$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft File: a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft (raw, json) Hash identifier: zQRz4JWTC4KSjAxCraBJPBFhPTE23kqtSOct39Ak/sg= Subject key identifier: AA:6C:29:AC:38:75:AA:DA:03:31:5E:A4:FA:00:C9:43:0C:09:85:13 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584B92FA552EEEB65DE238D1BA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft Manifest number: 010D0C9F432858498BC00570BC2B0C506A3F9A53 Signing time: Sun 19 Oct 2025 14:00:03 +0000 Manifest this update: Sun 19 Oct 2025 14:00:03 +0000 Manifest next update: Wed 22 Oct 2025 14:00:00 +0000 Files and hashes: 1: 18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa (hash: sAM3f2Fqfb7XFJqbgICM5IYzi8Jn6pMsZKUxz2pbgM0=) 2: 1da36567-7596-3e93-8797-c79c1c72f94d.roa (hash: YdcYUtxU/yiX+IaKiOKTYsuvP7FNlyo0oXGy2cWfYSo=) 3: 27f758ef-5e16-3cc2-8633-28286481977f.roa (hash: pJN4ZlKl5Umv8mwYKlEzmCzvkm9Jj3ovl1aWMnT0aXk=) 4: 3f610126-c000-34a1-8bf7-08e6484877a2.roa (hash: IygkXQA4b+Sp2MGVgSOObbQSREruU91Y1/vrisxJR9Y=) 5: 41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa (hash: HdgSaqZj0XchhoOfexCrUYb/472V5k4ya0l64RJbNFE=) 6: 61b19ede-9505-3572-bb7d-6961790e8797.roa (hash: RL/Um1BDsEcHx44mWbxbgdj+4Q4RHgbLLRmY4IJaWn4=) 7: 6d2ceda2-d8ab-3808-93b1-84b302bf2b98.roa (hash: hBF7ewBclLZtCPeWYoKfIvKSn97i+DF4cB/WKTKevEc=) 8: 704a74c7-336e-377a-9e26-aad1722f6ce4.roa (hash: OlTM/wyvFIK6nU/r9QhXC8BpwYv26ZlX1aGsP3OXvxw=) 9: 7562a2a1-bbd0-3cfc-965d-246207693ae2.roa (hash: qs+oOqu+wTGdbwkbn0IOgx/sE14jY7RAHmbdOMtI46Q=) 10: 7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa (hash: oif8P1wU+LM7ekcWgF6F6Ew8b2Ery5MGW2+3FnpONgE=) 11: 7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa (hash: +bP2YXcKWbYY0r1ZDt33xgj4+tx9KVI2StPnghVg7/I=) 12: 7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa (hash: 8R8SwYbrevjhW4Mxo7CwyJDL9+c5T+WmBRi8mRmyEaw=) 13: 8031f74d-ff98-393b-85af-ad983b763784.roa (hash: IJeBDwFhb1XAioqh/+jzNHMEqr1IUCMOvvupYwlljoc=) 14: 8cf90abc-b412-39d6-bd30-224d82228687.roa (hash: ZW5arKEqj55j4L3Tsd1uIP/L+TmrZovslkoGdF50t0c=) 15: 9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa (hash: spg1Ho14jpjnRQFSvf2EwtCZZxBXkoCxlGKaPcuhvh8=) 16: a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl (hash: izhbmkxafVIr5BjmtDTXddaQf1/Fbi/gp/FYSl2Vx68=) 17: bd2eb3af-948e-3005-ae78-90f34d4f5889.roa (hash: b7/qV5OvyFJ7dDiQCWaOiQTFNPFTll0OdbMiO1qnUro=) 18: dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa (hash: l7nR3CeLZNu/+t95ohVJthU1hxhGIPvRmIocGtzeMmo=) 19: fb42a889-347c-3040-b819-3e70ec685c0b.roa (hash: 09p+CRUV4XRl8a4BiSElnkZGUROkE3/2aXEySuTD/Lk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:fa:55:2e:ee:b6:5d:e2:38:d1:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Oct 19 14:00:03 2025 GMT Not After : Oct 22 14:00:00 2025 GMT Subject: CN=6fc2ce1d-96ea-45da-bbe3-869f7d7f94db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:5c:6a:96:a0:71:0b:1a:ea:96:8a:b6:a9: 