$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft File: 4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft (raw, json) Hash identifier: oSEkAucoPAjHvobohAnRgudNU2ztl+8NaHgytnnc0fY= Subject key identifier: D0:1E:0B:83:27:AD:CA:BF:57:43:22:43:2A:0D:3A:FA:4E:E9:76:2B Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9 Certificate issuer: /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18 Certificate serial: 010D0C9F4328584B9871F6809ABE346D9606E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft Manifest number: 010D0C9F4328584073A8564A570506AE2140DDB8 Signing time: Tue 21 Oct 2025 13:00:08 +0000 Manifest this update: Tue 21 Oct 2025 13:00:08 +0000 Manifest next update: Thu 23 Oct 2025 13:00:00 +0000 Files and hashes: 1: 0cf7be41-62e0-3469-a068-cbd4f7928764.roa (hash: Yb8vRQdWNEvX3zHPus58WHtJLKbcGpeXw8mQpahxpB8=) 2: 18b71282-aa01-3707-b4d9-66ff68ecf563.roa (hash: 9WclDHlnGBRX7FSK8E46FA6ap+GKIqYX1bSm36YPofs=) 3: 1fe5912f-13a3-3616-a76e-6fe7fb88a32c.roa (hash: 6fI9m3XUjt/Ac6ELLbV2bf9+IZ50nLUWL4Q7+jp6Iso=) 4: 26f32db4-0e97-34cb-a76e-e82e4a203f4d.roa (hash: C4Jf643vAWrS/RxpUKuvU/ua4kct1JKv2eeg+TeUQoM=) 5: 45d31243-ea0f-30e5-a7cc-6131d2859a12.roa (hash: tZApj5Ud4zHbqIRQIE1flNWfz7wbyXDig6kF/DekPWc=) 6: 4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl (hash: 4NyOXRgvRtJWxQly+jlq9p3IkGYYmRM1JaqI4hzhTDY=) 7: 5498ce5e-0d7f-30bb-b88c-7356e7ad61e6.roa (hash: nDp/blACdp2wq1vIm76hJYNN7jWxbkWYkuH29pUqu0Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:71:f6:80:9a:be:34:6d:96:06:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18 Validity Not Before: Oct 21 13:00:08 2025 GMT Not After : Oct 23 13:00:00 2025 GMT Subject: CN=5d1ecdd8-0f94-4936-8183-1c0bf0225e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:5a:bd:02:a1:8d:ee:74:95:00:59:3c:98: 45:ac:6f:d7:02:e8:20:0b:c1:fc:6d:0c:0e:4a:11: 83:82:aa:51:82:14:f8:c0:e5:67:cc:ac:cf:42:bc: 36:5d:21:44:85:1f:34:95:b8:6b:27:fd:d3:fa:3b: 92:75:e4:56:e6:2e:a4:68:e5:f1:53:ce:df:ec:eb: 78:dc:b1:2a:35:9b:ac:ee:b5:3e:bb:e9:22:13:f2: d5:db:5e:19:cb:5a:53:6e:ef:e4:b5:48:e7:13:a8: 57:a6:72:b7:c5:65:69:e8:e8:ce:45:5e:b3:a1:a8: 37:d6:02:ff:85:c2:62:47:72:e3:63:1b:4a:06:b3: 82:f3:1c:27:af:56:12:b6:3e:ef:f7:0d:fc:0e:17: 34:a8:5d:86:1f:d6:d7:2f:56:fb:c3:d2:5e:46:25: a9:bc:2e:b9:3f:96:51:ff:8c:4d:01:ee:cf:bf:b1: 20:ab:92:a6:32:6c:b3:9c:23:5d:64:3c:f7:54:50: 3c:8b:3f:65:53:7a:ec:db:ee:be:b9:2f:7c:8f:44: d1:b1:fb:1d:7e:8b:71:dc:65:0c:50:d0:77:cd:0b: 07:77:2f:85:8a:0d:4b:2a:da:26:44:1b:46:d9:0d: 06:81:af:22:03:e3:c7:ed:77:29:48:b7:21:b3:23: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:0B:83:27:AD:CA:BF:57:43:22:43:2A:0D:3A:FA:4E:E9:76:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl