$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: v7BIyTrHl/Jip2g4t4yb+Om1eIt84sY6zXbM49kjCGs= Subject key identifier: 9F:52:3D:8D:8E:EE:E5:47:76:13:FF:87:29:6B:61:9E:34:19:37:85 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584BBFC30F59EF2685A36FBE7540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697F43 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: LyZ2PbcdLws2EuVfYyFhJaVEHdGzsnxZ+agKSadbcq0=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: rzSTWg0nZqyUt253r/b7cEdATCeW2mlDv3M7lwCEnWM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0f:59:ef:26:85:a3:6f:be:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=4f8773e3-1997-4406-a156-5feac0e62f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f3:e5:69:97:6a:f1:8a:65:68:b6:40:43:a6: 76:fd:84:4e:d8:6b:69:96:73:0a:0c:a8:2c:4a:bd: f8:de:fa:74:cb:6b:11:9f:85:69:04:e8:ac:a7:36: ef:fa:8a:94:d6:aa:bd:76:d9:e5:79:98:cf:04:6e: ec:e3:6a:ca:0a:de:19:55:04:fc:d7:9b:fc:e2:a4: f3:80:d9:d9:1f:ed:11:b2:68:57:ac:5b:87:b2:9a: 8d:5d:d2:7f:32:02:cc:d5:42:c4:59:3e:10:c4:56: db:5c:0f:d8:fe:da:d3:ad:53:89:53:a3:b4:ec:16: 26:15:78:d9:28:77:fe:7e:62:94:90:07:8f:86:85: 97:9a:8b:7e:93:e3:e4:38:10:04:0e:fd:67:8b:eb: 46:69:c4:87:6a:95:3a:ea:1f:b5:0b:ea:3f:14:bd: ff:86:e3:a0:a5:b6:f5:26:98:45:ea:b2:e0:4b:a7: 68:1b:fe:ad:2c:41:4f:d5:5e:7a:b2:d4:f0:51:04: 9b:71:87:1a:2a:61:cf:c6:3f:a4:dd:ba:0d:10:28: 63:79:42:a1:a7:7d:77:f9:88:2d:4c:4f:aa:73:83: 14:6b:2d:3b:09:1f:0d:7b:f9:37:7d:47:c1:41:65: ce:e0:5c:43:f3:94:a1:ba:92:ea:8b:e1:60:ee:9d: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:52:3D:8D:8E:EE:E5:47:76:13:FF:87:29:6B:61:9E:34:19:37:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b1:af:54:7e:b7:e5:cd:32:6c:8c:d5:65:1b:a3:55:95:bc: cf:c9:af:ab:8b:4c:6c:d2:5e:5e:df:c1:fc:31:c3:77:ce:b3: c6:a3:07:13:40:84:4c:83:c7:de:f7:7f:1e:bc:1e:c7:43:2d: d9:f0:e9:92:5b:76:3c:cb:c2:d9:78:f6:f0:1e:37:fc:66:c6: 45:64:3c:ff:14:7a:bc:69:fe:1c:ad:63:3c:cd:0a:08:f7:d7: 7a:ca:03:a7:0a:12:05:be:75:60:d9:15:fa:4c:b5:63:5e:57: 4d:54:6d:89:10:a3:db:b3:4f:ad:2b:70:9a:d4:17:b6:b4:8d: cb:a5:08:5c:b5:aa:2c:f4:fb:72:3c:67:f5:6c:2d:f1:ea:aa: 2d:6a:38:7e:55:15:19:72:6c:66:78:60:9e:e8:a0:d2:cf:3d: 0d:88:0f:c5:55:c4:dd:44:c5:4f:1e:14:66:10:e5:c5:50:ee: 73:da:f3:aa:e7:bf:92:a9:8c:5c:5b:e1:52:e2:83:7f:81:29: 7b:ef:9a:0f:d6:b8:e8:11:3e:78:ac:d3:43:da:7e:33:d2:34: 01:ef:8f:48:93:3b:ba:06:3e:75:d0:7f:c0:3e:16:97:3a:55: a9:1a:05:f6:6e:67:6d:e9:23:f7:42:1e:93:53:69:01:8f:56: 64:8a:39:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww9Z7yaFo2++dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk NGY4NzczZTMtMTk5Ny00NDA2LWExNTYtNWZlYWMwZTYyZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fPlaZdq8YplaLZAQ6Z2/YRO2GtplnMKDKgs Sr343vp0y2sRn4VpBOispzbv+oqU1qq9dtnleZjPBG7s42rKCt4ZVQT815v84qTz gNnZH+0RsmhXrFuHspqNXdJ/MgLM1ULEWT4QxFbbXA/Y/trTrVOJU6O07BYmFXjZ KHf+fmKUkAePhoWXmot+k+PkOBAEDv1ni+tGacSHapU66h+1C+o/FL3/huOgpbb1 JphF6rLgS6doG/6tLEFP1V56stTwUQSbcYcaKmHPxj+k3boNEChjeUKhp313+Ygt TE+qc4MUay07CR8Ne/k3fUfBQWXO4FxD85ShupLqi+Fg7p0EbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ9SPY2O7uVHdhP/hylrYZ40GTeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFsa9UfrflzTJsjNVlG6NV lbzPya+ri0xs0l5e38H8McN3zrPGowcTQIRMg8fe938evB7HQy3Z8OmSW3Y8y8LZ ePbwHjf8ZsZFZDz/FHq8af4crWM8zQoI99d6ygOnChIFvnVg2RX6TLVjXldNVG2J EKPbs0+tK3Ca1Be2tI3LpQhctaos9PtyPGf1bC3x6qotajh+VRUZcmxmeGCe6KDS zz0NiA/FVcTdRMVPHhRmEOXFUO5z2vOq57+SqYxcW+FS4oN/gSl775oP1rjoET54 rNND2n4z0jQB749Ikzu6Bj510H/APhaXOlWpGgX2bmdt6SP3Qh6TU2kBj1Zkijnu -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:09 2025 by rpki-client