:9f:7d: 84:e7:82:01:2a:14:bc:c8:61:aa:85:9c:4b:96:63:64:c4:98: c4:ef:e4:db:62:03:01:54:6a:b6:bb:de:11:58:1b:ab:23:9e: c9:35:16:63:4d:d0:02:0b:d3:8a:aa:37:23:8d:ae:56:80:8e: 2e:6d:76:5b:34:7d:95:ab:77:fc:ce:ba:a9:19:a2:58:2d:c9: ca:0f:14:95:dd:3d:53:e7:03:47:c4:28:ac:b8:73:6c:e9:0d: d3:5a:28:27:5f:e1:05:8a:e1:32:e0:1f:12:0b:9d:15:6e:02: a0:b9:97:26:fd:24:2b:19:fd:b6:c3:c7:ad:25:06:b3:42:83: 16:f9:c9:7d:b9:99:82:1e:d6:d4:81:76:4d:29:c7:fb:cd:ec: 16:ed:33:43:fe:ef:3d:25:a7:dd:06:ba:03:20:ff:ec:8f:c7: bb:16:60:20:9d:58:43:17:ea:6d:8c:67:d0:f5:4f:45:52:e8: 24:84:92:eb:8f:ec:39:86:c0:8e:e8:b8:a4:9d:35:54:5c:ab: 30:24:95:d8:d2:14:88:09:e0:43:ba:3d:be:c4:34:7f:6c:82: 57:a6:bc:6f:22:cb:35:b7:63:12:b4:fc:c2:4f:c7:fb:0f:3e: 3e:9c:c6:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7E/e0XlFR2yYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMzIwMDAwMFowLzEtMCsGA1UEAxMk ZTJhNGI5ODktZGZlMS00YTQxLTgxYjUtMzIzMDgyMTk3ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+4KEPysN19dP1k0WfTdCdqW56CLVGITyP7g gc6jqSwrhbFu6U4GwgY2rGjzitFXX5TT8JyRIY1ZMFHgvwVbrWldYxny2Pv6/ljz YoZERZurRaD7vqn87OHRYgHecEZ6WFhaZEcchpMaa7tARFba7b8Ay0xqZp1SrLFu LtGv9CpyuAgWqOCYw+LEqBqu32h7klSWn3qJ20LWP1+Z9aoLiU7OtMPkKplOBp9G i0z8K0/yL5Tv7caHWAJiY6g9bimblWVZEUw1BMkSsOw5CN87GMFolUGh9sFl1LYM Qx+4KstNwMTAoR4HrQYOKa/fwcJkTyUdoJf3SqqhXMBxYAmNZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMm7u6FrBC/a/Djwcpytf+uFyACKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvYThiODRlMmItYWZiZS00 YjM1LWIwMDUtZTBkZmNhMmUyM2Q4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVro99O5hbXV16LmflrnUY n32E54IBKhS8yGGqhZxLlmNkxJjE7+TbYgMBVGq2u94RWBurI57JNRZjTdACC9OK qjcjja5WgI4ubXZbNH2Vq3f8zrqpGaJYLcnKDxSV3T1T5wNHxCisuHNs6Q3TWign X+EFiuEy4B8SC50VbgKguZcm/SQrGf22w8etJQazQoMW+cl9uZmCHtbUgXZNKcf7 zewW7TND/u89JafdBroDIP/sj8e7FmAgnVhDF+ptjGfQ9U9FUugkhJLrj+w5hsCO 6LiknTVUXKswJJXY0hSICeBDuj2+xDR/bIJXprxvIss1t2MStPzCT8f7Dz4+nMa7 -----END CERTIFICATE-----Generated at Tue Oct 21 14:13:14 2025 by rpki-client