$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft File: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft (raw, json) Hash identifier: S1HfLn57ooug+a0ry7tUweZaz5+vlEqu3dCYxNY1L+U= Subject key identifier: 3B:EE:08:E0:BF:85:0B:83:A0:3A:57:29:D7:63:F6:76:4F:27:64:F1 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584BBEF29C63DC6329E49DF86E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft Manifest number: 010D0C9F432858440EC852E77A7AC987AC86ED76 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (hash: 1O7FMKmPA3fsyq+7OpqEHL0zXFLFBzfGRzSQsDgxkHM=) 2: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl (hash: 8DYJH9lSnNQsA8tILD59QnNZidKo+4ocLqaomqlU+6c=) 3: c084590b-3ab2-32dd-af28-d65751098d7b.roa (hash: NHOreEXt03wSqzxd7GTejZ7z6HtH7Zl2aiq9VhptcqU=) 4: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (hash: CiIJheQ1Oh/GZfImhRbUkQLFogl32u9B/1m4tCmej4s=) 5: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (hash: vIzdh4rlO6hg5EksQzMaaMTYl2auNADe3q00PL8pQG4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9c:63:dc:63:29:e4:9d:f8:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=5da3ec7f-0189-40cd-bdd7-327093b90c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:94:92:c0:1d:ec:3f:87:26:5d:16:78:ee: d6:9c:45:46:49:98:8a:6c:43:12:11:44:8b:5c:f4: 1a:9a:f9:b6:9f:7d:88:22:82:b6:23:fd:b8:b3:d4: f6:9d:09:12:89:a8:15:ee:42:ab:d5:d9:97:77:47: 4f:8b:0d:39:bc:40:45:86:69:1e:33:d2:ce:39:8d: de:ae:c5:d5:e9:da:2e:b3:ff:0c:bd:2a:f4:66:dd: 59:7b:b0:87:3d:90:6f:54:81:2e:0b:c5:d0:9f:16: db:d2:83:f7:cc:89:9d:87:9f:e3:a4:dd:62:3a:d7: 32:8a:ef:4c:78:b5:7f:d3:92:23:6a:28:9b:43:7a: c8:25:5b:db:e0:33:e4:53:bb:fe:28:a6:81:e4:d0: 31:90:89:7e:03:c7:da:9b:27:41:b8:b5:11:fc:f0: 15:b1:c4:02:3a:e9:04:6d:b1:fb:ed:0f:b0:b7:08: a9:b8:06:50:09:5f:49:8e:ad:e7:54:07:6b:fb:ea: b0:f3:b5:90:bf:51:c4:d5:c6:87:00:b7:04:17:a9: c8:50:1e:6d:62:e3:0f:52:8f:54:9e:24:b4:95:a2: 60:5b:af:c9:79:4c:15:4b:eb:2d:5c:ff:17:00:44: 1e:a3:c8:c4:1d:8d:be:7d:fe:73:c4:bc:f5:fc:ea: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EE:08:E0:BF:85:0B:83:A0:3A:57:29:D7:63:F6:76:4F:27:64:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8e:f3:6a:ee:b7:1b:b9:d0:91:1f:e1:1c:8e:47:9c:c5:6f: 94:08:bc:71:bc:06:62:bd:64:11:0d:14:86:f0:79:46:95:58: 08:3b:f4:f4:3f:5b:ec:3b:9e:55:df:60:d8:7b:66:61:12:9d: 0c:14:78:f1:84:80:78:71:9d:88:f7:8b:e6:09:53:17:12:ba: 3b:19:fe:65:28:91:40:e4:c1:6a:8e:2c:86:b4:32:96:0e:14: cf:79:42:f5:61:e3:24:4d:09:6a:25:07:23:b8:88:8b:2c:66: ee:b0:66:88:5a:09:be:6a:2d:7e:c3:21:46:9c:9c:da:64:92: c7:8f:ab:f2:1c:0e:32:ac:ca:c4:13:3e:a2:5e:2d:db:0c:fc: 28:7f:4f:51:51:fb:f6:eb:aa:9d:7f:20:db:4e:ff:94:ed:a1: 6e:d5:2d:e7:d2:10:a3:59:15:67:fc:49:11:36:99:e4:f7:99: df:cc:31:f6:e4:da:3c:32:85:a0:1f:7f:35:07:cf:1f:b1:86: 5a:91:12:d2:26:14:a7:84:ef:f9:b7:c7:4a:95:ce:d5:76:4d: 73:fc:2f:6b:63:32:e1:57:fb:8f:19:f8:4f:c8:5d:83:4c:49: 19:b1:27:02:59:59:36:82:a6:c9:71:3a:f5:54:be:52:06:d8: 53:5c:6c:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8pxj3GMp5J34bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk NWRhM2VjN2YtMDE4OS00MGNkLWJkZDctMzI3MDkzYjkwYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNKUksAd7D+HJl0WeO7WnEVGSZiKbEMSEUSL XPQamvm2n32IIoK2I/24s9T2nQkSiagV7kKr1dmXd0dPiw05vEBFhmkeM9LOOY3e rsXV6dous/8MvSr0Zt1Ze7CHPZBvVIEuC8XQnxbb0oP3zImdh5/jpN1iOtcyiu9M eLV/05IjaiibQ3rIJVvb4DPkU7v+KKaB5NAxkIl+A8famydBuLUR/PAVscQCOukE bbH77Q+wtwipuAZQCV9Jjq3nVAdr++qw87WQv1HE1caHALcEF6nIUB5tYuMPUo9U niS0laJgW6/JeUwVS+stXP8XAEQeo8jEHY2+ff5zxLz1/OrdZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDvuCOC/hQuDoDpXKddj9nZPJ2TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMWI5YmYyZjQtYzgzMS00 ZjFlLWEyZDUtZDdmYzQwNTM1YzhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXjvNq7rcbudCRH+Ecjkec xW+UCLxxvAZivWQRDRSG8HlGlVgIO/T0P1vsO55V32DYe2ZhEp0MFHjxhIB4cZ2I 94vmCVMXEro7Gf5lKJFA5MFqjiyGtDKWDhTPeUL1YeMkTQlqJQcjuIiLLGbusGaI Wgm+ai1+wyFGnJzaZJLHj6vyHA4yrMrEEz6iXi3bDPwof09RUfv266qdfyDbTv+U 7aFu1S3n0hCjWRVn/EkRNpnk95nfzDH25No8MoWgH381B88fsYZakRLSJhSnhO/5 t8dKlc7Vdk1z/C9rYzLhV/uPGfhPyF2DTEkZsScCWVk2gqbJcTr1VL5SBthTXGyl -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:30 2025 by rpki-client