$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft File: d80ecca4-df87-49ed-896a-31c912ba8c98.mft (raw, json) Hash identifier: aZav0WUivMyFhHZtIjh5PFtThkr+ByIqeil1qQZl50o= Subject key identifier: B5:37:03:BE:4C:F1:04:33:1A:39:C4:ED:B6:00:A6:FC:CE:8B:B6:34 Authority key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 Certificate issuer: /CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Certificate serial: 010D0C9F4328584B93AD0415F1B81F5C3AFF4934 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft Manifest number: 010D0C9F4328584073A82838F035FE755839DD6E Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa (hash: rtaQpnRX/ZCq0zUwRCqytlsb3WOMaFoXliwGkR3+y28=) 2: b595b89c-1b38-359a-af57-809a23d0047d.roa (hash: /f81vQFDZVJcH70U306R7Bwa0pMsHUxkogp8TFzz/z8=) 3: ba2c480b-a042-38f6-baeb-2bd65210020d.roa (hash: GDNan/DhgR7tf261NaqxlavNJXjVZHb6sq/8XAicyIk=) 4: d80ecca4-df87-49ed-896a-31c912ba8c98.crl (hash: MtBjjvlH8jl1dQm4UNkTR2F1JSISEEqK/4IZcLwpm3w=) 5: e0ab5e2d-72d9-3c01-bd9b-ac3616a44f89.roa (hash: F173ytskSxQbn9h6y9qc0P9Rz78n3vn344mTi1SKLGo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ad:04:15:f1:b8:1f:5c:3a:ff:49:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=e022420a-05ec-4578-a3dc-86eb6d8f80c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:0d:2c:5e:eb:94:8a:f5:68:14:df:9c:b9: ce:aa:1a:3a:0b:c2:48:1c:4a:c8:d0:5f:f8:4f:c6: 8b:4b:0b:11:7d:4f:f4:da:1e:1d:a4:17:30:1d:ef: ae:a0:12:1b:93:ac:cf:ad:1b:0f:61:54:79:3b:84: 35:ca:f3:81:34:0b:09:fb:3c:53:d2:b8:3c:f3:7c: 14:93:bf:51:f7:c5:f6:76:1b:43:4f:ac:ac:6f:46: 4a:47:bb:d1:83:d7:39:19:f5:f7:25:a2:a2:cc:a3: 40:6c:b0:2a:58:d5:08:e0:e0:0a:8f:f1:83:ae:58: e4:3b:c7:46:f5:b4:22:d4:b5:16:c5:14:44:e8:19: a2:1b:82:45:b1:8e:66:9a:06:80:a4:a0:68:0c:b0: 65:d8:03:bf:42:a6:d4:b7:0f:d8:6a:97:89:5a:a6: 61:43:98:e4:60:d6:37:0b:11:13:63:97:53:e7:79: 5a:3f:55:ff:7e:64:a2:24:79:26:37:c0:5c:e0:98: 24:75:a1:7c:51:9d:72:28:f3:40:b3:ff:f5:ee:47: d1:cd:fe:30:2d:87:bc:64:56:f6:72:40:76:8c:2f: 1f:d0:f0:e6:8f:bc:04:f1:c5:82:65:0c:4b:81:ee: 88:03:e3:40:c3:60:ac:62:f6:2b:bd:a9:b3:54:4b: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:03:BE:4C:F1:04:33:1A:39:C4:ED:B6:00:A6:FC:CE:8B:B6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl X509v3 Authority Key Identifier: keyid:FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:e3:35:a9:5e:f7:a5:3c:ef:97:a5:9c:62:b8:5e:55:e5: 8d:b7:db:7e:ac:69:09:98:14:51:b0:03:45:5e:88:7a:60:e7: 