$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft File: 89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft (raw, json) Hash identifier: /qKeCRh3e2Wk3wfhnuev5K54Bnj0l8BQE3Anmp/n2qQ= Subject key identifier: 6B:7B:C9:54:1C:F0:8A:08:16:E1:07:DB:FB:29:2F:D7:74:FA:7B:C7 Authority key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Certificate issuer: /CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Certificate serial: 010D0C9F4328584BC075C8415676475EAEFA11C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft Manifest number: 010D0C9F43285848B590E9F8DCA64CF4C4B2D83D Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa (hash: iZh9coBjzLAnu8liu+i4foFgMGSnYQF6Ypx+sqxMnJA=) 2: 89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl (hash: 158IW6vG8+LGJs+9sig/Cqkzuz68NmLI+GGAxVMhWr4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:41:56:76:47:5e:ae:fa:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=e14a8a53-ed1a-4e07-ae82-0fcfc30ae086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:8e:0c:6c:9d:74:6d:ba:94:4b:3e:e3:0e: f7:c1:40:5c:d0:f6:a5:c7:26:72:c3:42:01:ab:9d: 91:fe:5c:d8:a0:c2:bb:44:1b:a5:8e:b1:5c:63:85: 5f:9a:6f:84:d8:cb:18:b6:11:27:94:be:1f:82:68: cb:07:86:c2:5c:8d:43:9c:ca:49:2a:bc:2f:61:b1: a2:4a:e2:a6:29:b0:78:38:e5:b0:e6:a6:09:6d:55: 4c:33:ac:57:10:65:7b:7e:01:a6:39:98:e8:5e:49: 84:6c:00:b1:c5:b0:35:61:56:e0:54:44:80:0b:6a: 6e:32:ac:79:ac:5c:c9:84:a1:d9:9a:39:b4:fb:2b: 1f:0e:83:50:c9:0f:1c:7b:3b:d8:fa:a7:a8:77:3c: d5:eb:d9:3b:c3:25:fd:d2:35:e6:3c:dc:a4:57:28: 29:00:b3:95:80:ee:66:9e:63:59:92:60:50:00:8f: 3d:5b:21:89:b9:fe:c9:47:ef:22:ed:80:df:0d:7d: 3b:8c:55:a4:05:b8:17:39:8d:b6:0c:0d:6a:7f:9f: 3c:6f:ec:b6:25:c4:ca:5b:c4:91:ac:a4:9d:1e:3b: 2c:63:b6:c5:bb:d9:5e:24:34:b6:f1:f3:fc:2d:a9: 65:f8:83:80:1b:0e:35:6b:bb:c7:20:bf:cc:0f:b3: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:C9:54:1C:F0:8A:08:16:E1:07:DB:FB:29:2F:D7:74:FA:7B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl X509v3 Authority Key Identifier: keyid:2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e6:87:25:48:95:fe:5d:bd:49:c1:fc:57:95:61:0f:3f:32: e2:87:81:0f:5e:bf:e9:8a:b0:94:9b:68:04:eb:70:17:4f:a5: 2e:ca:00:8f:7a:18:c9:ab:12:f6:f2:8e:6f:e1:fb:14:08:60: 5d:c3:de:9d:3a:e8:a3:ea:8b:28:93:c4:f5:9d:a7:19:74:3f: 85:39:74:bd:8f:34:9a:f3:75:cd:46:7b:40:70:62:bc:7c:99: 72:78:96:5e:16:47:79:82:cd:b9:4e:9a:25:14:09:08:66:63: 59:d3:3b:e3:ec:64:10:76:7d:fb:99:76:71:63:1f:f7:07:49: 47:0d:af:1c:d0:a4:89:8a:23:dd:ee:c6:6d:58:a8:14:e7:84: 51:6f:71:3c:96:be:52:8e:97:45:be:4d:d3:70:2b:bd:9f:06: a8:22:6c:15:b6:0f:14:49:78:80:4f:44:e7:d0:81:fb:d7:e3: e5:f3:e6:fd:56:b3:95:83:22:5e:a6:09:a3:64:ed:c8:49:e6: 23:0a:83:b1:c6:d9:e3:64:25:81:6a:bc:56:49:ba:d4:6d:b1: f1:b3:5b:64:5a:49:ff:97:ca:d5:53:f6:79:ee:bc:7e:4b:83: dd:a9:ef:81:ce:2d:73:67:78:86:11:09:97:06:23:62:25:91: 34:24:89:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdchBVnZHXq76EcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5 MDYzMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk ZTE0YThhNTMtZWQxYS00ZTA3LWFlODItMGZjZmMzMGFlMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBeODGyddG26lEs+4w73wUBc0PalxyZyw0IB q52R/lzYoMK7RBuljrFcY4Vfmm+E2MsYthEnlL4fgmjLB4bCXI1DnMpJKrwvYbGi SuKmKbB4OOWw5qYJbVVMM6xXEGV7fgGmOZjoXkmEbACxxbA1YVbgVESAC2puMqx5 rFzJhKHZmjm0+ysfDoNQyQ8cezvY+qeodzzV69k7wyX90jXmPNykVygpALOVgO5m nmNZkmBQAI89WyGJuf7JR+8i7YDfDX07jFWkBbgXOY22DA1qf588b+y2JcTKW8SR rKSdHjssY7bFu9leJDS28fP8Lall+IOAGw41a7vHIL/MD7ONawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGt7yVQc8IoIFuEH2/spL9d0+nvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OWJl MmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvODliZTJlZmEtM2MyZi00 NmQyLWI1ZTctY2I4ZDk1MzY5MDYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODliZTJlZmEtM2MyZi00NmQyLWI1 ZTctY2I4ZDk1MzY5MDYzLzg5YmUyZWZhLTNjMmYtNDZkMi1iNWU3LWNiOGQ5NTM2 OTA2My5jcmwwHwYDVR0jBBgwFoAUK65SecIQTmcFGTwFTLgn7hyllaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhk OTUzNjkwNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDB5oclSJX+Xb1JwfxXlWEP PzLih4EPXr/pirCUm2gE63AXT6UuygCPehjJqxL28o5v4fsUCGBdw96dOuij6oso k8T1nacZdD+FOXS9jzSa83XNRntAcGK8fJlyeJZeFkd5gs25TpolFAkIZmNZ0zvj 7GQQdn37mXZxYx/3B0lHDa8c0KSJiiPd7sZtWKgU54RRb3E8lr5SjpdFvk3TcCu9 nwaoImwVtg8USXiAT0Tn0IH71+Pl8+b9VrOVgyJepgmjZO3ISeYjCoOxxtnjZCWB arxWSbrUbbHxs1tkWkn/l8rVU/Z57rx+S4Pdqe+Bzi1zZ3iGEQmXBiNiJZE0JInG -----END CERTIFICATE-----Generated at Wed Nov 5 16:06:51 2025 by rpki-client