$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft File: 99cd086f-b993-42d9-8f47-c65df74d693b.mft (raw, json) Hash identifier: H5/rDGFeswpr+ByTIWDO5zGjHl35eOmtgc9DqVO4rKU= Subject key identifier: 66:8A:E8:2F:CB:FE:03:AA:1F:62:2A:07:D5:51:45:EB:3A:DA:35:7A Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584B93717EA2611A6F6BCC7DF0F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft Manifest number: 010D0C9F4328584073A821EFFDC032F582708C5A Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa (hash: +bSZD8dYuFAehrqWkDM/KXIzh8dyqbHVeq1cqQmL87U=) 2: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (hash: 2qAwrRd0zVM3J+MV/uTGbnA2WMEF5WlORQ/+3/Aefvc=) 3: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (hash: oPqiIEqF5rLLE/pMQp7WLB4BlhbElFLj+S+gTb8H/R4=) 4: 99cd086f-b993-42d9-8f47-c65df74d693b.crl (hash: I0GaLQSOUsNkwPU0pLQ3+Lmg8qj76IoW+c9zPoW5x9o=) 5: 9deb75fd-d40d-3461-bd99-01696f038720.roa (hash: yv15CmreRiGkR6xt+U/f0G3+NRUuezJ2O3mcXbxPiQg=) 6: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (hash: 3zrmkUqp8SaJYnB5p9/kmc8ITNqjGTcdP5Ipe+30fTM=) 7: e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (hash: RUU2D3AWAfVo3NLG2XTj+j+k+ygm+mChCBe1beDMPuI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7e:a2:61:1a:6f:6b:cc:7d:f0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=4fe4e0bb-f5b3-43f9-aaeb-69127630259b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:63:0a:f0:2f:44:39:c4:9b:9e:2e:84:e6: 76:fe:c2:ff:82:fd:86:27:29:bc:9f:8b:7d:16:0b: 20:2f:07:ff:0b:2b:0f:b2:57:6e:04:7e:1d:90:a1: bf:7e:c2:74:45:20:ee:aa:29:54:c2:c4:8e:14:97: 7b:f8:8e:0a:f9:86:3b:91:f2:d5:cf:60:49:b7:77: 86:67:f4:69:73:3b:26:ee:4e:8c:07:d5:0c:dd:0f: 3c:12:99:84:25:a7:25:8a:47:c9:b5:8f:a2:de:df: dc:64:13:92:ce:92:ed:f7:d2:93:66:9e:71:ec:db: 33:96:93:25:b8:e4:5a:f1:59:7e:95:ab:7b:8e:3c: d0:b9:6a:66:51:07:e2:aa:e6:72:f7:22:70:a9:5f: f2:af:cf:d7:af:de:d9:e7:40:20:7d:6a:64:b5:a8: 98:b4:11:61:e5:51:0f:2b:ba:53:81:03:e7:76:5e: ec:55:2e:e0:c1:4a:3c:4d:28:3e:60:52:4c:69:16: a6:6b:08:6a:db:9f:9a:6f:eb:13:65:7f:c5:d1:bd: d4:6e:27:1f:7a:4e:7a:ba:6b:6b:ce:2a:78:2d:08: 6e:b0:d9:97:b6:3d:fe:cf:a0:5a:f8:b9:86:d1:ad: e0:62:53:bc:86:91:bb:42:12:2a:b7:9c:c8:95:20: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8A:E8:2F:CB:FE:03:AA:1F:62:2A:07:D5:51:45:EB:3A:DA:35:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:50:74:3c:8f:60:da:ef:82:95:6f:dd:b4:53:a0:b3:07:03: 0e:63:b1:d7:24:d1:ca:38:34:46:da:c8:7d:5a:e3:1d:23:43: b9:e6:bd:df:22:9e:41:e4:c2:01:c7:be:93:22:05:f8:9e:d5: a8:32:15:e8:ef:fb:80:5a:8f:e0:2e:6e:65:69:b3:d9:85:5e: e1:68:60:6b:b2:28:e7:cd:26:85:1a:b7:60:22:96:78:7b:14: 8d:73:92:73:07:4c:c6:02:af:5c:af:9e:c0:09:21:c4:a6:a8: 98:96:c3:62:12:dc:7e:15:02:88:8f:4d:28:fa:36:8d:79:f2: 73:22:60:57:fd:09:5b:4a:b4:bd:77:39:01:ee:9b:3c:e4:45: 93:7d:73:ab:5b:77:ca:4b:57:ce:c1:52:5c:50:dc:93:dd:d7: 67:21:61:61:77:f4:e3:11:b4:a6:bb:2d:e7:70:da:cc:d7:38: f0:e2:86:41:40:0f:4d:1c:da:04:54:f0:ce:41:5a:81:bd:ad: 60:99:7f:e2:1c:a6:3e:bd:41:1f:b3:2c:4a:d9:e5:fb:87:da: 45:09:a1:9c:b1:91:a9:1f:80:64:85:63:3c:f4:d6:ae:65:35: a1:9b:0d:c1:7b:15:f4:30:e9:3e:af:3e:12:ca:22:40:76:84: 08:a8:27:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcX6iYRpva8x98PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk NGZlNGUwYmItZjViMy00M2Y5LWFhZWItNjkxMjc2MzAyNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYdjCvAvRDnEm54uhOZ2/sL/gv2GJym8n4t9 FgsgLwf/CysPslduBH4dkKG/fsJ0RSDuqilUwsSOFJd7+I4K+YY7kfLVz2BJt3eG Z/Rpczsm7k6MB9UM3Q88EpmEJaclikfJtY+i3t/cZBOSzpLt99KTZp5x7NszlpMl uORa8Vl+lat7jjzQuWpmUQfiquZy9yJwqV/yr8/Xr97Z50AgfWpktaiYtBFh5VEP K7pTgQPndl7sVS7gwUo8TSg+YFJMaRamawhq25+ab+sTZX/F0b3Ubicfek56umtr zip4LQhusNmXtj3+z6Ba+LmG0a3gYlO8hpG7QhIqt5zIlSAmjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGaK6C/L/gOqH2IqB9VRRes62jV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTljZDA4NmYtYjk5My00 MmQ5LThmNDctYzY1ZGY3NGQ2OTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdUHQ8j2Da74KVb920U6Cz BwMOY7HXJNHKODRG2sh9WuMdI0O55r3fIp5B5MIBx76TIgX4ntWoMhXo7/uAWo/g Lm5labPZhV7haGBrsijnzSaFGrdgIpZ4exSNc5JzB0zGAq9cr57ACSHEpqiYlsNi Etx+FQKIj00o+jaNefJzImBX/QlbSrS9dzkB7ps85EWTfXOrW3fKS1fOwVJcUNyT 3ddnIWFhd/TjEbSmuy3ncNrM1zjw4oZBQA9NHNoEVPDOQVqBva1gmX/iHKY+vUEf syxK2eX7h9pFCaGcsZGpH4BkhWM89NauZTWhmw3BexX0MOk+rz4SyiJAdoQIqCfD -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:10 2025 by rpki-client