$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft File: 2059c963-068e-4fba-a7d6-639c3f36a91b.mft (raw, json) Hash identifier: myqfolSH+2ygYQe2ndWGEhH8klNtxGY8X6g+p/FdF8c= Subject key identifier: 2E:26:C7:53:16:5F:0D:F0:E6:01:0F:9C:BB:09:A2:51:3D:37:1E:EC Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Certificate issuer: /CN=2059c963-068e-4fba-a7d6-639c3f36a91b Certificate serial: 010D0C9F4328584BC0ECE223488C6C0ECA286E08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft Manifest number: 010D0C9F4328584073A8340FD7B3EDA9E42D4B70 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 2059c963-068e-4fba-a7d6-639c3f36a91b.crl (hash: uQ6Al/dJsFo+8acl0Wtu135al6TOQxg6NiW6ZBmAmgE=) 2: 2b05d93a-3505-32a8-9778-a907ed424baa.roa (hash: I2J1WM7FQzKvxCUQl4WqPYrzEma240lVurpgr6BX0X0=) 3: 2c9974af-b158-3f00-9524-929bb28e921e.roa (hash: h2fmRXTb8nA8C9Bh1u4u4X4rCzL69ZFlbEdmD752FT4=) 4: 3cb7fab8-7537-3a90-a460-36313c91e1b5.roa (hash: A/gX6TFQa9ssyP0FSm5dpR5F3tLXTH4xWQfwiV1ipLc=) 5: 8dcb1bd0-b5c8-39c1-88ac-f822c595f566.roa (hash: rV8a8/8iT8du+1ypwoakzpI3mzUXWwHfPqZK1PLlAVs=) 6: a9cd02b8-2365-3281-9012-ab50278bf591.roa (hash: 3+5jW5nwBs1xXsQ3qWbWjk0h7lyjsAL9yvwdtA2SX5A=) 7: e12ccc84-532c-3776-a16b-50b2503e3495.roa (hash: aetRHJlLSboXUcUCyKL9hu2MPRk06CZg803YblmBio4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e2:23:48:8c:6c:0e:ca:28:6e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=4004a83b-857d-4801-b854-85867025e2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:f0:2d:d7:8a:aa:a9:b4:29:26:eb:1d:e1: e6:cb:e0:43:79:5e:3b:3d:25:69:fe:88:86:b9:0d: 70:3f:75:ce:84:75:4b:f6:fd:23:9f:8c:ec:ee:af: 62:01:7a:b5:f4:df:22:35:af:6e:6c:f1:61:8b:e8: ab:7e:ec:57:00:68:87:78:e2:3b:ce:d4:17:dc:7e: a7:ee:f1:f0:46:2c:48:36:07:3d:44:40:70:4c:51: 3b:ae:5e:a6:a4:c6:ff:08:e7:98:b8:9f:b6:bc:6c: a2:8f:4e:a3:92:18:9a:74:8d:9d:a1:88:69:5d:86: d6:52:59:e6:22:ef:b1:af:69:a5:5d:f3:bf:23:16: 97:69:98:bb:43:92:59:cb:ec:eb:1e:4b:74:59:71: b4:01:56:f3:46:58:72:09:51:8f:48:73:d9:88:2f: 3d:83:cf:a7:d9:80:dd:26:7a:33:49:ac:f1:37:52: aa:76:29:3e:6b:7c:e6:2a:35:96:0c:be:18:38:c5: b0:59:8d:e4:ad:a0:b6:aa:4b:85:af:ad:b0:6e:16: a7:e3:d8:82:9f:62:01:65:cb:79:20:5d:79:df:22: a9:be:4c:a9:05:43:4a:60:07:38:94:09:ef:2b:bf: ae:ad:10:c5:4d:30:f1:ab:90:e6:ea:69:3a:ba:16: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:C7:53:16:5F:0D:F0:E6:01:0F:9C:BB:09:A2:51:3D:37:1E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl X509v3 Authority Key