$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.mft File: 70833e05-2509-4686-bf80-d3c49dc27dac.mft (raw, json) Hash identifier: fbX8Enny45PGh+XUsvyVwg6AZN99N8KNPikQZNSWLVc= Subject key identifier: 7A:FA:E3:FB:92:81:E5:4D:FE:C4:86:1C:D7:1D:AE:04:CD:FB:F0:58 Authority key identifier: 51:E6:3D:C3:5C:D0:8B:93:C3:B0:A2:16:28:5A:0B:59:2C:23:20:4A Certificate issuer: /CN=70833e05-2509-4686-bf80-d3c49dc27dac Certificate serial: 010D0C9F4328584BC10A9CC687B0B1CD62691440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.mft Manifest number: 010D0C9F43285845E052DD141464A6A2A73BE2D6 Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Fri 07 Nov 2025 02:00:00 +0000 Files and hashes: 1: 6857b5d2-c32c-3cbc-a5e7-ac087f158ff1.roa (hash: HfBiCLqkF9Aa1jZLo0AVF3s85o78+Upw5Rdd4GqeAxQ=) 2: 70833e05-2509-4686-bf80-d3c49dc27dac.crl (hash: Dq8ZVlJBH9eW6JmAXMtcYsPkhvCSSMGfRbwvV2cNTJ8=) 3: 85080ee6-4816-3c0b-8319-42c05a6124e1.roa (hash: 9G2hobebMQ+/2jxQrrJ15WKFI8Zf6iqaaShE+RZUAyw=) 4: aeb9f6bb-025c-36a2-a214-efe329f1af0b.roa (hash: /0/1957351yE4lGDogbydkUGAX+bxYPDQGT3IScgl8E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9c:c6:87:b0:b1:cd:62:69:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70833e05-2509-4686-bf80-d3c49dc27dac Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 7 02:00:00 2025 GMT Subject: CN=d4d3aec2-1d64-47fd-bc96-e2ed8445b482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:30:0a:48:2d:b1:28:cb:cd:b2:cf:b2:7a: 63:c3:56:4b:f4:8d:13:4a:23:02:69:d7:29:ef:33: 95:46:3b:49:92:bd:e2:ac:17:90:25:80:c0:bd:79: be:cf:5e:c8:64:cf:09:bb:f3:d6:b3:a7:9b:f7:39: 14:53:59:39:c3:a8:e3:98:45:81:0f:ab:53:c9:0a: 18:87:27:73:c5:74:ec:48:42:3d:5b:f5:c0:87:86: da:92:dd:26:79:89:87:57:cf:1e:b6:5a:25:af:b1: db:9f:c5:07:13:81:5a:63:c9:45:cb:9e:32:a3:89: 09:28:ab:87:76:e2:18:3b:57:52:b2:1a:5a:f0:9b: fb:c4:a6:1c:bf:92:60:58:5c:09:9e:83:5c:d8:bf: 07:82:57:e6:c7:3c:98:2f:35:84:b7:61:2e:ae:96: e8:b9:30:d7:ea:b7:7d:ab:51:ea:82:06:a7:ab:b6: 01:d1:89:a1:a3:c3:a8:41:fd:8c:fc:c7:41:a4:58: 21:6d:45:3c:ee:cc:2f:2d:ef:16:f0:d7:59:b5:48: 32:e2:7e:04:ae:90:c7:17:db:5b:84:ec:b1:6c:3f: 01:fe:95:33:b5:a4:1f:dc:ea:b2:2e:4c:97:6e:f8: bf:28:88:9f:9a:25:ea:67:53:19:6b:95:00:b1:93: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FA:E3:FB:92:81:E5:4D:FE:C4:86:1C:D7:1D:AE:04:CD:FB:F0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac/70833e05-2509-4686-bf80-d3c49dc27dac.crl X509v3 Authority Key Identifier: