$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft File: baa47c38-d554-4849-bca9-e7ed28932034.mft (raw, json) Hash identifier: /ox4QjsV5t9h6O2dojFfOkisQ4dqgvHRIxOa/D2VR8I= Subject key identifier: 66:F9:41:31:D7:69:2E:7C:E9:2A:33:A5:CC:91:B5:FB:E2:6E:8E:CA Authority key identifier: 03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 Certificate issuer: /CN=baa47c38-d554-4849-bca9-e7ed28932034 Certificate serial: 010D0C9F4328584BBFA55307C1B2BEA35BB72800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft Manifest number: 010D0C9F4328584B28E6513AA746FB05FF753E57 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Fri 07 Nov 2025 14:00:00 +0000 Files and hashes: 1: 34827400-375f-3793-a621-53cacce76602.roa (hash: p3sHyyecB7eqgVlr/fftanU+RhvElsYcFRqXtxJESyU=) 2: baa47c38-d554-4849-bca9-e7ed28932034.crl (hash: wvLOhFpFvUGzF9XvD9DEMatRH+9tQ3cGZX7OOK/Tjxo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:53:07:c1:b2:be:a3:5b:b7:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa47c38-d554-4849-bca9-e7ed28932034 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 7 14:00:00 2025 GMT Subject: CN=1727d7b2-83f3-4849-84db-6482a54a3583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:73:69:80:bd:0a:4c:5f:65:5b:e0:d3:68: 72:07:2d:25:72:44:7d:b2:a2:bc:86:1a:f0:12:dc: c0:14:4b:ef:12:b7:88:57:83:d8:d4:a8:e0:9b:9c: b7:7e:0f:cf:31:0e:41:c1:71:f0:f8:17:c4:22:61: fc:d5:f4:47:55:11:8b:45:dc:70:05:d4:68:73:3c: 0a:f6:99:fa:55:5a:37:39:57:42:1f:bd:9d:96:9f: a0:ea:6e:f5:24:df:da:a6:5a:86:7a:7b:ab:af:b3: b7:89:21:fd:b4:16:3b:36:ca:23:f8:de:3f:f4:0a: a9:af:9b:de:0d:24:e0:45:44:d5:f5:de:ae:51:2f: 7e:25:e0:8f:4e:ae:6c:e7:57:4c:49:46:c4:bd:93: f2:ae:c5:c5:56:b7:e9:47:2b:a7:39:4c:5b:9e:16: 65:12:cf:ac:c2:95:6b:03:a9:d6:41:14:83:b7:c7: 1b:64:25:a2:ff:ec:cf:8d:4f:70:2d:3c:b8:30:b6: e1:7f:48:e0:a3:25:ae:28:1e:8b:0a:fa:e0:6a:5b: 83:ed:0a:ef:76:be:74:db:17:f7:ea:0c:e1:8f:a6: 2e:a5:21:86:92:cd:a4:c9:58:3a:e9:c4:6a:f8:77: e6:85:57:f0:cf:cb:13:41:80:45:58:64:86:89:fb: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:41:31:D7:69:2E:7C:E9:2A:33:A5:CC:91:B5:FB:E2:6E:8E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.crl X509v3 Authority Key Identifier: keyid:03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7d:a5:fa:cd:ee:c1:76:01:e7:57:68:71:04:3a:2e:09:e7: 80:44:13:33:22:28:2c:ed:90:7c:07:92:45:88:5b:5f:18:b0: 0d:f9:8f:9c:6b:20:b4:7b:25:73:34:f9:75:8a:4c:d2:1f:85: 6a:87:69:5c:24:78:96:50:1f:dc:ff:3a:e5:01:b8:1c:e0:45: d8:9a:50:40:50:02:b9:b3:0d:60:89:4d:e9:d5:65:cd:8f:88: 2e:58:32:13:c5:de:f2:0f:6c:d8:ba:6b:c2:ac:f8:74:6c:ab: 5b:a5:ba:7d:ae:53:e1:05:9e:55:ea:13:3b:b1:53:f1:6b:b7: 4b:02:79:91:d7:d3:2a:f1:64:34:25:5f:25:83:b2:85:83:25: ad:09:70:0f:00:27:8c:28:e0:b5:c6:eb:fa:ab:9a:af:e3:16: 66:21:61:6d:59:05:2a:4a:fa:2c:93:86:76:6d:8d:aa:b4:4c: 7a:ab:65:46:66:9c:2a:39:e1:67:42:4b:78:2e:5c:d8:d5:29: a2:3e:18:d5:71:df:e3:36:20:93:37:29:42:a1:43:41:75:49: 78:ff:13:e5:49:9c:71:f0:63:31:f8:a8:3a:f6:9b:ea:ad:85: da:f7:80:ea:8e:bc:b5:fc:53:b1:bf:22:be:27:08:d3:ae:db: b9:91:44:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVMHwbK+o1u3KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFhNDdjMzgtZDU1NC00ODQ5LWJjYTktZTdlZDI4OTMy MDM0MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk MTcyN2Q3YjItODNmMy00ODQ5LTg0ZGItNjQ4MmE1NGEzNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs01zaYC9CkxfZVvg02hyBy0lckR9sqK8hhrw EtzAFEvvEreIV4PY1Kjgm5y3fg/PMQ5BwXHw+BfEImH81fRHVRGLRdxwBdRoczwK 9pn6VVo3OVdCH72dlp+g6m71JN/aplqGenurr7O3iSH9tBY7Nsoj+N4/9Aqpr5ve DSTgRUTV9d6uUS9+JeCPTq5s51dMSUbEvZPyrsXFVrfpRyunOUxbnhZlEs+swpVr A6nWQRSDt8cbZCWi/+zPjU9wLTy4MLbhf0jgoyWuKB6LCvrgaluD7Qrvdr502xf3 6gzhj6YupSGGks2kyVg66cRq+HfmhVfwz8sTQYBFWGSGift+dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGb5QTHXaS586SozpcyRtfvibo7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYWE0 N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2VkMjg5MzIwMzQvYmFhNDdjMzgtZDU1NC00 ODQ5LWJjYTktZTdlZDI4OTMyMDM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmFhNDdjMzgtZDU1NC00ODQ5LWJj YTktZTdlZDI4OTMyMDM0L2JhYTQ3YzM4LWQ1NTQtNDg0OS1iY2E5LWU3ZWQyODkz MjAzNC5jcmwwHwYDVR0jBBgwFoAUA9tM9XvDfQuS98U8IL9B9CN7d5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYWE0N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2Vk Mjg5MzIwMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsfaX6ze7BdgHnV2hxBDou CeeARBMzIigs7ZB8B5JFiFtfGLAN+Y+cayC0eyVzNPl1ikzSH4Vqh2lcJHiWUB/c /zrlAbgc4EXYmlBAUAK5sw1giU3p1WXNj4guWDITxd7yD2zYumvCrPh0bKtbpbp9 rlPhBZ5V6hM7sVPxa7dLAnmR19Mq8WQ0JV8lg7KFgyWtCXAPACeMKOC1xuv6q5qv 4xZmIWFtWQUqSvosk4Z2bY2qtEx6q2VGZpwqOeFnQkt4LlzY1SmiPhjVcd/jNiCT NylCoUNBdUl4/xPlSZxx8GMx+Kg69pvqrYXa94Dqjry1/FOxvyK+JwjTrtu5kURC -----END CERTIFICATE-----Generated at Wed Nov 5 15:27:29 2025 by rpki-client