X509v3 Authority Key Identifier: keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2a:df:32:5d:22:26:04:82:f0:d0:43:13:c8:56:41:a0:ae: be:95:6f:dc:d8:08:75:ee:5c:8b:69:2b:3d:56:0a:f9:04:df: 2a:c8:bc:38:fb:1c:8c:05:f0:d4:bd:ca:24:00:04:78:61:95: e9:18:62:5a:43:b3:a4:e1:44:29:0a:71:1d:f9:df:dc:1f:41: 58:60:b1:bf:3a:f5:23:80:7b:ce:5a:19:71:68:da:4a:2e:6b: e0:3a:35:08:7a:92:f9:86:b2:cc:e3:3b:33:ab:f1:78:89:f5: 99:06:dd:f3:36:0a:f3:f2:60:8b:fb:38:ef:24:a5:2f:cc:33: 11:b3:95:e9:fb:d6:a7:2e:0a:51:ac:20:d6:da:55:23:e1:80: 13:d6:db:a4:cb:02:82:09:2a:d4:a7:b7:d2:5c:df:0e:5f:e5: 32:ec:cd:a5:21:ce:02:32:19:ea:62:2d:2e:54:1e:3d:b0:95: e2:3f:58:ba:99:3e:bb:53:e0:71:54:1e:14:2a:d8:ee:8b:d6: 56:ea:4f:0c:74:f4:4d:58:da:50:28:57:43:89:0f:56:99:50: 88:52:c2:37:88:72:cd:35:33:d2:a9:7b:01:5d:08:4c:de:c5: ea:ae:47:62:5f:03:8a:10:65:8e:57:81:d9:3d:71:13:55:2d: 4e:bd:8c:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuYcfaAmr40bZYG44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYzE2YTEtN2U5Yy00ZjhlLTllMmMtOTEzZjNhNjc1 ZDE4MB4XDTI1MTAyMTEzMDAwOFoXDTI1MTAyMzEzMDAwMFowLzEtMCsGA1UEAxMk NWQxZWNkZDgtMGY5NC00OTM2LTgxODMtMWMwYmYwMjI1ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0FavQKhje50lQBZPJhFrG/XAuggC8H8bQwO ShGDgqpRghT4wOVnzKzPQrw2XSFEhR80lbhrJ/3T+juSdeRW5i6kaOXxU87f7Ot4 3LEqNZus7rU+u+kiE/LV214Zy1pTbu/ktUjnE6hXpnK3xWVp6OjORV6zoag31gL/ hcJiR3LjYxtKBrOC8xwnr1YStj7v9w38Dhc0qF2GH9bXL1b7w9JeRiWpvC65P5ZR /4xNAe7Pv7Egq5KmMmyznCNdZDz3VFA8iz9lU3rs2+6+uS98j0TRsfsdfotx3GUM UNB3zQsHdy+Fig1LKtomRBtG2Q0Gga8iA+PH7XcpSLchsyOr3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNAeC4Mnrcq/V0MiQyoNOvpO6XYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZWFj MTZhMS03ZTljLTRmOGUtOWUyYy05MTNmM2E2NzVkMTgvNGVhYzE2YTEtN2U5Yy00 ZjhlLTllMmMtOTEzZjNhNjc1ZDE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGVhYzE2YTEtN2U5Yy00ZjhlLTll MmMtOTEzZjNhNjc1ZDE4LzRlYWMxNmExLTdlOWMtNGY4ZS05ZTJjLTkxM2YzYTY3 NWQxOC5jcmwwHwYDVR0jBBgwFoAUVoMkN6YN9JM0HW9tMMKdCwjOcskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZWFjMTZhMS03ZTljLTRmOGUtOWUyYy05MTNm M2E2NzVkMTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtKt8yXSImBILw0EMTyFZB oK6+lW/c2Ah17lyLaSs9Vgr5BN8qyLw4+xyMBfDUvcokAAR4YZXpGGJaQ7Ok4UQp CnEd+d/cH0FYYLG/OvUjgHvOWhlxaNpKLmvgOjUIepL5hrLM4zszq/F4ifWZBt3z Ngrz8mCL+zjvJKUvzDMRs5Xp+9anLgpRrCDW2lUj4YAT1tukywKCCSrUp7fSXN8O X+Uy7M2lIc4CMhnqYi0uVB49sJXiP1i6mT67U+BxVB4UKtjui9ZW6k8MdPRNWNpQ KFdDiQ9WmVCIUsI3iHLNNTPSqXsBXQhM3sXqrkdiXwOKEGWOV4HZPXETVS1OvYxL -----END CERTIFICATE-----Generated at Tue Oct 21 15:25:09 2025 by rpki-client