$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft File: 604a49f2-58d6-4709-bdaf-e7181b613801.mft (raw, json) Hash identifier: 397U0HWttw/pEJnXDHkM10B37WKvrSiaCIZBnAFMsTg= Subject key identifier: CF:1E:54:D2:FA:48:8E:52:E9:5C:16:38:A4:96:57:DB:58:79:66:21 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584B95301FBF56D28F196E3A5980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft Manifest number: 010D0C9F4328584073A84B40EFAB5779730490C8 Signing time: Mon 20 Oct 2025 09:00:03 +0000 Manifest this update: Mon 20 Oct 2025 09:00:03 +0000 Manifest next update: Thu 23 Oct 2025 09:00:00 +0000 Files and hashes: 1: 0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa (hash: 54QjNZOoOaNPAl7GtDGeMNZUh3BW/66bfMF2BLvm7xY=) 2: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (hash: 1JlebNBdi2CX6wOl/2KowI1JbhPco4cJZd8X1pI74rY=) 3: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (hash: q2+BwIVUSdksSNQj4ev3+6Qr3ZPImCcjiGpY2JdXydY=) 4: 604a49f2-58d6-4709-bdaf-e7181b613801.crl (hash: ybEYiax02OKufGZDK9eK95uPkY0A/4/nSDjV8eY1YGc=) 5: 7a4d98de-20f3-3f1f-98a2-5262c9e349ee.roa (hash: Fk9DODmVLW857T9U8kVL8mTYJLRswG41zExghM7lrJ0=) 6: c56c342d-12d7-376f-9120-568a7b965d35.roa (hash: 8j2oFk9Iwvj3CfJd8YgNojAuPkyk6KUd3PX2rp8sU74=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:30:1f:bf:56:d2:8f:19:6e:3a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Oct 20 09:00:03 2025 GMT Not After : Oct 23 09:00:00 2025 GMT Subject: CN=8cc5bbec-f972-4f83-80ce-7a4796d4af71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:f5:46:93:45:10:2f:c7:6e:c2:04:cc:e1: 55:f7:6b:b3:7b:38:07:e8:b5:dd:a9:8a:b7:ec:8a: 83:39:bd:15:4b:01:c0:44:5e:38:62:fd:2b:bb:2a: 7d:c6:01:9f:ec:95:24:1b:2c:cb:51:80:0d:92:1e: 83:0f:ce:d2:70:bb:b0:b6:b8:65:7c:db:c7:b0:1f: 60:f9:f0:9e:5b:03:70:29:b3:6d:41:f2:a5:b0:b2: f0:48:0b:e2:65:22:22:01:05:2a:ae:da:c3:a3:f0: 85:9a:f4:aa:a0:7d:5f:2c:e4:41:3e:a7:53:00:c6: 19:ab:66:f2:e9:a9:54:96:f1:0e:fe:d9:7b:0b:0f: e3:17:1c:ec:0f:a3:3f:70:9a:3e:d1:4e:1e:a1:02: 4a:ef:4a:89:94:d5:64:60:04:d1:57:ac:52:3c:61: 65:bb:9a:90:91:2b:d1:be:72:e2:27:75:24:ab:78: 92:13:b6:4c:d8:00:e6:dd:9c:f2:82:65:d3:2c:f8: 06:47:0e:0b:cb:48:73:08:7e:d4:9a:4f:dd:43:cd: d8:d1:a1:45:95:ce:8a:c8:fb:b8:42:6e:46:7d:da: 5d:ab:b8:e4:11:01:6d:2f:63:27:25:d9:aa:c1:d5: 5e:cf:16:30:c2:0a:f3:01:e6:1b:4f:58:a8:67:36: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:54:D2:FA:48:8E:52:E9:5C:16:38:A4:96:57:DB:58:79:66:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:69:47:32:4b:9b:b9:da:0f:a0:5d:f8:b3:ab:d1:3b:34:d3: b3:86:90:4d:e7:8f:e8:61:9f:66:8b:01:e6:cd:84:76:dc:32: ef:a8:ec:51:9f:2e:a9:fe:fc:07:d3:5a:58:79:d1:87:48:3e: e9:d4:41:60:77:f8:e9:3d:2c:75:da:91:d2:6f:d9:87:dc:4f: 22:b0:70:55:0f:35:b7:22:1e:6c:66:d9:bf:78:56:29:bf:36: 95:fb:4c:a2:5e:38:09:83:63:ac:81:69:8f:81:d0:28:dc:29: 22:0b:55:5b:b4:e4:29:44:8d:e1:5e:4d:6c:a7:2d:6b:7b:e3: 11:20:ce:96:bd:32:e7:0d:77:0c:28:86:32:d4:9f:28:07:9b: ff:71:21:d1:c2:3b:4a:04:ee:6b:2f:63:42:49:be:84:40:52: 17:71:09:a2:54:ae:f8:62:b2:14:5c:5c:7d:8d:59:02:2d:1c: 7b:ee:fc:78:19:10:f8:5c:e0:27:5f:ba:82:d8:d6:f8:a7:b0: 43:35:4f:5a:1f:bc:9e:62:d8:3a:71:a1:ff:47:7b:e9:28:c2: e6:b4:5e:29:e9:a4:e6:2c:c3:73:54:ce:5a:d3:f6:9b:dd:fd: bc:dc:39:16:bd:93:a9:ca:e5:e0:37:fa:c5:57:0b:96:68:e9: 9a:a4:43:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVMB+/VtKPGW46WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MTAyMDA5MDAwM1oXDTI1MTAyMzA5MDAwMFowLzEtMCsGA1UEAxMk OGNjNWJiZWMtZjk3Mi00ZjgzLTgwY2UtN2E0Nzk2ZDRhZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUb1RpNFEC/HbsIEzOFV92uzezgH6LXdqYq3 7IqDOb0VSwHARF44Yv0ruyp9xgGf7JUkGyzLUYANkh6DD87ScLuwtrhlfNvHsB9g +fCeWwNwKbNtQfKlsLLwSAviZSIiAQUqrtrDo/CFmvSqoH1fLORBPqdTAMYZq2by 6alUlvEO/tl7Cw/jFxzsD6M/cJo+0U4eoQJK70qJlNVkYATRV6xSPGFlu5qQkSvR vnLiJ3Ukq3iSE7ZM2ADm3ZzygmXTLPgGRw4Ly0hzCH7Umk/dQ83Y0aFFlc6KyPu4 Qm5Gfdpdq7jkEQFtL2MnJdmqwdVezxYwwgrzAeYbT1ioZzZ3AwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM8eVNL6SI5S6VwWOKSWV9tYeWYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvNjA0YTQ5ZjItNThkNi00 NzA5LWJkYWYtZTcxODFiNjEzODAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgaUcyS5u52g+gXfizq9E7 NNOzhpBN54/oYZ9miwHmzYR23DLvqOxRny6p/vwH01pYedGHSD7p1EFgd/jpPSx1 2pHSb9mH3E8isHBVDzW3Ih5sZtm/eFYpvzaV+0yiXjgJg2OsgWmPgdAo3CkiC1Vb tOQpRI3hXk1spy1re+MRIM6WvTLnDXcMKIYy1J8oB5v/cSHRwjtKBO5rL2NCSb6E QFIXcQmiVK74YrIUXFx9jVkCLRx77vx4GRD4XOAnX7qC2Nb4p7BDNU9aH7yeYtg6 caH/R3vpKMLmtF4p6aTmLMNzVM5a0/ab3f283DkWvZOpyuXgN/rFVwuWaOmapEN8 -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:12 2025 by rpki-client