$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft File: 09a6e101-d379-454b-8947-39f1f150481a.mft (raw, json) Hash identifier: o0MnTdKDSHXvOKBu0ZxSx8De8oVH/mQIHnroTsrN9TA= Subject key identifier: 70:8A:8A:F0:F9:B1:DE:C7:77:78:C5:F0:25:52:CD:97:97:DD:0A:C9 Authority key identifier: BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0 Certificate issuer: /CN=09a6e101-d379-454b-8947-39f1f150481a Certificate serial: 010D0C9F4328584BC19F82CA970D82DAA794D400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft Manifest number: 010D0C9F43285846E1D18FAD9C937AD5C2F1B049 Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Fri 07 Nov 2025 07:00:00 +0000 Files and hashes: 1: 09a6e101-d379-454b-8947-39f1f150481a.crl (hash: dg47qXYhG9Gab2mDYiDKbMkVUfPGjauS+DkIQKeH0eU=) 2: 4c16f448-b373-391e-b0c6-01474106fbae.roa (hash: wFseAifzm8wK5p3WuLL6n0nDMhQJelb3ZUxv9A6ljtw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:82:ca:97:0d:82:da:a7:94:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a6e101-d379-454b-8947-39f1f150481a Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 7 07:00:00 2025 GMT Subject: CN=9dfa6ef0-41b8-4a68-b6ae-44025b6be0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6c:7b:c1:b7:89:1e:b8:bd:e2:b3:7c:aa:45: ea:b0:25:e9:ef:63:1d:fd:4d:ed:c3:e2:f5:f2:71: c6:e2:df:f3:7e:b8:46:36:07:d1:6e:0a:96:a7:ca: 20:5f:56:79:3d:61:7d:9f:27:cf:35:16:3a:d4:e9: 81:c1:dd:f3:03:c1:b2:95:ee:b8:89:fa:35:de:b2: 20:2b:44:bc:e9:ad:92:e3:74:10:40:50:82:74:de: c1:02:01:a6:38:c0:cf:8e:2c:5d:51:7e:db:01:bc: 20:f7:4e:ae:38:f2:33:4e:ac:4c:46:b5:69:7f:6e: cc:e1:0d:dc:c8:da:a4:84:8c:c1:34:92:c2:e7:77: dc:3c:48:41:89:96:72:40:40:a7:1d:70:8c:ba:7a: 58:85:2b:83:82:31:11:40:bb:8c:28:9d:a6:ad:b1: fc:19:c8:e0:29:02:9a:b1:67:04:e7:b0:9e:35:c1: 5f:75:32:ee:75:0e:8a:b9:20:ee:72:07:eb:47:9e: 07:5c:14:7f:f8:fd:ec:65:ae:85:f0:50:26:0b:5b: 1b:d6:ac:c8:9d:fa:7d:69:b2:96:fd:b4:91:fb:35: 3a:89:96:5c:9e:8c:85:ec:5b:8e:86:a2:41:57:ad: bf:23:ca:49:48:28:b5:7d:0c:00:0e:f2:73:b2:2a: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:8A:F0:F9:B1:DE:C7:77:78:C5:F0:25:52:CD:97:97:DD:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.crl X509v3 Authority Key Identifier: keyid:BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ec:f6:bf:97:8c:fe:55:30:51:99:1d:10:0e:42:a9:b5:d3: d9:3c:90:26:28:b2:26:13:a4:1f:5f:30:3f:63:d1:36:24:0d: 