$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft File: f0998994-1f51-4070-9d55-9e3090085fb9.mft (raw, json) Hash identifier: 76SyqX2kc+dukyPaVPHELFYqptDFfpI1UyP2ayX+n30= Subject key identifier: 84:33:0A:73:7D:F7:DC:7C:42:0E:02:32:63:65:39:67:38:39:6E:F7 Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81 Certificate issuer: /CN=f0998994-1f51-4070-9d55-9e3090085fb9 Certificate serial: 010D0C9F4328584BBFE0DA034176EE7C2DC09B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft Manifest number: 010D0C9F4328584986623EAD7EF203CB324E4494 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 9d101139-a987-39b0-9ef5-0ccea27b0075.roa (hash: l6CjiP6rKBCCVspob3v8S+0QKNwbJPUMcFko1OVgNfk=) 2: f0998994-1f51-4070-9d55-9e3090085fb9.crl (hash: Y/wSfmbXGxqWn1jIfu6DoYrKMBPfetA279TDeoW1kwQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:da:03:41:76:ee:7c:2d:c0:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=8238d50f-b1af-44ff-b491-231e44b7d37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8a:e6:5d:a6:93:74:de:fd:7c:41:a3:c6:6f: 9f:4e:90:cb:ee:48:72:3a:b4:a4:5b:64:3a:05:3e: 57:c2:06:2e:58:23:f5:9b:3a:ef:78:df:10:21:85: 5a:a6:49:a0:53:e0:15:95:b4:5c:43:82:c9:43:1a: 0a:26:d5:f7:9a:1f:68:18:29:64:fa:fc:97:49:c4: 6b:a6:43:b0:54:a9:79:33:89:da:f1:d7:63:89:bf: ed:78:11:cf:ff:a2:a6:ab:10:0d:06:a8:3d:12:09: 80:89:f2:06:18:ab:65:c5:d3:d3:a2:01:a7:32:9a: 31:4d:7e:4c:bf:9d:eb:e8:31:7d:fe:a9:d0:f0:dc: e0:8f:8c:a2:c1:13:bf:84:c2:e4:eb:1e:7a:e2:94: 92:b7:06:f7:6f:da:b2:ef:fe:58:f6:58:47:3e:0b: 64:78:ec:c3:72:26:ab:47:d0:b9:34:db:78:46:81: f2:87:2b:f1:ee:e7:e0:dd:00:c6:31:9e:8f:bc:9f: 6d:7d:79:f9:4c:c2:cf:52:4f:2a:9e:2c:cd:a0:4e: a4:db:6e:81:3c:3d:66:c9:92:50:98:85:0f:18:a1: 99:fa:64:6f:9b:13:b1:c8:2d:90:81:df:c6:d8:9f: 38:d9:1f:68:74:a4:53:e5:af:da:2e:e6:47:a6:24: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:33:0A:73:7D:F7:DC:7C:42:0E:02:32:63:65:39:67:38:39:6E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl X509v3 Authority Key Identifier: keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a2:2c:c1:85:37:70:8c:0e:71:be:21:9f:49:c0:7a:77:90: d8:d9:66:c3:33:c5:3c:f2:dd:09:45:1c:39:7e:05:a0:6e:57: 0f:3b:d2:ee:6e:0f:d9:c3:c3:b6:12:25:9b:8e:66:a0:fe:d6: 48:14:6c:ad:d2:10:1f:15:aa:ac:46:b2:4f:53:1c:1f:24:b1: a5:c4:c8:ec:60:fe:24:96:6a:f4:7f:b5:24:f4:64:b5:02:85: 4a:11:56:ef:b2:9f:07:1c:54:92:4f:a2:a0:92:4c:67:4a:e8: 46:a7:91:73:6a:e5:5e:b2:ab:ae:95:53:38:ff:e9:d4:5f:43: 33:2a:2a:9d:c0:64:4c:df:6a:c2:9b:16:4a:fd:91:76:aa:30: dd:59:5b:70:cc:15:a8:3a:e7:9a:66:45:a9:20:37:e7:68:b4: 58:61:1c:c7:30:aa:81:77:4d:f0:76:82:74:b0:71:4f:80:77: 77:2f:ab:f4:60:08:5e:06:d8:ac:ee:76:b9:25:53:6f:1c:51: 94:2a:09:0c:47:52:20:b0:90:d2:07:c7:0a:3a:73:25:eb:c7: d6:3e:3e:4b:93:56:a0:97:54:e5:5e:0c:7b:22:ea:67:ba:28: 78:14:b6:e2:99:55:11:35:5a:f3:a8:3f:04:0c:0d:10:c8:4f: 54:30:27:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NoDQXbufC3AmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA5OTg5OTQtMWY1MS00MDcwLTlkNTUtOWUzMDkwMDg1 ZmI5MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ODIzOGQ1MGYtYjFhZi00NGZmLWI0OTEtMjMxZTQ0YjdkMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54rmXaaTdN79fEGjxm+fTpDL7khyOrSkW2Q6 BT5XwgYuWCP1mzrveN8QIYVapkmgU+AVlbRcQ4LJQxoKJtX3mh9oGClk+vyXScRr pkOwVKl5M4na8ddjib/teBHP/6KmqxANBqg9EgmAifIGGKtlxdPTogGnMpoxTX5M v53r6DF9/qnQ8Nzgj4yiwRO/hMLk6x564pSStwb3b9qy7/5Y9lhHPgtkeOzDciar R9C5NNt4RoHyhyvx7ufg3QDGMZ6PvJ9tfXn5TMLPUk8qnizNoE6k226BPD1myZJQ mIUPGKGZ+mRvmxOxyC2Qgd/G2J842R9odKRT5a/aLuZHpiQcFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIQzCnN999x8Qg4CMmNlOWc4OW73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mMDk5 ODk5NC0xZjUxLTQwNzAtOWQ1NS05ZTMwOTAwODVmYjkvZjA5OTg5OTQtMWY1MS00 MDcwLTlkNTUtOWUzMDkwMDg1ZmI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjA5OTg5OTQtMWY1MS00MDcwLTlk NTUtOWUzMDkwMDg1ZmI5L2YwOTk4OTk0LTFmNTEtNDA3MC05ZDU1LTllMzA5MDA4 NWZiOS5jcmwwHwYDVR0jBBgwFoAUf6t1dsAzEFiygrbQpSj7LTevW4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mMDk5ODk5NC0xZjUxLTQwNzAtOWQ1NS05ZTMw OTAwODVmYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMoizBhTdwjA5xviGfScB6 d5DY2WbDM8U88t0JRRw5fgWgblcPO9Lubg/Zw8O2EiWbjmag/tZIFGyt0hAfFaqs RrJPUxwfJLGlxMjsYP4klmr0f7Uk9GS1AoVKEVbvsp8HHFSST6KgkkxnSuhGp5Fz auVesquulVM4/+nUX0MzKiqdwGRM32rCmxZK/ZF2qjDdWVtwzBWoOueaZkWpIDfn aLRYYRzHMKqBd03wdoJ0sHFPgHd3L6v0YAheBtis7na5JVNvHFGUKgkMR1IgsJDS B8cKOnMl68fWPj5Lk1agl1TlXgx7Iupnuih4FLbimVURNVrzqD8EDA0QyE9UMCfX -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:12 2025 by rpki-client