$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft File: 900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft (raw, json) Hash identifier: KHoAXZM1cIZPYlyl8/v9oSpSMBddVx+0kqgCjaJaLE4= Subject key identifier: 25:45:70:F3:0C:1A:AE:5A:37:C3:F6:97:B1:7F:5F:B4:6B:CB:52:CB Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Certificate serial: 010D0C9F4328584BB9D4591669F31BAEDD62EB0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft Manifest number: 010D0C9F43285842ACCC5BC45AADEDF92E3E6663 Signing time: Sun 02 Nov 2025 12:00:04 +0000 Manifest this update: Sun 02 Nov 2025 12:00:04 +0000 Manifest next update: Wed 05 Nov 2025 12:00:00 +0000 Files and hashes: 1: 43eb43ee-8548-3476-8f37-5ebc0b6e41de.roa (hash: Lzw0bqoNr7W2KNqeoZU3KnIqF0cvrFpW1CMtqPpeYS0=) 2: 74f37091-0868-326b-ab76-3f839919f773.roa (hash: k3oVymuDqLBZhswqJjt+ljwk1xRfR1BOC6z2pZNoEMU=) 3: 8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa (hash: Oo12clnAoAeHBUReIZku+nWXtXYhyTAnV6WTG5pwCC8=) 4: 900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl (hash: axsi6XnBtx9pdnDYwNosyi+Kj3oPA8uRVTlDcIXLquY=) 5: a70708bb-9107-3142-a761-273eda33709b.roa (hash: utHaakru6r8L1q772+k0PEetBtSKBNqqrka1m8MeKMU=) 6: d41c0259-b9f7-3714-937f-30869ab9b52a.roa (hash: OCM9a7NEsvfE95Fjrtx02b88aEoWNYxITcVM4TU0KzQ=) 7: dac097e5-874f-3d7d-9e60-501c8b2c3f15.roa (hash: r3XSMLxsF+EMtH1zg+gHRgHOLFRiE4rsVJNCWu+KQ7M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:d4:59:16:69:f3:1b:ae:dd:62:eb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Validity Not Before: Nov 2 12:00:04 2025 GMT Not After : Nov 5 12:00:00 2025 GMT Subject: CN=83c53672-f7c2-4358-a7d8-34eb116804ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:6f:74:90:0a:69:bf:ec:64:d7:53:af:96: 2f:ff:ee:89:2c:9a:71:ca:4b:76:b4:5b:be:df:81: a7:b8:60:78:76:d0:80:26:8b:02:06:7f:14:9e:1b: 9d:2a:3f:04:13:c9:2e:0a:9e:ad:9c:b7:07:10:fe: 14:38:6b:1b:38:15:4b:b9:f8:5f:f9:46:18:73:31: 4f:8d:8c:a5:dd:ca:3a:fe:8c:c9:75:d9:3a:7d:03: 0a:00:8e:2d:d7:ef:bf:a1:68:5d:07:64:18:89:72: 8b:b7:c7:3c:9b:80:51:06:e2:f3:dc:10:ac:48:45: ca:e4:88:26:9b:bd:a3:22:ab:15:b3:d0:bb:c4:9b: 7a:74:c2:7b:06:76:b4:ab:86:d3:ee:0a:20:70:6d: 53:00:a0:43:36:18:54:01:1b:a9:63:32:f7:05:c4: 60:a6:27:dc:07:12:bd:23:6f:ad:a9:ef:9a:34:8f: 0c:d8:d9:e1:d5:20:b1:d9:a9:f4:b3:f3:1c:58:63: 45:1e:79:78:63:b4:17:39:be:a3:39:49:79:ba:6e: d9:71:6a:28:c6:71:e2:d5:db:d0:4b:ea:34:5e:64: c3:2e:f9:24:df:30:86:2e:89:2e:95:95:5b:55:ec: 