$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft File: b94e0278-7f16-4317-8890-88ac004494dc.mft (raw, json) Hash identifier: IAsMFpf295DnTG9d4+Wg3/QaCeIOV9ch2DkOzLXxXqk= Subject key identifier: 3E:42:B6:71:C8:E9:BE:1A:87:EF:0F:1D:8F:74:50:5C:9A:08:19:5D Authority key identifier: 8A:5F:8F:1F:12:D4:4B:A5:56:6D:C1:71:60:0F:87:D2:81:59:64:66 Certificate issuer: /CN=b94e0278-7f16-4317-8890-88ac004494dc Certificate serial: 010D0C9F4328584BC10A9F42FC84FB4F292EEB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft Manifest number: 010D0C9F4328584AA44AD36068057BBC3FA9C459 Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Sat 08 Nov 2025 02:00:00 +0000 Files and hashes: 1: b94e0278-7f16-4317-8890-88ac004494dc.crl (hash: 77GJiO7q6WBzA87ZnxA8HAZBqXjEMPKN0oaeCsgwNoY=) 2: e66b647d-b635-3cf0-b9e9-6d7c5b4e2b8d.roa (hash: g/TACb2R07asB95rkO+yB3RBaDLqyOoc/YRgo9i7p+I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9f:42:fc:84:fb:4f:29:2e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94e0278-7f16-4317-8890-88ac004494dc Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 8 02:00:00 2025 GMT Subject: CN=2ef04f86-826f-4f30-9f31-76ffe35f0c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:4b:c0:e0:7d:67:a9:53:bc:0f:f7:87:2d: 14:1a:e9:b6:21:f3:cf:61:38:ff:5d:da:5d:b0:8c: ce:0c:fa:03:07:22:54:80:43:3c:01:46:5b:6f:b9: af:8e:a3:6e:1d:fa:51:79:74:6c:eb:af:ea:ec:c9: 24:f0:6f:b8:01:1f:8b:11:d9:22:13:0c:03:1d:8d: b1:fa:c9:f7:1a:fb:56:9c:10:33:ae:29:04:87:17: f9:e0:0c:1d:1a:4f:44:a9:4d:77:9e:4a:de:71:b1: 0c:59:91:38:27:8b:b0:7d:66:16:57:3f:55:7f:f1: 6f:5a:ab:e2:82:89:bf:09:36:cb:15:83:83:41:90: e1:55:7e:12:94:cb:18:06:3f:d6:03:5d:1b:d9:88: 70:f3:cd:74:65:70:b1:9e:88:13:86:08:3f:60:96: 82:a7:ef:61:8a:57:75:02:16:c6:f5:ef:ee:b0:f8: 26:58:fa:95:c7:87:af:cf:32:76:91:2e:f3:6e:4f: 75:a6:78:cd:37:88:f6:10:d6:e1:5c:64:eb:c6:1b: 49:37:e2:c7:8f:d4:93:e2:b2:a1:8b:10:ec:84:6b: 01:5b:83:a3:f6:c2:3e:4a:e6:f7:83:f9:2d:41:b3: 41:5f:1a:96:1c:6d:2f:f0:d9:af:4a:5a:00:24:64: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:B6:71:C8:E9:BE:1A:87:EF:0F:1D:8F:74:50:5C:9A:08:19:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc/b94e0278-7f16-4317-8890-88ac004494dc.crl X509v3 Authority Key Identifier: keyid:8A:5F:8F:1F:12:D4:4B:A5:56:6D:C1:71:60:0F:87:D2:81:59:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b94e0278-7f16-4317-8890-88ac004494dc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7f:95:50:d5:13:9e:4f:20:da:d2:eb:e9:b9:24:ea:43:72: 