$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft File: b9ea3438-4142-4de2-a912-7b081a51b42d.mft (raw, json) Hash identifier: PUPiIRG/FdSe9uOqrs/kYS29+Wq/3z9QQG/VzgX9/P8= Subject key identifier: 8B:F2:BF:AF:C9:BC:27:6A:B2:10:73:6A:3B:64:1F:AE:FE:99:7E:D6 Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Certificate issuer: /CN=b9ea3438-4142-4de2-a912-7b081a51b42d Certificate serial: 010D0C9F4328584BBF887FC874BE112A7433B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft Manifest number: 010D0C9F4328584073A854B5F80ED5C22F91604A Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 408f67a4-965c-3201-9f19-0975f3af94df.roa (hash: 3TY5esyJJA+zdI0uXyGvDIoRkseA0+1yAKmS2I8yewc=) 2: 99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (hash: l11jwB//yIHnabmhl9QkFtHZbgHbmyZUpeXzvO1y8zE=) 3: b9ea3438-4142-4de2-a912-7b081a51b42d.crl (hash: DtouBAMLnBmzXGJiZVhsddO5SrML9fOyukPDEx1oMMM=) 4: e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (hash: X1ClXkOSBLYX8DzH28xKvgHF8ogLAHo6b+M8tBqOSk8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7f:c8:74:be:11:2a:74:33:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=a5189fa5-09da-439a-9173-43a55d296d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:e9:84:36:84:cb:4c:0f:1d:0a:4b:dc:0b: df:19:1e:ba:88:72:f3:ff:d9:ec:fa:d2:ac:94:0a: c7:9a:3d:8f:54:05:29:90:1e:c6:dc:42:f6:79:7e: 7d:b6:88:67:6a:d4:fc:53:8b:b4:ac:60:ff:b9:be: d5:5e:4a:57:56:92:8b:1b:b5:51:89:bd:ba:65:6a: fc:06:44:63:5e:d1:22:2d:c6:99:27:dc:b5:c4:f9: d0:1e:ca:21:23:9e:3d:a0:40:06:8d:b6:68:07:fb: b0:7b:d1:91:29:ef:44:25:84:c2:aa:90:c2:84:c9: 5f:92:5d:18:9d:45:1e:d1:c6:16:27:00:93:df:85: 82:4e:61:84:32:2c:53:aa:48:6a:78:50:18:37:39: 47:9a:15:c1:2c:ac:26:38:7c:82:0d:3a:99:73:9a: bc:13:13:f7:29:94:53:d6:c9:c5:6b:e5:0e:fc:f1: 6e:16:9e:70:cd:10:50:5b:cc:95:22:a2:47:5e:5a: 81:53:8b:a4:5c:2e:f3:f9:ad:09:c2:82:93:ac:ca: e0:f2:72:09:5a:ab:15:ad:f0:27:be:00:bb:1a:23: fd:4e:bb:ac:04:41:e6:58:3d:d4:45:34:5b:00:b5: 9c:56:3c:7b:e6:c5:67:aa:60:be:9b:ab:12:e9:d3: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F2:BF:AF:C9:BC:27:6A:B2:10:73:6A:3B:64:1F:AE:FE:99:7E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl X509v3 Authority Key Identifier: keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:4a:74:10:34:81:ec:08:1d:52:13:af:37:73:c8:eb:11:63: af:06:1a:8c:76:ee:09:e8:60:1c:88:00:3a:89:44:22:3d:96: 29:89:e6:55:9c:e2:8b:2f:2b:8b:71:5b:be:2c:07:20:33:41: b6:0d:ec:96:72:44:3b:e8:30:b7:c3:fa:7e:2c:fd:e7:8b:95: 92:df:30:bd:b0:b5:8f:06:8b:fe:37:4c:50:d1:fb:42:22:23: 2a:fd:0f:70:95:24:a6:34:40:0f:4d:3a:7a:ee:c9:92:94:da: 20:41:48:a0:6a:ce:17:b7:71:0f:d2:16:d8:29:8a:3e:44:18: 3c:fe:cf:3a:0d:06:08:ef:d5:c9:68:9c:c1:37:9f:76:a6:a3: 5e:c5:9b:e2:e7:c2:ef:38:50:6e:44:79:68:60:a1:b4:61:c0: c5:3a:2f:8a:69:8a:4f:b9:3d:3f:7d:da:2c:25:f2:2c:2e:99: 9a:2d:a6:9b:f0:28:94:e1:6f:c0:9e:4f:98:5b:f0:eb:79:b9: c6:a4:19:da:27:cd:2f:f3:f2:d6:d7:f0:2e:17:c3:f4:68:46: 1a:7e:3e:63:05:d4:02:91:a7:2b:4c:67:85:b8:d2:7a:a9:9e: 11:f9:53:95:70:be:e2:dd:79:6a:5c:d0:74:f6:83:9d:c4:4f: 59:a6:14:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH/IdL4RKnQzswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi NDJkMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk YTUxODlmYTUtMDlkYS00MzlhLTkxNzMtNDNhNTVkMjk2ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYjphDaEy0wPHQpL3AvfGR66iHLz/9ns+tKs lArHmj2PVAUpkB7G3EL2eX59tohnatT8U4u0rGD/ub7VXkpXVpKLG7VRib26ZWr8 BkRjXtEiLcaZJ9y1xPnQHsohI549oEAGjbZoB/uwe9GRKe9EJYTCqpDChMlfkl0Y nUUe0cYWJwCT34WCTmGEMixTqkhqeFAYNzlHmhXBLKwmOHyCDTqZc5q8ExP3KZRT 1snFa+UO/PFuFp5wzRBQW8yVIqJHXlqBU4ukXC7z+a0JwoKTrMrg8nIJWqsVrfAn vgC7GiP9TrusBEHmWD3URTRbALWcVjx75sVnqmC+m6sS6dOeGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIvyv6/JvCdqshBzajtkH67+mX7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvYjllYTM0MzgtNDE0Mi00 ZGUyLWE5MTItN2IwODFhNTFiNDJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5 MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4 MWE1MWI0MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/SnQQNIHsCB1SE683c8jr EWOvBhqMdu4J6GAciAA6iUQiPZYpieZVnOKLLyuLcVu+LAcgM0G2DeyWckQ76DC3 w/p+LP3ni5WS3zC9sLWPBov+N0xQ0ftCIiMq/Q9wlSSmNEAPTTp67smSlNogQUig as4Xt3EP0hbYKYo+RBg8/s86DQYI79XJaJzBN592pqNexZvi58LvOFBuRHloYKG0 YcDFOi+KaYpPuT0/fdosJfIsLpmaLaab8CiU4W/Ank+YW/DrebnGpBnaJ80v8/LW 1/AuF8P0aEYafj5jBdQCkacrTGeFuNJ6qZ4R+VOVcL7i3XlqXNB09oOdxE9ZphRY -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:46 2025 by rpki-client