$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: VVais0eb2QU1H5dueUTfF9Dwe++v0ZcZIvVA3yHmyWY= Subject key identifier: 24:13:25:84:EC:D9:DF:7F:D9:31:C8:31:95:F8:E9:FB:8F:74:FB:3E Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584BBDE699395D56E942B77A20C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CABD Signing time: Mon 03 Nov 2025 23:00:03 +0000 Manifest this update: Mon 03 Nov 2025 23:00:03 +0000 Manifest next update: Wed 05 Nov 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: Y4Kmm3xWsgwZovUo1qm8iHcQgz9CFONGvm+R0AVmtUk=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: r4YFkR6Z60Djo+u+xr6rrHD4k0p23TMZbHgBURqxQHI=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: ITsTHt8EXecXeQ49lMMMDEVn0FiybpSSdhohvtxeSF0=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: E6ssGfxjE63xUyZOQCvfn4sBI03Uqyl6c/ubT9OgC3U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:e6:99:39:5d:56:e9:42:b7:7a:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Nov 3 23:00:03 2025 GMT Not After : Nov 5 23:00:00 2025 GMT Subject: CN=12ea8eb4-6568-41dd-9a14-51b6c3260e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:58:eb:86:84:0a:f5:18:8d:03:a8:de:92: 2e:36:28:df:38:6e:00:03:32:b3:4b:99:1b:87:f6: ff:9d:61:05:28:82:c4:ee:a1:67:2d:85:16:9c:24: 41:03:1e:f0:7b:ac:69:1c:8b:02:84:42:a7:e8:99: 5d:55:33:e1:6e:32:0b:3c:16:a2:57:02:2f:76:b5: d1:29:3d:ea:2e:34:20:09:57:e8:cb:a2:88:f2:6a: 20:9f:f7:8a:8a:47:1f:8e:66:28:39:d9:5f:8d:09: 6f:b9:b2:aa:d9:37:ac:c7:6a:3f:cf:7b:5c:e4:3e: 78:a6:4b:25:bb:02:be:c1:85:1e:39:8e:8c:fa:45: a4:86:e6:38:41:73:a1:a9:5c:66:a5:53:93:3d:fe: 74:3c:a7:93:57:37:24:26:95:39:02:56:71:9b:86: fb:2b:3a:21:cc:a3:0d:6a:0c:e8:36:e2:10:d3:04: 17:36:41:1a:54:42:38:4f:a9:72:9e:e5:c5:5c:65: a8:5b:ab:8b:f0:ba:4d:44:41:93:a1:1b:bf:d1:c3: 49:0b:c2:4c:50:25:95:7f:02:5b:ed:2e:4e:ba:76: 61:fb:23:0c:82:cb:ad:5b:5d:c1:de:1c:7b:bb:46: ed:07:03:86:6b:38:d4:96:10:2a:ee:da:5b:9a:93: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:13:25:84:EC:D9:DF:7F:D9:31:C8:31:95:F8:E9:FB:8F:74:FB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:c7:fa:c0:b5:ad:95:34:9e:7d:78:78:8c:5f:66:32:16: 4f:9e:fa:4f:1a:0c:09:4f:fd:65:b0:31:4f:19:2d:2c:93:67: c1:25:ba:87:d7:aa:95:b3:54:36:27:a6:d5:ba:76:59:65:13: 72:c8:0c:fa:49:be:41:a1:59:e5:c9:dd:a5:7d:3d:f5:e6:98: ba:eb:81:01:d6:32:56:51:ef:f5:15:bc:62:33:6e:dc:64:d5: 36:b3:1c:47:6c:77:64:0a:5b:cf:d1:2d:32:77:87:7f:fe:dc: b8:c0:65:da:38:8e:20:61:7c:a5:1f:29:eb:df:0e:05:fd:bd: 80:af:fd:dc:5e:b0:ea:04:7b:7b:32:36:29:ce:5c:2a:98:4f: 9d:42:10:8d:ed:3d:3f:01:ee:a5:5c:06:a2:d5:60:61:04:75: 01:7d:e2:bf:aa:54:30:cc:28:98:c9:da:ff:77:2b:21:e2:49: 37:09:5f:0d:d8:70:fa:c0:8d:b9:4e:31:40:7b:27:c9:0d:6d: 11:95:9a:64:7e:3f:f6:25:56:1d:32:f1:47:88:15:44:8d:e2: b3:b0:2e:a1:35:cb:9c:d0:40:bf:f7:a8:5a:da:98:bc:b3:5d: ff:46:c0:57:65:d1:42:ce:d9:d9:39:16:ca:8f:28:1a:e6:bd: df:de:29:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu95pk5XVbpQrd6IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MTEwMzIzMDAwM1oXDTI1MTEwNTIzMDAwMFowLzEtMCsGA1UEAxMk MTJlYThlYjQtNjU2OC00MWRkLTlhMTQtNTFiNmMzMjYwZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiFY64aECvUYjQOo3pIuNijfOG4AAzKzS5kb h/b/nWEFKILE7qFnLYUWnCRBAx7we6xpHIsChEKn6JldVTPhbjILPBaiVwIvdrXR KT3qLjQgCVfoy6KI8mogn/eKikcfjmYoOdlfjQlvubKq2Tesx2o/z3tc5D54pksl uwK+wYUeOY6M+kWkhuY4QXOhqVxmpVOTPf50PKeTVzckJpU5AlZxm4b7KzohzKMN agzoNuIQ0wQXNkEaVEI4T6lynuXFXGWoW6uL8LpNREGToRu/0cNJC8JMUCWVfwJb 7S5OunZh+yMMgsutW13B3hx7u0btBwOGazjUlhAq7tpbmpPRAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCQTJYTs2d9/2THIMZX46fuPdPs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6dsf6wLWtlTSefXh4jF9m MhZPnvpPGgwJT/1lsDFPGS0sk2fBJbqH16qVs1Q2J6bVunZZZRNyyAz6Sb5BoVnl yd2lfT315pi664EB1jJWUe/1FbxiM27cZNU2sxxHbHdkClvP0S0yd4d//ty4wGXa OI4gYXylHynr3w4F/b2Ar/3cXrDqBHt7MjYpzlwqmE+dQhCN7T0/Ae6lXAai1WBh BHUBfeK/qlQwzCiYydr/dysh4kk3CV8N2HD6wI25TjFAeyfJDW0RlZpkfj/2JVYd MvFHiBVEjeKzsC6hNcuc0EC/96ha2pi8s13/RsBXZdFCztnZORbKjyga5r3f3ilL -----END CERTIFICATE-----Generated at Wed Nov 5 00:32:27 2025 by rpki-client