12:47:95:c6:05:7e:fe:8d:d1:09:b6:1f:f2:42:47:67:2f:85: 92:ac:cc:26:0b:bd:2d:7a:da:47:d6:f7:03:c6:20:84:41:3e: 66:10:61:23:a3:bf:b0:a2:c6:93:7c:ce:3d:ce:71:b3:e9:66: ec:7d:9e:c7:80:09:d2:f6:04:06:b9:4d:36:f2:01:54:33:16: 34:1e:40:96:be:ac:17:6d:01:b6:c6:92:dc:54:db:c9:ed:b2: b1:18:ef:15:07:dd:97:09:f8:a5:a1:96:d8:d3:c9:ca:51:c2: 5b:74:f6:1d:ee:47:51:1b:06:89:c5:ef:d7:f7:9c:e8:c2:23: 7d:fa:5d:78:f8:dc:fd:0f:86:a7:46:d9:1b:e7:81:34:5f:ba: 00:c2:17:32:84:4d:99:35:2d:6a:f4:db:b8:63:dd:cb:df:06: 0f:4b:8e:31:6a:5f:56:dc:80:32:f8:63:40:9e:3c:38:03:f7: 53:eb:78:51:1a:39:eb:b7:c4:44:75:92:31:7f:c5:32:42:95: 3c:f0:d6:87:32:40:1c:b7:5c:dc:cf:8d:84:3e:0e:8f:d3:8e: 89:fe:0b:60:dc:2c:22:a1:c7:d9:68:f0:69:b7:68:e1:07:bf: 0b:77:39:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCp9C/IT7Tyku6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk0ZTAyNzgtN2YxNi00MzE3LTg4OTAtODhhYzAwNDQ5 NGRjMB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwODAyMDAwMFowLzEtMCsGA1UEAxMk MmVmMDRmODYtODI2Zi00ZjMwLTlmMzEtNzZmZmUzNWYwYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxclLwOB9Z6lTvA/3hy0UGum2IfPPYTj/Xdpd sIzODPoDByJUgEM8AUZbb7mvjqNuHfpReXRs66/q7Mkk8G+4AR+LEdkiEwwDHY2x +sn3GvtWnBAzrikEhxf54AwdGk9EqU13nkrecbEMWZE4J4uwfWYWVz9Vf/FvWqvi gom/CTbLFYODQZDhVX4SlMsYBj/WA10b2Yhw8810ZXCxnogThgg/YJaCp+9hild1 AhbG9e/usPgmWPqVx4evzzJ2kS7zbk91pnjNN4j2ENbhXGTrxhtJN+LHj9ST4rKh ixDshGsBW4Oj9sI+Sub3g/ktQbNBXxqWHG0v8NmvSloAJGQrIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD5CtnHI6b4ah+8PHY90UFyaCBldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOTRl MDI3OC03ZjE2LTQzMTctODg5MC04OGFjMDA0NDk0ZGMvYjk0ZTAyNzgtN2YxNi00 MzE3LTg4OTAtODhhYzAwNDQ5NGRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjk0ZTAyNzgtN2YxNi00MzE3LTg4 OTAtODhhYzAwNDQ5NGRjL2I5NGUwMjc4LTdmMTYtNDMxNy04ODkwLTg4YWMwMDQ0 OTRkYy5jcmwwHwYDVR0jBBgwFoAUil+PHxLUS6VWbcFxYA+H0oFZZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOTRlMDI3OC03ZjE2LTQzMTctODg5MC04OGFj MDA0NDk0ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6f5VQ1ROeTyDa0uvpuSTq Q3ISR5XGBX7+jdEJth/yQkdnL4WSrMwmC70tetpH1vcDxiCEQT5mEGEjo7+wosaT fM49znGz6WbsfZ7HgAnS9gQGuU028gFUMxY0HkCWvqwXbQG2xpLcVNvJ7bKxGO8V B92XCfiloZbY08nKUcJbdPYd7kdRGwaJxe/X95zowiN9+l14+Nz9D4anRtkb54E0 X7oAwhcyhE2ZNS1q9Nu4Y93L3wYPS44xal9W3IAy+GNAnjw4A/dT63hRGjnrt8RE dZIxf8UyQpU88NaHMkAct1zcz42EPg6P046J/gtg3CwiocfZaPBpt2jhB78Ldzn2 -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:56 2025 by rpki-client