$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft File: 72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft (raw, json) Hash identifier: 4UM4r6emwDQPXecaYH/vyokqaQl6tIDla5on0J7A+xY= Subject key identifier: 1D:97:8A:83:92:CA:44:52:1A:3B:F4:95:5D:26:40:6E:F4:89:CB:73 Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D Certificate issuer: /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee Certificate serial: 010D0C9F4328584B95E2D029F9A5811E5D7C96C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft Manifest number: 010D0C9F432858444A2D3A0C662C7C7FEBDA9547 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 4e8a6a60-1d92-37f6-9990-fdedce5dd603.roa (hash: a20ozumqcxor4cdDQM49RboAsP5WZ6kHG9c3ywFBmoA=) 2: 72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl (hash: QpNb6KDsY7bx8Sr/qIf0Icp4yP799ZyaATMweo83JuI=) 3: d096047a-9fa5-3441-a949-ac54a874b69a.roa (hash: ITLOGKbOzIiTFWBUHZ/dpDm+NjGrTKpr+IlDn320nxM=) 4: fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (hash: YTjZoH74Nm3EI2cYd//g9PSqJ05WRXWUw15tbUG4wxY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:d0:29:f9:a5:81:1e:5d:7c:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=0b095c8a-2832-4878-8215-4b80443bb0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:c2:b4:c9:ba:b2:95:28:1a:2d:38:70:70: 08:78:03:fe:28:55:e6:d8:91:ce:80:b0:50:4d:51: ca:a8:88:de:67:e6:f0:49:84:b5:d8:f4:f4:91:b2: cf:d9:87:ef:5e:9c:48:61:e0:03:37:02:b9:d6:b6: 79:64:df:fc:ec:92:e3:20:37:60:4b:a5:bf:fa:dc: 37:a4:87:d6:bd:32:d1:af:e6:30:d1:30:dc:bb:74: 5b:5b:8a:4c:48:f2:3a:d6:a7:36:06:88:18:20:48: aa:7c:b9:2b:be:ad:16:55:3b:fe:17:e1:e1:18:d5: c4:25:d3:71:98:2f:51:e3:f5:d0:4a:83:0d:30:af: 90:bc:f8:42:98:6f:0e:2b:d6:0c:d2:e3:71:8e:56: 94:70:77:47:a1:31:54:b4:fd:ba:84:e0:08:79:b2: 46:b0:15:31:a3:c7:64:fb:34:65:b1:a2:54:c1:96: 1c:bf:ae:a5:25:b2:ff:31:04:54:ca:9a:27:25:f0: 7b:3a:dd:0d:f1:e2:bb:e1:18:ad:73:c2:79:fe:7c: c5:f2:e5:23:64:c1:3e:33:b7:d3:13:d6:cf:67:92: cd:95:e7:6a:a4:0f:7c:b1:f0:8f:51:e9:34:04:58: ad:52:94:53:b2:67:09:30:dd:6a:b2:ea:e5:26:38: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:97:8A:83:92:CA:44:52:1A:3B:F4:95:5D:26:40:6E:F4:89:CB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl X509v3 Authority Key Identifier: keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5d:94:ff:ba:6e:14:af:57:56:d3:7b:4d:4b:4d:b1:a1:66: f9:93:5c:91:45:da:cc:7f:17:d6:ee:08:5c:a3:6a:d3:92:be: dd:70:aa:38:5f:d8:14:9c:d9:ef:f6:d7:df:6b:22:a4:10:04: 60:c3:f5:a5:14:3a:70:64:7f:0d:96:8a:f8:74:c1:28:84:b1: fb:04:2c:96:42:da:f8:b1:ab:5d:10:9a:fb:9e:09:3d:ce:59: 3e:fb:32:8c:bf:44:84:99:31:ba:c7:b5:6c:03:ec:ec:51:f0: 35:d1:4d:f9:82:95:66:82:a5:8a:f4:b0:93:0c:08:ad:66:9c: f1:fa:aa:1f:ca:d0:a1:1d:50:ee:da:92:44:db:1b:6d:a3:c0: 96:f9:d5:65:23:c4:d1:72:7a:13:1b:80:8d:70:a5:59:db:58: 01:2a:56:91:c2:79:38:d3:c9:ec:8d:ca:25:a5:17:84:6f:58: ad:b2:23:06:b9:f6:f3:e9:f3:74:22:de:61:63:40:e5:fc:11: 86:d4:a5:54:59:46:91:6d:90:08:0e:aa:86:b0:d7:5a:ee:54: 68:a2:d5:22:92:a8:ad:32:1c:78:18:a4:92:dd:74:d2:23:39: 4a:f7:b3:91:16:18:7f:0d:41:2f:73:7b:e3:8b:93:f3:f4:b0: 15:6e:3b:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4tAp+aWBHl18lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJlZjdjOWItYzc1Ni00MzlhLWFjNTktMGZiNWU1ZThj MWVlMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk MGIwOTVjOGEtMjgzMi00ODc4LTgyMTUtNGI4MDQ0M2JiMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknTCtMm6spUoGi04cHAIeAP+KFXm2JHOgLBQ TVHKqIjeZ+bwSYS12PT0kbLP2YfvXpxIYeADNwK51rZ5ZN/87JLjIDdgS6W/+tw3 pIfWvTLRr+Yw0TDcu3RbW4pMSPI61qc2BogYIEiqfLkrvq0WVTv+F+HhGNXEJdNx mC9R4/XQSoMNMK+QvPhCmG8OK9YM0uNxjlaUcHdHoTFUtP26hOAIebJGsBUxo8dk +zRlsaJUwZYcv66lJbL/MQRUyponJfB7Ot0N8eK74Ritc8J5/nzF8uUjZME+M7fT E9bPZ5LNledqpA98sfCPUek0BFitUpRTsmcJMN1qsurlJjgA3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB2XioOSykRSGjv0lV0mQG70ictzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVm N2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1ZTVlOGMxZWUvNzJlZjdjOWItYzc1Ni00 MzlhLWFjNTktMGZiNWU1ZThjMWVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzJlZjdjOWItYzc1Ni00MzlhLWFj NTktMGZiNWU1ZThjMWVlLzcyZWY3YzliLWM3NTYtNDM5YS1hYzU5LTBmYjVlNWU4 YzFlZS5jcmwwHwYDVR0jBBgwFoAUJ7ij3Un12fMQU7ZDWsI4uCWn130wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MmVmN2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1 ZTVlOGMxZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgXZT/um4Ur1dW03tNS02x oWb5k1yRRdrMfxfW7ghco2rTkr7dcKo4X9gUnNnv9tffayKkEARgw/WlFDpwZH8N lor4dMEohLH7BCyWQtr4satdEJr7ngk9zlk++zKMv0SEmTG6x7VsA+zsUfA10U35 gpVmgqWK9LCTDAitZpzx+qofytChHVDu2pJE2xtto8CW+dVlI8TRcnoTG4CNcKVZ 21gBKlaRwnk408nsjcolpReEb1itsiMGufbz6fN0It5hY0Dl/BGG1KVUWUaRbZAI DqqGsNda7lRootUikqitMhx4GKSS3XTSIzlK97ORFhh/DUEvc3vji5Pz9LAVbjsJ -----END CERTIFICATE-----Generated at Tue Oct 21 10:40:13 2025 by rpki-client