04:54:90:eb:43:02:e3:1f:33:4f:bb:c6:e9:e4:a1: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:45:70:F3:0C:1A:AE:5A:37:C3:F6:97:B1:7F:5F:B4:6B:CB:52:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl X509v3 Authority Key Identifier: keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e6:6c:e0:0f:dc:38:98:a0:41:96:52:af:0e:42:e8:42:30: 1c:ca:35:0d:b2:55:23:c1:c8:fb:f0:d9:6f:7a:8f:71:33:f6: 89:19:7c:a2:f8:d8:bf:55:d3:71:be:35:d8:f5:33:6d:54:1f: 45:fb:47:72:9d:a1:94:16:78:fc:eb:f9:42:c7:11:cc:37:cd: e6:4b:6f:b9:63:92:8c:8f:fd:ec:8c:70:dc:96:1a:71:c3:54: f8:60:15:6e:a9:61:1c:2d:06:f0:5e:9d:87:e8:3e:7f:34:6c: 8c:c2:2c:9f:57:d8:6a:54:ba:59:17:97:45:88:80:ae:3b:f7: 77:9d:e6:95:0c:79:16:54:69:e1:1a:c6:fd:95:59:f9:5b:11: df:06:74:bd:1e:e0:25:26:79:6d:b6:21:a9:85:c3:a4:99:ff: 0d:b5:4a:ba:f2:d6:1c:30:6b:02:c8:83:a8:a2:ca:6f:05:e9: f3:d1:a3:e0:94:3a:02:12:b4:2d:3d:48:a5:40:56:7f:7c:12: cd:ae:8e:0a:c9:53:86:cc:d2:fe:e2:c0:28:58:54:2c:8f:28: 12:00:a7:e5:29:37:91:90:54:40:07:f2:3a:dd:68:8a:dc:e4: e5:b8:cc:a3:82:a8:8a:2c:34:80:a4:99:b2:d9:7d:76:a7:7b: 2c:6b:82:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu51FkWafMbrt1i6wowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy YWQwMB4XDTI1MTEwMjEyMDAwNFoXDTI1MTEwNTEyMDAwMFowLzEtMCsGA1UEAxMk ODNjNTM2NzItZjdjMi00MzU4LWE3ZDgtMzRlYjExNjgwNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3pvdJAKab/sZNdTr5Yv/+6JLJpxykt2tFu+ 34GnuGB4dtCAJosCBn8UnhudKj8EE8kuCp6tnLcHEP4UOGsbOBVLufhf+UYYczFP jYyl3co6/ozJddk6fQMKAI4t1++/oWhdB2QYiXKLt8c8m4BRBuLz3BCsSEXK5Igm m72jIqsVs9C7xJt6dMJ7Bna0q4bT7gogcG1TAKBDNhhUARupYzL3BcRgpifcBxK9 I2+tqe+aNI8M2Nnh1SCx2an0s/McWGNFHnl4Y7QXOb6jOUl5um7ZcWooxnHi1dvQ S+o0XmTDLvkk3zCGLokulZVbVewEVJDrQwLjHzNPu8bp5KGJ7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCVFcPMMGq5aN8P2l7F/X7Rry1LLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvOTAwYmNiNWQtOWUwNy00 NGEzLWFmNjEtMjVlN2YwMjQyYWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0 MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3 ZjAyNDJhZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD5mzgD9w4mKBBllKvDkLo QjAcyjUNslUjwcj78Nlveo9xM/aJGXyi+Ni/VdNxvjXY9TNtVB9F+0dynaGUFnj8 6/lCxxHMN83mS2+5Y5KMj/3sjHDclhpxw1T4YBVuqWEcLQbwXp2H6D5/NGyMwiyf V9hqVLpZF5dFiICuO/d3neaVDHkWVGnhGsb9lVn5WxHfBnS9HuAlJnlttiGphcOk mf8NtUq68tYcMGsCyIOoospvBenz0aPglDoCErQtPUilQFZ/fBLNro4KyVOGzNL+ 4sAoWFQsjygSAKflKTeRkFRAB/I63WiK3OTluMyjgqiKLDSApJmy2X12p3ssa4LH -----END CERTIFICATE-----Generated at Mon Nov 3 08:01:05 2025 by rpki-client