$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft File: 900920d7-dc26-412d-b92a-7af35af2cc24.mft (raw, json) Hash identifier: T2I5WzlIpdvbpJA56ZO1uxCNa+ZInYbMTsJd+B80jx8= Subject key identifier: 01:49:A1:40:AA:93:CD:DE:5D:79:D6:E4:0A:29:DE:C0:7F:EB:83:25 Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Certificate issuer: /CN=900920d7-dc26-412d-b92a-7af35af2cc24 Certificate serial: 010D0C9F4328584BC01C631800D3696B370FF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft Manifest number: 010D0C9F4328584073A82245154398E2816B63C6 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 900920d7-dc26-412d-b92a-7af35af2cc24.crl (hash: 6Am8AfIt1r0IfqTbbURW+M/+m2YDf8Z38KB3xH/ChbM=) 2: a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (hash: 64GTxbOn8CSjzLZI+zg2fAe0fiQ3KTxuFl4uh7Niw3s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:18:00:d3:69:6b:37:0f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=9b561bf5-bfc4-43a1-ac59-b49e37001f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:a5:4d:e1:70:93:5d:65:71:c9:14:68:67: 6b:b9:3f:e4:69:c9:d5:b6:84:32:41:53:4e:59:ae: e0:04:ca:49:0b:80:5f:a8:43:5e:60:e6:0e:8b:84: ed:84:45:26:c6:ce:b5:9d:a1:aa:28:5d:66:5b:5c: 0b:bc:69:6d:d9:3a:2d:51:99:b9:0c:ea:7b:4d:af: 31:d8:55:e1:70:bd:9b:5c:95:d6:1c:53:92:6b:c0: a8:e7:cb:bd:23:38:c0:a1:e8:60:26:e2:03:ac:dd: bc:53:59:20:3d:e6:77:48:43:bf:91:6b:c4:e8:35: ab:ec:95:f5:81:54:44:12:ef:6e:60:7f:16:9f:2b: c2:a7:08:78:b6:f0:45:4f:02:3e:e8:e9:74:d0:13: 28:95:16:4b:1c:10:93:68:bd:9b:a8:7c:27:10:d9: 9a:cd:d4:bb:b7:ab:eb:57:f6:75:de:c6:83:5f:1e: b4:99:5e:a2:e8:74:db:63:e3:bf:b7:79:e2:ef:80: 00:b3:c3:c3:d8:6b:06:66:43:4e:1a:07:6b:d7:81: 1c:0f:1f:3f:d1:fb:4e:a7:49:52:20:2c:bf:44:10: 67:4e:b9:99:ae:cd:0e:6a:18:ce:65:a6:f1:b0:1e: 09:df:26:c7:d7:22:70:09:33:b8:36:03:88:0a:da: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:49:A1:40:AA:93:CD:DE:5D:79:D6:E4:0A:29:DE:C0:7F:EB:83:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl X509v3 Authority Key Identifier: keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:33:b1:f1:d4:a2:18:96:ea:54:09:44:c7:e6:69:04:91:c7: 42:85:98:e1:a5:14:02:cc:b4:3b:6b:bd:9a:d1:8b:a6:c7:64: 91:97:39:a8:2b:17:23:2f:f3:75:e0:0b:18:9e:2a:d3:7a:de: cb:ad:61:4e:47:5a:52:7d:98:47:dc:61:85:e4:49:6c:0f:a6: 77:bd:a7:d2:3a:ba:ee:f2:da:35:28:a7:fe:f4:60:27:58:4f: ce:4d:c0:ba:f7:16:07:0e:76:ba:7c:c9:f6:a8:d8:11:f9:c3: b1:4d:41:9a:90:74:73:de:97:be:ee:6d:36:69:c7:57:03:f7: ae:dd:2b:88:40:0c:d4:af:8e:2a:c6:73:d1:ca:6f:2e:79:87: 28:e7:22:85:ab:60:29:68:1d:3f:a7:b7:92:2d:89:6f:7a:fb: ea:7c:13:1a:95:1c:c7:4d:bd:8d:96:6c:36:9a:da:e3:b7:8e: ba:30:e4:ed:35:6d:39:f4:e2:be:64:f1:81:69:3a:12:24:53: ce:7f:ca:08:8e:71:06:9b:ba:3b:56:8e:fa:60:ec:da:cd:44: 83:27:fa:01:15:99:59:de:f1:78:59:ec:dc:08:4a:d0:b3:c3: ce:48:bd:5f:2b:d6:3f:3b:7c:70:e2:9a:d6:89:77:a3:e3:70: e9:7d:22:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGMYANNpazcP8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJj YzI0MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk OWI1NjFiZjUtYmZjNC00M2ExLWFjNTktYjQ5ZTM3MDAxZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWulTeFwk11lcckUaGdruT/kacnVtoQyQVNO Wa7gBMpJC4BfqENeYOYOi4TthEUmxs61naGqKF1mW1wLvGlt2TotUZm5DOp7Ta8x 2FXhcL2bXJXWHFOSa8Co58u9IzjAoehgJuIDrN28U1kgPeZ3SEO/kWvE6DWr7JX1 gVREEu9uYH8WnyvCpwh4tvBFTwI+6Ol00BMolRZLHBCTaL2bqHwnENmazdS7t6vr V/Z13saDXx60mV6i6HTbY+O/t3ni74AAs8PD2GsGZkNOGgdr14EcDx8/0ftOp0lS ICy/RBBnTrmZrs0OahjOZabxsB4J3ybH1yJwCTO4NgOICtrApwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFJoUCqk83eXXnW5Aop3sB/64MlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5 MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvOTAwOTIwZDctZGMyNi00 MTJkLWI5MmEtN2FmMzVhZjJjYzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTAwOTIwZDctZGMyNi00MTJkLWI5 MmEtN2FmMzVhZjJjYzI0LzkwMDkyMGQ3LWRjMjYtNDEyZC1iOTJhLTdhZjM1YWYy Y2MyNC5jcmwwHwYDVR0jBBgwFoAU13KmmlqaXjEFGyFRuDvHSIlI0+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYz NWFmMmNjMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDMM7Hx1KIYlupUCUTH5mkE kcdChZjhpRQCzLQ7a72a0Yumx2SRlzmoKxcjL/N14AsYnirTet7LrWFOR1pSfZhH 3GGF5ElsD6Z3vafSOrru8to1KKf+9GAnWE/OTcC69xYHDna6fMn2qNgR+cOxTUGa kHRz3pe+7m02acdXA/eu3SuIQAzUr44qxnPRym8ueYco5yKFq2ApaB0/p7eSLYlv evvqfBMalRzHTb2Nlmw2mtrjt466MOTtNW059OK+ZPGBaToSJFPOf8oIjnEGm7o7 Vo76YOzazUSDJ/oBFZlZ3vF4WezcCErQs8POSL1fK9Y/O3xw4prWiXej43DpfSKC -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:12 2025 by rpki-client