$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft File: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft (raw, json) Hash identifier: EjyvlKKqOqR/PjWMjywL6c0RPmComXOQczWyu/m5lPY= Subject key identifier: 7A:F0:FA:D7:85:4D:79:D8:8C:EA:71:CA:11:3A:60:ED:30:CC:EF:22 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584BBFE0D64329C7125D14DCD1A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft Manifest number: 010D0C9F43285847FF6DB89C0ACD762A7E013B60 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl (hash: TJvaikbHykIvoT42xhxxaEmGMPGUiskh+ET7wxEWdPA=) 2: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (hash: 0ZWPYYr4aYs5Eqb2eG1tI9fvXa5XkYXhIH4JjOSQmJY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d6:43:29:c7:12:5d:14:dc:d1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=52e5442d-08eb-4ec0-b299-9a9f5900ea01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:59:70:1d:2f:45:68:e1:b7:28:80:da:90: 23:7d:4c:90:65:b9:0d:2d:61:8b:bb:ac:f5:6f:9f: e4:4b:26:2f:39:1d:39:da:71:69:8f:89:53:77:29: d5:1a:21:7b:78:02:47:df:6a:21:8c:be:3b:ca:c8: 5c:39:c8:8b:d8:85:17:c1:e9:ae:2a:87:90:c6:35: f1:a0:91:3b:c8:e0:44:f1:ea:6e:2b:07:b6:77:1a: e3:7b:2d:e2:76:ff:08:6a:44:97:bb:c7:e0:f6:39: 28:60:77:ce:93:8f:ff:4f:ea:f0:ac:87:d9:8e:6d: bf:0a:2a:05:7b:e0:c1:4b:61:ec:10:3f:64:4f:bf: 05:c5:1d:05:db:88:75:1b:d3:2a:db:31:5c:03:3a: 9a:04:bb:cb:d1:ae:46:6d:d7:7a:a1:67:da:d6:7e: 8c:d5:51:2d:f3:a1:7d:24:14:02:7d:f0:e3:aa:44: f4:a5:d2:72:45:1f:cd:e2:08:29:64:91:31:5c:88: 54:23:d3:f3:81:42:0f:bc:6b:a8:26:20:1c:4f:36: d1:7f:b9:f7:57:38:eb:49:70:61:25:8a:e2:1d:74: bd:c9:77:fe:eb:af:93:3c:b3:bc:c4:93:c6:3e:bd: 7f:3e:1e:ac:89:a5:00:89:6b:5b:60:87:22:17:16: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F0:FA:D7:85:4D:79:D8:8C:EA:71:CA:11:3A:60:ED:30:CC:EF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:93:d4:58:2c:9f:e2:da:ec:99:78:ae:20:25:40:44:2b:95: c7:07:4c:db:8e:8a:f4:cf:d6:fd:fa:98:95:fc:83:82:8a:88: 9f:64:bb:41:1b:c4:fc:dd:00:34:f4:3f:47:77:0b:27:2b:aa: 8b:fb:9f:e0:d3:35:e2:87:95:71:03:d1:87:52:88:96:4f:2a: 5c:8a:51:d4:06:f0:94:84:c7:4e:ab:8c:aa:c0:f1:b4:a5:96: ce:0b:07:d8:33:d3:9b:aa:2d:1c:ee:93:cb:11:2e:7a:83:d2: 98:09:b3:69:00:6b:85:c9:4c:35:a1:01:5d:f6:c2:19:13:7d: 34:6e:a9:16:4f:16:c5:3b:a6:c9:1d:0c:21:57:d9:46:ec:1d: cf:0c:d9:9b:5e:e3:50:2c:fa:b9:8e:20:53:1a:28:7c:96:73: 74:3b:d3:e8:8f:9b:6d:bb:db:f7:5b:b4:e1:e7:ad:6b:c7:b1: 71:6b:85:f5:4e:6c:b0:12:e4:21:61:c1:d4:9e:5e:1f:70:9d: d8:9f:89:76:f3:fa:db:9a:28:65:4b:84:8b:58:6c:4b:4e:a2: 9f:99:2e:99:de:43:1c:9b:ae:48:22:9b:2a:bf:c2:fc:e9:54: 9b:b8:b6:45:6e:71:08:c6:6d:b5:f9:3e:0c:27:22:02:d0:b4: a3:db:05:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NZDKccSXRTc0agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NTJlNTQ0MmQtMDhlYi00ZWMwLWIyOTktOWE5ZjU5MDBlYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaZZcB0vRWjhtyiA2pAjfUyQZbkNLWGLu6z1 b5/kSyYvOR052nFpj4lTdynVGiF7eAJH32ohjL47yshcOciL2IUXwemuKoeQxjXx oJE7yOBE8epuKwe2dxrjey3idv8IakSXu8fg9jkoYHfOk4//T+rwrIfZjm2/CioF e+DBS2HsED9kT78FxR0F24h1G9Mq2zFcAzqaBLvL0a5Gbdd6oWfa1n6M1VEt86F9 JBQCffDjqkT0pdJyRR/N4ggpZJExXIhUI9PzgUIPvGuoJiAcTzbRf7n3VzjrSXBh JYriHXS9yXf+66+TPLO8xJPGPr1/Ph6siaUAiWtbYIciFxazxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHrw+teFTXnYjOpxyhE6YO0wzO8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvOWY3NWU4ZDctZTQ1Zi00 NzY3LTg5MzktYTJjNTM5NGMxZTdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUk9RYLJ/i2uyZeK4gJUBE K5XHB0zbjor0z9b9+piV/IOCioifZLtBG8T83QA09D9HdwsnK6qL+5/g0zXih5Vx A9GHUoiWTypcilHUBvCUhMdOq4yqwPG0pZbOCwfYM9Obqi0c7pPLES56g9KYCbNp AGuFyUw1oQFd9sIZE300bqkWTxbFO6bJHQwhV9lG7B3PDNmbXuNQLPq5jiBTGih8 lnN0O9Poj5ttu9v3W7Th561rx7Fxa4X1TmywEuQhYcHUnl4fcJ3Yn4l28/rbmihl S4SLWGxLTqKfmS6Z3kMcm65IIpsqv8L86VSbuLZFbnEIxm21+T4MJyIC0LSj2wWg -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:14 2025 by rpki-client