$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft File: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft (raw, json) Hash identifier: FD1XSt5F8atlSuBO/xmgVg/iAszA9Dr/BvyUQKwtfaY= Subject key identifier: F2:04:3A:B7:1B:7B:D4:E6:85:50:14:EA:99:93:F3:47:F1:2D:79:65 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584BBF10642F22D5AD3372BBD700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft Manifest number: 010D0C9F4328584073A84C39376BC697A05F2FBE Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa (hash: brLNoCB6Ut2IL3OqTmxAMbfDOX6lPxUJXyJhZ/ND2Zk=) 2: 693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa (hash: 5ogHxP3Jh0E2YHd7jy3R9jT9snhGC1YpTDEBd3qD7ao=) 3: 69c85a7e-5c7c-3cbc-8360-f4b315370081.roa (hash: A5s8eVawn0fG9E331bwavrem0yM/vlBaMf6ljqySQYU=) 4: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl (hash: WyNlLynC9BHfVWEl8PksEEeBAJnWiF0ijtJc+FjcioY=) 5: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (hash: sJdcjOfE2Hd5Rus0m0OskpoEIhtux7oByvkQl9N1mqI=) 6: d3d52428-3366-3940-ba48-6c79fec227e0.roa (hash: X9/VPiWgXv3JPZkIpQNEJFjolEW0cB9nG9BLkHKOliU=) 7: e7103f53-8715-3d60-9b51-c7bb1d74637b.roa (hash: FVdQ/FIEF4leowHizdUaCfze21hBBxDmz4sXTJxyerE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:64:2f:22:d5:ad:33:72:bb:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=f96ca2c4-ad35-4d3e-af5e-d55d2826c44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:9b:28:28:40:27:ac:bd:fc:6a:9e:ff:9c: eb:96:51:62:b1:08:c4:de:e1:5b:41:4b:2f:65:62: 75:73:8a:00:d5:c5:20:b4:df:e3:b0:34:ac:43:88: f3:1e:35:ba:6d:76:3b:bc:9e:ac:00:16:a2:5f:99: ea:80:33:1c:63:b6:ce:0a:95:03:ed:8c:c4:bd:b8: d6:35:fa:02:b5:08:b4:bf:e1:6d:ab:a0:86:fd:57: c2:f0:98:3f:62:4c:ef:7a:27:90:15:bf:4f:19:3a: a6:7d:52:9d:7d:df:05:6f:c7:2d:0c:7b:ca:90:04: ea:30:d2:4b:0e:47:fc:ba:b6:57:cc:54:88:51:04: dc:44:c9:23:f4:b7:40:bd:77:ed:85:74:f3:80:a1: 02:e8:04:4a:37:0e:df:b2:67:d6:0a:cc:a3:f4:8e: 77:e4:15:3b:e2:ce:29:db:3e:eb:d3:b3:2d:7c:7d: 41:41:92:7e:ba:27:4a:45:00:1d:83:65:6c:7e:32: 7f:1e:2b:9e:52:25:32:1b:47:90:64:a7:e5:5d:d3: 3f:f9:fb:42:49:33:37:6f:7a:72:41:49:96:bb:43: 19:35:d7:a2:26:23:ed:ea:b1:9a:96:a8:e4:f6:c6: f9:6a:91:42:a3:bf:58:c7:d4:e6:56:03:6b:ca:a9: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:04:3A:B7:1B:7B:D4:E6:85:50:14:EA:99:93:F3:47:F1:2D:79:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:62:da:6b:4a:93:77:6b:4e:a0:1a:0f:4b:3c:84:60:31:2f: d1:fc:6e:3d:f9:94:ee:be:13:52:5c:5c:46:19:b5:89:66:ed: 33:54:fe:d6:40:f5:d8:d1:0f:df:64:c1:3f:d8:3f:51:d5:4a: c4:0d:10:89:19:da:72:02:6d:2a:6d:01:b7:7b:9c:9c:f6:81: eb:4d:84:13:b3:ef:0d:c3:d3:1d:f8:17:dc:1e:d0:ab:c9:fb: fa:c4:be:fb:fc:81:51:85:3c:a1:45:40:d0:bd:0e:e4:1b:11: 6f:88:f1:25:a4:b5:33:15:b3:dc:ac:a2:6d:d9:67:75:55:58: 12:a3:51:3e:1f:a7:38:b3:5f:a8:95:65:b0:cc:f0:94:46:b1: 81:ea:2d:86:54:5e:3b:58:04:54:b1:03:a8:73:29:d1:0c:5f: 64:3d:66:9c:6b:3b:e6:cf:38:9b:87:9f:ea:c1:94:7e:f7:99: 81:d5:11:2b:36:b5:2f:3f:46:3b:0e:6f:2f:d3:23:90:ee:2b: 94:76:25:08:7e:d2:e5:92:0f:ed:fa:bf:8c:c3:56:85:c0:d4: bb:d4:53:e9:ed:b2:05:03:02:08:ae:f6:b2:ae:c1:03:60:05: da:fd:d0:bc:29:54:b9:61:ee:ea:3d:e9:5f:9e:ee:86:ae:55: 5c:05:ab:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGQvItWtM3K71wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk Zjk2Y2EyYzQtYWQzNS00ZDNlLWFmNWUtZDU1ZDI4MjZjNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1qbKChAJ6y9/Gqe/5zrllFisQjE3uFbQUsv ZWJ1c4oA1cUgtN/jsDSsQ4jzHjW6bXY7vJ6sABaiX5nqgDMcY7bOCpUD7YzEvbjW NfoCtQi0v+Ftq6CG/VfC8Jg/YkzveieQFb9PGTqmfVKdfd8Fb8ctDHvKkATqMNJL Dkf8urZXzFSIUQTcRMkj9LdAvXfthXTzgKEC6ARKNw7fsmfWCsyj9I535BU74s4p 2z7r07MtfH1BQZJ+uidKRQAdg2VsfjJ/HiueUiUyG0eQZKflXdM/+ftCSTM3b3py QUmWu0MZNdeiJiPt6rGalqjk9sb5apFCo79Yx9TmVgNryqkdrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPIEOrcbe9TmhVAU6pmT80fxLXllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvN2Y5MDBlNGUtNWYwYS00 YjE0LTk4YzAtNjY0N2JmZjVlNjRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkYtprSpN3a06gGg9LPIRg MS/R/G49+ZTuvhNSXFxGGbWJZu0zVP7WQPXY0Q/fZME/2D9R1UrEDRCJGdpyAm0q bQG3e5yc9oHrTYQTs+8Nw9Md+BfcHtCryfv6xL77/IFRhTyhRUDQvQ7kGxFviPEl pLUzFbPcrKJt2Wd1VVgSo1E+H6c4s1+olWWwzPCURrGB6i2GVF47WARUsQOocynR DF9kPWacazvmzzibh5/qwZR+95mB1RErNrUvP0Y7Dm8v0yOQ7iuUdiUIftLlkg/t +r+Mw1aFwNS71FPp7bIFAwIIrvayrsEDYAXa/dC8KVS5Ye7qPelfnu6GrlVcBauB -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:49 2025 by rpki-client