$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft (raw, json) Hash identifier: kVlTwiof2LaLyLlb2ddj1ozaDiImcMy6kSWnqeOiZ1E= Subject key identifier: 36:4D:AA:3F:6A:17:DC:E6:25:E4:9F:27:05:77:46:50:5B:85:39:AD Authority key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Certificate issuer: /CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Certificate serial: 010D0C9F4328584BBEF29B08E89F432EAB95FB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft Manifest number: 010D0C9F4328584073A8490E353C7E7CF5E96650 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 47f52259-d832-3c2a-bc43-3f72c7ef644d.roa (hash: +7H3RXaBt1RgDTCX8q+YFazgjicQMneu73fTwPVVDIw=) 2: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl (hash: 5FjmgI/vzjCLRSOI+U2S5+Sxtq6T5IZJAJaJJ9nHAHI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9b:08:e8:9f:43:2e:ab:95:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=b91d3866-71e4-4b08-80c8-8b8f91b49660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:f3:0a:8c:61:cc:af:f8:c6:10:54:c8:0a: 1a:4e:d9:b9:56:81:f6:c7:30:d9:26:ba:01:7e:fb: 01:b7:2b:02:5b:7e:1d:9a:35:f6:47:2c:39:c3:08: 1c:1c:68:41:3c:af:a5:dd:3e:2a:73:9c:b6:1f:2e: 6e:74:77:07:07:8c:d2:5d:7c:1e:39:f1:83:b3:80: 23:5a:44:e9:61:ba:5f:3c:e6:9f:cb:67:eb:4f:cc: 16:13:8f:19:d3:20:dd:17:4d:d8:c4:dc:66:c8:f0: 17:35:85:a8:df:c7:1d:61:d7:bb:6e:68:d9:8b:a6: 1c:07:e7:ac:1d:26:af:e6:6d:ea:73:bb:a7:bb:0a: f1:cf:00:9e:87:0e:ef:ea:3c:09:6b:be:96:0b:5c: 34:e3:a7:ee:67:37:dc:46:f6:9b:09:93:bb:39:96: 82:58:b0:0d:48:12:bc:af:b0:68:b4:e1:69:ce:7c: 64:e7:2a:26:7f:53:7f:c0:aa:f1:20:e1:a4:8a:fb: 93:d3:50:5c:3d:d7:dc:97:d3:e8:89:0a:bd:f0:ef: 33:f1:5f:53:a1:2d:d1:36:58:68:c2:d9:3e:d8:ac: 37:9f:3b:5c:0b:1e:04:6a:e0:7c:82:cb:50:ad:03: a0:7f:aa:e9:65:2a:7a:4e:6d:dd:16:ae:be:39:ec: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:AA:3F:6A:17:DC:E6:25:E4:9F:27:05:77:46:50:5B:85:39:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl X509v3 Authority Key Identifier: keyid:CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:19:95:0a:41:d5:fb:2e:6a:11:41:09:ef:dd:45:aa:45:b5: 1c:6e:11:b7:8e:36:05:f9:b3:70:b7:68:c5:cc:cc:08:c5:46: 1f:23:99:2f:05:a1:35:39:b7:a8:84:62:06:09:db:83:6f:43: 93:a7:ba:f1:a7:0d:dd:8c:07:0e:83:cb:da:f1:9a:5a:9c:a8: b6:91:8c:8a:30:1c:7b:47:be:2f:17:08:62:66:95:36:ea:43: 35:0e:48:b4:83:aa:5e:26:51:9b:28:99:3b:be:5b:73:a3:46: 64:a6:fa:9f:cc:c1:1d:b1:54:98:d0:f8:c5:4b:35:94:c6:34: 92:75:d8:2f:39:21:88:54:fd:31:9e:1d:a3:af:cd:26:37:94: 07:f5:29:63:41:81:c7:4b:6d:01:16:0a:95:d3:36:2a:35:be: bb:11:56:ee:c8:27:53:a2:15:38:6a:5c:62:96:a2:d1:e2:b9: 80:57:6b:b6:d9:9f:90:20:41:b0:13:72:73:e5:a7:32:64:f9: 16:c3:56:2b:9c:3b:2e:64:aa:48:47:c5:2e:2b:41:96:75:7f: d7:9b:ee:d3:9c:b2:ed:72:b0:c1:9b:ae:6e:56:56:85:e1:a9: 01:cc:f2:8a:98:ee:9b:19:8c:bb:c7:1a:a5:c7:dd:b0:1f:53: c0:31:00:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8psI6J9DLquV+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3 OGI0MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk YjkxZDM4NjYtNzFlNC00YjA4LTgwYzgtOGI4ZjkxYjQ5NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/3zCoxhzK/4xhBUyAoaTtm5VoH2xzDZJroB fvsBtysCW34dmjX2Ryw5wwgcHGhBPK+l3T4qc5y2Hy5udHcHB4zSXXweOfGDs4Aj WkTpYbpfPOafy2frT8wWE48Z0yDdF03YxNxmyPAXNYWo38cdYde7bmjZi6YcB+es HSav5m3qc7unuwrxzwCehw7v6jwJa76WC1w046fuZzfcRvabCZO7OZaCWLANSBK8 r7BotOFpznxk5yomf1N/wKrxIOGkivuT01BcPdfcl9PoiQq98O8z8V9ToS3RNlho wtk+2Kw3nztcCx4EauB8gstQrQOgf6rpZSp6Tm3dFq6+OeycnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDZNqj9qF9zmJeSfJwV3RlBbhTmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84OWZh MDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvODlmYTAxYWYtY2NhNS00 ZDhmLTgwMDMtZjZjOWUyMjU3OGI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODlmYTAxYWYtY2NhNS00ZDhmLTgw MDMtZjZjOWUyMjU3OGI0Lzg5ZmEwMWFmLWNjYTUtNGQ4Zi04MDAzLWY2YzllMjI1 NzhiNC5jcmwwHwYDVR0jBBgwFoAUzKuu83vISvdPvK7QobzlFWslW0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5 ZTIyNTc4YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApGZUKQdX7LmoRQQnv3UWq RbUcbhG3jjYF+bNwt2jFzMwIxUYfI5kvBaE1ObeohGIGCduDb0OTp7rxpw3djAcO g8va8ZpanKi2kYyKMBx7R74vFwhiZpU26kM1Dki0g6peJlGbKJk7vltzo0Zkpvqf zMEdsVSY0PjFSzWUxjSSddgvOSGIVP0xnh2jr80mN5QH9SljQYHHS20BFgqV0zYq Nb67EVbuyCdTohU4alxilqLR4rmAV2u22Z+QIEGwE3Jz5acyZPkWw1YrnDsuZKpI R8UuK0GWdX/Xm+7TnLLtcrDBm65uVlaF4akBzPKKmO6bGYy7xxqlx92wH1PAMQDU -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:09 2025 by rpki-client