$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft File: 9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft (raw, json) Hash identifier: 35bhxpjEKBhX6EIyP/kbYENZFx7XWXRTxvnBTqmIVg0= Subject key identifier: 57:82:14:95:21:8D:2C:D5:07:51:8E:2B:70:C3:B6:76:CA:25:55:AC Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB Certificate issuer: /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Certificate serial: 010D0C9F4328584BBE0462C0AD25677010C60E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft Manifest number: 010D0C9F4328584073A830F9762076E794E7ECA3 Signing time: Tue 04 Nov 2025 00:00:03 +0000 Manifest this update: Tue 04 Nov 2025 00:00:03 +0000 Manifest next update: Thu 06 Nov 2025 00:00:00 +0000 Files and hashes: 1: 80afc93c-8379-33e4-8c58-900d16b82c22.roa (hash: +3KR//8dIKlf0GMZ46Uqy2MCBHtMXZpD6Y3RsgKdV0A=) 2: 9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl (hash: QkV4ufkvXzaHrbWTkmad4Yd0vGU9AdQHT4/9m4GAXs4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:04:62:c0:ad:25:67:70:10:c6:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Validity Not Before: Nov 4 00:00:03 2025 GMT Not After : Nov 6 00:00:00 2025 GMT Subject: CN=0cf6deb6-b1b3-4786-a36f-9bef7f6771c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:c6:34:23:1a:ef:7f:fe:c7:29:fb:5f:ca: 0f:ed:a1:df:c4:93:7a:e2:93:ea:1d:6f:0b:e6:d5: d0:75:9a:7a:ba:c2:31:11:f6:ef:96:d3:67:d6:7f: c7:08:1e:c5:3f:8d:0d:f6:9f:d5:a5:3e:35:27:fe: 6d:40:5f:9f:25:c4:d6:7c:f8:e2:61:9c:41:91:e8: 7e:f5:0d:fc:d6:7d:e5:a8:22:1b:b1:ab:39:b3:10: a4:11:8f:d3:3c:4b:2c:78:47:c4:ef:14:41:eb:e4: 19:5c:fb:36:84:aa:2f:93:40:fc:14:85:7d:79:ae: cf:4b:a4:59:ff:ea:a1:61:e0:9b:f8:98:3b:ea:3d: b0:4e:e9:98:f5:e4:24:48:2d:d0:56:ad:49:e5:27: d5:5e:cb:87:cc:29:5a:63:93:2e:96:fa:40:f7:92: 35:15:cc:19:9c:92:6f:fe:08:fb:bb:f4:36:a8:83: 4a:70:6d:88:df:47:2c:cf:1d:57:ab:39:7e:de:46: 3d:ad:8c:12:40:08:cf:0f:b2:62:ab:9b:c7:50:6f: 1c:b5:b7:5f:64:ab:18:84:20:c5:d0:17:78:93:70: 61:12:04:28:46:da:73:90:06:97:4e:f3:ca:06:bd: 5c:ea:43:6c:19:c2:2c:b5:ca:8c:cc:6e:73:20:8b: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:82:14:95:21:8D:2C:D5:07:51:8E:2B:70:C3:B6:76:CA:25:55:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl X509v3 Authority Key Identifier: keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d3:88:29:05:c6:15:62:b0:89:6f:8f:26:7d:03:5f:3f:0f: 