$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft File: a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft (raw, json) Hash identifier: r1/XwECiUW5lPiNUPZFCebroBBCEaTymLqspOdl5V7k= Subject key identifier: 87:63:EA:85:E8:36:2D:88:FD:D5:8F:D4:A4:93:94:5D:9E:22:80:E7 Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A Certificate issuer: /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc Certificate serial: 010D0C9F4328584B95C5033363648679DA282A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft Manifest number: 010D0C9F43285846702502863FBDE6AF0B0EBE2D Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: 0177c457-8123-3122-9946-667a61adf363.roa (hash: HHbiM2VYSkIEEAPZgkoWNKNE3j1QcpV9A/Jj3jlfxuY=) 2: 2f44e1ae-4c86-3165-9cc6-2574c800288e.roa (hash: AevP3goQrFDmFinPebEOuBRZtf8tINbFQZSxzn9PNmU=) 3: 4a4c019c-866a-3f57-b0a5-bf9605704819.roa (hash: i0QCW08nj478KfSwGx4iMG+IrJYmx/nhAFESAZH05JA=) 4: a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl (hash: U+1PTCV5mz2KrNk06Yt0dUBwhnGTeSha28eOVrwhjWw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:03:33:63:64:86:79:da:28:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=40bb1ffb-5a27-491f-8ff4-14f8115b6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:93:f9:b6:07:27:16:5f:24:72:b2:c9:8e:c0: db:53:27:f5:b3:d0:50:74:01:b7:18:72:dd:79:cf: 46:53:31:43:8d:75:b7:10:02:f2:29:c1:80:ce:fb: 8e:a4:3f:88:66:5c:bd:db:e6:31:27:7c:46:3e:7e: fd:c8:94:51:9f:00:07:93:55:69:eb:81:f8:b3:2c: d2:6f:d8:74:f6:8e:77:e1:fe:c1:d1:83:79:bc:d7: ea:b3:44:5a:ae:ac:b0:8d:d5:34:65:36:91:26:b7: 35:73:be:12:d0:a5:e0:0e:fa:c8:36:54:d2:d8:72: df:dc:b8:85:2b:e5:ad:3b:ab:3c:2c:89:cb:62:e2: 27:25:bb:1c:dc:0f:dd:38:39:ee:fe:71:a8:4f:0c: a5:8b:f4:78:4a:b2:10:90:0d:5e:0c:3f:02:23:6f: 4a:90:6f:4f:39:e2:c0:bc:41:3a:52:84:85:39:f3: 8c:bc:51:69:d0:42:cd:1f:80:cc:58:7b:b3:ba:d4: ac:70:3a:89:5d:9a:27:14:ed:1f:c7:a9:5c:61:19: e8:8d:7b:c4:d2:a1:a4:1e:8e:19:8d:3d:59:8d:5f: 37:56:60:86:f6:fa:bc:56:8f:fe:c7:2a:7e:7e:5a: a4:38:9a:19:d0:00:04:05:b3:74:33:7a:99:2f:00: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:EA:85:E8:36:2D:88:FD:D5:8F:D4:A4:93:94:5D:9E:22:80:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl X509v3 Authority Key Identifier: keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b0:72:fc:1c:c5:6b:75:4a:74:77:5b:0a:6a:8d:47:d0:a0: 47:31:4e:25:d0:f0:4f:16:3d:c7:61:56:dd:a5:2e:8a:ee:78: 01:34:aa:62:1a:5e:f3:29:7c:ee:2d:1c:d5:0b:46:e3:22:a4: 10:c5:05:bc:d5:30:a7:ff:1b:dc:39:00:c9:11:04:72:a1:c0: 99:0b:62:f9:b3:6f:e2:12:eb:e7:90:cd:23:80:d7:71:95:06: 88:3a:a0:e1:8f:ea:8f:dd:e3:4c:85:71:ce:0c:df:18:a5:17: c5:c3:61:15:3b:1e:08:34:80:54:63:da:37:f9:d4:97:ce:ba: 35:70:68:b3:70:24:de:e5:42:5e:2b:9d:c0:75:3c:51:a3:4f: 9f:96:e5:77:dc:47:0d:d2:3f:a9:59:02:21:97:8f:58:fd:50: d5:9a:91:1c:a8:ec:da:a2:f8:98:0c:49:05:dc:15:0b:8c:27: 6f:e1:17:58:5d:01:32:62:3c:80:ac:d8:08:e0:63:c0:b3:a1: 93:c8:ae:17:38:d7:5c:9d:54:00:aa:8b:2c:d1:29:35:94:5c: 7c:09:f9:c5:05:00:da:b5:0e:ef:24:3a:14:62:73:ab:08:5f: 9d:8b:b3:17:04:39:b9:54:98:84:99:4a:86:92:cf:d0:1c:2d: 94:c6:b7:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQMzY2SGedooKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmNTFkYTgtZTNjYS00ZmM5LWFjY2UtOTQxMDNjNTdh ZWJjMB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk NDBiYjFmZmItNWEyNy00OTFmLThmZjQtMTRmODExNWI2MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75P5tgcnFl8kcrLJjsDbUyf1s9BQdAG3GHLd ec9GUzFDjXW3EALyKcGAzvuOpD+IZly92+YxJ3xGPn79yJRRnwAHk1Vp64H4syzS b9h09o534f7B0YN5vNfqs0RarqywjdU0ZTaRJrc1c74S0KXgDvrINlTS2HLf3LiF K+WtO6s8LInLYuInJbsc3A/dODnu/nGoTwyli/R4SrIQkA1eDD8CI29KkG9POeLA vEE6UoSFOfOMvFFp0ELNH4DMWHuzutSscDqJXZonFO0fx6lcYRnojXvE0qGkHo4Z jT1ZjV83VmCG9vq8Vo/+xyp+flqkOJoZ0AAEBbN0M3qZLwBzbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIdj6oXoNi2I/dWP1KSTlF2eIoDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGY1 MWRhOC1lM2NhLTRmYzktYWNjZS05NDEwM2M1N2FlYmMvYThmNTFkYTgtZTNjYS00 ZmM5LWFjY2UtOTQxMDNjNTdhZWJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThmNTFkYTgtZTNjYS00ZmM5LWFj Y2UtOTQxMDNjNTdhZWJjL2E4ZjUxZGE4LWUzY2EtNGZjOS1hY2NlLTk0MTAzYzU3 YWViYy5jcmwwHwYDVR0jBBgwFoAUOnLltyc0HNOuCfKefb+Z1aBB/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOGY1MWRhOC1lM2NhLTRmYzktYWNjZS05NDEw M2M1N2FlYmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBsHL8HMVrdUp0d1sKao1H 0KBHMU4l0PBPFj3HYVbdpS6K7ngBNKpiGl7zKXzuLRzVC0bjIqQQxQW81TCn/xvc OQDJEQRyocCZC2L5s2/iEuvnkM0jgNdxlQaIOqDhj+qP3eNMhXHODN8YpRfFw2EV Ox4INIBUY9o3+dSXzro1cGizcCTe5UJeK53AdTxRo0+fluV33EcN0j+pWQIhl49Y /VDVmpEcqOzaoviYDEkF3BULjCdv4RdYXQEyYjyArNgI4GPAs6GTyK4XONdcnVQA qoss0Sk1lFx8CfnFBQDatQ7vJDoUYnOrCF+di7MXBDm5VJiEmUqGks/QHC2UxrdA -----END CERTIFICATE-----Generated at Tue Oct 21 07:23:09 2025 by rpki-client