$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.mft File: 9400a101-2acc-45af-84ab-b8e868c728bc.mft (raw, json) Hash identifier: ezPfScE8FutVXzQQsJGBqEA3V/yMqP6NQaO/Smq7xVA= Subject key identifier: 91:42:1F:5A:33:E2:75:98:28:4A:18:72:85:7A:40:62:6F:0E:44:C9 Authority key identifier: AE:B4:E4:86:C7:30:D4:65:63:AC:78:A7:38:CB:1D:A3:D5:97:B6:49 Certificate issuer: /CN=9400a101-2acc-45af-84ab-b8e868c728bc Certificate serial: 010D0C9F4328584BC2AB9448565CE19780E4DA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.mft Manifest number: 010D0C9F4328584A73BA4D40CC25C50E6CE77F3B Signing time: Wed 05 Nov 2025 16:00:08 +0000 Manifest this update: Wed 05 Nov 2025 16:00:08 +0000 Manifest next update: Sat 08 Nov 2025 16:00:00 +0000 Files and hashes: 1: 70e12009-48a5-32a3-9e38-9bb500709370.roa (hash: t52hp1ifWwmx+R630t+FI0Lyk1wCy9pksyqiVFIO1cE=) 2: 9400a101-2acc-45af-84ab-b8e868c728bc.crl (hash: 5chSIZOCLeuUgp/OkVHwFGbevn+rsD5UcT7FQWB7fsU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ab:94:48:56:5c:e1:97:80:e4:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9400a101-2acc-45af-84ab-b8e868c728bc Validity Not Before: Nov 5 16:00:08 2025 GMT Not After : Nov 8 16:00:00 2025 GMT Subject: CN=00ba999e-ca49-4a41-a6a3-6f20620c0a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:06:9d:cb:7d:c4:7a:c7:5e:a2:7e:c8:55: 2e:7b:1d:28:82:d9:99:2e:63:a5:db:7e:b8:6a:a7: 6e:7f:39:24:aa:c9:69:25:3c:ff:ab:b2:23:81:51: a8:e2:0f:fb:be:d6:8a:c0:26:1f:97:ea:cd:a4:ba: ba:da:06:b6:ba:19:34:6d:21:4a:07:64:bf:7a:90: ea:c6:02:78:0e:03:27:2a:6c:85:d3:0f:79:d8:ef: 3d:41:4e:96:63:1d:03:9f:fe:07:19:eb:56:8f:18: a2:83:07:95:ff:ab:e0:01:16:e4:7a:3c:3d:20:c4: 1a:22:79:a5:9b:e9:46:3a:19:0b:cd:4a:72:eb:35: 1f:15:3c:5d:f3:ea:c9:4b:34:8b:e8:29:ec:72:5a: f2:ad:ef:99:7a:99:bf:d0:1d:66:85:db:71:24:63: e0:5f:53:c2:19:23:41:08:99:66:5a:96:c3:dc:7e: ab:6e:3e:fb:7d:e9:26:80:2f:1b:9a:21:f2:12:37: 42:fe:1e:ab:8b:37:4f:86:0f:70:40:a7:95:e1:09: af:9a:55:41:19:73:c9:2d:6b:0e:6d:65:e9:1d:3f: 02:12:42:10:5a:c3:e9:47:77:bb:18:b1:b7:95:a3: 5d:2d:31:da:2b:e5:18:51:ec:d3:9b:b5:cd:c6:0e: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:1F:5A:33:E2:75:98:28:4A:18:72:85:7A:40:62:6F:0E:44:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.crl X509v3 Authority Key Identifier: keyid:AE:B4:E4:86:C7:30:D4:65:63:AC:78:A7:38:CB:1D:A3:D5:97:B6:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0c:f0:cf:b1:d4:02:3d:fb:56:6d:7d:c7:9c:44:02:14:42: