$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft File: 949c3388-1f02-441c-9195-5c40d8fd63d2.mft (raw, json) Hash identifier: nNoh1Sz1Aua34ItbFylWVaQOYggL3M0SiGS8+KirkS8= Subject key identifier: 6A:45:1C:30:D0:A3:53:37:7B:D3:68:11:70:A7:3A:83:3C:A9:D6:B0 Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA Certificate issuer: /CN=949c3388-1f02-441c-9195-5c40d8fd63d2 Certificate serial: 010D0C9F4328584BBDE697CFCD6BD00379868500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft Manifest number: 010D0C9F432858441BC29C76CABBEAB26E300D38 Signing time: Mon 03 Nov 2025 23:00:03 +0000 Manifest this update: Mon 03 Nov 2025 23:00:03 +0000 Manifest next update: Thu 06 Nov 2025 23:00:00 +0000 Files and hashes: 1: 1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa (hash: CE7JVLpWnOehRkuTNhOPbfKP5CbYWRUTV7d/2RuCUDU=) 2: 459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (hash: jSJ6Wz9gwIIURSVd3Lz91holKAh1cuky4f7sDEzkZu8=) 3: 629373c6-f5f6-3553-83a0-b92d79ab0de8.roa (hash: PPozUOUQQg5hQVwvGm9OhPb7SX4SSsYUTzXPUf3AtNY=) 4: 779b7ba6-8e65-315b-a2cf-6a2a82df2f66.roa (hash: bLw4/upr4AQpvdLUWO9m36v978zKCrVV9M0O28JcuGQ=) 5: 949c3388-1f02-441c-9195-5c40d8fd63d2.crl (hash: a8WdAgyi1TgsPMPhb67ygnzRvuEfJM9F7xgxuTluxOY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:e6:97:cf:cd:6b:d0:03:79:86:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2 Validity Not Before: Nov 3 23:00:03 2025 GMT Not After : Nov 6 23:00:00 2025 GMT Subject: CN=fcd9be88-dbc8-4e54-99ae-b0fc8cae6f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b8:23:0f:4d:4d:06:72:71:5f:a2:cb:7b:e1: 16:9a:57:b7:51:72:33:ee:58:4e:71:a1:00:82:62: dc:d1:29:e7:1a:ca:75:2a:f4:c8:a5:f7:31:7b:f3: d5:29:fd:f4:2b:11:2f:4d:eb:1e:70:81:c0:b1:c0: 1d:5a:e2:81:fb:5a:08:2a:4f:97:72:5f:26:c4:3c: 05:b1:d2:7a:47:b9:24:70:0f:38:32:84:d8:01:f9: 68:80:05:15:4d:03:b5:41:b9:89:34:13:19:05:c5: f8:a6:ba:d2:3f:a7:4a:9a:eb:84:5a:1a:3c:db:7d: 4e:52:bf:81:e1:80:be:29:b3:9f:5f:57:5b:91:99: 95:29:f5:ab:57:a6:27:6f:2d:e1:57:e6:4d:de:ef: 6f:a8:52:f2:e1:f2:94:13:a4:c2:2e:da:32:eb:9f: 42:dc:50:6b:e3:7d:86:3e:6b:24:6c:06:02:f0:57: 9f:86:45:14:c0:c6:23:07:9e:49:00:ee:2e:8e:cc: ec:8c:8f:76:e5:fe:52:59:31:76:79:2a:4d:07:6e: ce:73:0d:e4:b9:13:f4:0d:36:eb:c6:9a:21:13:08: 5b:44:8c:ae:75:67:f8:43:cb:1c:c5:f4:f1:2d:7d: ad:16:85:ee:a6:81:bb:ea:db:8c:0c:66:84:8f:b9: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:1C:30:D0:A3:53:37:7B:D3:68:11:70:A7:3A:83:3C:A9:D6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl X509v3 Authority Key Identifier: keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7c:3a:13:8c:41:d8:48:5c:c4:8a:e5:b6:7a:25:27:e2:2b: f7:f3:b1:6a:96:5f:7d:8a:ef:a3:e1:67:2e:56:5b:7c:e6:8f: 58:c2:fa:d3:4c:72:0c:e6:a9:4e:eb:38:f2:c9:ab:62:35:0c: e6:d5:79:ca:18:e7:63:db:0e:20:f4:bd:43:2b:9b:11:0c:43: 89:17:ad:e6:63:fa:15:11:9f:65:71:bf:f2:14:3b:d1:5c:3c: d8:56:2c:6c:23:03:31:ee:78:31:12:e7:70:1e:2e:95:bd:97: df:bd:1c:5a:7e:52:84:35:15:97:41:6b:06:ec:99:4a:23:14: 4a:ea:72:2d:5e:26:46:1a:4b:66:19:6a:2b:9a:22:cb:35:0d: 0e:8b:bd:ef:4d:cb:07:43:73:f5:3e:7c:2d:d3:10:59:f5:3d: 17:22:3f:37:e0:64:ee:79:0f:7b:40:e9:ee:79:8d:df:de:c8: e4:fc:88:f9:87:23:51:a5:c9:f0:82:25:6b:7e:8d:58:6b:14: ac:e1:75:bc:80:4d:f2:29:81:63:2c:eb:c5:da:4c:81:ca:2d: a8:59:17:7e:4b:a3:4f:2f:99:4a:b3:8a:29:93:c6:dd:50:35: 0b:c3:aa:2c:92:dd:a6:82:16:fb:17:22:6d:9c:31:bb:c6:5e: 13:87:99:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu95pfPzWvQA3mGhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ5YzMzODgtMWYwMi00NDFjLTkxOTUtNWM0MGQ4ZmQ2 M2QyMB4XDTI1MTEwMzIzMDAwM1oXDTI1MTEwNjIzMDAwMFowLzEtMCsGA1UEAxMk ZmNkOWJlODgtZGJjOC00ZTU0LTk5YWUtYjBmYzhjYWU2ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLgjD01NBnJxX6LLe+EWmle3UXIz7lhOcaEA gmLc0SnnGsp1KvTIpfcxe/PVKf30KxEvTesecIHAscAdWuKB+1oIKk+Xcl8mxDwF sdJ6R7kkcA84MoTYAflogAUVTQO1QbmJNBMZBcX4prrSP6dKmuuEWho8231OUr+B 4YC+KbOfX1dbkZmVKfWrV6Ynby3hV+ZN3u9vqFLy4fKUE6TCLtoy659C3FBr432G PmskbAYC8FefhkUUwMYjB55JAO4ujszsjI925f5SWTF2eSpNB27Ocw3kuRP0DTbr xpohEwhbRIyudWf4Q8scxfTxLX2tFoXupoG76tuMDGaEj7nUpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGpFHDDQo1M3e9NoEXCnOoM8qdawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDlj MzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQwZDhmZDYzZDIvOTQ5YzMzODgtMWYwMi00 NDFjLTkxOTUtNWM0MGQ4ZmQ2M2QyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQ5YzMzODgtMWYwMi00NDFjLTkx OTUtNWM0MGQ4ZmQ2M2QyLzk0OWMzMzg4LTFmMDItNDQxYy05MTk1LTVjNDBkOGZk NjNkMi5jcmwwHwYDVR0jBBgwFoAUaCxxzpCcX4cVDCzmk2cVx6mvEOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDljMzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQw ZDhmZDYzZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHfDoTjEHYSFzEiuW2eiUn 4iv387Fqll99iu+j4WcuVlt85o9YwvrTTHIM5qlO6zjyyatiNQzm1XnKGOdj2w4g 9L1DK5sRDEOJF63mY/oVEZ9lcb/yFDvRXDzYVixsIwMx7ngxEudwHi6VvZffvRxa flKENRWXQWsG7JlKIxRK6nItXiZGGktmGWormiLLNQ0Oi73vTcsHQ3P1Pnwt0xBZ 9T0XIj834GTueQ97QOnueY3f3sjk/Ij5hyNRpcnwgiVrfo1YaxSs4XW8gE3yKYFj LOvF2kyByi2oWRd+S6NPL5lKs4opk8bdUDULw6oskt2mghb7FyJtnDG7xl4Th5nj -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:35 2025 by rpki-client