$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft File: 0c3cf342-4337-44bf-ac45-d0772ad75854.mft (raw, json) Hash identifier: cfg6rSJC9v/9kBHDgcemLe4giK7zNXKaJgKQ/syZIL8= Subject key identifier: CC:53:B0:91:0F:B1:93:7B:A8:4B:1E:77:97:B6:6D:FD:26:F5:3A:E5 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584BC075C354EFAD012A57D48BB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft Manifest number: 010D0C9F4328584073A8286FB665AF5FD97EC5D1 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 034976f2-b73d-31c2-a41d-907be371012c.roa (hash: g5fpPkeQxPIz92xDx2diLx1Ri2HHivBOLUKFpSuaBKU=) 2: 0c3cf342-4337-44bf-ac45-d0772ad75854.crl (hash: yh2mtj2a3KRwJ+bPbjj+A8Y5DRVJjEFnRcyijrVQmD8=) 3: 1b6464a5-3725-3742-83db-ed28b8df3f78.roa (hash: RvRZHHxOtqK3PI8iJs/axh2hnAV+pXNDu4daPuiVxwk=) 4: 7463cdb5-e306-3d42-9b16-fafcf27f63d2.roa (hash: g8lFAdMhxKWepY2sn96LWSeDVZrTKxm+jrpS5W7HqzA=) 5: 79a75857-a8dd-342c-933c-947c4710fda2.roa (hash: aiQcbnnZBGnr7B9yt6eqdKVL2ME+pmdh4IVbHse5420=) 6: a15bb8f9-5f58-3dde-b836-b44822b3323f.roa (hash: LI1gcyLUVLyvQuVyiWOU7SGA7xFJmxmIgkcaSR9q0YM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:54:ef:ad:01:2a:57:d4:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=9748a242-ea93-4ce7-9952-89e978236676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:b1:2e:fe:0a:55:f1:ab:97:f2:c3:37:0c: 34:51:d2:85:dd:fb:0b:c5:f3:a5:f0:bc:66:7b:3c: 0b:e3:6c:9c:0e:3b:7b:ee:f5:35:5c:4a:55:36:7e: 57:1f:96:a9:db:51:3a:8f:71:77:eb:eb:be:d7:ba: 20:ae:2f:c8:b5:f2:7e:da:8d:6d:5b:1f:11:a0:29: 5e:c3:c0:da:c9:d0:5d:1a:fd:65:55:f2:cd:1e:24: ef:3d:20:99:dc:e5:67:35:8b:2c:d5:3b:d9:e4:a2: c5:fd:2b:ca:11:dc:56:4f:6d:06:f7:a9:63:dd:89: 06:35:fd:3b:50:d5:ac:57:af:65:3c:1e:99:58:b2: fc:77:ab:4c:ec:f9:1e:47:83:f8:99:f9:c3:02:15: ee:d4:32:48:25:e9:c5:92:e5:d6:eb:e2:be:51:55: 4c:2c:d6:74:58:13:61:0a:ac:5e:63:5a:72:8e:f2: bb:a2:ef:a0:1b:1d:63:98:7d:1e:0b:e3:ff:3b:e9: 25:0e:13:91:1b:79:23:40:c5:94:3e:55:ea:8a:87: 47:57:fd:55:92:3c:35:33:f8:9f:ab:fe:ce:17:7e: a6:0c:3b:de:f4:21:dc:35:0c:cd:61:ec:f0:32:ab: f3:b5:88:81:6d:f3:6f:56:a5:c2:fc:8f:bb:87:59: 50:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:53:B0:91:0F:B1:93:7B:A8:4B:1E:77:97:B6:6D:FD:26:F5:3A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9e:d3:0f:eb:55:6b:ac:46:2a:15:e9:14:77:5b:2d:d8:f6: 33:f4:1f:48:1c:11:e2:9e:ac:b1:0b:8e:5e:2b:1f:06:a1:1d: 4e:84:64:0c:d0:2b:ff:f9:46:16:1d:6f:9e:98:73:7b:9d:6c: 09:e5:c7:3f:11:a2:a6:03:39:e8:b1:33:be:7e:09:6b:7e:06: 78:6a:75:bb:a1:fd:a3:2e:ef:93:e5:7f:7b:18:c2:8e:a8:23: 25:5e:8d:6a:d1:1b:52:a5:c7:85:98:24:e6:db:c4:e3:01:de: 64:a4:95:af:69:b3:e9:03:94:36:4f:33:15:ea:d1:84:03:1e: 8f:a6:1a:e6:b3:ac:21:a3:0a:48:9b:8f:3b:69:49:de:79:b7: 48:a5:a5:d0:9b:22:06:88:ef:5f:77:9f:fd:f5:64:ee:3e:61: 85:08:24:bf:4e:1f:2e:51:da:92:ca:e5:05:7c:86:cf:ca:aa: f0:68:47:29:13:82:6d:b3:d6:b2:3b:f3:9c:50:a6:9a:37:e5: 29:58:b6:75:0c:1c:04:32:26:f4:2e:fc:57:c8:81:ff:19:e6: a8:50:ce:14:3d:6e:d0:96:92:41:7f:f4:69:3e:0f:d6:46:58: 4f:ce:7c:d2:b1:23:f9:40:26:93:ba:68:57:fd:7d:35:d7:06: 9b:c6:0f:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcNU760BKlfUi7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk OTc0OGEyNDItZWE5My00Y2U3LTk5NTItODllOTc4MjM2Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtumxLv4KVfGrl/LDNww0UdKF3fsLxfOl8Lxm ezwL42ycDjt77vU1XEpVNn5XH5ap21E6j3F36+u+17ogri/ItfJ+2o1tWx8RoCle w8DaydBdGv1lVfLNHiTvPSCZ3OVnNYss1TvZ5KLF/SvKEdxWT20G96lj3YkGNf07 UNWsV69lPB6ZWLL8d6tM7PkeR4P4mfnDAhXu1DJIJenFkuXW6+K+UVVMLNZ0WBNh CqxeY1pyjvK7ou+gGx1jmH0eC+P/O+klDhORG3kjQMWUPlXqiodHV/1Vkjw1M/if q/7OF36mDDve9CHcNQzNYezwMqvztYiBbfNvVqXC/I+7h1lQZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMxTsJEPsZN7qEsed5e2bf0m9TrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMGMzY2YzNDItNDMzNy00 NGJmLWFjNDUtZDA3NzJhZDc1ODU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLntMP61VrrEYqFekUd1st 2PYz9B9IHBHinqyxC45eKx8GoR1OhGQM0Cv/+UYWHW+emHN7nWwJ5cc/EaKmAzno sTO+fglrfgZ4anW7of2jLu+T5X97GMKOqCMlXo1q0RtSpceFmCTm28TjAd5kpJWv abPpA5Q2TzMV6tGEAx6Pphrms6whowpIm487aUneebdIpaXQmyIGiO9fd5/99WTu PmGFCCS/Th8uUdqSyuUFfIbPyqrwaEcpE4Jts9ayO/OcUKaaN+UpWLZ1DBwEMib0 LvxXyIH/GeaoUM4UPW7QlpJBf/RpPg/WRlhPznzSsSP5QCaTumhX/X011wabxg+h -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:50 2025 by rpki-client