$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft File: f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft (raw, json) Hash identifier: HqpWIMsSA/12+sIMq0sZymCeuKOyujvhlkd+4uFc0IU= Subject key identifier: 94:51:9E:A7:E0:AA:70:6B:62:85:D3:5F:40:CA:B8:59:38:FC:19:1C Authority key identifier: 2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 Certificate issuer: /CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Certificate serial: 010D0C9F4328584BC075C61EE63DD49658DBC140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft Manifest number: 010D0C9F4328584073A829923C819E269EB9E327 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 2e0efa81-cacd-3e96-8012-69bb025d6e27.roa (hash: PYQ8GScCAIQi1aWHVLdCbYSobjhmsj1RO5gs5FadHTk=) 2: f5092519-2865-3181-865a-15ca5db8ad22.roa (hash: 4P8ddUMxkHAqmDXsmevx/vAqPEGhFQ8Eq9+vj4vLruo=) 3: f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl (hash: ngz2F7xUk4CtDxAtN+9i0HaKxRsPXwEsbqENc/wJATE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c6:1e:e6:3d:d4:96:58:db:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=9a3cabd0-8440-45f0-b5b6-3a118903d9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:34:ad:b0:1d:8d:54:0a:48:db:e0:23:06: d2:cc:29:28:32:fe:e0:66:ce:33:02:76:86:94:cc: 46:89:1a:b0:50:b6:01:ba:d8:de:ab:c2:dc:36:bc: 9a:2f:06:aa:73:ee:24:bf:39:45:9a:5b:89:8e:7a: 73:d1:fe:42:a8:1b:2c:c2:89:da:fa:af:5d:4d:f9: 95:2e:a1:91:fe:2a:d7:f2:cd:a5:87:10:a1:f5:bf: 9a:ff:12:09:7c:dc:68:d5:b8:0c:ea:35:53:f7:f9: 77:bb:cc:6b:4a:26:ff:da:66:aa:91:8f:23:c5:c7: 5b:c5:0f:04:0e:ce:47:5a:e0:d7:bc:3a:f7:03:c3: cc:d3:d8:49:be:40:6c:4d:5a:43:38:e0:68:40:31: 64:9a:41:ff:1d:71:8f:99:b8:f4:6e:88:d8:ba:85: af:5f:86:03:55:cb:c6:76:ea:a6:0b:71:1a:67:22: cc:b2:de:40:f5:e1:2b:35:68:ef:d7:e8:dd:19:87: 48:85:6b:da:08:1f:5a:69:14:e8:93:c6:0b:c9:ef: f3:d3:8d:9d:c6:2c:90:dc:ab:7c:13:71:81:a1:5c: 76:27:72:3b:bd:cb:e5:3e:96:f9:e8:e1:e8:35:c1: b2:56:da:64:d4:06:c0:d6:d4:58:bd:0e:56:89:7b: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:51:9E:A7:E0:AA:70:6B:62:85:D3:5F:40:CA:B8:59:38:FC:19:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl X509v3 Authority Key Identifier: keyid:2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:65:48:b8:f5:e9:6c:88:89:94:d4:b1:40:c3:18:9b:27:71: 3a:f3:04:f2:05:f5:04:d6:49:20:a9:4d:b6:96:6f:79:b2:5f: 8f:6a:2a:e9:ac:83:97:10:e0:98:aa:b7:41:47:2e:58:4f:3b: 6b:ab:fe:7a:03:ce:1c:99:dd:bc:54:1e:aa:8e:40:31:c6:b1: bc:a3:dc:2d:89:1f:6d:25:34:de:e3:b8:0a:c9:c0:80:07:8d: b4:5d:af:d1:de:46:0f:14:44:0c:f9:ae:c2:59:46:f3:e5:7f: e3:f6:c6:11:03:b7:86:6a:c9:2b:da:b0:f7:ef:8e:53:43:ca: 39:75:34:0c:42:5c:d5:d3:cf:b3:3f:f7:fd:0b:5c:a0:c9:ab: 76:ef:d1:bf:76:d2:a9:a2:df:47:fd:fa:6c:b8:f9:dc:43:72: a9:7d:9d:9e:4a:a5:7f:39:4e:f7:c9:84:3b:ed:4f:1b:2e:14: 68:a9:3d:ae:a0:e9:4a:0f:e7:00:de:54:19:25:7c:2a:26:e4: 0b:cb:50:6a:21:13:6f:56:1e:80:8c:4b:f6:e6:de:65:fb:3b: fd:3f:ac:98:da:b9:5d:eb:7c:c6:6c:06:53:03:28:80:63:e3: b9:5b:98:df:a0:04:42:3d:bb:bf:ba:cf:b5:e3:7f:9e:bb:07: 15:17:7b:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcYe5j3UlljbwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhNDNjNGQtOTlmMS00NmU3LTljYzctYjhjNjMwMWFh YjIxMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk OWEzY2FiZDAtODQ0MC00NWYwLWI1YjYtM2ExMTg5MDNkOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW00rbAdjVQKSNvgIwbSzCkoMv7gZs4zAnaG lMxGiRqwULYButjeq8LcNryaLwaqc+4kvzlFmluJjnpz0f5CqBsswona+q9dTfmV LqGR/irX8s2lhxCh9b+a/xIJfNxo1bgM6jVT9/l3u8xrSib/2maqkY8jxcdbxQ8E Ds5HWuDXvDr3A8PM09hJvkBsTVpDOOBoQDFkmkH/HXGPmbj0bojYuoWvX4YDVcvG duqmC3EaZyLMst5A9eErNWjv1+jdGYdIhWvaCB9aaRTok8YLye/z042dxiyQ3Kt8 E3GBoVx2J3I7vcvlPpb56OHoNcGyVtpk1AbA1tRYvQ5WiXv1ZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJRRnqfgqnBrYoXTX0DKuFk4/BkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0 M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2MzAxYWFiMjEvZjlhNDNjNGQtOTlmMS00 NmU3LTljYzctYjhjNjMwMWFhYjIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjlhNDNjNGQtOTlmMS00NmU3LTlj YzctYjhjNjMwMWFhYjIxL2Y5YTQzYzRkLTk5ZjEtNDZlNy05Y2M3LWI4YzYzMDFh YWIyMS5jcmwwHwYDVR0jBBgwFoAUL4oW4xv70jqeRfMPQU+a0TlSRaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2 MzAxYWFiMjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArZUi49elsiImU1LFAwxib J3E68wTyBfUE1kkgqU22lm95sl+PairprIOXEOCYqrdBRy5YTztrq/56A84cmd28 VB6qjkAxxrG8o9wtiR9tJTTe47gKycCAB420Xa/R3kYPFEQM+a7CWUbz5X/j9sYR A7eGaskr2rD3745TQ8o5dTQMQlzV08+zP/f9C1ygyat279G/dtKpot9H/fpsuPnc Q3KpfZ2eSqV/OU73yYQ77U8bLhRoqT2uoOlKD+cA3lQZJXwqJuQLy1BqIRNvVh6A jEv25t5l+zv9P6yY2rld63zGbAZTAyiAY+O5W5jfoARCPbu/us+143+euwcVF3ux -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:56 2025 by rpki-client