$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft File: 643914aa-5306-4352-8a01-3ac381827191.mft (raw, json) Hash identifier: tFkLwhtAxnrlRdwlbL6TLqwOeQ5xzG6baJ3H4Z80HGk= Subject key identifier: 98:91:8F:E9:08:D5:DC:CF:3D:74:C6:35:16:BF:67:BB:F5:72:1A:1A Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584B92FA56F415668574EC0AE090 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft Manifest number: 010D0C9F4328584134209A8DD551C015B0DF8808 Signing time: Sun 19 Oct 2025 14:00:03 +0000 Manifest this update: Sun 19 Oct 2025 14:00:03 +0000 Manifest next update: Tue 21 Oct 2025 14:00:00 +0000 Files and hashes: 1: 30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (hash: jfyNg6qaQQlgzhX/wm1aNqT0ZuJikN/d4+K7PTfv6Ag=) 2: 643914aa-5306-4352-8a01-3ac381827191.crl (hash: fS2xHMguAXnREaf3b+aqpv3hbebxtc0V8OrHUgTX+CM=) 3: 83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa (hash: /YF8ZWrO3Re08xFNweYhBdhGBXGJS2yZvUvcNM43hSo=) 4: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (hash: Ib9tdmTsLe2aNPqXV/gWqPZnM/c8qrgKqNrjv6qDd7A=) 5: 9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa (hash: bWF8LXbFRqaKbvhw5xLKDXCb9h2ej+O1+JXnQMbXdNk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:fa:56:f4:15:66:85:74:ec:0a:e0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Oct 19 14:00:03 2025 GMT Not After : Oct 21 14:00:00 2025 GMT Subject: CN=9e8c4eb6-002e-4567-9520-6c50f278dbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:0f:88:9e:e4:85:24:3b:d2:5b:31:a5:13: ed:0c:23:3a:bc:dd:e8:5a:e4:64:a9:08:26:3e:ab: 8e:14:c2:1e:1e:36:71:3c:01:ae:fa:16:35:ab:40: b0:1e:69:0b:b9:01:22:a4:7b:21:b3:8b:a0:f9:07: 2c:17:9f:d4:ec:08:d8:dc:51:91:87:1c:2a:c7:92: 8e:d7:7f:50:25:a2:11:4b:73:ff:0e:67:31:44:41: 0c:38:a2:ce:4c:7c:1b:5b:77:d5:e9:35:be:7c:44: 49:f5:60:62:17:9c:c5:22:f0:11:32:c8:12:37:47: 72:37:78:57:97:d7:37:f1:df:47:83:84:e6:98:18: 6b:66:b0:0c:4a:df:10:0a:31:45:99:ee:91:2c:55: 9a:51:7c:69:3e:70:a9:65:f1:53:45:b8:5c:0c:d0: 22:f0:a5:4e:2e:66:f2:10:77:47:b8:76:db:d0:14: 40:46:15:b2:08:25:9a:03:78:6e:1d:59:7f:04:d3: cd:63:65:a5:b0:c7:d0:30:ee:e8:7c:8e:75:c9:ea: 58:89:b6:d5:54:4b:5a:72:42:4c:49:b5:9e:23:cb: 8d:b9:ba:f1:f1:a0:48:c5:45:d8:9c:f9:a5:f2:45: fd:9f:8f:62:cc:83:87:54:d6:ce:9a:7b:b9:ce:8a: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:91:8F:E9:08:D5:DC:CF:3D:74:C6:35:16:BF:67:BB:F5:72:1A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f7:07:5a:54:c9:d0:72:d2:db:4e:c7:59:ac:54:11:d3:38: e0:92:2a:a3:e9:83:4f:f4:04:78:c7:e1:f0:7a:95:77:be:b6: 18:92:d4:4d:e5:87:db:e6:dd:22:27:f9:40:1d:5e:af:a0:49: 91:ce:8d:e1:8b:53:42:65:2b:d5:d1:70:61:c2:0a:68:90:26: 39:cd:b6:04:04:c0:75:7c:19:22:bb:75:cc:e2:2b:52:92:86: 20:cd:3b:3c:82:ae:2b:c5:fc:62:8d:76:e4:af:9a:a2:4d:a2: e3:e1:6a:1e:4f:e8:99:c3:68:ae:d8:ec:42:8a:35:00:be:d0: 03:ff:9c:38:ae:74:60:bf:3a:26:06:45:90:b5:62:da:bf:67: c2:f0:91:01:af:1b:8b:e9:14:9b:34:48:2a:b2:25:01:f5:77: d5:a3:cd:f4:a4:de:e9:05:6a:2f:55:25:da:46:8a:c1:7d:7b: 96:9e:f9:c7:09:69:d0:97:6b:4f:86:e3:53:ee:60:ba:12:d9: 4b:3b:43:3a:52:53:a2:59:fb:31:2f:8e:24:d4:14:a3:c5:4f: a3:03:69:4d:4d:f0:07:25:47:71:d0:40:2c:db:90:ca:1a:b2: 9a:2a:dc:13:fb:43:b2:d2:85:00:97:c2:70:21:67:70:2c:2e: a6:13:ea:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS+lb0FWaFdOwK4JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MTAxOTE0MDAwM1oXDTI1MTAyMTE0MDAwMFowLzEtMCsGA1UEAxMk OWU4YzRlYjYtMDAyZS00NTY3LTk1MjAtNmM1MGYyNzhkYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwoPiJ7khSQ70lsxpRPtDCM6vN3oWuRkqQgm PquOFMIeHjZxPAGu+hY1q0CwHmkLuQEipHshs4ug+QcsF5/U7AjY3FGRhxwqx5KO 139QJaIRS3P/DmcxREEMOKLOTHwbW3fV6TW+fERJ9WBiF5zFIvARMsgSN0dyN3hX l9c38d9Hg4TmmBhrZrAMSt8QCjFFme6RLFWaUXxpPnCpZfFTRbhcDNAi8KVOLmby EHdHuHbb0BRARhWyCCWaA3huHVl/BNPNY2WlsMfQMO7ofI51yepYibbVVEtackJM SbWeI8uNubrx8aBIxUXYnPml8kX9n49izIOHVNbOmnu5zophnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJiRj+kI1dzPPXTGNRa/Z7v1choaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvNjQzOTE0YWEtNTMwNi00 MzUyLThhMDEtM2FjMzgxODI3MTkxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv9wdaVMnQctLbTsdZrFQR 0zjgkiqj6YNP9AR4x+HwepV3vrYYktRN5Yfb5t0iJ/lAHV6voEmRzo3hi1NCZSvV 0XBhwgpokCY5zbYEBMB1fBkiu3XM4itSkoYgzTs8gq4rxfxijXbkr5qiTaLj4Woe T+iZw2iu2OxCijUAvtAD/5w4rnRgvzomBkWQtWLav2fC8JEBrxuL6RSbNEgqsiUB 9XfVo830pN7pBWovVSXaRorBfXuWnvnHCWnQl2tPhuNT7mC6EtlLO0M6UlOiWfsx L44k1BSjxU+jA2lNTfAHJUdx0EAs25DKGrKaKtwT+0Oy0oUAl8JwIWdwLC6mE+qZ -----END CERTIFICATE-----Generated at Mon Oct 20 11:41:04 2025 by rpki-client