$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft File: 0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft (raw, json) Hash identifier: NOEaHCqbJblMnQZE/7E6yB9bZ5bfJNzuALX6gmSXAPI= Subject key identifier: 7D:57:30:B5:CE:F4:F9:BE:B7:78:A6:4D:A0:02:84:57:6E:6F:F7:90 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584B92DC8E8CB0AEA72E8439A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft Manifest number: 010D0C9F43285847B973F6588FBAFA3C5FFACAA9 Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: 0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl (hash: g8S2pIhv4ysP8lQNI0nogP7Zw5P/MAGADE2UCtVW9nM=) 2: 11274dc3-d729-310f-a5b6-e526a7179fc6.roa (hash: pYYuucOHXnxo9Z/VjP5Wl55DM0+Q+2dqZoROmtu9vX4=) 3: 2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa (hash: ouOP+JSZ4JyniXDaywQVQ9LU8ZWqkuM40xu7E5mS2ZY=) 4: 4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa (hash: URn8653OVW5hFrijTqFENM33ziA7ex+JRArP3qMUtoo=) 5: 5a606c85-561e-306f-971c-7cb0a887d723.roa (hash: syib2vtVk35D4bzXiFUP79EpS0Iy39M9EXMZNjWULkc=) 6: 91b6a041-9f34-36e2-a56f-103598b607bc.roa (hash: 70J7Ho4Kwfd/OZhdy0lQHB2vq92UTYUjekk/q2F46fU=) 7: d4870908-1a75-3a92-bcc7-0281d31bc642.roa (hash: v6KbB7i0qet7FGtQoy1l2WsmWWC/4Tr3hGDWEdNNL+4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8e:8c:b0:ae:a7:2e:84:39:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=f59288c8-3301-4b13-a571-56b0da69feaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:8f:e7:db:5d:c5:7a:15:93:87:b1:47:c0: 70:4f:d9:f0:74:17:b1:8f:47:8c:e3:71:68:4c:f8: 09:a3:81:d7:c3:46:46:c4:7a:72:b4:a6:a4:ae:27: 24:c2:41:71:dd:79:0a:50:17:4a:83:08:e5:61:e9: 5c:53:88:b1:6e:b2:c6:14:51:d8:12:3b:a6:78:ec: d5:d8:ba:ac:4d:a6:7f:43:67:15:77:d0:e1:94:14: 76:f5:b4:30:7e:0a:38:84:43:ae:3c:eb:6b:9f:87: 2e:81:8b:e3:bf:03:2d:b2:d4:6f:b0:d4:8e:f9:f1: a4:ec:62:b3:a5:f6:76:03:24:85:3d:0a:72:da:08: 93:eb:3d:e2:ef:9d:15:90:85:29:d8:a7:17:85:1f: 7a:60:3a:85:9d:6a:a9:59:42:2d:8d:89:3b:bd:5e: b0:3b:94:94:f3:7d:f6:94:3d:27:44:cd:5d:f9:35: c5:b7:21:e4:b8:6c:fd:4c:2e:af:d2:37:24:d7:e6: 3a:99:dd:3b:c0:73:e9:6a:ac:0f:25:74:4c:6f:6c: c0:ef:82:ce:2d:78:2c:bf:4f:a2:b2:94:6e:a5:67: 69:85:47:3c:c8:d5:9f:cd:15:cc:34:22:16:20:f9: 5d:1f:9a:24:83:4a:2d:e7:d0:47:46:48:c0:19:4b: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:30:B5:CE:F4:F9:BE:B7:78:A6:4D:A0:02:84:57:6E:6F:F7:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d4:fb:8c:ac:6a:33:3a:d3:76:9d:7a:c8:55:44:63:9a:0d: 76:77:a8:7c:16:18:c8:50:d5:d6:95:c4:a5:ad:8e:18:b1:3d: 1e:0d:c5:c2:45:7f:0f:66:9e:e4:f2:5e:e5:47:d6:71:c5:b5: f0:64:d4:26:85:fb:4b:ba:ce:d9:0f:48:28:00:d6:2c:2e:a1: 95:e3:f2:e1:55:ed:95:a5:22:c7:1f:d9:70:37:b7:ce:d4:bb: 76:3c:63:d4:0b:ce:8e:b1:4a:56:d3:2d:cc:2d:ad:cd:a8:99: 99:de:a8:47:78:bc:58:a0:7f:dd:06:04:38:72:12:14:d1:96: 69:81:5b:bf:2d:7b:02:89:47:5f:bd:f0:45:65:df:44:5c:8d: 82:f8:a6:52:09:1d:a6:cd:c9:3d:3e:d1:1b:19:8b:97:92:73: 75:27:c6:1f:7d:26:35:a9:27:7d:87:35:6d:50:42:54:f2:07: 54:f5:7f:8f:bf:d8:be:ba:06:07:e9:bf:48:5a:61:80:48:e7: 11:56:f5:78:0c:9f:68:79:88:60:b0:2f:69:2f:7a:1a:63:8f: 38:2e:cd:0c:05:b7:4a:e1:b0:3c:5d:f3:39:9a:64:a6:55:cf: 6a:ba:83:f2:ca:b0:95:50:9d:ac:d0:2b:48:e4:0e:ae:b9:79: d2:10:d2:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3I6MsK6nLoQ5qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk ZjU5Mjg4YzgtMzMwMS00YjEzLWE1NzEtNTZiMGRhNjlmZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/+P59tdxXoVk4exR8BwT9nwdBexj0eM43Fo TPgJo4HXw0ZGxHpytKakrickwkFx3XkKUBdKgwjlYelcU4ixbrLGFFHYEjumeOzV 2LqsTaZ/Q2cVd9DhlBR29bQwfgo4hEOuPOtrn4cugYvjvwMtstRvsNSO+fGk7GKz pfZ2AySFPQpy2giT6z3i750VkIUp2KcXhR96YDqFnWqpWUItjYk7vV6wO5SU8332 lD0nRM1d+TXFtyHkuGz9TC6v0jck1+Y6md07wHPpaqwPJXRMb2zA74LOLXgsv0+i spRupWdphUc8yNWfzRXMNCIWIPldH5okg0ot59BHRkjAGUvWgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH1XMLXO9Pm+t3imTaAChFdub/eQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvMGMzNGY2OGItMmY3Zi00 ZWYzLWJkZWUtNWEwZTJkNjhhMDNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe1PuMrGozOtN2nXrIVURj mg12d6h8FhjIUNXWlcSlrY4YsT0eDcXCRX8PZp7k8l7lR9ZxxbXwZNQmhftLus7Z D0goANYsLqGV4/LhVe2VpSLHH9lwN7fO1Lt2PGPUC86OsUpW0y3MLa3NqJmZ3qhH eLxYoH/dBgQ4chIU0ZZpgVu/LXsCiUdfvfBFZd9EXI2C+KZSCR2mzck9PtEbGYuX knN1J8YffSY1qSd9hzVtUEJU8gdU9X+Pv9i+ugYH6b9IWmGASOcRVvV4DJ9oeYhg sC9pL3oaY484Ls0MBbdK4bA8XfM5mmSmVc9quoPyyrCVUJ2s0CtI5A6uuXnSENIK -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:40 2025 by rpki-client