$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft File: 829d195a-d541-4371-970d-5be56cd489a8.mft (raw, json) Hash identifier: R9P4HX82WlL43BrNMqgz1U+Q9k42I26kbfd+eeg+ASo= Subject key identifier: 20:51:21:D2:13:71:B1:45:A9:C3:AD:02:89:E3:7E:E4:A1:F7:90:9B Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F4328584BBF69B9D74030571D5ED94100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft Manifest number: 010D0C9F4328584073A852D03D2621D76E47B0A8 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 02a7113f-414f-366e-ba5e-590e520c170c.roa (hash: KzjKVe5Odl6mVsVQ1unBdK4MG8vTH5FJhr6t7icJoDs=) 2: 40a41a6c-6163-3b59-a588-7c820c4d608c.roa (hash: Xt/e/+ExDJ/ucXrlsjS545TR73dkoSYrCzIeK5fNYUY=) 3: 712feeee-d132-31f8-b85a-65cacc4cd0eb.roa (hash: CaBjDmiPvBD4DGFq2Ppov1wKkeb7+F6zkG42yzjLNfE=) 4: 829d195a-d541-4371-970d-5be56cd489a8.crl (hash: 4GyYVh5BLp8kfFOT2lAxehzPbu23lfZfxtZCQ1U3htI=) 5: b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa (hash: Tpst1cqAY3S2+hYde0gTtEdIWYmXxpaaYaQiv6cI08I=) 6: b84609ff-6d72-31a6-be19-12752acfbdb9.roa (hash: H3/PHyDI8+V2mFeeG2G9jfgEvQfN6J2HHDRyPOB5POs=) 7: b977b1df-f8d6-30a0-a795-52c23e2e5bb4.roa (hash: dDzrVDP6UUitWt10iuw7ZfdK2ie8bgcjMPCXvClYx88=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b9:d7:40:30:57:1d:5e:d9:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=4b3845ab-1408-4808-afe0-3c6fe30d2293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:dc:f0:84:25:21:10:f4:95:aa:b6:0c:ad: bb:5b:f5:1f:99:29:75:85:8d:1b:72:c9:c5:10:62: 2c:a0:98:07:9f:1a:cb:bd:79:56:6e:a9:70:7e:33: 67:2c:53:98:79:92:53:06:15:f6:11:fb:80:96:bd: e3:bd:d6:9a:6a:36:28:e2:c0:00:0b:69:48:4c:8e: e1:a0:63:da:c5:b8:97:a3:a6:97:ec:2d:e1:70:02: a5:b1:54:3f:26:3f:71:71:35:a7:1d:1c:8d:38:d1: a5:6f:11:f8:bc:f9:eb:35:a7:97:06:ff:c9:32:38: 86:08:04:ae:28:d6:a3:e1:2a:97:3c:01:b4:c8:27: 16:c5:8a:23:33:eb:57:92:a7:90:f0:ea:8a:16:e0: 2e:d3:6b:88:59:0b:48:b7:eb:75:06:b4:c4:f1:b7: e5:d2:91:6c:c3:15:49:92:e1:80:09:4c:7c:00:c8: 9d:ba:25:54:5e:d8:97:84:41:b5:62:c1:a6:87:5f: 3a:c2:4b:d8:5d:f0:b3:a5:ea:82:b3:43:4c:d3:77: 40:19:53:09:57:45:18:8d:f0:62:88:14:ea:5d:d9: ae:4e:7f:aa:d4:f9:bc:57:12:e5:85:20:f1:57:da: 35:46:8c:98:cf:f4:57:76:c3:5a:66:84:45:86:ab: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:51:21:D2:13:71:B1:45:A9:C3:AD:02:89:E3:7E:E4:A1:F7:90:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d5:f8:da:54:8f:c9:f2:80:82:0d:b6:83:a4:06:2b:56:94: 6b:eb:13:d2:8e:d4:1f:86:ac:77:36:a3:30:5c:bd:2e:ab:30: 87:cf:d9:dd:9c:f7:3a:ce:8c:81:22:0e:db:1d:98:53:ac:c3: 89:21:12:8d:41:fd:fa:3d:6a:fd:34:e9:c3:c9:13:13:b8:fb: 55:1c:a2:9a:88:80:49:16:94:b9:25:b8:a3:b1:f0:d3:12:5f: b1:45:a8:f4:58:a0:6d:39:ff:c8:71:ba:ab:c1:fa:0f:67:b6: a5:ac:ad:2a:b8:8a:98:26:39:ac:80:37:c7:f8:5d:17:bf:45: 38:2c:1c:29:d5:81:92:c1:3c:2a:f4:eb:32:e9:db:07:43:7d: a1:c5:d7:71:ef:a5:8e:de:bc:16:5f:eb:2c:5b:e4:7f:9e:9e: 8d:ba:60:6a:db:c0:ff:d0:91:0d:81:e1:65:e5:79:b7:98:36: 25:06:68:3b:52:d0:6f:37:02:05:3d:3c:e2:fd:e3:f9:13:a2: 90:3a:cf:0b:22:80:d5:be:b2:c1:fa:64:63:27:49:cb:64:7f: 6a:53:01:36:50:91:15:c1:c2:da:b4:62:6b:34:eb:09:69:b7: 2e:77:81:aa:1d:3e:b0:a8:e7:51:d4:bc:0c:7a:ad:73:b3:c8: 3a:af:a7:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abnXQDBXHV7ZQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk NGIzODQ1YWItMTQwOC00ODA4LWFmZTAtM2M2ZmUzMGQyMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEDc8IQlIRD0laq2DK27W/UfmSl1hY0bcsnF EGIsoJgHnxrLvXlWbqlwfjNnLFOYeZJTBhX2EfuAlr3jvdaaajYo4sAAC2lITI7h oGPaxbiXo6aX7C3hcAKlsVQ/Jj9xcTWnHRyNONGlbxH4vPnrNaeXBv/JMjiGCASu KNaj4SqXPAG0yCcWxYojM+tXkqeQ8OqKFuAu02uIWQtIt+t1BrTE8bfl0pFswxVJ kuGACUx8AMiduiVUXtiXhEG1YsGmh186wkvYXfCzpeqCs0NM03dAGVMJV0UYjfBi iBTqXdmuTn+q1Pm8VxLlhSDxV9o1RoyYz/RXdsNaZoRFhqsxnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCBRIdITcbFFqcOtAonjfuSh95CbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvODI5ZDE5NWEtZDU0MS00 MzcxLTk3MGQtNWJlNTZjZDQ4OWE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB41fjaVI/J8oCCDbaDpAYr VpRr6xPSjtQfhqx3NqMwXL0uqzCHz9ndnPc6zoyBIg7bHZhTrMOJIRKNQf36PWr9 NOnDyRMTuPtVHKKaiIBJFpS5JbijsfDTEl+xRaj0WKBtOf/IcbqrwfoPZ7alrK0q uIqYJjmsgDfH+F0Xv0U4LBwp1YGSwTwq9Osy6dsHQ32hxddx76WO3rwWX+ssW+R/ np6NumBq28D/0JENgeFl5Xm3mDYlBmg7UtBvNwIFPTzi/eP5E6KQOs8LIoDVvrLB +mRjJ0nLZH9qUwE2UJEVwcLatGJrNOsJabcud4GqHT6wqOdR1LwMeq1zs8g6r6el -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:24 2025 by rpki-client