79:a3:1d:5c:2a:80:7e:45:4d:4e:0e:f2:f9:43:a8: b1:eb:23:49:d2:9f:12:f6:ff:08:9e:f4:31:56:27: 01:01:57:8a:47:ed:0a:75:79:07:2e:0f:14:72:a8: b0:7f:23:62:30:9f:d3:12:dd:d5:5b:18:6e:2e:9a: 87:84:f5:74:5c:97:b7:57:e2:d8:c2:f3:b4:b1:a6: c6:28:42:f2:95:f0:f6:85:92:fa:de:dc:35:60:ea: 41:74:4d:81:81:c7:25:81:53:b6:31:6f:b0:04:15: e7:28:d0:94:9b:f0:d6:85:55:1d:23:0e:1e:e0:db: 14:0d:da:1b:29:58:af:1c:b3:d4:3d:1b:33:e7:9c: 37:5e:24:7a:24:4e:e7:59:6e:e6:12:d8:fd:bc:ac: 1e:9c:79:77:a9:c8:07:34:e6:ae:4e:db:12:b0:9d: 71:5b:2f:72:20:48:e2:fd:56:28:1b:79:5c:94:0c: ca:3c:18:b2:3f:61:ee:85:62:15:93:c9:61:25:a9: 01:25:b2:33:ad:92:a0:42:61:30:c1:99:6b:50:22: 6a:78:43:28:27:c9:a0:fd:46:66:10:99:59:73:e8: 8b:5f:25:f7:f5:73:d5:51:55:79:dd:e2:8c:fe:47: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6C:29:AC:38:75:AA:DA:03:31:5E:A4:FA:00:C9:43:0C:09:85:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:48:a2:e1:c5:75:70:18:a0:59:ae:9d:e4:18:b1:7f:40:eb: 35:90:16:be:14:55:9f:16:b9:2a:d1:e1:52:5e:7d:ef:28:1c: eb:19:8a:97:da:f5:4c:e2:7b:71:a8:6e:dd:93:8a:a4:e3:40: c8:3e:ab:a4:44:a8:1d:4b:0a:fd:d0:09:e8:11:7d:9f:db:e0: c2:ee:51:cf:fc:2e:99:d8:7e:f7:ed:1d:1d:4f:51:ce:44:2e: 90:cb:e1:10:2c:5a:8c:73:b5:37:d5:c2:be:d4:b8:9c:bc:75: a0:c2:4a:0c:ed:a5:0d:5d:af:35:ca:78:44:3e:f1:1a:0f:1b: ba:e2:fb:93:e8:b6:80:80:5e:fe:d5:3a:8c:3d:a6:8f:bf:a9: ef:ca:7c:2c:30:e0:45:88:7f:ab:56:6b:45:ae:cb:46:a8:81: a9:77:95:fc:86:f6:7e:7f:ae:8c:2e:88:37:bf:e3:01:81:47: f4:07:22:42:21:25:80:b6:a1:3d:1f:2c:b6:51:9c:f8:b1:3e: 89:55:a5:2e:fe:e3:fb:aa:f8:4c:3a:73:57:17:d7:b6:a2:ec: 62:16:39:c2:50:cc:c1:3d:4e:f5:90:5e:58:96:09:21:30:ad: b8:e6:e3:d4:1e:bc:f1:9b:93:bc:63:06:58:ef:22:8f:01:7d: 6b:e6:f1:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS+lUu7rZd4jjRugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MTAxOTE0MDAwM1oXDTI1MTAyMjE0MDAwMFowLzEtMCsGA1UEAxMk NmZjMmNlMWQtOTZlYS00NWRhLWJiZTMtODY5ZjdkN2Y5NGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4JcapagcQsa6paKtql5ox1cKoB+RU1ODvL5 Q6ix6yNJ0p8S9v8InvQxVicBAVeKR+0KdXkHLg8UcqiwfyNiMJ/TEt3VWxhuLpqH hPV0XJe3V+LYwvO0sabGKELylfD2hZL63tw1YOpBdE2BgcclgVO2MW+wBBXnKNCU m/DWhVUdIw4e4NsUDdobKVivHLPUPRsz55w3XiR6JE7nWW7mEtj9vKwenHl3qcgH NOauTtsSsJ1xWy9yIEji/VYoG3lclAzKPBiyP2HuhWIVk8lhJakBJbIzrZKgQmEw wZlrUCJqeEMoJ8mg/UZmEJlZc+iLXyX39XPVUVV53eKM/kd/GQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKpsKaw4daraAzFepPoAyUMMCYUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvYTNlOWE0YzAtYjg4Yi00 Y2Y1LTg2MDMtZjJkMDljZmI1ZmE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeSKLhxXVwGKBZrp3kGLF/ QOs1kBa+FFWfFrkq0eFSXn3vKBzrGYqX2vVM4ntxqG7dk4qk40DIPqukRKgdSwr9 0AnoEX2f2+DC7lHP/C6Z2H737R0dT1HORC6Qy+EQLFqMc7U31cK+1LicvHWgwkoM 7aUNXa81ynhEPvEaDxu64vuT6LaAgF7+1TqMPaaPv6nvynwsMOBFiH+rVmtFrstG qIGpd5X8hvZ+f66MLog3v+MBgUf0ByJCISWAtqE9Hyy2UZz4sT6JVaUu/uP7qvhM OnNXF9e2ouxiFjnCUMzBPU71kF5YlgkhMK245uPUHrzxm5O8YwZY7yKPAX1r5vFZ -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:50 2025 by rpki-client