$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft File: b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft (raw, json) Hash identifier: 5sY1ifCSPm+XHcV23puqj92Qqos6VaCuVqw6JhdZ/eM= Subject key identifier: 86:C4:7F:28:F2:24:6B:79:E4:5B:57:18:2A:0C:47:1A:1B:D0:6F:8A Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584B95897490366E1D89C7675180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft Manifest number: 010D0C9F4328584073A852681CE382326F634E85 Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Thu 23 Oct 2025 12:00:00 +0000 Files and hashes: 1: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (hash: EFE1n4YDmU+0/aoZC43SH/HNPLqv/8YqLE0qsHPv4u4=) 2: 6d329d86-ae5c-3e97-b60e-380b387c9d19.roa (hash: Jld/go/0hXLMJ96//0aiU1cdKRaq4AeSzsJxDHQvveA=) 3: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (hash: 5CjtyL4bi56oAdZpDNtKed7yRheNc5L+TZndKeckb8A=) 4: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (hash: Q/768fd5Dzm+mWkFE4R10gJeOytK41yFbDUWdK6waSk=) 5: b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl (hash: ZwVLNODTzhuQBISECQYiBvd7ArgkF8E97hsDAM+9gJg=) 6: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (hash: TjYcEV40ctvmBKhRRxC0x3Cm4siyxSd09cdYFbasQgw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:74:90:36:6e:1d:89:c7:67:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 23 12:00:00 2025 GMT Subject: CN=342418a2-a2de-4bd9-8415-9baecd0949cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6c:6c:33:5a:14:24:7f:8a:38:1a:da:f1:fb: a2:40:e5:a2:ca:85:31:bb:85:41:4a:08:85:01:dc: 57:58:f3:c3:b3:96:d1:27:89:c3:0a:8c:01:ad:b0: d4:73:97:98:1a:c6:70:dd:c3:6a:ab:69:de:30:d2: 1b:e8:c3:79:08:fb:03:a1:9e:e4:e9:7b:52:07:09: 38:fd:f0:e0:86:68:01:9b:43:1b:40:9b:ca:f4:4e: 2f:96:e5:30:31:1b:c8:65:f6:7d:ae:cb:52:14:d0: 52:26:b7:aa:38:11:57:06:a0:e1:8a:22:1b:1f:b4: 3e:cd:03:dd:cb:b7:09:03:5d:20:3d:10:ff:dd:bf: f4:bd:d0:c7:cc:0d:bc:cc:33:87:9d:4b:8b:04:84: 0a:f4:fe:a8:5a:0e:1f:27:1a:54:e3:3c:73:2f:e1: fa:0a:5a:97:53:fe:13:90:0b:e7:8c:a5:da:e2:73: b1:52:58:54:e0:ec:be:f4:62:01:ae:d3:b5:20:b6: e9:5e:18:19:cf:bf:15:76:fb:5f:05:63:cd:bf:26: 29:4f:35:92:e5:b5:97:cd:66:d6:60:16:3a:0a:05: 1b:f2:df:d4:0b:21:a0:f9:76:4d:da:4c:d2:76:86: b5:89:69:31:81:cd:ef:60:9d:c0:0e:be:aa:37:19: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:7F:28:F2:24:6B:79:E4:5B:57:18:2A:0C:47:1A:1B:D0:6F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d1:c3:9c:9b:5c:5b:57:2d:2f:25:cb:0e:86:88:07:e4:13: 77:c6:0b:06:ce:f9:b0:05:40:e1:9f:eb:3d:ac:23:33:5e:3c: cd:fd:72:0e:f0:49:a3:41:96:8a:ad:ca:dc:f2:c0:0a:b9:0b: 17:ac:28:bb:23:a4:e1:08:06:ac:eb:f3:b5:54:82:59:c4:61: 93:03:7c:7e:22:ec:5d:ac:52:4a:d4:04:45:5f:39:a1:29:13: 31:c1:89:a5:0a:18:72:53:c7:15:72:89:15:0d:2e:db:c7:ae: ac:24:cd:28:a1:1e:71:8a:00:40:8a:00:91:54:79:f0:d4:5b: cf:71:13:f9:ce:be:31:9d:14:dc:f1:69:d2:29:17:6a:e1:1f: 8a:b4:a0:70:18:d1:bd:11:c9:08:d8:8f:10:96:86:6e:2e:f5: 41:f6:61:44:92:17:0d:d3:9f:8f:2e:fc:6d:01:8e:13:08:2f: b9:3a:26:9b:5c:2a:76:94:07:89:07:28:0b:9a:ad:be:dc:4c: 9e:d3:29:df:00:5b:cc:60:47:74:00:b6:c1:00:e6:22:6e:71: ce:3c:cc:f9:4d:f4:a7:2f:cb:cf:b8:e1:2c:f8:49:19:46:8e: 99:e9:ac:15:e1:dd:7f:1e:b9:21:c9:62:46:7f:49:27:8d:fe: d7:71:bc:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXSQNm4dicdnUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMzEyMDAwMFowLzEtMCsGA1UEAxMk MzQyNDE4YTItYTJkZS00YmQ5LTg0MTUtOWJhZWNkMDk0OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2xsM1oUJH+KOBra8fuiQOWiyoUxu4VBSgiF AdxXWPPDs5bRJ4nDCowBrbDUc5eYGsZw3cNqq2neMNIb6MN5CPsDoZ7k6XtSBwk4 /fDghmgBm0MbQJvK9E4vluUwMRvIZfZ9rstSFNBSJreqOBFXBqDhiiIbH7Q+zQPd y7cJA10gPRD/3b/0vdDHzA28zDOHnUuLBIQK9P6oWg4fJxpU4zxzL+H6ClqXU/4T kAvnjKXa4nOxUlhU4Oy+9GIBrtO1ILbpXhgZz78VdvtfBWPNvyYpTzWS5bWXzWbW YBY6CgUb8t/UCyGg+XZN2kzSdoa1iWkxgc3vYJ3ADr6qNxnm+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIbEfyjyJGt55FtXGCoMRxob0G+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYjg2YTRlYzMtYTNiNS00 ZDcyLWJlZTItZjU4YzNjZGUwMWExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBr0cOcm1xbVy0vJcsOhogH 5BN3xgsGzvmwBUDhn+s9rCMzXjzN/XIO8EmjQZaKrcrc8sAKuQsXrCi7I6ThCAas 6/O1VIJZxGGTA3x+IuxdrFJK1ARFXzmhKRMxwYmlChhyU8cVcokVDS7bx66sJM0o oR5xigBAigCRVHnw1FvPcRP5zr4xnRTc8WnSKRdq4R+KtKBwGNG9EckI2I8QloZu LvVB9mFEkhcN05+PLvxtAY4TCC+5OiabXCp2lAeJBygLmq2+3Eye0ynfAFvMYEd0 ALbBAOYibnHOPMz5TfSnL8vPuOEs+EkZRo6Z6awV4d1/HrkhyWJGf0knjf7Xcbzx -----END CERTIFICATE-----Generated at Mon Oct 20 18:34:21 2025 by rpki-client