$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft File: 7e4fb68f-edad-45a2-98d4-e937526bfa31.mft (raw, json) Hash identifier: McIxa99yVNvJD1eyzAjyDE1Mq9nhxsH6ZaHwO4lZUEQ= Subject key identifier: E1:C9:63:96:20:DD:17:FC:7B:E0:E3:48:85:78:58:FA:77:DD:9E:C5 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584B9442E3F0BB0A19421D072B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft Manifest number: 010D0C9F432858439B2E732D5F4C82CBF206AAE3 Signing time: Mon 20 Oct 2025 01:02:03 +0000 Manifest this update: Mon 20 Oct 2025 01:02:03 +0000 Manifest next update: Tue 21 Oct 2025 22:00:00 +0000 Files and hashes: 1: 1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa (hash: bC1nbcpcLg5JMwIM/ZmMQDP2j+pVIhbE/MJvYYxObCY=) 2: 7e4fb68f-edad-45a2-98d4-e937526bfa31.crl (hash: BpO6GHhXKuwAgG9UeVz9EuaflOlcZ6hWr4pOUGAzTeM=) 3: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (hash: EUOlwb9+5S0zVgZfaMPXPA5ss36y8yoq54Y8AFWR+iw=) 4: c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (hash: j/uTm5OLD6+iSPB7EAxYjiZm/CXKahGWZ1ev8etLZC4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:e3:f0:bb:0a:19:42:1d:07:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Oct 20 01:02:03 2025 GMT Not After : Oct 21 22:00:00 2025 GMT Subject: CN=bfdb62bd-1100-4869-aced-315d029dbc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:92:84:f3:23:c5:ff:fa:f6:66:08:85:f7: b1:f2:11:a7:67:13:e2:69:e2:fd:e2:06:d6:39:4c: 9f:60:d1:8b:59:5a:bc:11:dc:b6:0e:00:33:bf:7f: 34:7e:56:9c:20:41:4c:80:9b:87:41:94:d0:6c:c7: 5c:16:4b:69:95:7e:3f:70:b3:84:d9:f7:df:02:e4: ec:c9:47:22:e9:8d:b3:fa:4b:a7:50:8a:1a:b3:8b: 31:ae:4e:3b:2c:fc:3c:ce:55:31:92:39:32:b1:d0: 81:de:84:e0:f4:b0:98:8e:bf:c1:dd:80:be:bb:24: f3:34:4b:b1:bb:22:87:a0:e3:ca:34:65:58:91:28: 7c:c2:91:0e:3a:66:f7:69:97:d8:58:80:a5:e9:ca: 9b:2c:d8:1a:36:7f:b0:5d:2d:cb:dd:37:37:ce:28: fa:3c:e6:1b:0a:ee:7a:57:d0:11:e8:31:8d:60:49: 37:9a:78:ce:d8:7d:a4:6e:47:89:1e:b9:8c:1d:ac: ba:7f:d3:d2:a0:7f:a3:bc:19:4c:0c:73:06:48:aa: 9d:ee:fb:71:36:a9:48:05:8e:33:af:f4:cc:4d:ad: a3:26:f0:b4:c0:b0:d5:da:d5:44:0a:fb:1d:4b:39: 87:de:39:86:50:7c:ea:cb:ca:e4:8e:8d:41:7b:f1: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:63:96:20:DD:17:FC:7B:E0:E3:48:85:78:58:FA:77:DD:9E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:50:f6:c4:cd:31:a0:2c:e3:dc:92:02:85:83:45:e3:b8:35: 38:83:37:62:24:da:92:ea:01:5d:b1:dd:4d:f3:0d:a9:0b:fc: b5:b4:2d:9c:f3:05:1e:8c:d8:91:de:4e:c9:17:63:7b:62:55: 6f:b7:8a:3e:1c:60:87:ca:ae:c2:c1:05:e8:fa:dd:a3:b0:52: 77:0f:3b:55:d5:6c:3a:b5:bb:20:67:d8:03:e4:42:1b:c8:01: 9d:5d:77:cd:7e:e8:bc:1f:41:8b:fc:f9:b5:c2:31:a5:5f:00: 24:bf:8e:35:d9:23:d8:47:ba:60:18:a5:fa:65:39:4f:33:62: 1c:8f:13:5f:a8:2f:6a:f8:a1:1c:0a:0b:5a:8f:98:72:a3:39: 83:81:a2:c7:54:f1:82:b1:d2:bb:ab:8d:b6:a9:48:bd:4a:6e: 0d:3b:bb:16:f8:73:9e:b3:0f:ef:bd:70:c2:0c:46:7d:42:70: d0:52:96:61:cc:97:1f:7b:b2:d7:bd:90:35:4c:d7:c7:bf:21: 17:e9:fa:71:79:1f:64:2a:ca:26:6b:d3:d1:87:63:11:86:56: 00:3c:16:cf:e2:f7:5f:43:92:b9:6a:40:78:f0:da:43:db:36: 3c:dd:ef:fe:fe:71:d0:50:ec:35:ce:da:8e:0a:cf:fa:09:05: f5:23:5d:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUQuPwuwoZQh0HK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MTAyMDAxMDIwM1oXDTI1MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk YmZkYjYyYmQtMTEwMC00ODY5LWFjZWQtMzE1ZDAyOWRiYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxuShPMjxf/69mYIhfex8hGnZxPiaeL94gbW OUyfYNGLWVq8Edy2DgAzv380flacIEFMgJuHQZTQbMdcFktplX4/cLOE2fffAuTs yUci6Y2z+kunUIoas4sxrk47LPw8zlUxkjkysdCB3oTg9LCYjr/B3YC+uyTzNEux uyKHoOPKNGVYkSh8wpEOOmb3aZfYWICl6cqbLNgaNn+wXS3L3Tc3zij6POYbCu56 V9AR6DGNYEk3mnjO2H2kbkeJHrmMHay6f9PSoH+jvBlMDHMGSKqd7vtxNqlIBY4z r/TMTa2jJvC0wLDV2tVECvsdSzmH3jmGUHzqy8rkjo1Be/ECJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOHJY5Yg3Rf8e+DjSIV4WPp33Z7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvN2U0ZmI2OGYtZWRhZC00 NWEyLTk4ZDQtZTkzNzUyNmJmYTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+UPbEzTGgLOPckgKFg0Xj uDU4gzdiJNqS6gFdsd1N8w2pC/y1tC2c8wUejNiR3k7JF2N7YlVvt4o+HGCHyq7C wQXo+t2jsFJ3DztV1Ww6tbsgZ9gD5EIbyAGdXXfNfui8H0GL/Pm1wjGlXwAkv441 2SPYR7pgGKX6ZTlPM2IcjxNfqC9q+KEcCgtaj5hyozmDgaLHVPGCsdK7q422qUi9 Sm4NO7sW+HOesw/vvXDCDEZ9QnDQUpZhzJcfe7LXvZA1TNfHvyEX6fpxeR9kKsom a9PRh2MRhlYAPBbP4vdfQ5K5akB48NpD2zY83e/+/nHQUOw1ztqOCs/6CQX1I13K -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:35 2025 by rpki-client