$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft File: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft (raw, json) Hash identifier: 7L5s4CabQ19A4st5yMOikr6wGXwcdjBNR0LlE2+vEMo= Subject key identifier: B3:B9:6C:E3:2B:DF:82:64:57:58:70:EC:C5:27:54:DC:9F:B8:F6:03 Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Certificate serial: 010D0C9F4328584BBD51B4A5F67B70AEA7147B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft Manifest number: 010D0C9F4328584842AEA7D4A339FCE1EFCDBF48 Signing time: Mon 03 Nov 2025 18:00:03 +0000 Manifest this update: Mon 03 Nov 2025 18:00:03 +0000 Manifest next update: Wed 05 Nov 2025 18:00:00 +0000 Files and hashes: 1: 0395e48a-e337-3165-b134-5c62b28818bd.roa (hash: vSCrhS9O4T7L9vlNvKbB8BFLVwoMGsZ0l4r+l7uQZqg=) 2: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (hash: klHCJH/YF7jIQdWzMQbZoWI4d1Yfhn49kT29j04y0/4=) 3: 522ee799-00c1-3c81-9a66-32d095f18a7d.roa (hash: cagXkOglUL2k8uig9tQbq4N+6Vv0QNs5KEGJ1XZfXks=) 4: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl (hash: ORkHXIXDZdxtrg1m+ERKX5K0NuR66d0cKvs/eQE/gFY=) 5: bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (hash: S1RG9Qz0GqUveLJQrjFZAj5TuYzLU2XClGW2d9b/b+g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:51:b4:a5:f6:7b:70:ae:a7:14:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Validity Not Before: Nov 3 18:00:03 2025 GMT Not After : Nov 5 18:00:00 2025 GMT Subject: CN=1348020e-efb1-4b29-8677-2426a3f6105a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:10:25:63:12:29:f5:ef:b2:0e:a9:74:4c: d1:86:de:6b:fc:70:be:42:a0:db:ae:9e:96:79:ca: 9b:2c:6c:f0:11:50:15:45:cc:4d:c7:93:c3:09:d6: 37:94:43:1f:58:ee:e0:71:cf:e3:c5:e8:2a:ce:f1: 19:5e:b5:35:81:4b:a3:49:5a:00:8d:f4:27:e1:c7: 1f:fd:82:7c:31:a7:2e:dd:ae:df:f9:0f:41:ed:60: 1c:53:b3:8f:ea:bb:e5:70:75:a3:a3:8f:72:15:fb: 57:86:33:af:5f:b1:08:3c:71:3e:62:ef:d0:20:f9: a7:0a:1a:93:22:48:85:f0:94:df:fb:93:cd:43:75: 78:50:6c:e0:24:08:d8:d6:1d:12:d6:ae:80:1c:88: 4a:0a:68:c5:7d:e1:46:9f:5a:1a:0c:0d:52:48:5b: 16:01:14:ef:d0:b7:2f:77:e1:db:68:3e:e2:31:93: ac:48:06:d3:59:25:2c:98:31:0a:dd:33:a8:dd:80: 09:d4:3d:e6:09:b3:6d:78:71:b8:e8:4f:c9:13:24: ef:c9:c5:b1:0b:11:2e:2f:95:e3:dc:dd:e3:50:6f: d6:0a:f7:4c:b3:19:cd:0b:b4:66:f4:06:58:ff:ff: 80:c8:4a:e1:c4:26:f7:af:96:29:ef:65:c5:73:6c: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:6C:E3:2B:DF:82:64:57:58:70:EC:C5:27:54:DC:9F:B8:F6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl X509v3 Authority Key Identifier: keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ff:ea:ea:14:52:33:54:bd:30:68:ee:60:9d:4e:58:f6:fd: 91:e3:c6:72:34:eb:e8:93:da:01:93:c4:56:84:aa:02:eb:4b: 2b:96:f1:be:f3:54:e5:21:bd:7c:b6:a6:d2:3b:0d:50:52:fd: be:e8:11:ab:d7:b9:e6:19:83:b2:22:91:bd:6c:e8:31:3c:b0: 24:8c:19:83:dc:6d:6a:5f:d8:b3:79:6a:70:a4:18:9a:87:72: 6b:fd:09:97:13:93:41:8c:5c:71:8f:67:64:ef:21:12:29:82: 62:b9:89:49:91:eb:b8:a3:ce:bc:1c:49:13:56:be:d7:90:dd: 34:ad:27:ec:a0:4d:0c:f2:40:f5:b2:36:6d:f0:a3:91:b1:76: 59:42:bb:39:fe:0c:36:18:43:2c:04:b0:2b:56:5d:c2:b9:68: 80:95:6b:cb:d2:f9:99:4d:94:7c:be:7b:05:11:54:57:c6:f4: 13:2c:80:c6:15:8c:53:15:eb:ea:58:b0:0b:05:b7:d2:41:3a: d0:1e:88:5e:cb:4f:a7:21:db:ea:ac:69:01:69:14:dd:ac:f8: 71:ca:be:ab:26:cd:e6:6b:1a:65:25:6e:26:c0:de:be:b0:7e: f2:e3:61:3a:36:24:21:f4:d7:f8:34:cd:1f:da:9f:26:4d:21: 9c:75:67:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9UbSl9ntwrqcUe2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl M2Q1MB4XDTI1MTEwMzE4MDAwM1oXDTI1MTEwNTE4MDAwMFowLzEtMCsGA1UEAxMk MTM0ODAyMGUtZWZiMS00YjI5LTg2NzctMjQyNmEzZjYxMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9cQJWMSKfXvsg6pdEzRht5r/HC+QqDbrp6W ecqbLGzwEVAVRcxNx5PDCdY3lEMfWO7gcc/jxegqzvEZXrU1gUujSVoAjfQn4ccf /YJ8Macu3a7f+Q9B7WAcU7OP6rvlcHWjo49yFftXhjOvX7EIPHE+Yu/QIPmnChqT IkiF8JTf+5PNQ3V4UGzgJAjY1h0S1q6AHIhKCmjFfeFGn1oaDA1SSFsWARTv0Lcv d+HbaD7iMZOsSAbTWSUsmDEK3TOo3YAJ1D3mCbNteHG46E/JEyTvycWxCxEuL5Xj 3N3jUG/WCvdMsxnNC7Rm9AZY//+AyErhxCb3r5Yp72XFc2y0HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLO5bOMr34JkV1hw7MUnVNyfuPYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3 ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvODM4N2Q4OTQtZDJiYS00 ZTMzLThlODQtNDRiOWQ5ZDZlM2Q1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2 ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5 ZDlkNmUzZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD/+rqFFIzVL0waO5gnU5Y 9v2R48ZyNOvok9oBk8RWhKoC60srlvG+81TlIb18tqbSOw1QUv2+6BGr17nmGYOy IpG9bOgxPLAkjBmD3G1qX9izeWpwpBiah3Jr/QmXE5NBjFxxj2dk7yESKYJiuYlJ keu4o868HEkTVr7XkN00rSfsoE0M8kD1sjZt8KORsXZZQrs5/gw2GEMsBLArVl3C uWiAlWvL0vmZTZR8vnsFEVRXxvQTLIDGFYxTFevqWLALBbfSQTrQHohey0+nIdvq rGkBaRTdrPhxyr6rJs3maxplJW4mwN6+sH7y42E6NiQh9Nf4NM0f2p8mTSGcdWeW -----END CERTIFICATE-----Generated at Tue Nov 4 16:48:46 2025 by rpki-client