$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft File: f9b1a11d-20ed-494f-a473-5ebece521a34.mft (raw, json) Hash identifier: hoKu1HGY0ITQWZMw0lwTvyWGUErOFTqA4QPoC5ZfaLI= Subject key identifier: 06:03:07:D1:BD:05:49:2D:8F:BB:17:EB:E4:2C:D8:FA:7F:8D:63:9E Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29 Certificate issuer: /CN=f9b1a11d-20ed-494f-a473-5ebece521a34 Certificate serial: 010D0C9F4328584BC03A2F926C942AC3F0A77000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft Manifest number: 010D0C9F43285841C86050978DC5184846F6B62A Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (hash: NDa+oVE+H0o3ct2K47knsps1xeAT/HMmQLxAWDsi3dI=) 2: f9b1a11d-20ed-494f-a473-5ebece521a34.crl (hash: 3GLqgzQvtF7LyCdasCxppu6W4ibeUzLKkgWYcSPqK30=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2f:92:6c:94:2a:c3:f0:a7:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=d4687ca3-52d4-4656-b672-9f852e0a0f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:e8:b9:2c:2b:fa:7f:1a:d5:c4:a1:a5:f0: bf:1b:f5:6b:d2:29:56:f7:0c:7d:6f:d7:0e:6e:0b: 6b:8c:ae:c0:4e:6a:19:c5:dd:d2:18:0e:f2:3a:21: 25:32:7f:06:ae:36:33:dc:24:da:74:63:8f:de:64: e4:76:56:0b:2a:bf:a5:89:5f:fe:30:20:ba:72:7c: 79:6c:09:67:c6:9a:61:59:21:24:48:30:3c:c9:ea: d5:de:3a:6d:08:57:6c:f2:26:76:9f:9e:5d:71:dd: 3c:a0:33:5e:46:87:e1:70:6d:27:44:ac:24:55:17: 03:cf:0e:73:63:0d:0f:8f:03:34:50:27:4d:ea:7b: 47:c2:a6:6c:07:7a:4c:1d:3a:da:ad:8f:ca:09:cf: a3:f1:e5:cf:90:a3:d2:3e:26:fc:28:40:f0:3c:8e: e9:e1:f8:d9:a0:6f:9c:1c:1f:58:77:2e:1d:a6:c4: a7:2a:92:12:07:78:26:72:c3:79:59:0c:29:6f:93: 47:b5:67:56:55:16:b5:b3:48:f4:23:73:84:0c:74: 93:fa:5c:64:ea:39:61:b3:12:d9:00:9a:1d:22:0a: c7:c5:61:c6:7a:90:28:a5:6e:8d:53:d2:46:8e:5e: a4:3b:63:b6:64:bf:0b:9f:7f:55:fd:32:b1:2c:4b: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:03:07:D1:BD:05:49:2D:8F:BB:17:EB:E4:2C:D8:FA:7F:8D:63:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl X509v3 Authority Key Identifier: keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:80:21:f3:ba:42:37:b9:1d:1e:f5:b4:d1:71:31:ce:56:75: b2:9c:1a:dd:44:2b:a5:db:a7:72:10:8b:2a:d7:28:6c:c3:4e: 7f:ad:0e:1e:f7:e0:42:6b:aa:95:02:a6:9a:a1:39:5a:36:0f: f6:3b:b4:8f:a7:de:7c:0d:26:ac:3e:d8:26:eb:1c:67:05:16: 87:17:f8:8d:b8:f1:e2:76:19:b2:9b:bd:fe:d5:b7:4e:07:4c: dc:ac:ac:dd:4b:75:27:07:2b:52:1c:5a:4c:d5:9b:75:7a:8e: db:50:22:8c:92:95:b9:a1:3b:35:96:4c:0b:5a:d6:35:83:ed: fa:d5:15:03:9b:4b:c6:cb:74:e7:69:95:ee:71:eb:97:d7:01: 0c:d3:98:6f:e3:23:f3:b0:7a:41:da:3c:97:80:8c:fa:f7:d8: 53:e1:88:9a:22:c8:63:2b:19:c9:f2:d7:18:f2:20:ff:31:87: 1d:d4:b8:22:37:97:a1:55:81:09:88:38:03:c7:69:aa:0a:37: d4:2b:e3:f7:14:d0:e9:29:54:83:33:fb:7e:06:70:0c:f0:a6: 98:72:43:c0:f5:b3:7d:40:94:49:67:f1:87:93:65:0d:11:dd: 9a:8e:8a:e6:f6:3a:2f:84:f8:55:74:11:60:49:cc:9f:49:d4: bc:a5:8e:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi+SbJQqw/CncAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjliMWExMWQtMjBlZC00OTRmLWE0NzMtNWViZWNlNTIx YTM0MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZDQ2ODdjYTMtNTJkNC00NjU2LWI2NzItOWY4NTJlMGEwZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOLouSwr+n8a1cShpfC/G/Vr0ilW9wx9b9cO bgtrjK7ATmoZxd3SGA7yOiElMn8GrjYz3CTadGOP3mTkdlYLKr+liV/+MCC6cnx5 bAlnxpphWSEkSDA8yerV3jptCFds8iZ2n55dcd08oDNeRofhcG0nRKwkVRcDzw5z Yw0PjwM0UCdN6ntHwqZsB3pMHTrarY/KCc+j8eXPkKPSPib8KEDwPI7p4fjZoG+c HB9Ydy4dpsSnKpISB3gmcsN5WQwpb5NHtWdWVRa1s0j0I3OEDHST+lxk6jlhsxLZ AJodIgrHxWHGepAopW6NU9JGjl6kO2O2ZL8Ln39V/TKxLEtZLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAYDB9G9BUktj7sX6+Qs2Pp/jWOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mOWIx YTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJlY2U1MjFhMzQvZjliMWExMWQtMjBlZC00 OTRmLWE0NzMtNWViZWNlNTIxYTM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjliMWExMWQtMjBlZC00OTRmLWE0 NzMtNWViZWNlNTIxYTM0L2Y5YjFhMTFkLTIwZWQtNDk0Zi1hNDczLTVlYmVjZTUy MWEzNC5jcmwwHwYDVR0jBBgwFoAUM3Ap6qPwRNfY5cusn9w05FAktSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mOWIxYTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJl Y2U1MjFhMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYgCHzukI3uR0e9bTRcTHO VnWynBrdRCul26dyEIsq1yhsw05/rQ4e9+BCa6qVAqaaoTlaNg/2O7SPp958DSas Ptgm6xxnBRaHF/iNuPHidhmym73+1bdOB0zcrKzdS3UnBytSHFpM1Zt1eo7bUCKM kpW5oTs1lkwLWtY1g+361RUDm0vGy3TnaZXuceuX1wEM05hv4yPzsHpB2jyXgIz6 99hT4YiaIshjKxnJ8tcY8iD/MYcd1LgiN5ehVYEJiDgDx2mqCjfUK+P3FNDpKVSD M/t+BnAM8KaYckPA9bN9QJRJZ/GHk2UNEd2ajorm9jovhPhVdBFgScyfSdS8pY56 -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:39 2025 by rpki-client