$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.mft (raw, json) Hash identifier: +A9mcLYVSlSAZLUFD1lDFbdYvCUqBw5Whm3aSkki/CE= Subject key identifier: 12:C0:6C:43:87:F7:0D:C7:89:3F:48:97:D7:E0:A2:5C:09:80:15:14 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584BBE40ED2F75CB44C61ED8B148 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft Manifest number: 010D0C9F4328584073A8378ED965A26DC80B7C84 Signing time: Tue 04 Nov 2025 02:02:03 +0000 Manifest this update: Tue 04 Nov 2025 02:02:03 +0000 Manifest next update: Thu 06 Nov 2025 02:00:00 +0000 Files and hashes: 1: 13c7705c-5068-3193-a68c-a2e387dab614.roa (hash: KS35l/BzRyRfZxLjddtyCF1rr+drQfhZjvGlVk/wctI=) 2: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (hash: dTo9hlnoRsMKjXesfRSXI9aGEpPE++qLNbqgmUvVJlo=) 3: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (hash: YN1w+1BjdX52BdWAyZHFrxKzkfEoiy6+lTTCdYDI4P0=) 4: 650dd2fc-99af-35a3-81ca-030219a24999.roa (hash: Ci2+Yn+yIcUyyEIfuXF8LGHYRoM5pklW5XkeWFmomxg=) 5: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (hash: nXq6cNuUdU1kbkzW+O4NDf67dAdMv69bEWmz9vm646w=) 6: 95e29289-6f1c-4c2f-84f4-c944e9e54940.crl (hash: sVT82VFxLw+zUJrTjdgMiQsSOjis7UH2YK5b7JJCh40=) 7: eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa (hash: fL3txz24CXZcgt0MUJzThExH9onRjCnOkeUkdf2+WKY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:ed:2f:75:cb:44:c6:1e:d8:b1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Nov 4 02:02:03 2025 GMT Not After : Nov 6 02:00:00 2025 GMT Subject: CN=442ebb0f-83ed-49c4-963e-756594c73201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:88:a4:29:ae:8b:3d:ec:16:83:46:99:82: 38:c3:56:45:bd:14:e7:36:2c:55:dd:ae:b5:b1:19: f1:d1:1a:35:13:0d:8d:5f:1c:fc:6c:8a:3b:5f:0d: 5e:fe:48:a5:cc:17:c6:c8:7f:18:90:fc:52:2e:4b: b2:26:8a:b4:59:fb:22:dd:da:ff:1e:21:8c:39:40: 4e:77:ba:ea:38:cb:95:02:45:48:72:9a:72:6e:37: 6d:be:f2:64:eb:ef:0d:15:8c:1e:dd:bb:f4:4e:de: 9a:51:ae:5f:43:d1:8c:b0:05:37:5b:82:4c:c7:bf: 57:31:99:4e:27:ab:b4:f1:30:8c:76:d4:bf:60:a7: 98:6b:60:9a:e6:96:e9:28:24:4b:1a:38:06:2e:c8: ab:27:ea:8f:67:45:7b:d8:ce:04:b6:32:48:d8:06: 20:8e:29:f5:75:94:8e:45:ce:81:93:fb:04:4f:22: 1f:ca:61:fc:84:aa:73:2b:4b:60:87:2a:c0:0f:a4: 4d:8c:05:31:0c:da:10:a5:29:0b:88:a2:25:f9:0d: 4e:e9:70:23:4d:b1:81:ae:72:85:d6:24:97:cb:08: 3a:51:79:5f:17:4f:94:b3:2e:7c:33:6e:87:ec:e4: c8:58:f5:f4:2b:25:0b:53:98:00:20:01:a4:ed:7b: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:6C:43:87:F7:0D:C7:89:3F:48:97:D7:E0:A2:5C:09:80:15:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8f:78:e8:a7:dd:82:79:cf:8e:fe:74:25:d4:b1:36:c6:20: f8:16:72:0f:2f:c3:6c:25:20:00:96:9e:36:5e:aa:75:d3:1e: 24:53:9d:a0:ee:68:35:d4:3d:44:5a:25:f4:23:b4:cf:4e:e0: 16:99:cd:89:e4:f6:09:10:cb:69:3b:2e:6d:76:cf:48:5c:67: 34:89:22:37:4f:0f:21:e6:f5:2a:58:50:11:08:71:08:6e:8a: 48:ee:3d:16:da:61:2e:c5:5f:94:7e:fe:a4:3b:82:cb:4d:94: 0f:32:c5:d6:5c:3d:cc:0b:7f:dc:a0:db:c7:83:d0:7a:5f:d2: 74:62:2f:de:16:fe:f9:8e:32:86:89:45:7c:a5:9e:6e:39:f0: 77:9b:d9:6d:83:18:9b:af:40:9b:a0:11:29:e2:71:99:ed:a0: 20:4e:f0:3a:fe:1d:77:91:a4:65:29:ac:fb:22:a1:c4:d3:8a: 7f:39:9e:2b:a1:7c:58:3e:23:52:11:5d:a9:63:c0:3d:0b:cc: dd:20:6b:52:7b:38:f5:d5:41:f8:f4:87:39:11:1b:a5:65:66: df:e6:39:24:01:f3:3f:c8:0d:2c:ae:e5:92:12:14:fd:73:ee: cf:52:6f:bb:e7:2d:a1:7d:d8:b1:f4:2b:61:97:82:fb:71:03: b6:77:2a:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+QO0vdctExh7YsUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MTEwNDAyMDIwM1oXDTI1MTEwNjAyMDAwMFowLzEtMCsGA1UEAxMk NDQyZWJiMGYtODNlZC00OWM0LTk2M2UtNzU2NTk0YzczMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQeIpCmuiz3sFoNGmYI4w1ZFvRTnNixV3a61 sRnx0Ro1Ew2NXxz8bIo7Xw1e/kilzBfGyH8YkPxSLkuyJoq0Wfsi3dr/HiGMOUBO d7rqOMuVAkVIcppybjdtvvJk6+8NFYwe3bv0Tt6aUa5fQ9GMsAU3W4JMx79XMZlO J6u08TCMdtS/YKeYa2Ca5pbpKCRLGjgGLsirJ+qPZ0V72M4EtjJI2AYgjin1dZSO Rc6Bk/sETyIfymH8hKpzK0tghyrAD6RNjAUxDNoQpSkLiKIl+Q1O6XAjTbGBrnKF 1iSXywg6UXlfF0+Usy58M26H7OTIWPX0KyULU5gAIAGk7XvjIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBLAbEOH9w3HiT9Il9fgolwJgBUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvOTVlMjkyODktNmYxYy00 YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABj3jop92Cec+O/nQl1LE2 xiD4FnIPL8NsJSAAlp42Xqp10x4kU52g7mg11D1EWiX0I7TPTuAWmc2J5PYJEMtp Oy5tds9IXGc0iSI3Tw8h5vUqWFARCHEIbopI7j0W2mEuxV+Ufv6kO4LLTZQPMsXW XD3MC3/coNvHg9B6X9J0Yi/eFv75jjKGiUV8pZ5uOfB3m9ltgxibr0CboBEp4nGZ 7aAgTvA6/h13kaRlKaz7IqHE04p/OZ4roXxYPiNSEV2pY8A9C8zdIGtSezj11UH4 9Ic5ERulZWbf5jkkAfM/yA0sruWSEhT9c+7PUm+75y2hfdix9Cthl4L7cQO2dypp -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:47 2025 by rpki-client