$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: u8QY+DCSFt+AIWifPBsG9Y5a75RfzBhc/EuFpN2ylWE= Subject key identifier: A3:D1:DA:E2:73:56:45:A0:B6:AD:2A:0A:61:0C:CC:1B:C2:D4:7A:CD Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584B9406550272F9087C12094AB4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CAAE Signing time: Sun 19 Oct 2025 23:00:03 +0000 Manifest this update: Sun 19 Oct 2025 23:00:03 +0000 Manifest next update: Wed 22 Oct 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: Y4Kmm3xWsgwZovUo1qm8iHcQgz9CFONGvm+R0AVmtUk=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: r4YFkR6Z60Djo+u+xr6rrHD4k0p23TMZbHgBURqxQHI=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: 2kzJ9+6Biqlzx3OwoS6lEJ3cmcdZBuojy2y3TfaRcEM=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: E6ssGfxjE63xUyZOQCvfn4sBI03Uqyl6c/ubT9OgC3U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:06:55:02:72:f9:08:7c:12:09:4a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Oct 19 23:00:03 2025 GMT Not After : Oct 22 23:00:00 2025 GMT Subject: CN=109d634b-c02b-46e2-a1c8-c7010ac6682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:68:fb:11:2e:46:2f:c6:df:90:d7:be:f7: 51:eb:49:ed:b1:06:5f:a7:55:84:22:95:ed:ce:89: 2f:97:88:e6:a4:0a:d6:00:3c:39:59:dd:42:f7:7d: a6:8a:8c:7b:9b:fd:8e:07:b1:05:70:0e:d6:c8:f7: e6:1c:d6:4f:49:27:62:c3:ee:67:b5:77:65:a9:99: e7:ba:2a:92:43:ff:83:b4:5b:1a:24:f1:bf:01:d5: 61:10:a3:6b:43:36:89:90:cd:44:20:c1:00:b4:79: f8:c9:e6:ab:c9:b9:1c:33:de:63:85:e7:19:9f:0d: 12:10:23:2f:23:41:27:fc:e3:0f:bd:9d:10:7b:46: 2a:3f:5a:4a:48:35:92:08:36:fa:29:2c:15:d6:91: dc:29:b8:58:4a:f3:44:87:99:97:4c:cf:11:e9:06: 1d:5f:34:3b:b6:3e:25:0c:63:36:60:71:7a:24:eb: 71:31:d1:0e:a0:c5:9e:34:8b:70:3e:50:af:10:7e: d1:78:ca:a2:1e:9a:c5:87:47:29:b6:c0:a1:87:e7: d2:44:b1:b3:a7:cc:14:fe:df:7b:1a:91:d0:25:54: 73:ed:52:75:87:17:1f:dc:4b:d5:7e:46:bb:03:7d: 83:2e:a6:65:c3:f0:ab:1d:f0:3b:69:40:91:80:f4: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D1:DA:E2:73:56:45:A0:B6:AD:2A:0A:61:0C:CC:1B:C2:D4:7A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:35:f8:33:87:30:35:7c:1c:21:b1:5c:2f:d2:33:64:44:29: 96:83:54:4f:f5:d2:f5:4e:e6:6c:a6:b3:1e:d1:4d:a3:c0:17: 59:5b:06:2e:1f:b7:1f:18:59:a0:c0:1e:ab:12:8f:ee:10:f2: 84:2c:a2:cd:6f:33:5d:1c:8f:12:4f:b0:27:f3:bb:55:16:69: 1e:24:42:04:00:18:75:c0:2e:ba:fd:2d:f5:a1:25:7a:67:ba: 6e:5a:a3:23:af:e5:c6:43:be:df:ca:75:d1:0a:6d:47:53:df: ea:06:85:11:02:11:50:07:e1:68:07:50:1e:df:fe:87:5f:f3: 96:6e:3f:9c:80:cf:53:6a:24:e6:7b:7b:71:57:e0:e8:94:74: 5e:d4:14:22:44:d6:f7:0c:a4:3d:c9:f4:e9:4f:42:a2:e1:af: ad:c2:ef:b5:8e:96:d5:4b:23:c4:fc:b1:ab:fd:25:ea:c8:2d: 8a:58:d2:63:7c:38:ce:29:4b:95:35:f8:bd:a2:d9:53:89:a4: ed:e2:ae:74:48:e1:41:47:ae:4e:c9:1e:c2:00:60:a4:f1:2c: db:49:7e:a3:83:9d:5f:8b:ea:23:a8:65:c4:b9:a8:02:b5:97: a7:56:47:91:af:c0:b8:b4:26:f4:b3:b5:75:15:21:cf:73:d3: 67:92:6a:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUBlUCcvkIfBIJSrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MTAxOTIzMDAwM1oXDTI1MTAyMjIzMDAwMFowLzEtMCsGA1UEAxMk MTA5ZDYzNGItYzAyYi00NmUyLWExYzgtYzcwMTBhYzY2ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9No+xEuRi/G35DXvvdR60ntsQZfp1WEIpXt zokvl4jmpArWADw5Wd1C932miox7m/2OB7EFcA7WyPfmHNZPSSdiw+5ntXdlqZnn uiqSQ/+DtFsaJPG/AdVhEKNrQzaJkM1EIMEAtHn4yearybkcM95jhecZnw0SECMv I0En/OMPvZ0Qe0YqP1pKSDWSCDb6KSwV1pHcKbhYSvNEh5mXTM8R6QYdXzQ7tj4l DGM2YHF6JOtxMdEOoMWeNItwPlCvEH7ReMqiHprFh0cptsChh+fSRLGzp8wU/t97 GpHQJVRz7VJ1hxcf3EvVfka7A32DLqZlw/CrHfA7aUCRgPQMHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKPR2uJzVkWgtq0qCmEMzBvC1HrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgNfgzhzA1fBwhsVwv0jNk RCmWg1RP9dL1TuZsprMe0U2jwBdZWwYuH7cfGFmgwB6rEo/uEPKELKLNbzNdHI8S T7An87tVFmkeJEIEABh1wC66/S31oSV6Z7puWqMjr+XGQ77fynXRCm1HU9/qBoUR AhFQB+FoB1Ae3/6HX/OWbj+cgM9TaiTme3txV+DolHRe1BQiRNb3DKQ9yfTpT0Ki 4a+twu+1jpbVSyPE/LGr/SXqyC2KWNJjfDjOKUuVNfi9otlTiaTt4q50SOFBR65O yR7CAGCk8SzbSX6jg51fi+ojqGXEuagCtZenVkeRr8C4tCb0s7V1FSHPc9Nnkmpj -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:26 2025 by rpki-client