75:56:20:18:3b:5b:24:9f:0e:19:32:09:2c:82:f7:83:3a:b9: 62:7a:5d:5d:80:87:f7:d6:41:25:4d:8d:2a:b0:59:23:54:8d: e7:c3:71:1b:e8:4e:07:46:19:87:25:14:fc:84:64:ab:ca:16: f7:39:89:bd:b8:3f:73:a8:27:92:bd:1b:41:99:ab:0f:43:da: 35:c0:1c:6b:ba:0c:b3:42:ef:8d:ba:fb:aa:49:f0:a5:39:70: 78:17:98:ca:00:3f:e5:8d:3b:c4:a7:85:16:7f:a0:cb:ef:a3: 63:2b:4f:73:cd:9f:f8:c3:96:19:55:18:5b:2c:2d:2e:3f:a8: 6d:9f:79:5e:a0:3b:40:54:5c:44:97:98:20:19:97:5d:bc:e3: d6:29:a6:b3:32:ea:3b:b4:33:b4:8a:e4:a5:9b:e5:62:a2:ff: 51:9c:b4:66:40:34:ef:de:12:1c:11:fd:c3:d4:56:1c:8e:22: a2:0f:4b:54:81:61:e5:b0:ed:90:73:a5:73:97:c9:88:1d:d4: fa:3b:6a:8b:d4:53:03:97:69:df:68:96:e7:67:48:03:a1:63: 94:42:56:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrQQV8bgfXDr/STQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZWNjYTQtZGY4Ny00OWVkLTg5NmEtMzFjOTEyYmE4 Yzk4MB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk ZTAyMjQyMGEtMDVlYy00NTc4LWEzZGMtODZlYjZkOGY4MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYANLF7rlIr1aBTfnLnOqho6C8JIHErI0F/4 T8aLSwsRfU/02h4dpBcwHe+uoBIbk6zPrRsPYVR5O4Q1yvOBNAsJ+zxT0rg883wU k79R98X2dhtDT6ysb0ZKR7vRg9c5GfX3JaKizKNAbLAqWNUI4OAKj/GDrljkO8dG 9bQi1LUWxRRE6BmiG4JFsY5mmgaApKBoDLBl2AO/QqbUtw/YapeJWqZhQ5jkYNY3 CxETY5dT53laP1X/fmSiJHkmN8Bc4JgkdaF8UZ1yKPNAs//17kfRzf4wLYe8ZFb2 ckB2jC8f0PDmj7wE8cWCZQxLge6IA+NAw2CsYvYrvamzVEuPDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLU3A75M8QQzGjnE7bYApvzOi7Y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kODBl Y2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5MTJiYThjOTgvZDgwZWNjYTQtZGY4Ny00 OWVkLTg5NmEtMzFjOTEyYmE4Yzk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDgwZWNjYTQtZGY4Ny00OWVkLTg5 NmEtMzFjOTEyYmE4Yzk4L2Q4MGVjY2E0LWRmODctNDllZC04OTZhLTMxYzkxMmJh OGM5OC5jcmwwHwYDVR0jBBgwFoAU+tkPw3jWtvxPD72Itim2cZabDRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kODBlY2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5 MTJiYThjOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF+uM1qV73pTzvl6WcYrhe VeWNt9t+rGkJmBRRsANFXoh6YOd1ViAYO1sknw4ZMgksgveDOrliel1dgIf31kEl TY0qsFkjVI3nw3Eb6E4HRhmHJRT8hGSryhb3OYm9uD9zqCeSvRtBmasPQ9o1wBxr ugyzQu+NuvuqSfClOXB4F5jKAD/ljTvEp4UWf6DL76NjK09zzZ/4w5YZVRhbLC0u P6htn3leoDtAVFxEl5ggGZddvOPWKaazMuo7tDO0iuSlm+Viov9RnLRmQDTv3hIc Ef3D1FYcjiKiD0tUgWHlsO2Qc6Vzl8mIHdT6O2qL1FMDl2nfaJbnZ0gDoWOUQla1 -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:28 2025 by rpki-client