$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: XYCK2w8BiG43mRMQt2sK4DpALAkzzEfE/bMYd/XBA/Q= Subject key identifier: BE:CD:F0:CE:3C:C2:0D:9F:18:99:A9:3C:83:6D:8D:36:FD:15:B0:0E Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584B9335F11805CB9ADA93EF4080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A01617 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: 7VjvdLSabUjdJqurngf5x6nt52dKkYsYFg4UAqOuD1U=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 0WxYByBYlMQIIh5LMA+Hf1T8bIqqiU6tmGI2XtpdK7I=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: Nc5Toc66fnqZl4CW0KYRuzxneteLba0zdJ/NpurzUUs=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: woiYGe3mktKfsGSUtRcvDjo1sRLYf5ekMrjY0JaemJs=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: wS/EcysCVznUc+ZyJ9EGfIl3Ri3exp+pTFTUbUElETM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:f1:18:05:cb:9a:da:93:ef:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=ccaaef68-4aba-413d-bd27-265301c69d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:c8:43:87:e2:8d:c6:a8:3f:eb:db:ba:0f: ce:28:42:02:36:65:29:5e:6d:fc:81:6a:08:ab:ac: a6:31:26:c2:97:ff:9e:ad:7e:a7:d7:f2:04:c6:55: 53:fe:5b:44:b6:e3:77:62:d3:42:9d:36:8a:4b:05: 19:52:7e:e6:7e:0f:f2:ec:e4:c5:e8:43:62:95:9c: 88:9c:48:f6:74:0f:1f:24:7b:88:b1:0f:8f:c9:d6: e2:d0:54:11:f8:2f:ab:a4:dd:98:ba:d7:0e:d0:c7: 3d:ea:f2:d7:a6:6d:63:e2:09:c9:09:4d:2b:71:f2: cf:81:37:5f:2b:79:47:57:64:0a:c3:c9:44:17:b9: 01:9f:cf:22:22:c9:32:d6:83:ab:07:c7:ab:a1:b1: 34:73:d9:dd:d6:9f:f8:77:51:65:0f:6a:4e:26:a6: 4f:2e:dd:cc:5d:43:0e:bb:81:36:f5:01:11:5c:47: f4:b4:e2:16:b7:c5:06:82:d2:20:c0:71:97:8e:ff: 07:97:1b:92:e6:66:20:93:e5:29:c6:a9:0a:dd:58: 4f:54:d0:ba:c6:00:3c:2f:bf:5a:16:3c:5a:55:ea: 5e:c9:43:76:0f:d2:b5:35:8c:a4:65:f6:b8:eb:79: a6:bc:d7:02:c9:4d:1c:0c:58:e9:01:a1:6f:95:6d: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CD:F0:CE:3C:C2:0D:9F:18:99:A9:3C:83:6D:8D:36:FD:15:B0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bb:0a:da:8d:09:be:14:ca:ad:68:ed:b8:61:4b:70:e3:c8: 5c:70:50:6f:84:a2:cd:c6:ed:dd:87:15:6f:64:8e:e2:2a:ac: af:da:e6:28:a3:30:db:11:d2:1f:62:77:94:bb:51:d5:08:1d: 5f:93:b4:0c:90:de:cf:3e:32:ec:ef:e1:83:e0:31:09:a5:97: 67:ee:ff:5e:db:06:eb:67:bc:48:96:16:70:42:bf:04:bb:87: 1e:22:3c:b1:de:09:df:91:c0:66:d7:3a:95:55:bb:9f:80:94: 81:04:26:ca:32:33:9c:97:ad:68:57:54:39:9c:02:77:46:36: 2e:9f:5d:b4:6b:4d:40:54:0e:75:69:c0:83:e2:1f:d3:8c:05: 57:e4:fb:2a:dc:e9:62:ff:bc:a9:51:4c:a8:e9:22:34:53:c1: 43:3e:32:d6:d6:67:f3:d2:68:b3:cc:4e:20:5f:bc:ba:13:77: 2d:f9:08:63:e3:f9:27:a4:74:de:a7:1e:e2:a1:7b:13:dd:2a: cc:13:32:64:cc:e8:ea:0d:45:95:63:8f:b9:40:19:39:d5:ec: a9:2a:18:5b:8a:ad:dc:87:3f:bf:2b:28:28:fb:70:99:4f:35: fa:5a:2e:99:96:71:30:05:b5:8d:2c:59:e2:b0:2f:82:02:3d: 51:a3:3f:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNfEYBcua2pPvQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk Y2NhYWVmNjgtNGFiYS00MTNkLWJkMjctMjY1MzAxYzY5ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgvIQ4fijcaoP+vbug/OKEICNmUpXm38gWoI q6ymMSbCl/+erX6n1/IExlVT/ltEtuN3YtNCnTaKSwUZUn7mfg/y7OTF6ENilZyI nEj2dA8fJHuIsQ+Pydbi0FQR+C+rpN2YutcO0Mc96vLXpm1j4gnJCU0rcfLPgTdf K3lHV2QKw8lEF7kBn88iIsky1oOrB8erobE0c9nd1p/4d1FlD2pOJqZPLt3MXUMO u4E29QERXEf0tOIWt8UGgtIgwHGXjv8HlxuS5mYgk+UpxqkK3VhPVNC6xgA8L79a FjxaVepeyUN2D9K1NYykZfa463mmvNcCyU0cDFjpAaFvlW0AjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL7N8M48wg2fGJmpPINtjTb9FbAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxuwrajQm+FMqtaO24YUtw 48hccFBvhKLNxu3dhxVvZI7iKqyv2uYoozDbEdIfYneUu1HVCB1fk7QMkN7PPjLs 7+GD4DEJpZdn7v9e2wbrZ7xIlhZwQr8Eu4ceIjyx3gnfkcBm1zqVVbufgJSBBCbK MjOcl61oV1Q5nAJ3RjYun120a01AVA51acCD4h/TjAVX5Psq3Oli/7ypUUyo6SI0 U8FDPjLW1mfz0mizzE4gX7y6E3ct+Qhj4/knpHTepx7ioXsT3SrMEzJkzOjqDUWV Y4+5QBk51eypKhhbiq3chz+/Kygo+3CZTzX6Wi6ZlnEwBbWNLFnisC+CAj1Roz/8 -----END CERTIFICATE-----Generated at Mon Oct 20 02:39:29 2025 by rpki-client