$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft File: 399fbcba-412a-4e4c-8856-d893d23bdd7b.mft (raw, json) Hash identifier: KqVG6FpSerp5nQ9BOcXFrriIAjgCdZaIbkTy9lPu4nM= Subject key identifier: 00:2A:66:7D:7E:D7:AC:91:30:F7:3D:DD:3A:9B:F4:41:D7:FF:B9:1F Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584BBF887D91F52CAA2D0DB7F400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft Manifest number: 010D0C9F4328584073A855378244960F024F13C8 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 399fbcba-412a-4e4c-8856-d893d23bdd7b.crl (hash: IvhUQ5Ch+ZQf+oE6L8U/oOtq/MRjeUgdQacVmlrKNWY=) 2: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (hash: LRbF5Yk8LZ5dx/2d3uLl85CuWqPGB4Yq422FAeFHyxE=) 3: 9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (hash: aPwJ5+qYt+jLy6HhhJIRCiPvYWoELg08f/WfTTCeKBg=) 4: fc352432-4e67-3899-80a1-ee18ecf984a2.roa (hash: sfZZ/3yWA9sb+UEKuG43Yz6RckrwMMKtkP0qzjSKTUM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7d:91:f5:2c:aa:2d:0d:b7:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=5bea84be-fbaa-4c37-a39d-5ac09d2027dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:85:0c:20:a0:b5:99:15:ff:cf:d6:be:74: d7:1d:07:1c:26:78:5b:62:fe:85:d2:32:59:0b:bb: ad:a6:30:50:12:d2:10:98:c9:d0:75:b8:9f:f3:15: 97:32:1b:76:53:5c:44:d4:2b:6f:55:38:9c:6a:42: 40:62:9a:92:47:e0:5c:8a:31:b4:8e:ac:5f:58:c7: 72:71:51:45:b5:14:65:58:c6:b6:36:5a:5e:b5:51: 12:09:ce:f9:07:84:76:b6:11:48:e0:b7:be:8b:6d: b9:bc:cd:a4:53:e0:3e:af:9b:34:24:89:8c:7f:07: b5:d8:22:4e:02:df:e4:07:91:68:7c:77:4c:55:27: 34:8c:f5:1a:26:27:c3:27:c4:b2:80:1f:ac:46:a5: 5f:e4:b7:27:b0:ce:61:83:bc:d7:d2:40:38:7c:23: 60:62:ee:a3:2a:43:c4:69:c3:39:9b:86:fa:24:e9: c5:b0:ad:28:81:2f:40:b3:dc:c7:a8:40:11:e3:4d: a5:7d:9b:08:0c:a8:84:30:f6:9b:02:be:30:25:6e: a6:d5:d0:e5:bb:0b:62:d8:37:10:7d:c2:49:0e:96: 64:b2:58:0e:0a:b3:12:d9:14:4b:3b:03:50:05:95: a1:11:78:ad:fc:59:f9:a2:39:90:94:f2:ad:7f:8d: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2A:66:7D:7E:D7:AC:91:30:F7:3D:DD:3A:9B:F4:41:D7:FF:B9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:aa:0c:9e:b5:92:ef:7c:2a:4f:37:3d:75:8a:34:c8:56:9e: bb:c7:de:b3:e4:57:36:d3:bd:2e:de:9e:1b:b8:d8:a5:29:5c: e2:76:d5:2b:14:39:f6:2e:40:4c:d4:60:72:56:05:91:42:94: 1c:f3:c2:88:29:fd:68:52:ba:92:ba:22:2b:2a:f2:77:a9:e1: ae:91:51:70:8f:71:d4:ef:f3:1e:82:0e:68:7a:33:ef:70:52: 25:25:56:c9:f3:a5:83:c9:e6:1a:1e:fe:74:fb:59:86:d0:b8: f6:3c:2c:ba:0e:10:76:27:53:56:f6:fe:36:15:a2:87:a2:13: ec:a5:4a:95:0f:d8:30:4e:10:e2:a5:96:ba:8e:e4:9a:5c:eb: 9e:7d:5c:23:28:9c:f8:b0:f6:f8:73:71:a8:2a:a7:af:12:80: 26:16:53:b2:f1:bd:d9:1c:61:57:66:11:23:99:d8:79:70:8f: c3:24:32:05:2c:10:12:26:39:b6:5a:43:97:99:83:6f:3f:37: e8:d1:f6:f2:2b:aa:4a:d0:c0:f3:78:4e:37:1b:d3:3a:bb:4e: 28:ed:80:13:de:43:f3:74:c1:65:30:99:15:ed:20:62:d5:a2: d9:c4:60:bd:7f:a7:e1:8a:a4:8c:1c:93:dc:0a:d1:80:51:2d: 03:fb:51:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH2R9SyqLQ239AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk NWJlYTg0YmUtZmJhYS00YzM3LWEzOWQtNWFjMDlkMjAyN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd+FDCCgtZkV/8/WvnTXHQccJnhbYv6F0jJZ C7utpjBQEtIQmMnQdbif8xWXMht2U1xE1CtvVTicakJAYpqSR+BcijG0jqxfWMdy cVFFtRRlWMa2NlpetVESCc75B4R2thFI4Le+i225vM2kU+A+r5s0JImMfwe12CJO At/kB5FofHdMVSc0jPUaJifDJ8SygB+sRqVf5LcnsM5hg7zX0kA4fCNgYu6jKkPE acM5m4b6JOnFsK0ogS9As9zHqEAR402lfZsIDKiEMPabAr4wJW6m1dDluwti2DcQ fcJJDpZkslgOCrMS2RRLOwNQBZWhEXit/Fn5ojmQlPKtf41gUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAAqZn1+16yRMPc93Tqb9EHX/7kfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvMzk5ZmJjYmEtNDEyYS00 ZTRjLTg4NTYtZDg5M2QyM2JkZDdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByqgyetZLvfCpPNz11ijTI Vp67x96z5Fc2070u3p4buNilKVzidtUrFDn2LkBM1GByVgWRQpQc88KIKf1oUrqS uiIrKvJ3qeGukVFwj3HU7/Megg5oejPvcFIlJVbJ86WDyeYaHv50+1mG0Lj2PCy6 DhB2J1NW9v42FaKHohPspUqVD9gwThDipZa6juSaXOuefVwjKJz4sPb4c3GoKqev EoAmFlOy8b3ZHGFXZhEjmdh5cI/DJDIFLBASJjm2WkOXmYNvPzfo0fbyK6pK0MDz eE43G9M6u04o7YAT3kPzdMFlMJkV7SBi1aLZxGC9f6fhiqSMHJPcCtGAUS0D+1HC -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:15 2025 by rpki-client