$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft File: 904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft (raw, json) Hash identifier: fG4hIsvPHh8sn6uutu9bfUM3bRcOd+KDkHI6xLdd2vk= Subject key identifier: BA:E6:C0:C9:A7:2A:38:BF:29:F2:27:15:0D:9F:F4:06:02:AD:DE:D6 Authority key identifier: 45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34 Certificate issuer: /CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8 Certificate serial: 010D0C9F4328584BC05800FD93CD8721D25F3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft Manifest number: 010D0C9F43285840FFC748B9607E90281F391EF3 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa (hash: v/iUOh+jSr1bEEC6nROAwaP4BhEL+0o6VVVHZJFxQQg=) 2: 904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl (hash: g7/GPoPfbDKKm9lPGoKOH+y7scbU+5NyhVBjhXohV/s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:fd:93:cd:87:21:d2:5f:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=8a79b745-4698-4c9a-bf60-6237b03ccbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:69:1c:9e:55:d6:5c:aa:e3:e1:55:f3:61: 79:4d:51:4e:7e:e3:02:a2:1a:8d:83:20:72:80:fb: 1f:97:8e:67:20:42:9e:24:c7:70:9d:e4:f3:90:d3: 3f:97:24:08:14:70:ad:4a:c0:91:42:e7:3d:96:17: 6c:2a:bf:62:9e:17:da:cd:dd:84:78:e2:b3:52:ed: 70:cb:fd:97:5a:a0:93:d3:93:2c:7e:02:f2:bd:35: 1a:d6:4e:de:85:07:42:ea:8e:56:84:04:5b:f3:0a: d3:83:09:cd:37:35:10:87:8e:52:dd:6b:f4:09:04: e3:3b:b3:4f:69:dc:6d:24:b7:17:ca:5a:a9:b7:51: 6e:89:a5:62:2a:07:3c:93:98:ad:6c:a1:ba:3e:25: b8:76:03:68:33:ec:f7:42:41:02:42:55:c5:f9:99: 58:9a:bd:be:0e:ce:4b:41:78:04:ad:bb:b6:09:c4: 79:99:f0:f4:21:f1:c8:60:bb:4f:17:93:51:95:2c: 3b:f9:b2:96:64:9f:e0:5e:c1:e5:9a:e9:fa:1e:18: 48:73:d7:3b:40:37:6b:42:63:b7:ab:4e:60:3b:fc: 74:92:d5:a4:1c:cf:0e:e6:6a:95:85:48:1b:c6:17: 8a:d1:ba:7b:4b:85:ff:24:da:56:54:fb:29:b8:a1: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:C0:C9:A7:2A:38:BF:29:F2:27:15:0D:9F:F4:06:02:AD:DE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl X509v3 Authority Key Identifier: keyid:45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:20:ea:31:98:2c:2d:b1:d8:5a:e2:13:07:6e:74:5f:89:60: 1f:f4:fc:2e:11:e2:44:46:74:1a:cb:88:1e:fc:32:67:6e:8e: 4b:9c:a0:90:97:8a:88:2a:c5:0f:68:66:16:5a:84:23:49:f5: 4e:73:68:0d:7f:da:07:dd:e5:72:f5:4d:62:9e:5f:1b:a6:bf: 89:2d:1b:10:5c:34:1a:49:a1:63:f8:65:9f:3f:95:1f:14:75: c7:2a:8b:82:30:f3:e2:88:f6:17:b0:00:b8:86:ee:c3:b4:4d: 57:c7:a0:bd:80:e5:33:71:68:d3:a7:08:9c:97:69:b4:7b:ec: 29:41:8b:a7:40:f8:e8:ae:34:b7:3a:47:42:a2:1e:26:3c:b7: 1c:e2:82:f8:75:4c:68:77:ea:59:fc:94:4a:55:ac:d3:a8:64: cf:a9:24:71:30:38:67:90:2d:c2:3e:7d:ff:60:18:12:5b:08: a9:2f:03:34:0f:e9:32:45:8f:15:a6:e3:09:32:3a:ae:ea:fb: 31:5c:4e:b1:4a:6f:c3:1d:ac:aa:f0:06:7f:50:fe:76:74:e8: 1b:a8:46:26:31:71:6d:fa:be:6d:3d:1a:78:bd:3f:0c:68:3c: ef:4a:85:ad:de:7c:bc:f8:62:0d:67:15:0a:5c:ab:86:22:a1: 12:45:f6:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAD9k82HIdJfOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA0ZDhiNDAtOWNjYi00YWY4LWJiN2QtZjM2YTk2YTM0 M2M4MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk OGE3OWI3NDUtNDY5OC00YzlhLWJmNjAtNjIzN2IwM2NjYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjltpHJ5V1lyq4+FV82F5TVFOfuMCohqNgyBy gPsfl45nIEKeJMdwneTzkNM/lyQIFHCtSsCRQuc9lhdsKr9inhfazd2EeOKzUu1w y/2XWqCT05MsfgLyvTUa1k7ehQdC6o5WhARb8wrTgwnNNzUQh45S3Wv0CQTjO7NP adxtJLcXylqpt1FuiaViKgc8k5itbKG6PiW4dgNoM+z3QkECQlXF+ZlYmr2+Ds5L QXgErbu2CcR5mfD0IfHIYLtPF5NRlSw7+bKWZJ/gXsHlmun6HhhIc9c7QDdrQmO3 q05gO/x0ktWkHM8O5mqVhUgbxheK0bp7S4X/JNpWVPspuKGwTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLrmwMmnKji/KfInFQ2f9AYCrd7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDRk OGI0MC05Y2NiLTRhZjgtYmI3ZC1mMzZhOTZhMzQzYzgvOTA0ZDhiNDAtOWNjYi00 YWY4LWJiN2QtZjM2YTk2YTM0M2M4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA0ZDhiNDAtOWNjYi00YWY4LWJi N2QtZjM2YTk2YTM0M2M4LzkwNGQ4YjQwLTljY2ItNGFmOC1iYjdkLWYzNmE5NmEz NDNjOC5jcmwwHwYDVR0jBBgwFoAURetyI5Yq5UOM5CPV5lhMPtKefzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDRkOGI0MC05Y2NiLTRhZjgtYmI3ZC1mMzZh OTZhMzQzYzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpIOoxmCwtsdha4hMHbnRf iWAf9PwuEeJERnQay4ge/DJnbo5LnKCQl4qIKsUPaGYWWoQjSfVOc2gNf9oH3eVy 9U1inl8bpr+JLRsQXDQaSaFj+GWfP5UfFHXHKouCMPPiiPYXsAC4hu7DtE1Xx6C9 gOUzcWjTpwicl2m0e+wpQYunQPjorjS3OkdCoh4mPLcc4oL4dUxod+pZ/JRKVazT qGTPqSRxMDhnkC3CPn3/YBgSWwipLwM0D+kyRY8VpuMJMjqu6vsxXE6xSm/DHayq 8AZ/UP52dOgbqEYmMXFt+r5tPRp4vT8MaDzvSoWt3ny8+GINZxUKXKuGIqESRfac -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:32 2025 by rpki-client