$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft File: 9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft (raw, json) Hash identifier: hcTftV7XUWB4Wj013CgCaxUXTeYAbeWyezD4Rr9J+ks= Subject key identifier: DB:DD:51:DC:6E:D4:86:37:95:BC:80:62:87:E2:08:09:E2:52:5F:ED Authority key identifier: 4D:5E:20:4D:4D:46:38:79:B9:96:73:98:2D:B3:7D:62:06:0B:F3:88 Certificate issuer: /CN=9dc1c7a2-4d87-4604-af5b-14239ac232f5 Certificate serial: 010D0C9F4328584BE12586799F230D8F27A4AE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft Manifest number: 010D0C9F4328584BAC2E5732025B333079F1AB13 Signing time: Sun 16 Nov 2025 14:00:08 +0000 Manifest this update: Sun 16 Nov 2025 14:00:08 +0000 Manifest next update: Tue 18 Nov 2025 14:00:00 +0000 Files and hashes: 1: 9dc1c7a2-4d87-4604-af5b-14239ac232f5.crl (hash: 8sdtHHYADrgYCM+CpjAmAtko2P0+60uqFjhCOkmiBDM=) 2: e9444396-80d6-34b0-881d-9f8d03804899.roa (hash: O76zGpHzOAAyNpmcqPpAMqrdOdCUZYlJGYIQQ0WU7vk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:25:86:79:9f:23:0d:8f:27:a4:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc1c7a2-4d87-4604-af5b-14239ac232f5 Validity Not Before: Nov 16 14:00:08 2025 GMT Not After : Nov 18 14:00:00 2025 GMT Subject: CN=f8e4c9ba-eeea-47e3-9e46-aff9c1b33643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:af:d9:1f:4b:df:9d:e1:80:3f:48:e8:72: 5f:52:92:5b:82:23:11:3d:5f:83:89:ee:96:6c:76: 05:2e:0e:40:1e:e4:61:95:60:21:fb:d4:9c:2b:20: 63:a2:97:58:17:9a:1f:f3:0b:f1:d2:76:a1:ef:c6: a3:d9:9c:25:10:48:fa:bb:a7:26:93:dc:ca:0a:19: 9a:39:6a:84:ec:be:d9:63:c3:f8:f3:9d:8b:9f:20: 3e:c4:8d:8e:7d:37:e5:7c:47:82:f6:67:ca:e7:ca: 52:7e:e7:1e:e8:b7:0d:3f:1b:72:db:0e:cc:d4:9f: a1:55:f6:dc:da:c4:ae:68:78:bc:79:a9:eb:66:3a: b7:9b:ef:f4:e7:eb:37:15:6f:60:f0:aa:d1:89:52: 16:fa:03:6e:8b:1f:5d:d4:47:da:b6:6a:44:ee:eb: cf:6a:d0:93:5d:4c:9e:6a:38:ac:65:d3:73:b9:7b: 03:c9:3e:56:65:19:69:29:48:36:49:74:29:1f:2a: 40:23:dd:c6:39:30:88:17:0f:33:3a:2a:05:84:dc: 8e:fa:75:8d:71:36:a9:a2:1f:b6:67:21:bd:83:ca: fd:c3:19:6d:e4:92:08:94:e5:5b:c2:d2:b9:2c:55: ef:d9:de:48:45:aa:15:12:bc:b7:35:57:4a:ea:d2: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DD:51:DC:6E:D4:86:37:95:BC:80:62:87:E2:08:09:E2:52:5F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.crl X509v3 Authority Key Identifier: keyid:4D:5E:20:4D:4D:46:38:79:B9:96:73:98:2D:B3:7D:62:06:0B:F3:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:66:a3:f5:5c:a9:b8:1b:9b:df:0b:95:1d:c7:7e:45:bc:f9: 