a9:b8:e5:80:53:3a:31:fb:9e:a9:da:c1:d9:25:e8:50:02:44: ff:a2:04:6a:5e:69:5c:c9:51:1a:bd:84:2c:cf:1e:d3:f3:e2: 70:13:a8:d1:7c:ff:0d:4e:1f:a5:7d:5d:1e:41:06:09:8b:1e: 84:df:64:cd:28:aa:bb:2d:c5:5a:b2:9a:6b:e5:a1:08:d7:6b: a9:93:49:ea:9d:cc:f5:83:90:ad:40:64:6b:5c:57:34:94:d7: 01:17:da:77:e0:fd:c1:d6:10:1b:3c:17:c2:03:91:ab:14:26: 0f:0c:30:88:c2:62:02:d8:57:af:f4:f3:29:ad:c0:7e:82:87: 88:b0:0d:23:4d:ef:b5:47:de:16:bc:a5:a5:f3:51:60:c3:08: 8a:c5:50:f5:6c:1d:77:34:63:14:e6:94:a5:be:5d:af:5b:c9: c1:02:d3:d5:0a:00:53:de:da:55:8f:c9:99:b9:b6:96:ff:f5: fc:03:80:1c:62:47:61:29:a5:12:9d:d2:42:9c:7d:ee:5a:8c: 09:4a:42:72:ec:e5:c5:82:09:ac:c7:6b:44:63:50:53:61:54: 4e:31:ce:8c:9c:fa:be:37:1f:2c:b9:1b:75:53:1f:08:97:e4: 64:98:7e:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCq5RIVlzhl4Dk2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQwMGExMDEtMmFjYy00NWFmLTg0YWItYjhlODY4Yzcy OGJjMB4XDTI1MTEwNTE2MDAwOFoXDTI1MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk MDBiYTk5OWUtY2E0OS00YTQxLWE2YTMtNmYyMDYyMGMwYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreoGnct9xHrHXqJ+yFUuex0ogtmZLmOl2364 aqdufzkkqslpJTz/q7IjgVGo4g/7vtaKwCYfl+rNpLq62ga2uhk0bSFKB2S/epDq xgJ4DgMnKmyF0w952O89QU6WYx0Dn/4HGetWjxiigweV/6vgARbkejw9IMQaInml m+lGOhkLzUpy6zUfFTxd8+rJSzSL6Cnsclryre+Zepm/0B1mhdtxJGPgX1PCGSNB CJlmWpbD3H6rbj77fekmgC8bmiHyEjdC/h6rizdPhg9wQKeV4QmvmlVBGXPJLWsO bWXpHT8CEkIQWsPpR3e7GLG3laNdLTHaK+UYUezTm7XNxg5uIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJFCH1oz4nWYKEoYcoV6QGJvDkTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NDAw YTEwMS0yYWNjLTQ1YWYtODRhYi1iOGU4NjhjNzI4YmMvOTQwMGExMDEtMmFjYy00 NWFmLTg0YWItYjhlODY4YzcyOGJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTQwMGExMDEtMmFjYy00NWFmLTg0 YWItYjhlODY4YzcyOGJjLzk0MDBhMTAxLTJhY2MtNDVhZi04NGFiLWI4ZTg2OGM3 MjhiYy5jcmwwHwYDVR0jBBgwFoAUrrTkhscw1GVjrHinOMsdo9WXtkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NDAwYTEwMS0yYWNjLTQ1YWYtODRhYi1iOGU4 NjhjNzI4YmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdDPDPsdQCPftWbX3HnEQC FEKpuOWAUzox+56p2sHZJehQAkT/ogRqXmlcyVEavYQszx7T8+JwE6jRfP8NTh+l fV0eQQYJix6E32TNKKq7LcVasppr5aEI12upk0nqncz1g5CtQGRrXFc0lNcBF9p3 4P3B1hAbPBfCA5GrFCYPDDCIwmIC2Fev9PMprcB+goeIsA0jTe+1R94WvKWl81Fg wwiKxVD1bB13NGMU5pSlvl2vW8nBAtPVCgBT3tpVj8mZubaW//X8A4AcYkdhKaUS ndJCnH3uWowJSkJy7OXFggmsx2tEY1BTYVROMc6MnPq+Nx8suRt1Ux8Il+RkmH4f -----END CERTIFICATE-----Generated at Wed Nov 5 17:54:37 2025 by rpki-client