$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft File: 8a8a1a2d-c949-4896-93b9-71f917048e79.mft (raw, json) Hash identifier: 9pphGpMf9NBxdvZXw75/ViWZfaVt6AaIJmhIfXakuVY= Subject key identifier: 89:F8:3A:EC:7C:14:E4:81:78:00:35:DF:7B:A0:6F:D4:7B:B7:42:21 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584B94242A39A1AB02B8285C5F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft Manifest number: 010D0C9F4328584073A831A891656E121B8A8BEE Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Thu 23 Oct 2025 00:00:00 +0000 Files and hashes: 1: 078b78cf-d953-3309-bbf3-6ddd55fee124.roa (hash: 1HnYCrK/BF+APZ4up+LbReE5xnK1Y89z1xq4pNSzj/4=) 2: 2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (hash: PWrRjdAdFstTihSK3PNnljwQnq74GKTRWpLwy3DCl1s=) 3: 8a8a1a2d-c949-4896-93b9-71f917048e79.crl (hash: r5qrwGzfl1HTzDrT+U2ljpZK4lSsWqwaxkQbZX6YwqA=) 4: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (hash: PzD23hRa9RcuhFdaBcV1aweCk7lGquHUN3kKSbtDjck=) 5: aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa (hash: zntcxNkYgFHNOsYhCIo/8Zb/dW90H7FULRwcVGA/vlU=) 6: af752bb6-5c49-322d-b8be-c43eb496a124.roa (hash: dfhKsV5wd/0uI+3rVaWSJpkq9/ebSWRiPvtl6NrOhQo=) 7: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (hash: UftDK6dmjX76yCg2tI3fVCJ/aIdO/VNIhwO7/3RJ+Yk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:2a:39:a1:ab:02:b8:28:5c:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 23 00:00:00 2025 GMT Subject: CN=ba0d38e6-5f6a-4cfb-bc37-d3ba769065ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:9f:4c:8f:34:06:fc:e0:02:38:1a:35:d5: 7b:45:cb:ce:fa:71:ed:3f:a0:ab:42:70:e9:57:4d: b1:df:ca:9b:1b:66:8d:40:16:1b:67:36:70:c9:61: 19:84:f0:96:2e:ca:fa:46:5e:f8:11:09:b4:37:80: e5:2f:c4:dd:95:ad:58:b2:02:d3:2a:ed:e0:ff:e3: e8:3c:91:46:41:d9:0a:84:b4:b7:e2:65:4d:25:d8: 94:94:77:76:65:34:1b:ed:3c:25:54:bd:12:da:8c: 74:96:74:82:a9:52:80:0d:47:80:b5:7f:5d:83:40: 7a:28:28:e2:7a:a7:df:13:ba:ad:74:a6:0f:93:14: ca:e5:1e:8b:d1:a5:6b:09:48:2f:57:d1:dc:0c:e5: 7a:a1:82:54:de:a0:1e:cb:20:7f:6a:ea:f4:c2:b7: e2:5d:08:74:59:d5:e3:44:3f:5e:ee:3f:d8:9e:8e: 5e:7d:c0:7d:99:4a:ad:23:ea:5e:d4:c1:7a:c9:0f: 50:8a:0f:84:2b:4b:56:2b:21:e7:4d:4e:a6:50:88: da:3c:3a:7a:b1:44:37:ca:ef:bc:df:8d:c6:af:6e: e2:11:04:fd:e2:61:f6:98:35:92:e6:f1:07:2a:1d: 46:31:4a:9a:3f:4a:22:de:1d:4f:16:72:43:20:d4: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F8:3A:EC:7C:14:E4:81:78:00:35:DF:7B:A0:6F:D4:7B:B7:42:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bc:4a:10:d6:48:90:95:a2:5e:ff:c6:f2:58:48:eb:bb:4c: 84:46:7c:83:05:3c:ed:39:1f:08:4b:84:18:a9:59:0b:28:4c: ac:a7:e0:05:67:d9:83:20:54:ab:bb:d4:0f:1a:d8:f3:20:a4: 72:51:b4:42:d8:87:39:de:15:74:f6:66:da:46:40:6e:4c:50: 39:d7:1f:34:3d:e6:42:8f:9d:7e:67:9a:c3:51:df:3b:ac:11: d9:ff:b5:18:17:35:31:ba:dd:2a:79:1e:13:7b:18:83:51:b4: e1:cf:5c:01:22:b6:e6:2e:0f:9b:45:20:54:94:4e:a2:a3:01: f7:80:ce:58:4b:59:2a:87:84:e8:e5:e2:6c:46:87:00:af:22: 3e:9f:e5:67:38:b0:62:c0:d8:69:03:27:65:ef:bc:45:e0:dd: 97:8e:e5:c3:1b:a7:92:f6:b3:d3:b2:57:d5:8d:a0:33:c0:7e: e5:a6:a0:af:9d:44:f1:b8:63:33:43:dc:2b:d8:b2:1b:f0:08: ce:83:0b:b2:80:e1:53:e1:de:d6:3c:44:a4:45:eb:8d:49:05: 19:ed:62:5d:ef:7e:0e:8f:90:c4:93:17:df:cf:d0:0f:7a:a5: bf:05:e2:a5:91:b4:bc:5d:2c:16:d6:3b:bd:0c:35:5e:79:68: e7:7d:bc:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCo5oasCuChcXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMzAwMDAwMFowLzEtMCsGA1UEAxMk YmEwZDM4ZTYtNWY2YS00Y2ZiLWJjMzctZDNiYTc2OTA2NWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiyfTI80BvzgAjgaNdV7RcvO+nHtP6CrQnDp V02x38qbG2aNQBYbZzZwyWEZhPCWLsr6Rl74EQm0N4DlL8Tdla1YsgLTKu3g/+Po PJFGQdkKhLS34mVNJdiUlHd2ZTQb7TwlVL0S2ox0lnSCqVKADUeAtX9dg0B6KCji eqffE7qtdKYPkxTK5R6L0aVrCUgvV9HcDOV6oYJU3qAeyyB/aur0wrfiXQh0WdXj RD9e7j/Yno5efcB9mUqtI+pe1MF6yQ9Qig+EK0tWKyHnTU6mUIjaPDp6sUQ3yu+8 343Gr27iEQT94mH2mDWS5vEHKh1GMUqaP0oi3h1PFnJDINSLcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIn4Oux8FOSBeAA133ugb9R7t0IhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGE4YTFhMmQtYzk0OS00 ODk2LTkzYjktNzFmOTE3MDQ4ZTc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0vEoQ1kiQlaJe/8byWEjr u0yERnyDBTztOR8IS4QYqVkLKEysp+AFZ9mDIFSru9QPGtjzIKRyUbRC2Ic53hV0 9mbaRkBuTFA51x80PeZCj51+Z5rDUd87rBHZ/7UYFzUxut0qeR4TexiDUbThz1wB IrbmLg+bRSBUlE6iowH3gM5YS1kqh4To5eJsRocAryI+n+VnOLBiwNhpAydl77xF 4N2XjuXDG6eS9rPTslfVjaAzwH7lpqCvnUTxuGMzQ9wr2LIb8AjOgwuygOFT4d7W PESkReuNSQUZ7WJd734Oj5DEkxffz9APeqW/BeKlkbS8XSwW1ju9DDVeeWjnfbzy -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:52 2025 by rpki-client