$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft File: 910396e7-2d32-4040-a73d-ad686b8445b3.mft (raw, json) Hash identifier: LDeMvH/Ci96rIk3rkx/45glpNXpsv3yHm1Kf/W57/UM= Subject key identifier: 67:05:AD:A6:08:58:CD:C8:5A:5F:C8:45:81:EF:D7:34:C9:86:AC:42 Authority key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A Certificate issuer: /CN=910396e7-2d32-4040-a73d-ad686b8445b3 Certificate serial: 010D0C9F4328584BBAE05AB8F1E8B98F31C85240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft Manifest number: 010D0C9F43285843288CB871AB277AFD8EAA8BC7 Signing time: Sun 02 Nov 2025 21:00:03 +0000 Manifest this update: Sun 02 Nov 2025 21:00:03 +0000 Manifest next update: Wed 05 Nov 2025 21:00:00 +0000 Files and hashes: 1: 0c49c65e-2f24-3cd2-90e9-71b3184dfa36.roa (hash: AVa2h7O4MgrCizau1YjqjAW9B9vPUw/bihsIeqHTI3Q=) 2: 907d1d79-2dfe-3783-bd69-1fc82aa6da40.roa (hash: scpX+UMTjGpN3Dd6XbTQ/3IhbGB2mhOMWbb4KRuXyns=) 3: 910396e7-2d32-4040-a73d-ad686b8445b3.crl (hash: bi6EDFNDCWVKc5fVZX8yobtm+7yHg03HtaBSt1U/KUw=) 4: b7fa75ee-13f5-39c3-83f0-1713329dd695.roa (hash: +cI9krIbTFaP1aRagNi49FGfV67+N4vGEBavSdd6Ojw=) 5: df60b1b7-95e1-369a-98e2-3a40f65bb6a8.roa (hash: BnFS/PTg1K/lo1FYtqO+WPxrVOmQoDnzq+o5F3vlPN0=) 6: e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa (hash: bJ/W7vJPqggPJYIXdcvv6XMKE7Z+9r75EgK+BYNecvA=) 7: edfc5ae2-c158-30b1-85a5-7f294dd4cbf8.roa (hash: RVdT/MBv1GnIvfb/zKy60hAeNt+PXglqJvv59kKnwPI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:e0:5a:b8:f1:e8:b9:8f:31:c8:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=910396e7-2d32-4040-a73d-ad686b8445b3 Validity Not Before: Nov 2 21:00:03 2025 GMT Not After : Nov 5 21:00:00 2025 GMT Subject: CN=0ce985c9-aa37-4109-8b4a-2d106543eefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5e:ee:44:0e:ab:f0:a5:19:58:9d:57:5e:04: d6:14:ef:44:38:4f:e9:45:1f:7a:ac:73:ef:84:29: 6e:5d:29:58:7a:9a:ef:5f:0f:25:a2:5f:f2:ef:24: c0:79:f8:5d:66:90:f5:e0:b7:e1:8d:88:ed:1e:53: 66:9c:16:f9:49:8b:df:c4:18:98:91:7f:75:88:f8: 1d:91:36:f6:fb:da:02:fe:c7:42:04:09:e1:67:43: e8:c3:81:2f:53:d6:d8:cf:69:cc:2d:29:ec:36:51: c9:9b:01:d0:20:75:40:b0:fc:47:62:ec:b3:c4:e1: 68:2a:d2:1e:5b:eb:79:7e:a4:d4:9e:07:68:ae:52: 30:e1:69:4d:ac:f0:28:a1:ea:34:c3:6d:25:5f:1a: de:eb:15:a3:cb:c8:68:99:06:77:06:3b:e5:e5:e7: fa:76:de:68:ed:12:82:41:0a:d5:6b:17:40:b3:49: b7:88:1d:ff:f5:ce:60:22:24:09:1c:e7:08:05:49: 2d:a6:33:0b:9c:3c:7c:b8:8a:6e:7b:3d:28:77:eb: c4:bd:9d:40:43:8a:db:56:c4:f4:81:fb:f3:1b:99: 3a:a6:e5:9a:c8:63:d0:1d:3d:91:29:f4:34:57:e8: 96:97:af:f2:ea:58:c5:07:4b:c4:82:07:e7:17:0c: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:AD:A6:08:58:CD:C8:5A:5F:C8:45:81:EF:D7:34:C9:86:AC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl X509v3 Authority Key Identifier: keyid:4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:38:46:22:ed:d6:d3:d9:8c:5f:44:c9:f9:35:18:90:b1:eb: 32:9a:f2:e9:58:57:77:3a:78:09:f1:f3:e7:b7:8f:8f:33:a4: c6:9d:4a:e1:27:c2:c1:17:d6:e6:a7:a9:25:c4:ec:3b:45:7a: 54:46:00:33:f9:12:4a:6c:b4:75:66:9e:4d:e4:01:4b:16:0f: ab:ab:95:4a:b4:99:91:e5:e9:a9:d3:9f:61:06:aa:93:4c:68: cb:ba:67:60:b0:68:33:17:15:6c:48:df:ce:67:87:16:1c:01: b9:2c:e4:63:68:c3:23:a2:ea:e0:d0:c6:08:5f:f8:f7:d8:78: bc:06:86:4a:91:16:e7:dc:d5:12:e8:70:1d:77:39:67:cc:09: 00:af:e2:69:e6:01:91:8e:c9:ce:47:6c:e7:f3:fa:14:19:8c: a5:2e:7f:4c:fb:9d:94:50:9a:ff:f3:d7:cf:f7:0a:2a:ed:00: 9e:dc:9f:02:e6:13:13:e5:77:c7:c4:89:5c:0a:fa:a0:38:64: 18:ee:84:2d:b3:68:b0:39:92:4c:8c:6a:cf:da:11:0b:f3:ef: 43:d4:84:47:bf:10:18:51:90:e8:64:12:e3:df:8a:2e:8b:3d: ae:79:26:e9:d9:f9:9f:8e:b3:57:10:a8:35:c8:83:b7:aa:6a: 18:26:a0:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu64Fq48ei5jzHIUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEwMzk2ZTctMmQzMi00MDQwLWE3M2QtYWQ2ODZiODQ0 NWIzMB4XDTI1MTEwMjIxMDAwM1oXDTI1MTEwNTIxMDAwMFowLzEtMCsGA1UEAxMk MGNlOTg1YzktYWEzNy00MTA5LThiNGEtMmQxMDY1NDNlZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF7uRA6r8KUZWJ1XXgTWFO9EOE/pRR96rHPv hCluXSlYeprvXw8lol/y7yTAefhdZpD14LfhjYjtHlNmnBb5SYvfxBiYkX91iPgd kTb2+9oC/sdCBAnhZ0Pow4EvU9bYz2nMLSnsNlHJmwHQIHVAsPxHYuyzxOFoKtIe W+t5fqTUngdorlIw4WlNrPAooeo0w20lXxre6xWjy8homQZ3Bjvl5ef6dt5o7RKC QQrVaxdAs0m3iB3/9c5gIiQJHOcIBUktpjMLnDx8uIpuez0od+vEvZ1AQ4rbVsT0 gfvzG5k6puWayGPQHT2RKfQ0V+iWl6/y6ljFB0vEggfnFww50QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGcFraYIWM3IWl/IRYHv1zTJhqxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MTAz OTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4NmI4NDQ1YjMvOTEwMzk2ZTctMmQzMi00 MDQwLWE3M2QtYWQ2ODZiODQ0NWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTEwMzk2ZTctMmQzMi00MDQwLWE3 M2QtYWQ2ODZiODQ0NWIzLzkxMDM5NmU3LTJkMzItNDA0MC1hNzNkLWFkNjg2Yjg0 NDViMy5jcmwwHwYDVR0jBBgwFoAUS0UWU6Iph5VS3e22r13PCiGEzTowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MTAzOTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4 NmI4NDQ1YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZOEYi7dbT2YxfRMn5NRiQ sesymvLpWFd3OngJ8fPnt4+PM6TGnUrhJ8LBF9bmp6klxOw7RXpURgAz+RJKbLR1 Zp5N5AFLFg+rq5VKtJmR5emp059hBqqTTGjLumdgsGgzFxVsSN/OZ4cWHAG5LORj aMMjourg0MYIX/j32Hi8BoZKkRbn3NUS6HAddzlnzAkAr+Jp5gGRjsnOR2zn8/oU GYylLn9M+52UUJr/89fP9woq7QCe3J8C5hMT5XfHxIlcCvqgOGQY7oQts2iwOZJM jGrP2hEL8+9D1IRHvxAYUZDoZBLj34ouiz2ueSbp2fmfjrNXEKg1yIO3qmoYJqCL -----END CERTIFICATE-----Generated at Mon Nov 3 07:59:22 2025 by rpki-client