$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft File: 1b8f9be3-65c4-421d-a760-278a00443898.mft (raw, json) Hash identifier: 9eVBdh1JgUX4DIdpHcijtqdegPpQjJHL+wfxCg6SHI0= Subject key identifier: AA:05:A3:01:E8:7A:81:0E:7F:8D:F0:04:B6:86:EA:76:A4:C0:B0:AD Authority key identifier: 7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B Certificate issuer: /CN=1b8f9be3-65c4-421d-a760-278a00443898 Certificate serial: 010D0C9F4328584BC1BD57861BAF0E7FB266E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft Manifest number: 010D0C9F4328584073A847475F11C31321888018 Signing time: Wed 05 Nov 2025 08:00:08 +0000 Manifest this update: Wed 05 Nov 2025 08:00:08 +0000 Manifest next update: Sat 08 Nov 2025 08:00:00 +0000 Files and hashes: 1: 040d0772-4e91-3931-8a3e-cbd4c9e3903d.roa (hash: 0SCQ1fXBKOWVTEWqX2CTVeuAik6jgGN9f5zDk6oWPVc=) 2: 1b8f9be3-65c4-421d-a760-278a00443898.crl (hash: zu9j8mGWmGZBJk1pbBiFTdVLY4yZSK+NASEI5BH6UYA=) 3: d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa (hash: wHEIk6q0aA7x5lST7jTVmrrWZmp1F/2e8w81P4Qgz50=) 4: e1382635-c6c4-34b5-b2b8-229aed651d2c.roa (hash: 0qVnKzQMwEUs6ATTlN/S0soA7u91S+ev0Mjt/jCKPOw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:bd:57:86:1b:af:0e:7f:b2:66:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b8f9be3-65c4-421d-a760-278a00443898 Validity Not Before: Nov 5 08:00:08 2025 GMT Not After : Nov 8 08:00:00 2025 GMT Subject: CN=9c11d0e2-c51f-4de9-b02f-6b1d50344e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:4b:92:d5:d5:b5:d5:47:51:d5:e6:20:12: 61:09:62:4a:88:42:c8:9d:8e:55:86:ff:0d:44:1c: 61:e8:5a:12:9f:57:0f:a4:25:ef:f2:12:18:93:79: 23:1f:a1:e4:8d:77:fe:73:f1:c3:76:00:02:bb:e8: f5:9e:99:50:89:d4:37:d0:b6:9a:ed:65:9e:7b:ba: 8c:9f:99:40:69:42:70:1a:e0:22:34:a1:75:c1:5e: 2d:ad:28:55:7b:04:6e:f9:70:3b:b6:e9:57:00:f7: 3b:dd:b4:8c:0d:e6:9b:64:0c:cc:91:32:9a:e5:cd: 87:1a:c5:f6:59:0c:ad:7e:c9:e1:81:30:34:98:a7: b4:c0:31:35:e1:0a:ff:1a:06:08:07:84:e1:90:4b: 26:27:69:9e:5f:fc:cf:c0:b3:ec:09:09:54:9a:bc: b9:d5:85:88:40:79:b7:b4:4f:78:9e:c8:0d:3b:0c: f5:3a:c6:de:c5:0b:fb:24:6f:7c:00:fd:4b:64:c1: 87:bb:cb:da:87:c3:a7:2a:25:97:a7:48:c8:08:7a: 4e:c1:2b:62:e6:a3:85:6e:5e:e3:44:45:4b:b9:4d: 23:0c:2d:9e:2b:63:e7:fb:5c:9d:cb:fd:8f:f1:71: 2d:ba:e7:bc:14:9a:7d:bf:6d:29:c6:3c:9a:af:49: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:05:A3:01:E8:7A:81:0E:7F:8D:F0:04:B6:86:EA:76:A4:C0:B0:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl X509v3 Authority Key Identifier: