$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft File: b194a9ed-65e1-4df1-85aa-9a35c571253b.mft (raw, json) Hash identifier: twHgmVSsxTGz91vWL4gf39Sq4Qhmp8nDZfgh79Jpp4k= Subject key identifier: 3F:95:00:34:D0:96:F1:0E:79:1A:45:C0:46:E6:EF:C3:23:E1:48:FF Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 Certificate issuer: /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Certificate serial: 010D0C9F4328584B960095DC0E95A1A3BB4E9740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft Manifest number: 010D0C9F43285840B0F06976193AF197E09C352E Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 011c8cd8-281d-317c-b66f-0fe8c16e848a.roa (hash: 3CyQGlbDSyR8wg7AMcy0P/FUgwYyB1mPDLPW1dbpV50=) 2: b194a9ed-65e1-4df1-85aa-9a35c571253b.crl (hash: XZVGqQ7FkmtAX9fYHPBH4WUU97dLIQMfRBa8+UqvvSA=) 3: c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa (hash: Xf8yZD971DSxKXuDfQCUOM6G3bssaP0lX2bXtAjIHdM=) 4: d521baba-5d18-3439-8cfc-c5189dded826.roa (hash: 3DxghOtGX6qYB5Fk8CEYN3nbEh+wFxWPBwF9twLAXUw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:95:dc:0e:95:a1:a3:bb:4e:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=14f79d1e-5c6f-41fa-ab90-f97330701e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:72:df:b9:2c:de:65:87:1e:33:fc:8b:5f: df:61:f3:4c:f5:ed:8d:23:59:e6:80:02:c0:3e:fc: e9:f7:f7:dd:74:05:83:ad:76:18:a6:9b:f0:59:aa: 5f:b9:90:15:e4:9d:8e:e4:6f:d7:c5:c1:7c:2e:b5: 1b:b3:f0:19:1f:72:88:a2:65:6b:87:4d:84:44:a9: f7:4f:49:04:a1:7f:ab:78:ef:e4:89:4b:b0:25:2c: 21:e7:6a:90:a8:ca:9f:89:67:b3:31:76:47:81:05: d1:95:3b:d4:65:db:c0:e9:e3:a7:6a:8f:49:73:dd: 17:b3:e6:a6:79:c6:e8:a5:4e:09:21:0b:e7:ee:78: 9a:e6:54:fe:0e:79:6e:3f:dc:17:f9:0d:76:05:d7: 2a:60:97:d7:ff:7d:98:63:32:e6:b0:c4:af:75:9b: ae:52:57:cd:22:a7:de:7f:f5:0d:a9:6c:5f:f4:f5: b1:97:0f:1f:0a:f1:9b:bf:2c:2d:d9:73:af:ef:fd: f7:69:ff:b6:7e:28:db:57:b9:50:1d:99:7a:e3:ad: 37:b6:44:96:5e:00:b2:c1:02:dd:8f:9f:13:fa:ef: b4:c9:6c:01:26:ab:c9:05:83:c4:71:fc:5b:bc:b8: b2:83:3e:f0:44:47:35:a8:c9:3b:d1:8f:a3:38:5f: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:00:34:D0:96:F1:0E:79:1A:45:C0:46:E6:EF:C3:23:E1:48:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl X509v3 Authority Key Identifier: keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:52:02:cf:53:82:29:76:a3:33:a3:29:2a:b6:57:93:4a:ff: 24:59:5c:6e:95:81:c6:15:04:86:2c:e8:d9:46:b3:e1:50:8d: 9b:b2:b7:3f:d7:0b:46:2e:1d:b1:23:c8:c4:f6:13:6f:ed:9c: 92:ba:90:7a:5d:d4:3e:f7:74:ef:a8:54:1a:dd:22:3f:88:f9: c8:e9:9d:f8:96:9d:50:90:f7:1a:3f:95:62:1c:18:40:65:65: c9:85:cc:ad:4d:10:27:0d:a9:80:70:5a:d7:c5:1c:17:10:ed: e0:c8:7c:f0:4c:db:aa:aa:ae:b1:0b:d9:0e:9f:27:9b:be:c4: b2:ca:0e:a0:67:b6:55:2c:d2:5f:2a:03:6b:2d:5e:fd:3c:34: 13:18:65:35:05:47:91:30:53:2a:52:80:5b:1f:fb:a2:9b:64: f1:4a:e1:a1:79:71:66:49:55:3c:ac:38:85:a8:44:ce:de:07: 12:99:26:2d:55:87:88:c0:16:65:b4:7e:33:40:b2:3c:81:0e: f4:ea:81:0b:bd:e5:81:aa:90:10:a2:7b:d3:a3:51:7e:05:80: a1:ea:da:93:f1:d9:16:c0:d2:0d:c6:9a:1a:45:fb:ab:a1:4e: 39:b1:27:95:eb:c1:1c:69:4a:de:67:4d:bc:1c:dd:56:c8:69: 55:35:c6:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJXcDpWho7tOl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy NTNiMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk MTRmNzlkMWUtNWM2Zi00MWZhLWFiOTAtZjk3MzMwNzAxZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKdy37ks3mWHHjP8i1/fYfNM9e2NI1nmgALA Pvzp9/fddAWDrXYYppvwWapfuZAV5J2O5G/XxcF8LrUbs/AZH3KIomVrh02ERKn3 T0kEoX+reO/kiUuwJSwh52qQqMqfiWezMXZHgQXRlTvUZdvA6eOnao9Jc90Xs+am ecbopU4JIQvn7nia5lT+DnluP9wX+Q12BdcqYJfX/32YYzLmsMSvdZuuUlfNIqfe f/UNqWxf9PWxlw8fCvGbvywt2XOv7/33af+2fijbV7lQHZl64603tkSWXgCywQLd j58T+u+0yWwBJqvJBYPEcfxbvLiygz7wREc1qMk70Y+jOF8XNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+VADTQlvEOeRpFwEbm78Mj4Uj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0 YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvYjE5NGE5ZWQtNjVlMS00 ZGYxLTg1YWEtOWEzNWM1NzEyNTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1 YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1 YzU3MTI1M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5UgLPU4IpdqMzoykqtleT Sv8kWVxulYHGFQSGLOjZRrPhUI2bsrc/1wtGLh2xI8jE9hNv7ZySupB6XdQ+93Tv qFQa3SI/iPnI6Z34lp1QkPcaP5ViHBhAZWXJhcytTRAnDamAcFrXxRwXEO3gyHzw TNuqqq6xC9kOnyebvsSyyg6gZ7ZVLNJfKgNrLV79PDQTGGU1BUeRMFMqUoBbH/ui m2TxSuGheXFmSVU8rDiFqETO3gcSmSYtVYeIwBZltH4zQLI8gQ706oELveWBqpAQ onvTo1F+BYCh6tqT8dkWwNINxpoaRfuroU45sSeV68EcaUreZ028HN1WyGlVNcbd -----END CERTIFICATE-----Generated at Tue Oct 21 15:23:57 2025 by rpki-client