Identifier: keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:29:6b:49:da:2e:d4:a2:e2:af:9c:b2:e6:c7:18:13:88:1f: 1b:4d:8b:aa:16:8a:05:82:2f:ea:9a:35:5d:cf:8a:2f:52:08: 84:38:c9:4c:82:d9:44:e4:f6:86:7f:91:74:30:8d:fe:c8:27: 4c:da:fc:a2:75:54:22:69:db:c3:e8:c3:78:35:4f:da:df:c5: f1:36:cb:e6:59:07:11:7b:30:ed:98:24:cd:6b:57:99:d9:47: 9a:db:24:1a:7a:3d:4d:c3:e1:a0:35:91:58:60:73:70:88:c7: 56:c0:13:e5:45:ce:98:e0:1b:29:0d:7d:bb:25:34:44:f2:f4: d8:bf:8c:5a:c5:14:74:88:8a:2a:73:5e:f7:2a:de:6c:18:70: 85:eb:3d:1b:7b:ed:cb:eb:e4:9d:56:10:4a:14:eb:0b:1b:4f: 10:17:5a:ce:aa:fe:11:ad:0c:95:fc:2e:48:e4:f8:5a:a2:4a: 01:8b:d3:9b:81:d0:81:15:9c:40:c8:1e:cb:3b:e9:f3:72:7f: 00:19:e0:e1:05:ac:2c:24:df:14:20:3b:1e:24:1f:4d:4d:c8: aa:a9:22:a0:cb:cf:8d:9d:0e:8c:bf:d6:1a:02:81:d4:f6:c7: 5c:06:f0:d8:91:5c:da:c1:1e:37:37:a5:31:e0:71:99:d7:f7: 15:b3:60:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OIjSIxsDsoobggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZh OTFiMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk NDAwNGE4M2ItODU3ZC00ODAxLWI4NTQtODU4NjcwMjVlMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsHwLdeKqqm0KSbrHeHmy+BDeV47PSVp/oiG uQ1wP3XOhHVL9v0jn4zs7q9iAXq19N8iNa9ubPFhi+irfuxXAGiHeOI7ztQX3H6n 7vHwRixINgc9REBwTFE7rl6mpMb/COeYuJ+2vGyij06jkhiadI2doYhpXYbWUlnm Iu+xr2mlXfO/IxaXaZi7Q5JZy+zrHkt0WXG0AVbzRlhyCVGPSHPZiC89g8+n2YDd JnozSazxN1Kqdik+a3zmKjWWDL4YOMWwWY3kraC2qkuFr62wbhan49iCn2IBZct5 IF153yKpvkypBUNKYAc4lAnvK7+urRDFTTDxq5Dm6mk6uha0nwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC4mx1MWXw3w5gEPnLsJolE9Nx7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5 Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvMjA1OWM5NjMtMDY4ZS00 ZmJhLWE3ZDYtNjM5YzNmMzZhOTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA1OWM5NjMtMDY4ZS00ZmJhLWE3 ZDYtNjM5YzNmMzZhOTFiLzIwNTljOTYzLTA2OGUtNGZiYS1hN2Q2LTYzOWMzZjM2 YTkxYi5jcmwwHwYDVR0jBBgwFoAUWNZYCwcsYV693v/1IVy0dP6S2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02Mzlj M2YzNmE5MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkKWtJ2i7UouKvnLLmxxgT iB8bTYuqFooFgi/qmjVdz4ovUgiEOMlMgtlE5PaGf5F0MI3+yCdM2vyidVQiadvD 6MN4NU/a38XxNsvmWQcRezDtmCTNa1eZ2Uea2yQaej1Nw+GgNZFYYHNwiMdWwBPl Rc6Y4BspDX27JTRE8vTYv4xaxRR0iIoqc173Kt5sGHCF6z0be+3L6+SdVhBKFOsL G08QF1rOqv4RrQyV/C5I5PhaokoBi9ObgdCBFZxAyB7LO+nzcn8AGeDhBawsJN8U IDseJB9NTciqqSKgy8+NnQ6Mv9YaAoHU9sdcBvDYkVzawR43N6Ux4HGZ1/cVs2DU -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:30 2025 by rpki-client