$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft File: f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft (raw, json) Hash identifier: BfDdkQK29X9cv0InYY6pmBdO1aN3mb2ZoAxb7bdPOIU= Subject key identifier: FA:BB:4B:1B:5A:EE:EC:C1:59:0B:5B:3C:1F:11:1E:FB:2E:C6:AE:F3 Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Certificate serial: 010D0C9F4328584B928344A30B6BDB3FB0123FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft Manifest number: 010D0C9F4328584073A84E5D49A8205CC2EDE6C7 Signing time: Sun 19 Oct 2025 10:00:09 +0000 Manifest this update: Sun 19 Oct 2025 10:00:09 +0000 Manifest next update: Tue 21 Oct 2025 10:00:00 +0000 Files and hashes: 1: 0b6a1920-d2b9-3fb3-9ff8-2a7c1146b0a2.roa (hash: ICb7IqMOV58gZzZmjwnmvpMa0CUyXSeT8RNBBQjDpWM=) 2: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (hash: vjCSjs3Bxg/HDMNS7PDKCQCLoHIZSUjb+2dRU3WHljQ=) 3: b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa (hash: uU3uR0E8rEFGalQK0u3AkA9lddyaPIY4Z0YDXtreQyU=) 4: f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl (hash: vs+RcKXMbxcCqUeW3v+Gm9buEg1SRmav0slQF1xEnjg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:83:44:a3:0b:6b:db:3f:b0:12:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Validity Not Before: Oct 19 10:00:09 2025 GMT Not After : Oct 21 10:00:00 2025 GMT Subject: CN=eb20869a-25ef-483c-8431-8ed5fdd5f8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:af:1f:a2:37:8a:6d:9b:c9:0b:8e:23:49: e9:55:4b:51:6a:2f:41:80:44:b1:9e:7b:34:41:71: 6d:90:da:4a:62:cc:5e:51:56:66:2d:cc:1f:4e:e7: 27:32:47:f9:05:ce:b0:9a:29:16:79:cd:c2:90:2e: cc:08:45:db:92:ea:27:11:81:00:d4:be:50:d1:6e: 37:25:85:e6:bf:9f:54:8e:a8:3f:4a:47:83:02:44: 34:b6:f5:e9:5a:9f:6d:15:55:ef:db:56:95:fe:f5: d8:6a:41:6f:4c:6c:c3:08:be:e6:e1:ce:97:a4:27: 13:2c:cf:ab:55:aa:e8:25:8e:54:b1:cc:75:da:38: 61:28:a8:56:8a:0f:c1:4c:71:e4:48:97:f0:19:b7: fb:4f:9b:8b:a9:6d:be:41:a0:85:d3:b0:d2:aa:9b: 64:3c:94:41:4d:a0:f8:17:89:63:24:5f:6c:61:11: 59:a1:57:9f:28:af:fe:af:f5:5e:79:8e:f9:6d:12: cb:df:64:a1:a7:b3:5f:55:37:c2:14:fa:b9:8d:dc: 6c:70:37:21:c4:f3:7b:97:97:a4:61:ca:e2:18:2a: 1e:2c:0b:88:09:22:b3:44:38:3a:8b:43:84:2c:23: a9:c6:f8:29:9b:44:18:32:ed:fd:47:c0:99:69:0b: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:4B:1B:5A:EE:EC:C1:59:0B:5B:3C:1F:11:1E:FB:2E:C6:AE:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl X509v3 Authority Key Identifier: keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9f:6f:fa:60:90:81:00:78:52:2c:67:3e:e7:6b:56:06:94: 51:e7:f9:1e:b9:db:ed:08:b0:7f:bb:c5:71:8a:20:0b:28:68: 59:1b:1c:d6:ad:e9:18:00:09:21:5c:00:70:33:e0:bc:20:f9: 76:93:47:9c:a5:7c:12:bd:f1:0e:38:31:30:6f:00:4f:4d:02: f9:f0:26:77:6b:21:bb:05:d7:eb:dd:89:f0:70:26:80:42:83: 63:56:49:21:31:1a:84:fe:b0:8f:e9:b9:cb:1e:a2:ce:ed:cb: be:3d:b2:ea:2e:b9:3c:2a:95:8a:00:3e:38:45:04:08:71:2b: 49:3e:d1:f6:d3:6d:50:53:58:b2:40:bc:71:cf:16:3a:2e:6d: aa:8e:29:aa:39:3a:f5:b0:a9:82:c5:a8:76:35:77:1b:ac:d3: 0c:63:03:55:5d:9f:cc:71:a7:eb:aa:18:2d:69:26:a9:0f:c2: 14:37:74:dc:70:22:e0:42:a5:9f:24:b5:43:26:fe:fd:e8:90: ac:2a:74:48:a5:fb:d1:90:82:aa:e7:88:33:d8:2a:a5:98:e2: e9:85:b4:e2:cf:89:cd:55:4d:8d:f2:cc:51:aa:f7:97:5a:42: 7e:37:75:08:ce:c8:34:d1:08:ae:3c:f0:6c:38:9b:64:3c:c8: 8d:bc:43:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSg0SjC2vbP7ASP+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy NjZmMB4XDTI1MTAxOTEwMDAwOVoXDTI1MTAyMTEwMDAwMFowLzEtMCsGA1UEAxMk ZWIyMDg2OWEtMjVlZi00ODNjLTg0MzEtOGVkNWZkZDVmOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZuvH6I3im2byQuOI0npVUtRai9BgESxnns0 QXFtkNpKYsxeUVZmLcwfTucnMkf5Bc6wmikWec3CkC7MCEXbkuonEYEA1L5Q0W43 JYXmv59Ujqg/SkeDAkQ0tvXpWp9tFVXv21aV/vXYakFvTGzDCL7m4c6XpCcTLM+r VaroJY5Uscx12jhhKKhWig/BTHHkSJfwGbf7T5uLqW2+QaCF07DSqptkPJRBTaD4 F4ljJF9sYRFZoVefKK/+r/VeeY75bRLL32Shp7NfVTfCFPq5jdxscDchxPN7l5ek YcriGCoeLAuICSKzRDg6i0OELCOpxvgpm0QYMu39R8CZaQtZQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPq7Sxta7uzBWQtbPB8RHvsuxq7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvZjNiZjZhYTItN2I3Zi00 NmI0LWJkZjItZGQ0ZDA3NWUyNjZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk MDc1ZTI2NmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPn2/6YJCBAHhSLGc+52tW BpRR5/keudvtCLB/u8VxiiALKGhZGxzWrekYAAkhXABwM+C8IPl2k0ecpXwSvfEO ODEwbwBPTQL58CZ3ayG7Bdfr3YnwcCaAQoNjVkkhMRqE/rCP6bnLHqLO7cu+PbLq Lrk8KpWKAD44RQQIcStJPtH2021QU1iyQLxxzxY6Lm2qjimqOTr1sKmCxah2NXcb rNMMYwNVXZ/McafrqhgtaSapD8IUN3TccCLgQqWfJLVDJv796JCsKnRIpfvRkIKq 54gz2CqlmOLphbTiz4nNVU2N8sxRqveXWkJ+N3UIzsg00QiuPPBsOJtkPMiNvEOK -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:23 2025 by rpki-client