$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: 3bgv3UwPWZ2ctTdB+ZNdSV+0zOfUbWgLraSpcfm0asQ= Subject key identifier: 52:2F:4E:C9:9D:CE:00:39:CF:30:8B:C4:17:1B:ED:73:E1:64:F3:AF Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584BC057FF7969D6888407B299C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E2363D Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: CZigBE6x7fZKxuZJBvE1SlHU5gmNgg99USZqHya+PUw=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: 5HytF0VyiRT9Sj2FqEqF7TTgjXAhmj9pIjUaVuCwEu0=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: EkCRGfwfm6LKpLY7kKSg+eoSxSaHyL5rXkCFjGXosy0=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: Uir1xJ19fg1eQTWgcKWDHcPsHb6UxUneanbs78qz4zQ=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: vyZL/+9SA8yvqtKxpjN2yz27cmlj1oNLtCfKl5WaxBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:ff:79:69:d6:88:84:07:b2:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=d155c17a-d0f0-4ee9-9b20-7d5f8bc3f764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:27:a2:c6:15:6e:a0:86:fb:56:94:68:12: 59:b9:ab:d2:8c:75:1b:18:f8:60:06:57:7d:d6:1e: 59:6e:a8:51:f8:51:51:c9:81:00:48:42:97:e1:db: 0b:1e:c1:af:22:e4:c0:57:c4:54:8f:87:88:ef:68: 8a:38:7f:e3:55:1a:2b:c9:59:e0:77:cc:f7:0c:fb: 59:53:e1:63:eb:ef:6f:85:1f:16:91:31:93:fe:a0: 5b:85:db:f3:93:98:e9:c7:ba:2f:87:23:37:0e:c9: 22:34:6f:9a:fc:27:97:32:a9:04:e6:6d:d6:1c:7a: b8:b5:16:04:9f:47:3d:2b:5a:4a:bc:2e:0c:80:02: 70:ea:28:fa:fb:b9:10:18:f5:82:4d:9d:0a:c7:ad: 52:64:84:11:58:96:e4:2a:68:20:05:5b:3c:95:6e: c7:84:83:ce:50:43:1c:9c:8b:79:69:e5:a8:0b:c7: f7:40:d5:38:04:7b:dd:b4:8e:ca:81:31:b3:a1:50: fe:3c:67:6f:d5:92:b3:04:ac:64:55:ae:63:0b:f6: 91:7a:1c:e1:a7:43:36:49:57:0e:01:df:6b:b9:54: 0c:be:ea:91:a1:4d:d3:03:20:5b:34:e1:7d:8d:cd: 99:64:31:d3:a4:ea:18:e4:11:83:88:ba:1f:16:7f: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2F:4E:C9:9D:CE:00:39:CF:30:8B:C4:17:1B:ED:73:E1:64:F3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:22:6b:d1:65:0e:5b:b2:2b:2f:df:ac:a0:57:e3:2a:aa:b8: d9:18:b5:83:21:37:97:c3:4e:72:76:13:82:14:b4:e7:c6:ba: 6d:da:19:70:fb:77:78:1a:2c:26:f2:7d:bb:a5:86:89:b5:7f: 46:cb:63:2e:f0:a4:24:ea:ab:a1:bd:f0:0d:3b:3c:eb:aa:f1: f6:bd:d2:9f:fb:62:a0:06:3d:8e:33:9e:39:0f:b3:8f:4c:3b: 27:8c:59:d6:ab:61:cf:f2:82:d4:48:e6:15:95:fe:a2:6e:2a: 36:54:14:61:5a:c0:cf:4d:42:47:19:3d:ec:d4:65:f7:16:f8: ec:4a:18:70:67:95:53:db:aa:ca:68:f3:17:c8:8b:c9:e2:a7: 0f:74:11:cf:84:58:28:81:3e:ab:53:3b:73:8e:24:81:06:a5: 85:28:4c:72:20:94:d9:ad:ca:43:ec:34:9f:c8:eb:16:bc:d9: c8:77:0c:9b:a5:64:c6:19:4d:75:c1:dc:43:3a:10:05:b5:1f: 63:c0:51:7d:9c:2c:c4:f5:50:d5:12:f1:93:d2:96:80:c4:9e: 3f:d1:86:8f:bd:63:54:46:8c:f5:0b:9b:85:c3:51:a2:ee:da: c5:bf:0e:7b:dd:b8:70:6f:58:92:5e:a4:ab:cc:7a:93:19:79: 8d:dd:a5:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/95adaIhAeymcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk ZDE1NWMxN2EtZDBmMC00ZWU5LTliMjAtN2Q1ZjhiYzNmNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvonosYVbqCG+1aUaBJZuavSjHUbGPhgBld9 1h5ZbqhR+FFRyYEASEKX4dsLHsGvIuTAV8RUj4eI72iKOH/jVRoryVngd8z3DPtZ U+Fj6+9vhR8WkTGT/qBbhdvzk5jpx7ovhyM3DskiNG+a/CeXMqkE5m3WHHq4tRYE n0c9K1pKvC4MgAJw6ij6+7kQGPWCTZ0Kx61SZIQRWJbkKmggBVs8lW7HhIPOUEMc nIt5aeWoC8f3QNU4BHvdtI7KgTGzoVD+PGdv1ZKzBKxkVa5jC/aRehzhp0M2SVcO Ad9ruVQMvuqRoU3TAyBbNOF9jc2ZZDHTpOoY5BGDiLofFn+a8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFIvTsmdzgA5zzCLxBcb7XPhZPOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeImvRZQ5bsisv36ygV+Mq qrjZGLWDITeXw05ydhOCFLTnxrpt2hlw+3d4Giwm8n27pYaJtX9Gy2Mu8KQk6quh vfANOzzrqvH2vdKf+2KgBj2OM545D7OPTDsnjFnWq2HP8oLUSOYVlf6ibio2VBRh WsDPTUJHGT3s1GX3FvjsShhwZ5VT26rKaPMXyIvJ4qcPdBHPhFgogT6rUztzjiSB BqWFKExyIJTZrcpD7DSfyOsWvNnIdwybpWTGGU11wdxDOhAFtR9jwFF9nCzE9VDV EvGT0paAxJ4/0YaPvWNURoz1C5uFw1Gi7trFvw573bhwb1iSXqSrzHqTGXmN3aUt -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:35 2025 by rpki-client