keyid:51:E6:3D:C3:5C:D0:8B:93:C3:B0:A2:16:28:5A:0B:59:2C:23:20:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70833e05-2509-4686-bf80-d3c49dc27dac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5b:1c:21:1d:e9:51:35:14:08:ba:de:ed:bf:4a:6b:e2:10: f3:28:9e:76:3d:a1:ab:ae:1e:b9:8a:f2:7a:18:12:52:72:e6: 32:d2:8f:dd:88:5e:24:12:cc:14:12:64:1e:ee:7d:45:08:a5: d0:1b:67:0c:f8:9e:70:3c:45:22:fe:f7:00:10:44:9d:be:21: c6:4f:d7:ca:51:70:bb:8c:52:f6:56:d2:ba:7b:5e:1a:45:b0: 89:ce:c7:da:99:b5:30:87:f1:cc:ea:8b:a9:79:31:a0:50:35: d9:29:6f:60:ef:c0:30:e7:11:1b:8c:0e:e9:f9:3c:d1:c2:7f: 3a:e6:1a:0e:ed:18:e7:93:27:5f:bd:11:8d:0d:89:ad:20:4d: 5d:11:56:42:08:4f:a7:4b:56:a9:ce:34:41:e1:df:e6:f0:24: c3:a4:c3:fa:01:14:36:09:e5:df:48:a5:ae:30:bc:16:fb:6e: 9d:28:5e:f4:ed:c0:a2:97:4b:84:3c:f5:89:9c:ba:c1:e2:51: 57:50:90:82:67:e2:76:bb:5e:fd:9f:f1:55:93:8c:ca:b5:5b: 5c:9d:70:36:44:5a:99:03:ce:20:54:78:e0:b2:f1:e5:59:99: 7d:8c:08:23:e9:a7:08:a0:20:80:7d:cc:b3:0e:1c:9f:66:80: 85:c0:f3:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCpzGh7CxzWJpFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA4MzNlMDUtMjUwOS00Njg2LWJmODAtZDNjNDlkYzI3 ZGFjMB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwNzAyMDAwMFowLzEtMCsGA1UEAxMk ZDRkM2FlYzItMWQ2NC00N2ZkLWJjOTYtZTJlZDg0NDViNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiswCkgtsSjLzbLPsnpjw1ZL9I0TSiMCadcp 7zOVRjtJkr3irBeQJYDAvXm+z17IZM8Ju/PWs6eb9zkUU1k5w6jjmEWBD6tTyQoY hydzxXTsSEI9W/XAh4bakt0meYmHV88etlolr7Hbn8UHE4FaY8lFy54yo4kJKKuH duIYO1dSshpa8Jv7xKYcv5JgWFwJnoNc2L8HglfmxzyYLzWEt2EurpbouTDX6rd9 q1Hqgganq7YB0Ymho8OoQf2M/MdBpFghbUU87swvLe8W8NdZtUgy4n4ErpDHF9tb hOyxbD8B/pUztaQf3OqyLkyXbvi/KIifmiXqZ1MZa5UAsZN9QwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHr64/uSgeVN/sSGHNcdrgTN+/BYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MDgz M2UwNS0yNTA5LTQ2ODYtYmY4MC1kM2M0OWRjMjdkYWMvNzA4MzNlMDUtMjUwOS00 Njg2LWJmODAtZDNjNDlkYzI3ZGFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzA4MzNlMDUtMjUwOS00Njg2LWJm ODAtZDNjNDlkYzI3ZGFjLzcwODMzZTA1LTI1MDktNDY4Ni1iZjgwLWQzYzQ5ZGMy N2RhYy5jcmwwHwYDVR0jBBgwFoAUUeY9w1zQi5PDsKIWKFoLWSwjIEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MDgzM2UwNS0yNTA5LTQ2ODYtYmY4MC1kM2M0 OWRjMjdkYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsWxwhHelRNRQIut7tv0pr 4hDzKJ52PaGrrh65ivJ6GBJScuYy0o/diF4kEswUEmQe7n1FCKXQG2cM+J5wPEUi /vcAEESdviHGT9fKUXC7jFL2VtK6e14aRbCJzsfambUwh/HM6oupeTGgUDXZKW9g 78Aw5xEbjA7p+TzRwn865hoO7RjnkydfvRGNDYmtIE1dEVZCCE+nS1apzjRB4d/m 8CTDpMP6ARQ2CeXfSKWuMLwW+26dKF707cCil0uEPPWJnLrB4lFXUJCCZ+J2u179 n/FVk4zKtVtcnXA2RFqZA84gVHjgsvHlWZl9jAgj6acIoCCAfcyzDhyfZoCFwPOX -----END CERTIFICATE-----Generated at Wed Nov 5 14:54:49 2025 by rpki-client