$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft File: 85be797f-f426-4ba8-98b0-1c2b5f752753.mft (raw, json) Hash identifier: +4H0YIIJ4L58G/eUjZMzT6kVy9czEQnhtvb3PDq1TIs= Subject key identifier: 17:62:B0:35:EE:A6:9A:53:7B:76:2A:94:90:1D:4F:F7:F5:A7:9C:35 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584BC1286FBDFB426D822BC65900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft Manifest number: 010D0C9F4328584073A839281E4F1168C0BB175D Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: 43d529a5-06fc-3596-b306-3805ee39efec.roa (hash: FqRHXXmNsBneoG9uSvjrb1g8EDg2nWKSmWyoskfe+JA=) 2: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (hash: 32i8WdrXM/Zt2Kj6jh3Lt7m/cBPAgvnkwGx9C6A0y58=) 3: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (hash: lHcP24J1FgbdPTg9LoqQp8gWtHhe0UlOIUe0bsXmzy0=) 4: 85be797f-f426-4ba8-98b0-1c2b5f752753.crl (hash: 7hJ+b9bZkB/J78iD6NQLqCQgOEJ/9FmF2beJaN4YZZQ=) 5: 9699501c-da98-381a-90a4-a8aa59586482.roa (hash: eMM/FVX4cjLcbqw70dxFXT06tPgAlNwMlpHKM2R9CIs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:6f:bd:fb:42:6d:82:2b:c6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=1d18852d-5b12-4232-9d10-fcae874e3a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:99:7d:38:ab:5e:bc:23:92:23:b1:0f:04: 42:b9:8f:30:f7:b1:78:9f:5a:45:cf:31:cd:8b:14: 14:07:60:0e:c1:85:ae:e3:f3:9a:b2:90:47:9f:c2: 08:d0:de:b8:c0:af:d7:fd:b1:a5:6d:c6:37:8d:8c: a7:bb:0a:57:0d:5b:96:32:fa:a2:c1:29:4b:84:d2: 1c:eb:68:6c:63:26:42:f8:71:45:8c:a1:f5:8e:c0: 36:f6:7b:20:8b:4f:44:34:77:a1:b2:b0:53:10:85: 71:01:b1:2d:c5:00:4e:1e:ca:24:42:08:ea:41:64: 68:94:ca:4c:bc:5c:98:cc:12:f6:c5:81:c4:ed:3f: 22:ee:02:d3:90:d2:83:21:92:05:79:bd:b5:68:84: 94:9e:43:4a:4e:07:d3:bb:d1:15:1d:f2:7d:dc:00: b0:db:27:57:af:36:c2:cc:d5:96:3e:27:fd:de:ce: 2c:5d:7c:d9:21:c1:f7:1f:8a:7d:ba:0f:f2:ff:ce: 30:ee:8e:e6:18:44:9e:eb:b7:1d:54:fb:40:f7:28: 5b:1d:1e:0f:08:e9:8d:d4:61:ed:56:15:6d:32:52: 4a:a3:4d:da:36:fa:22:02:d4:37:ca:e2:cf:77:39: 4b:8f:0b:95:d9:5e:e8:ec:a1:74:53:28:f1:c4:6a: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:62:B0:35:EE:A6:9A:53:7B:76:2A:94:90:1D:4F:F7:F5:A7:9C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:92:30:05:e8:e3:ca:4b:57:fc:28:e6:f9:c8:ed:ec:b7:27: 88:05:55:7e:13:46:ff:0c:13:12:73:4c:f4:81:84:0a:d3:3f: b7:74:7b:67:c5:f5:4b:d5:42:8c:81:f9:a2:2d:8e:16:a7:aa: 78:b5:c0:ff:33:20:0b:d2:e5:60:24:94:f1:60:8d:fe:76:c7: 1c:e2:d3:d3:8f:d0:da:84:07:2c:d4:e2:fe:f0:f2:68:3b:34: b8:d8:00:46:aa:f8:69:f7:e6:0a:8f:df:de:ff:34:91:94:b5: f6:80:09:f3:ac:8b:52:a6:2b:61:bc:27:c3:b3:d6:2a:03:b5: b9:45:54:a3:bf:94:e5:89:03:ff:81:85:e7:54:9d:31:67:0a: 5f:fc:20:bf:d2:c5:14:6d:b1:fe:7b:4d:66:7c:e2:5e:ca:55: d8:cb:0d:95:28:18:09:47:01:1a:4d:cf:6c:ff:b2:0e:d8:e6: 50:41:a8:c7:64:ae:6f:ce:9c:c6:20:e4:34:0b:02:2f:3a:96: 3b:bd:c3:af:03:06:56:42:da:70:fe:e4:0a:33:9d:8b:ac:fa: 8f:e1:ef:7b:27:f4:45:7a:51:eb:5b:cf:8b:fd:12:39:8d:ea: 22:b8:8e:77:54:c5:cd:1d:fd:ea:17:c9:86:a2:15:87:24:db: d8:7d:e4:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKG+9+0JtgivGWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk MWQxODg1MmQtNWIxMi00MjMyLTlkMTAtZmNhZTg3NGUzYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOmZfTirXrwjkiOxDwRCuY8w97F4n1pFzzHN ixQUB2AOwYWu4/OaspBHn8II0N64wK/X/bGlbcY3jYynuwpXDVuWMvqiwSlLhNIc 62hsYyZC+HFFjKH1jsA29nsgi09ENHehsrBTEIVxAbEtxQBOHsokQgjqQWRolMpM vFyYzBL2xYHE7T8i7gLTkNKDIZIFeb21aISUnkNKTgfTu9EVHfJ93ACw2ydXrzbC zNWWPif93s4sXXzZIcH3H4p9ug/y/84w7o7mGESe67cdVPtA9yhbHR4PCOmN1GHt VhVtMlJKo03aNvoiAtQ3yuLPdzlLjwuV2V7o7KF0UyjxxGpQ4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBdisDXupppTe3YqlJAdT/f1p5w1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvODViZTc5N2YtZjQyNi00 YmE4LTk4YjAtMWMyYjVmNzUyNzUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAekjAF6OPKS1f8KOb5yO3s tyeIBVV+E0b/DBMSc0z0gYQK0z+3dHtnxfVL1UKMgfmiLY4Wp6p4tcD/MyAL0uVg JJTxYI3+dscc4tPTj9DahAcs1OL+8PJoOzS42ABGqvhp9+YKj9/e/zSRlLX2gAnz rItSpithvCfDs9YqA7W5RVSjv5TliQP/gYXnVJ0xZwpf/CC/0sUUbbH+e01mfOJe ylXYyw2VKBgJRwEaTc9s/7IO2OZQQajHZK5vzpzGIOQ0CwIvOpY7vcOvAwZWQtpw /uQKM52LrPqP4e97J/RFelHrW8+L/RI5jeoiuI53VMXNHf3qF8mGohWHJNvYfeQB -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:22 2025 by rpki-client