6a:09:8b:e4:8d:ab:41:db:2e:13:84:da:27:52:fd:d1:8f:57: df:b6:d6:2f:af:a2:be:0d:cd:19:88:0e:53:af:cc:f9:19:51: b2:b0:35:e2:b3:c3:ae:95:db:c6:8e:bb:ef:3a:a7:e5:d0:3b: 6c:98:04:1d:0e:06:7a:90:26:3f:39:dd:68:9f:fa:29:73:01: b8:78:2e:ea:cf:5f:e2:17:ab:cd:73:85:78:48:d4:8e:83:e2: 43:4f:ae:c3:bb:fd:a0:4c:cf:84:1d:8b:f6:b5:18:c9:ed:dc: 19:4e:97:b3:b7:93:de:cf:95:34:18:61:bc:e0:2c:ec:bb:18: 53:82:b7:ae:1e:bd:65:6b:e9:a0:f8:8b:38:41:ba:74:b6:06: a3:1a:d3:28:8c:19:bc:22:73:76:34:d1:b1:d2:58:e1:a7:11: b3:20:cb:3c:2a:e1:6e:ff:05:72:2f:84:a2:65:52:ff:48:e7: 07:6f:b0:2c:b8:55:6e:ee:3b:7c:0f:86:dd:9c:ff:80:ea:32: be:3d:5e:da:f2:31:5e:78:d0:55:aa:3b:6a:db:c2:cd:38:78: f4:a9:eb:d7:ef:ab:dd:3c:79:01:0c:d5:89:67:d5:16:57:48: 77:46:b0:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+BGLArSVncBDGDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjk2OGEtNmY4Yi00YzkyLWJhZTUtYzhmZDFjNzNk OTVkMB4XDTI1MTEwNDAwMDAwM1oXDTI1MTEwNjAwMDAwMFowLzEtMCsGA1UEAxMk MGNmNmRlYjYtYjFiMy00Nzg2LWEzNmYtOWJlZjdmNjc3MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdbGNCMa73/+xyn7X8oP7aHfxJN64pPqHW8L 5tXQdZp6usIxEfbvltNn1n/HCB7FP40N9p/VpT41J/5tQF+fJcTWfPjiYZxBkeh+ 9Q381n3lqCIbsas5sxCkEY/TPEsseEfE7xRB6+QZXPs2hKovk0D8FIV9ea7PS6RZ /+qhYeCb+Jg76j2wTumY9eQkSC3QVq1J5SfVXsuHzClaY5MulvpA95I1FcwZnJJv /gj7u/Q2qINKcG2I30cszx1Xqzl+3kY9rYwSQAjPD7Jiq5vHUG8ctbdfZKsYhCDF 0Bd4k3BhEgQoRtpzkAaXTvPKBr1c6kNsGcIstcqMzG5zIIu0pQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFeCFJUhjSzVB1GOK3DDtnbKJVWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Y2Fm OTY4YS02ZjhiLTRjOTItYmFlNS1jOGZkMWM3M2Q5NWQvOWNhZjk2OGEtNmY4Yi00 YzkyLWJhZTUtYzhmZDFjNzNkOTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWNhZjk2OGEtNmY4Yi00YzkyLWJh ZTUtYzhmZDFjNzNkOTVkLzljYWY5NjhhLTZmOGItNGM5Mi1iYWU1LWM4ZmQxYzcz ZDk1ZC5jcmwwHwYDVR0jBBgwFoAUSh0rIJrR3Xexa1NtSjyGeV0epNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Y2FmOTY4YS02ZjhiLTRjOTItYmFlNS1jOGZk MWM3M2Q5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCX04gpBcYVYrCJb48mfQNf Pw9qCYvkjatB2y4ThNonUv3Rj1ffttYvr6K+Dc0ZiA5Tr8z5GVGysDXis8OuldvG jrvvOqfl0DtsmAQdDgZ6kCY/Od1on/opcwG4eC7qz1/iF6vNc4V4SNSOg+JDT67D u/2gTM+EHYv2tRjJ7dwZTpezt5Pez5U0GGG84CzsuxhTgreuHr1la+mg+Is4Qbp0 tgajGtMojBm8InN2NNGx0ljhpxGzIMs8KuFu/wVyL4SiZVL/SOcHb7AsuFVu7jt8 D4bdnP+A6jK+PV7a8jFeeNBVqjtq28LNOHj0qevX76vdPHkBDNWJZ9UWV0h3RrD7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:26 2025 by rpki-client