$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: p+In9K5fJ4KKI1DO2LQW9N8z8eMe6g8DTAfsUk8/V7k= Subject key identifier: 11:13:6E:57:28:B9:43:6C:7E:90:F4:D8:E2:BA:19:8E:74:A6:60:8D Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584BC01C636B7BCB0866F8A75080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA610 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: xoDQyth6P/aB/Z3wd+1YM0ytQTiDwRPt6ymEfDBMncw=) 2: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (hash: btthWgiKNPFAeCfbLLWAPiNUXgyOSwTl4wusw24iaL0=) 3: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: HRSsU80g0A0G1MKHEIoKvCDIaNZqwUYVfI+xM7sZ92w=) 4: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: IohJQgDNYmt4J3KrUS2yNTZLExqOnbKVmbBAeiG34Yw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:6b:7b:cb:08:66:f8:a7:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=cffce06d-48ce-4b9b-8166-d21799fa93df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:50:85:51:01:5d:94:40:8f:5f:68:87:53: 13:da:76:a1:73:d6:77:9a:79:4b:4a:79:84:5f:2e: f1:3b:64:72:d8:35:b1:e2:93:f2:4c:37:34:c9:81: c7:fc:db:a7:63:51:94:7d:95:7b:14:c9:0a:53:a8: 81:ac:00:a9:b3:d4:ed:26:63:b4:88:e7:87:c3:86: 91:b4:49:a8:44:ff:1f:d7:c9:77:bf:b8:71:32:68: 39:e5:96:27:0e:db:61:f4:0a:30:04:04:cc:79:ab: 16:f5:8f:a4:a8:f2:17:52:c3:27:e6:5c:a0:02:e1: aa:29:4f:59:2b:55:28:13:d4:a1:69:a4:e0:11:ae: f9:ef:b6:c6:6c:0b:38:24:b0:68:f5:4b:e9:b6:b9: c9:09:0e:b0:84:77:db:2c:74:96:85:16:df:78:66: e1:54:cc:39:ea:53:52:95:39:c4:0c:ea:7d:68:31: a4:29:eb:02:1a:89:a6:5d:3f:e6:7d:04:30:ff:59: 18:90:81:19:38:e3:58:43:49:db:39:10:b6:52:40: 9b:90:f9:25:11:37:4f:ea:8a:aa:83:b3:72:b9:f1: 81:c4:73:7f:67:65:a1:ff:6f:1d:a8:7a:5f:7c:f2: 44:c1:d8:2b:51:8c:26:a3:88:a3:35:1c:d8:04:84: 2f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:13:6E:57:28:B9:43:6C:7E:90:F4:D8:E2:BA:19:8E:74:A6:60:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:09:a9:d7:32:e0:e2:53:38:a9:2c:46:4a:33:82:88:2c:0f: 46:c1:b0:39:7e:5d:d0:7e:54:af:01:19:3c:bb:45:2d:8f:5f: f7:30:36:eb:92:eb:99:e7:b3:5c:74:9f:0c:4d:3e:67:90:16: 52:90:91:8a:40:43:08:25:33:15:72:55:21:b9:2b:b2:af:94: b3:fa:85:be:13:3e:e2:f1:c2:1e:7e:7f:ac:66:74:21:bf:56: d3:58:05:ea:cc:3e:cf:73:d8:c4:91:79:13:3a:88:b0:3b:7c: f5:be:e0:96:fa:e2:28:10:09:56:f2:21:d3:b2:58:e1:51:71: ac:1c:e0:f1:70:ad:3c:af:76:be:9f:f2:05:62:74:32:22:8b: 4b:7b:db:91:5f:de:18:26:34:09:fd:06:cd:e8:e3:bd:46:f0: 80:76:65:c6:da:4f:92:4c:65:b5:11:d9:9a:5c:97:0c:e7:6f: 47:db:be:be:30:05:13:cd:de:fe:68:52:dd:7b:f7:06:5e:a0: 2d:91:80:3b:4b:9b:e5:d4:eb:9f:ca:fe:71:8c:16:d1:16:4e: 66:84:ca:4b:28:90:74:e1:47:11:68:4b:3a:d5:bb:c1:e6:74: 6d:a0:ff:21:ec:0f:25:6e:54:2e:8d:bc:07:84:a9:d6:ac:74: 96:77:f5:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGNre8sIZvinUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk Y2ZmY2UwNmQtNDhjZS00YjliLTgxNjYtZDIxNzk5ZmE5M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cFQhVEBXZRAj19oh1MT2nahc9Z3mnlLSnmE Xy7xO2Ry2DWx4pPyTDc0yYHH/NunY1GUfZV7FMkKU6iBrACps9TtJmO0iOeHw4aR tEmoRP8f18l3v7hxMmg55ZYnDtth9AowBATMeasW9Y+kqPIXUsMn5lygAuGqKU9Z K1UoE9ShaaTgEa7577bGbAs4JLBo9UvptrnJCQ6whHfbLHSWhRbfeGbhVMw56lNS lTnEDOp9aDGkKesCGommXT/mfQQw/1kYkIEZOONYQ0nbORC2UkCbkPklETdP6oqq g7NyufGBxHN/Z2Wh/28dqHpffPJEwdgrUYwmo4ijNRzYBIQvoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBETblcouUNsfpD02OK6GY50pmCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCECanXMuDiUzipLEZKM4KI LA9GwbA5fl3QflSvARk8u0Utj1/3MDbrkuuZ57NcdJ8MTT5nkBZSkJGKQEMIJTMV clUhuSuyr5Sz+oW+Ez7i8cIefn+sZnQhv1bTWAXqzD7Pc9jEkXkTOoiwO3z1vuCW +uIoEAlW8iHTsljhUXGsHODxcK08r3a+n/IFYnQyIotLe9uRX94YJjQJ/QbN6OO9 RvCAdmXG2k+STGW1EdmaXJcM529H276+MAUTzd7+aFLde/cGXqAtkYA7S5vl1Ouf yv5xjBbRFk5mhMpLKJB04UcRaEs61bvB5nRtoP8h7A8lblQujbwHhKnWrHSWd/UH -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:38 2025 by rpki-client