$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft File: 9539fe98-d93c-4eef-8521-e7da1838ec1e.mft (raw, json) Hash identifier: sCHRSGceDXGQSNkRjrhAi8rQaPWOCMTl0G8PHYEQwDk= Subject key identifier: 30:98:25:41:93:68:D1:56:35:4C:B1:05:8E:2A:00:B5:EB:F7:7A:EA Authority key identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 Certificate issuer: /CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Certificate serial: 010D0C9F4328584BBCBED6E74BB569AA166F5D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft Manifest number: 010D0C9F4328584BBCBED6EC344BF691BCD3F181 Signing time: Mon 03 Nov 2025 13:04:08 +0000 Manifest this update: Mon 03 Nov 2025 13:04:08 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 909c57ca-1673-3501-8057-61ea309b4109.roa (hash: xxk7oEfhmsL11saXxQ27Hz5jyK94XGd0HIbxQn1wNrU=) 2: 9539fe98-d93c-4eef-8521-e7da1838ec1e.crl (hash: tb4CVed2nszPtuQHQ8C4+ARHuTrIIPp1my0Necc5azk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:be:d6:e7:4b:b5:69:aa:16:6f:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Validity Not Before: Nov 3 13:04:08 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=ee685670-7bb3-405c-81ba-e16392ddd0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:32:1d:59:54:56:a7:8d:19:26:84:02:11: 06:59:8e:24:2f:60:17:8a:cc:0c:7f:a6:45:33:99: b8:7d:72:68:1e:74:62:93:0d:5d:f9:56:74:be:98: 44:01:1b:59:86:45:ef:29:79:94:be:d9:b5:ce:4b: a0:1e:44:9a:85:98:09:68:6e:de:68:be:22:bf:60: ee:c0:16:23:81:84:fb:73:0f:5f:67:e4:86:84:c1: 1f:de:4f:ae:a9:75:e1:3d:2e:e9:c6:81:8b:56:a8: 55:d5:5c:ee:72:a9:74:4b:eb:6e:fc:48:8e:63:4c: 86:26:eb:fc:28:2d:2d:24:7e:11:af:2e:ff:47:f4: 4a:19:26:e5:6e:20:71:1a:5b:47:aa:17:03:d2:21: 3f:1b:ad:77:08:d5:d6:f8:66:9c:8d:ff:16:4b:38: 06:ea:0b:9c:e1:25:da:28:4e:0f:25:7a:4f:7b:bf: 72:45:88:58:56:2e:75:69:52:ef:86:41:74:69:b7: 71:11:ca:5e:e0:ee:d9:37:e3:75:c1:1e:fb:7b:87: ba:02:d8:b1:b6:3f:a7:46:28:53:30:1d:ff:a2:a3: 63:73:7b:bd:49:0c:5d:2f:53:97:09:71:5f:1c:76: a1:fe:8e:e5:99:68:71:6e:08:36:50:b9:31:c5:41: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:98:25:41:93:68:D1:56:35:4C:B1:05:8E:2A:00:B5:EB:F7:7A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl X509v3 Authority Key Identifier: keyid:30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ba:32:91:16:59:20:93:13:7b:c8:8b:72:8f:d5:3f:5d:49: 52:01:47:e2:40:e1:53:07:43:40:37:47:52:6b:c3:3b:f3:0d: 65:57:52:9e:0b:d5:47:39:a9:82:17:72:df:ab:7e:d8:c8:c1: 64:ef:34:2b:49:4c:1e:4b:e8:49:65:9b:cb:56:9e:bc:c3:bc: 55:7e:8d:7e:29:41:f6:d2:1f:d1:b3:60:34:18:a1:d3:fc:43: d6:d6:ea:ec:16:d4:74:b2:c8:ee:10:37:ad:9c:34:99:46:17: d3:24:81:80:c8:83:21:05:c7:37:62:9f:55:aa:de:69:5d:bb: 9b:f9:94:f0:0e:9a:fc:8e:cc:cb:fd:85:9c:13:1c:14:f5:51: 54:2e:39:d5:55:f5:8d:0e:37:7b:3b:03:6c:57:c0:38:e6:ee: b0:af:88:56:58:23:1c:01:7d:45:86:94:82:d9:af:a6:d9:22: e6:e6:3d:49:45:14:5b:b6:bd:27:73:77:36:0c:91:d3:b6:b0: 51:79:4d:d7:bd:1f:f3:77:04:14:5e:bb:bf:07:fb:08:3e:57: 30:73:da:b1:10:57:09:bf:36:23:7c:0c:0c:08:f9:9f:57:22: 34:30:93:88:24:5b:62:74:ef:ab:cf:f8:ac:35:9f:a8:3a:f1: ea:90:6b:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu8vtbnS7VpqhZvXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzOWZlOTgtZDkzYy00ZWVmLTg1MjEtZTdkYTE4Mzhl YzFlMB4XDTI1MTEwMzEzMDQwOFoXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk ZWU2ODU2NzAtN2JiMy00MDVjLTgxYmEtZTE2MzkyZGRkMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy4yHVlUVqeNGSaEAhEGWY4kL2AXiswMf6ZF M5m4fXJoHnRikw1d+VZ0vphEARtZhkXvKXmUvtm1zkugHkSahZgJaG7eaL4iv2Du wBYjgYT7cw9fZ+SGhMEf3k+uqXXhPS7pxoGLVqhV1Vzucql0S+tu/EiOY0yGJuv8 KC0tJH4Rry7/R/RKGSblbiBxGltHqhcD0iE/G613CNXW+Gacjf8WSzgG6guc4SXa KE4PJXpPe79yRYhYVi51aVLvhkF0abdxEcpe4O7ZN+N1wR77e4e6Atixtj+nRihT MB3/oqNjc3u9SQxdL1OXCXFfHHah/o7lmWhxbgg2ULkxxUFIgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDCYJUGTaNFWNUyxBY4qALXr93rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5 ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2RhMTgzOGVjMWUvOTUzOWZlOTgtZDkzYy00 ZWVmLTg1MjEtZTdkYTE4MzhlYzFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTUzOWZlOTgtZDkzYy00ZWVmLTg1 MjEtZTdkYTE4MzhlYzFlLzk1MzlmZTk4LWQ5M2MtNGVlZi04NTIxLWU3ZGExODM4 ZWMxZS5jcmwwHwYDVR0jBBgwFoAUMGDzfdaadF9yt5aHI6F6XbwgAxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2Rh MTgzOGVjMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtujKRFlkgkxN7yItyj9U/ XUlSAUfiQOFTB0NAN0dSa8M78w1lV1KeC9VHOamCF3Lfq37YyMFk7zQrSUweS+hJ ZZvLVp68w7xVfo1+KUH20h/Rs2A0GKHT/EPW1ursFtR0ssjuEDetnDSZRhfTJIGA yIMhBcc3Yp9Vqt5pXbub+ZTwDpr8jszL/YWcExwU9VFULjnVVfWNDjd7OwNsV8A4 5u6wr4hWWCMcAX1FhpSC2a+m2SLm5j1JRRRbtr0nc3c2DJHTtrBReU3XvR/zdwQU Xru/B/sIPlcwc9qxEFcJvzYjfAwMCPmfVyI0MJOIJFtidO+rz/isNZ+oOvHqkGtt -----END CERTIFICATE-----Generated at Tue Nov 4 09:29:29 2025 by rpki-client