$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft File: 9bd0a861-f835-4585-9517-e1dba949c123.mft (raw, json) Hash identifier: nuN2Ec90XBoHVrMT0LXbqUvyCSzw64XYy8tpmAyLj2k= Subject key identifier: 68:FA:DE:11:4E:42:8A:18:F0:45:22:82:B3:DA:9A:68:F6:D0:66:71 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584BBF69B9ABE16ABEC142CECD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft Manifest number: 010D0C9F4328584073A854438D0E56BC12331312 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 248dd090-9420-37f9-9305-b5cd56b24a28.roa (hash: VM5DYa/9tU799mMesMfiG+S4IOBKwJgE0cGgOyyaZYA=) 2: 35a4a280-a419-3d31-a496-90f9731524db.roa (hash: u/UeV/VFnMaUopjDYrog/0TaSn7I9NzR9RmgO474XBM=) 3: 9bd0a861-f835-4585-9517-e1dba949c123.crl (hash: y9Dn9j5wrxC+oXPKvA/ifX7sQ8lqXcgezMOsrC9uhzs=) 4: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (hash: 1eznJyvOeiEQkUqXb2d/7t/fryBEgLetGgApHcksAHU=) 5: c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa (hash: gil0nqacSwyX8/qL9tWgXUOgz2/21k8wquqpbdhA+oc=) 6: e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa (hash: xn3/P/QCe7B6qT2SujFWGB2PYspd93k+Bd3TOAH+YtA=) 7: fd669d54-47cf-37c7-8689-7511d01f5bb0.roa (hash: u+8idXfLNIDJE3Sf6oSqensOMeH6wt/28Ad5qK1N8vc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b9:ab:e1:6a:be:c1:42:ce:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=aec3bae6-1704-483c-affc-a75ba172f6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4e:62:e2:fd:ae:ab:cb:76:8e:d5:7a:e6:b1: 18:07:fb:11:8f:3d:2a:f6:39:5f:03:91:a6:d9:c8: 29:df:5e:e6:d6:7b:33:94:9b:e7:c5:8d:c8:97:8e: de:57:f1:aa:da:74:8e:23:a6:03:17:e1:0d:db:a7: f0:1d:cd:d7:d9:e4:0f:14:c6:31:f1:82:52:79:f3: 41:e5:a2:a2:49:a3:b7:0d:b0:df:f9:40:e0:88:24: b4:8c:18:82:0e:fb:33:50:74:d0:78:a9:6e:80:82: 58:e6:54:93:2b:59:bf:70:66:2a:fd:6e:ad:1f:70: 10:b3:81:5e:fb:f4:fd:90:bf:01:46:11:27:96:57: 2c:3b:bd:be:0d:89:b8:90:64:ce:f6:2c:88:84:84: ed:5a:ac:4e:fa:c7:cc:f4:ad:7a:84:6a:eb:d2:94: da:04:4e:f3:2d:64:0a:1a:46:d0:e4:14:5b:02:af: 8d:9c:3f:1c:b2:36:fc:72:26:5c:3e:d3:bf:a6:a0: 9b:0c:12:33:3a:6c:61:49:8c:40:5c:c1:af:8b:e6: a1:a0:e9:a3:eb:8b:3c:42:af:fd:76:13:d4:1d:bd: bc:19:eb:b6:3a:25:89:9c:aa:34:c7:e7:a9:8e:a3: c0:cc:6f:f9:90:ef:27:0e:ac:b5:bc:1d:46:4f:23: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:DE:11:4E:42:8A:18:F0:45:22:82:B3:DA:9A:68:F6:D0:66:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:66:01:66:41:28:e0:0f:80:5f:6c:0a:5b:ea:99:eb:49:ad: 0f:03:6b:e4:bd:c2:5a:94:3a:e8:7f:33:92:16:64:b1:98:9b: 68:7d:7d:02:3e:91:4e:ce:93:44:8a:f1:76:5e:fb:e7:0e:ca: 85:ec:74:b2:cf:a3:3d:4c:c9:82:ab:38:3e:ea:a5:88:b5:f0: a7:66:02:33:33:be:9f:81:a4:52:a7:a6:9a:15:8e:0e:36:ef: 70:c4:2b:55:d4:94:31:de:c2:39:3f:8b:90:84:9e:c8:79:e3: eb:b5:0f:8f:2b:59:72:c3:2e:3b:62:ac:4d:4c:19:8b:f4:cf: 11:7c:35:0a:b6:37:34:63:bf:22:b8:35:7c:f6:4a:7f:00:c2: 91:28:a1:5c:b6:42:84:78:69:ba:66:f4:8c:f2:86:5a:40:91: 73:df:7e:ba:d0:76:b5:bd:43:d8:fd:e4:fc:62:2d:9c:f0:ac: 99:0b:d0:86:fe:c5:65:d7:fb:ca:f6:c3:5b:2f:16:50:a4:8b: 14:82:fb:1e:82:f0:18:42:9b:7b:d6:66:a6:64:15:8e:6b:31: e3:c2:66:66:69:33:5e:33:55:0c:40:0a:ec:0d:6a:d0:70:6c: 7b:15:71:9a:59:1d:42:9a:04:49:36:21:ae:31:d4:fb:81:b7: 6e:16:1e:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abmr4Wq+wULOzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk YWVjM2JhZTYtMTcwNC00ODNjLWFmZmMtYTc1YmExNzJmNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA705i4v2uq8t2jtV65rEYB/sRjz0q9jlfA5Gm 2cgp317m1nszlJvnxY3Il47eV/Gq2nSOI6YDF+EN26fwHc3X2eQPFMYx8YJSefNB 5aKiSaO3DbDf+UDgiCS0jBiCDvszUHTQeKlugIJY5lSTK1m/cGYq/W6tH3AQs4Fe +/T9kL8BRhEnllcsO72+DYm4kGTO9iyIhITtWqxO+sfM9K16hGrr0pTaBE7zLWQK GkbQ5BRbAq+NnD8csjb8ciZcPtO/pqCbDBIzOmxhSYxAXMGvi+ahoOmj64s8Qq/9 dhPUHb28Geu2OiWJnKo0x+epjqPAzG/5kO8nDqy1vB1GTyO8QwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGj63hFOQooY8EUigrPammj20GZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvOWJkMGE4NjEtZjgzNS00 NTg1LTk1MTctZTFkYmE5NDljMTIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgZgFmQSjgD4BfbApb6pnr Sa0PA2vkvcJalDrofzOSFmSxmJtofX0CPpFOzpNEivF2XvvnDsqF7HSyz6M9TMmC qzg+6qWItfCnZgIzM76fgaRSp6aaFY4ONu9wxCtV1JQx3sI5P4uQhJ7IeePrtQ+P K1lywy47YqxNTBmL9M8RfDUKtjc0Y78iuDV89kp/AMKRKKFctkKEeGm6ZvSM8oZa QJFz33660Ha1vUPY/eT8Yi2c8KyZC9CG/sVl1/vK9sNbLxZQpIsUgvsegvAYQpt7 1mamZBWOazHjwmZmaTNeM1UMQArsDWrQcGx7FXGaWR1CmgRJNiGuMdT7gbduFh41 -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:46 2025 by rpki-client