$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft File: 961facb0-d9c9-4d9b-8bfa-17d54168d407.mft (raw, json) Hash identifier: /is9DkrUPar4cnvqyxAlFLOrMgGaJePyvXQ7wt57AQg= Subject key identifier: 5E:91:BF:6A:F8:59:0B:47:1E:7E:D1:2C:82:15:6F:4A:78:73:D1:1E Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584BBA693E7D43A2354B055B1A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft Manifest number: 010D0C9F432858423550E010AA06C9AA530264D3 Signing time: Sun 02 Nov 2025 17:00:03 +0000 Manifest this update: Sun 02 Nov 2025 17:00:03 +0000 Manifest next update: Tue 04 Nov 2025 17:00:00 +0000 Files and hashes: 1: 1c34de81-a92a-31ca-993f-2c9182338067.roa (hash: KDSTk1+iGXtRyc67tSAbr6ST+t0tFEjEeqPSJsbGK4Q=) 2: 27dfa34e-e99b-3a95-afac-f983350fa289.roa (hash: SX4I7TVjUyMtqYn/ac85XlUA/ajiO9+1ifJI4TBDEQU=) 3: 961facb0-d9c9-4d9b-8bfa-17d54168d407.crl (hash: og5kdSgsoRI8I0U/o7/Uj1brllIdeDhvk4/u63xQfas=) 4: a19e3195-8a84-3cd1-96c4-4347391db867.roa (hash: i46JaKUM7uqGjW6UistExixsSka5ZKQ3+L3ZVcgOOKs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:69:3e:7d:43:a2:35:4b:05:5b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Nov 2 17:00:03 2025 GMT Not After : Nov 4 17:00:00 2025 GMT Subject: CN=a47cfe1b-c4f8-4df8-bfeb-8893cac154e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:c9:de:ab:4b:0c:0e:19:5a:10:49:a9:88: 6f:98:06:9b:b8:a9:d8:ef:64:4b:8d:bf:ce:5a:1d: 73:09:4e:d9:74:fe:c1:cb:44:fe:16:f5:1a:b4:47: db:1f:b1:48:67:99:72:cf:6a:4b:43:2c:a3:d8:09: 55:9f:a6:88:9b:08:aa:ad:cd:17:ec:5a:49:2d:11: c9:96:53:b1:89:61:6e:1f:89:b4:2d:2b:16:7b:f2: 87:7f:8a:b4:7e:7d:57:39:9e:99:3f:a7:a0:2a:fc: 83:35:ee:6b:3c:43:00:8f:60:99:84:cf:83:d2:96: b9:e0:7b:c1:46:28:ea:ed:fd:c8:f9:bd:a6:bc:81: 3a:c0:3a:9a:99:33:2d:c1:e0:0d:3e:5f:d5:b8:29: 90:f4:c0:a5:7b:b0:8d:9a:50:48:ef:52:66:d4:b1: 35:3e:cc:1f:9e:b4:25:03:f2:08:9a:f2:14:d6:53: 28:ac:85:6e:7f:7f:5d:a3:71:39:84:88:62:f6:69: 0c:f4:04:27:4b:c1:1e:9a:d3:71:f2:2d:50:a1:ef: 35:37:28:e1:9d:ff:e4:d0:5b:0e:bc:be:6c:1c:3b: 6a:15:28:ac:36:c4:a2:a0:32:17:e9:e5:5d:ed:43: 66:30:7c:b8:03:a8:21:23:ed:e5:6a:89:47:53:85: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:BF:6A:F8:59:0B:47:1E:7E:D1:2C:82:15:6F:4A:78:73:D1:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a1:c0:f8:87:1a:ac:23:56:9e:ad:ce:82:15:aa:94:1f:98: 85:60:5e:90:2d:76:93:47:37:1c:92:73:11:01:00:aa:e4:cb: b4:c7:e6:db:82:0b:29:38:9a:b8:40:10:7a:22:b7:42:40:26: ea:6c:5c:15:2e:bb:e1:d2:da:bc:db:95:c7:e2:0d:d6:d1:81: c1:2e:c9:82:e9:4e:fa:97:21:94:f0:47:ee:77:45:8f:b2:d9: 54:1d:10:3c:fc:33:c4:99:61:3c:c7:ef:60:1b:9a:58:da:69: 79:2f:7d:bd:12:f8:9d:2d:80:7e:9d:37:17:3a:41:17:29:69: f9:f4:5b:cd:6d:3c:57:11:5d:e8:f9:53:47:11:a3:b9:e7:9a: c0:6f:be:1d:7d:4d:06:cc:af:46:f9:df:c9:4d:8b:35:b5:ad: e4:93:7c:95:7e:ab:92:cb:6b:85:6e:05:df:91:03:7c:98:04: 69:b1:2a:fd:b3:72:93:a4:45:74:4d:a5:14:65:c3:e9:96:68: 42:ef:b9:88:54:df:20:86:78:de:cd:31:6d:c1:5b:62:97:f2: f4:e8:ce:ec:8e:3e:94:6e:39:c2:96:53:d1:09:9e:07:bc:2a: dc:75:26:8a:b3:ec:55:ca:9c:71:e4:a3:98:b5:b6:73:2b:85: 7e:ef:66:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6aT59Q6I1SwVbGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MTEwMjE3MDAwM1oXDTI1MTEwNDE3MDAwMFowLzEtMCsGA1UEAxMk YTQ3Y2ZlMWItYzRmOC00ZGY4LWJmZWItODg5M2NhYzE1NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT7J3qtLDA4ZWhBJqYhvmAabuKnY72RLjb/O Wh1zCU7ZdP7By0T+FvUatEfbH7FIZ5lyz2pLQyyj2AlVn6aImwiqrc0X7FpJLRHJ llOxiWFuH4m0LSsWe/KHf4q0fn1XOZ6ZP6egKvyDNe5rPEMAj2CZhM+D0pa54HvB Rijq7f3I+b2mvIE6wDqamTMtweANPl/VuCmQ9MCle7CNmlBI71Jm1LE1PswfnrQl A/IImvIU1lMorIVuf39do3E5hIhi9mkM9AQnS8EemtNx8i1Qoe81Nyjhnf/k0FsO vL5sHDtqFSisNsSioDIX6eVd7UNmMHy4A6ghI+3laolHU4VHJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF6Rv2r4WQtHHn7RLIIVb0p4c9EeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvOTYxZmFjYjAtZDljOS00 ZDliLThiZmEtMTdkNTQxNjhkNDA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXocD4hxqsI1aerc6CFaqU H5iFYF6QLXaTRzccknMRAQCq5Mu0x+bbggspOJq4QBB6IrdCQCbqbFwVLrvh0tq8 25XH4g3W0YHBLsmC6U76lyGU8Efud0WPstlUHRA8/DPEmWE8x+9gG5pY2ml5L329 EvidLYB+nTcXOkEXKWn59FvNbTxXEV3o+VNHEaO555rAb74dfU0GzK9G+d/JTYs1 ta3kk3yVfquSy2uFbgXfkQN8mARpsSr9s3KTpEV0TaUUZcPplmhC77mIVN8ghnje zTFtwVtil/L06M7sjj6UbjnCllPRCZ4HvCrcdSaKs+xVypxx5KOYtbZzK4V+72aB -----END CERTIFICATE-----Generated at Mon Nov 3 07:59:21 2025 by rpki-client