19:12:85:26:24:e6:e8:c8:83:ff:54:86:8b:dc:23:fe:ba:c1: 6d:e5:26:c8:db:b9:e0:b0:71:6d:d5:0d:af:99:2f:f3:77:56: 65:3e:8a:0c:68:5e:97:66:47:d8:a5:dd:56:0e:8b:d1:44:be: 39:ea:96:80:96:35:bd:e5:2a:76:98:c3:aa:d5:94:5d:9e:a5: 9a:37:b9:65:fe:14:54:6b:6e:d2:07:b7:73:d5:70:67:7d:c9: 94:9a:46:74:52:3d:29:a9:f0:ba:7b:d2:ea:da:e3:0f:88:4e: 2f:af:c7:d0:21:23:bd:21:33:89:3d:ec:21:60:2a:fb:03:53: 2d:92:e8:63:95:31:39:09:b5:cb:f6:11:19:a5:40:b5:87:03: b6:57:bc:9f:32:75:ce:00:85:1e:00:3d:54:f8:3d:d4:09:00: d9:eb:d2:42:a3:d2:ea:7f:ab:4c:a7:cb:91:e7:a7:16:22:25: c1:d2:07:5c:39:2b:cb:e3:c8:17:0f:bc:20:7e:08:7f:66:76: 93:14:0c:8e:5d:2c:fe:f2:0d:c7:83:98:ba:e9:d7:d4:f5:95: b6:88:17:d0:5b:b9:bf:1b:56:2e:8c:98:b6:a2:a0:33:b5:20: 70:fd:94:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvhJYZ5nyMNjyekrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRjMWM3YTItNGQ4Ny00NjA0LWFmNWItMTQyMzlhYzIz MmY1MB4XDTI1MTExNjE0MDAwOFoXDTI1MTExODE0MDAwMFowLzEtMCsGA1UEAxMk ZjhlNGM5YmEtZWVlYS00N2UzLTllNDYtYWZmOWMxYjMzNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Gv2R9L353hgD9I6HJfUpJbgiMRPV+Die6W bHYFLg5AHuRhlWAh+9ScKyBjopdYF5of8wvx0nah78aj2ZwlEEj6u6cmk9zKChma OWqE7L7ZY8P4852LnyA+xI2OfTflfEeC9mfK58pSfuce6LcNPxty2w7M1J+hVfbc 2sSuaHi8eanrZjq3m+/05+s3FW9g8KrRiVIW+gNuix9d1EfatmpE7uvPatCTXUye ajisZdNzuXsDyT5WZRlpKUg2SXQpHypAI93GOTCIFw8zOioFhNyO+nWNcTapoh+2 ZyG9g8r9wxlt5JIIlOVbwtK5LFXv2d5IRaoVEry3NVdK6tJiIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNvdUdxu1IY3lbyAYofiCAniUl/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZGMx YzdhMi00ZDg3LTQ2MDQtYWY1Yi0xNDIzOWFjMjMyZjUvOWRjMWM3YTItNGQ4Ny00 NjA0LWFmNWItMTQyMzlhYzIzMmY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWRjMWM3YTItNGQ4Ny00NjA0LWFm NWItMTQyMzlhYzIzMmY1LzlkYzFjN2EyLTRkODctNDYwNC1hZjViLTE0MjM5YWMy MzJmNS5jcmwwHwYDVR0jBBgwFoAUTV4gTU1GOHm5lnOYLbN9YgYL84gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZGMxYzdhMi00ZDg3LTQ2MDQtYWY1Yi0xNDIz OWFjMjMyZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMZqP1XKm4G5vfC5Udx35F vPkZEoUmJOboyIP/VIaL3CP+usFt5SbI27ngsHFt1Q2vmS/zd1ZlPooMaF6XZkfY pd1WDovRRL456paAljW95Sp2mMOq1ZRdnqWaN7ll/hRUa27SB7dz1XBnfcmUmkZ0 Uj0pqfC6e9Lq2uMPiE4vr8fQISO9ITOJPewhYCr7A1MtkuhjlTE5CbXL9hEZpUC1 hwO2V7yfMnXOAIUeAD1U+D3UCQDZ69JCo9Lqf6tMp8uR56cWIiXB0gdcOSvL48gX D7wgfgh/ZnaTFAyOXSz+8g3Hg5i66dfU9ZW2iBfQW7m/G1YujJi2oqAztSBw/ZRy -----END CERTIFICATE-----Generated at Mon Nov 17 06:27:59 2025 by rpki-client