8a:43:e1:40:4c:e6:03:9d:1e:a3:fa:58:3a:ea:f3:a0:ee:e3: d7:ec:78:8f:d8:3c:a5:a8:eb:d1:ef:7a:26:af:34:c8:23:f8: d1:49:19:c1:17:a0:ee:1f:b2:0d:ea:ce:d8:ae:e1:d2:01:45: 5c:49:db:e0:e0:46:60:a2:f0:6d:02:06:73:4c:2c:2e:b2:21: 29:4b:61:f1:29:c9:e2:2d:3c:b9:7d:49:42:73:9b:8a:7f:78: 82:15:c8:52:2a:24:90:a9:db:39:92:ed:61:88:8c:ff:81:e8: c4:ec:c8:20:a4:ae:9b:8f:98:e7:0b:ce:4b:5e:13:95:11:da: b4:b6:5f:03:ed:17:6e:f4:a1:0a:cb:31:9e:c8:f7:4f:0f:23: fe:87:27:97:03:cb:93:81:f6:a0:b6:f9:67:9b:e4:d5:10:6f: 2c:1f:42:73:a7:64:3d:4e:af:57:3d:e7:f4:a2:3b:93:10:f9: 4f:a7:44:72:f1:c3:20:91:04:13:8c:ea:3b:e0:ce:f3:27:75: 86:e6:5d:d9:06:70:18:c8:a3:c6:27:3e:e4:76:9a:f0:3d:98: 7c:d7:ed:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4LKlw2C2qeU1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhNmUxMDEtZDM3OS00NTRiLTg5NDctMzlmMWYxNTA0 ODFhMB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwNzA3MDAwMFowLzEtMCsGA1UEAxMk OWRmYTZlZjAtNDFiOC00YTY4LWI2YWUtNDQwMjViNmJlMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGx7wbeJHri94rN8qkXqsCXp72Md/U3tw+L1 8nHG4t/zfrhGNgfRbgqWp8ogX1Z5PWF9nyfPNRY61OmBwd3zA8Gyle64ifo13rIg K0S86a2S43QQQFCCdN7BAgGmOMDPjixdUX7bAbwg906uOPIzTqxMRrVpf27M4Q3c yNqkhIzBNJLC53fcPEhBiZZyQECnHXCMunpYhSuDgjERQLuMKJ2mrbH8GcjgKQKa sWcE57CeNcFfdTLudQ6KuSDucgfrR54HXBR/+P3sZa6F8FAmC1sb1qzInfp9abKW /bSR+zU6iZZcnoyF7FuOhqJBV62/I8pJSCi1fQwADvJzsipfpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHCKivD5sd7Hd3jF8CVSzZeX3QrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wOWE2 ZTEwMS1kMzc5LTQ1NGItODk0Ny0zOWYxZjE1MDQ4MWEvMDlhNmUxMDEtZDM3OS00 NTRiLTg5NDctMzlmMWYxNTA0ODFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDlhNmUxMDEtZDM3OS00NTRiLTg5 NDctMzlmMWYxNTA0ODFhLzA5YTZlMTAxLWQzNzktNDU0Yi04OTQ3LTM5ZjFmMTUw NDgxYS5jcmwwHwYDVR0jBBgwFoAUvU3AqpvgYPh3W+N2l0AUG5OiqNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wOWE2ZTEwMS1kMzc5LTQ1NGItODk0Ny0zOWYx ZjE1MDQ4MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBo7Pa/l4z+VTBRmR0QDkKp tdPZPJAmKLImE6QfXzA/Y9E2JA2KQ+FATOYDnR6j+lg66vOg7uPX7HiP2DylqOvR 73omrzTII/jRSRnBF6DuH7IN6s7YruHSAUVcSdvg4EZgovBtAgZzTCwusiEpS2Hx KcniLTy5fUlCc5uKf3iCFchSKiSQqds5ku1hiIz/gejE7MggpK6bj5jnC85LXhOV Edq0tl8D7Rdu9KEKyzGeyPdPDyP+hyeXA8uTgfagtvlnm+TVEG8sH0Jzp2Q9Tq9X Pef0ojuTEPlPp0Ry8cMgkQQTjOo74M7zJ3WG5l3ZBnAYyKPGJz7kdprwPZh81+0/ -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:40 2025 by rpki-client