keyid:7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:69:14:74:ba:5b:70:3a:d7:b3:63:af:c2:81:1c:a4:15:4e: fb:a0:de:3b:7d:ef:a4:d6:8b:7a:fc:2c:97:01:fc:b5:7e:de: e0:34:88:c1:cc:1e:6d:9c:9f:cf:f8:5b:e6:7f:b4:37:a3:e9: 52:0f:ed:94:7f:d0:07:42:7c:e2:f9:b8:08:6d:d9:b6:b3:3a: c3:92:5a:dc:e2:14:84:59:3f:e4:a0:d7:42:f9:df:39:1a:b6: bb:ee:3d:85:83:af:62:f1:c6:ac:d1:ed:03:be:4a:89:61:c4: 84:a9:12:cf:a5:9e:32:b8:19:18:12:ff:50:9f:64:5f:8b:c5: 6c:0b:27:5f:df:d7:e2:1c:b8:31:51:58:5b:18:a9:ec:bc:ce: c2:42:68:a1:8a:5b:05:36:1e:e6:02:29:bf:6a:8d:48:20:9f: 42:00:72:a3:6b:91:56:47:7c:0f:5e:95:f7:d6:7f:ba:ee:49: e5:79:27:35:69:c1:a9:8e:d9:fd:3d:cd:00:4e:fe:84:94:31: af:83:1e:4b:7e:20:36:22:3c:83:f4:a8:91:e2:d8:ee:4a:3e: 2f:2f:9a:f5:e7:39:ea:8b:53:f5:a6:0e:c5:f1:ed:aa:46:31: d4:95:e6:08:15:88:00:a8:f3:f8:00:72:79:75:fe:f2:56:6c: 1b:fc:20:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBvVeGG68Of7Jm5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI4ZjliZTMtNjVjNC00MjFkLWE3NjAtMjc4YTAwNDQz ODk4MB4XDTI1MTEwNTA4MDAwOFoXDTI1MTEwODA4MDAwMFowLzEtMCsGA1UEAxMk OWMxMWQwZTItYzUxZi00ZGU5LWIwMmYtNmIxZDUwMzQ0ZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm1LktXVtdVHUdXmIBJhCWJKiELInY5Vhv8N RBxh6FoSn1cPpCXv8hIYk3kjH6HkjXf+c/HDdgACu+j1nplQidQ30Laa7WWee7qM n5lAaUJwGuAiNKF1wV4trShVewRu+XA7tulXAPc73bSMDeabZAzMkTKa5c2HGsX2 WQytfsnhgTA0mKe0wDE14Qr/GgYIB4ThkEsmJ2meX/zPwLPsCQlUmry51YWIQHm3 tE94nsgNOwz1OsbexQv7JG98AP1LZMGHu8vah8OnKiWXp0jICHpOwSti5qOFbl7j REVLuU0jDC2eK2Pn+1ydy/2P8XEtuue8FJp9v20pxjyar0lEKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKoFowHoeoEOf43wBLaG6nakwLCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjhm OWJlMy02NWM0LTQyMWQtYTc2MC0yNzhhMDA0NDM4OTgvMWI4ZjliZTMtNjVjNC00 MjFkLWE3NjAtMjc4YTAwNDQzODk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI4ZjliZTMtNjVjNC00MjFkLWE3 NjAtMjc4YTAwNDQzODk4LzFiOGY5YmUzLTY1YzQtNDIxZC1hNzYwLTI3OGEwMDQ0 Mzg5OC5jcmwwHwYDVR0jBBgwFoAUe/8Ga0q7y+M3pEmAdD6z9wvWxRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjhmOWJlMy02NWM0LTQyMWQtYTc2MC0yNzhh MDA0NDM4OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9aRR0ultwOtezY6/CgRyk FU77oN47fe+k1ot6/CyXAfy1ft7gNIjBzB5tnJ/P+Fvmf7Q3o+lSD+2Uf9AHQnzi +bgIbdm2szrDklrc4hSEWT/koNdC+d85Gra77j2Fg69i8cas0e0DvkqJYcSEqRLP pZ4yuBkYEv9Qn2Rfi8VsCydf39fiHLgxUVhbGKnsvM7CQmihilsFNh7mAim/ao1I IJ9CAHKja5FWR3wPXpX31n+67knleSc1acGpjtn9Pc0ATv6ElDGvgx5LfiA2IjyD 9KiR4tjuSj4vL5r15znqi1P1pg7F8e2qRjHUleYIFYgAqPP4AHJ5df7yVmwb/CCT -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:48 2025 by rpki-client