$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: h5Ghqikzq/dcajb5KaJQdPJFhHQmdoRD7Y+Z8giHhTA= Subject key identifier: D7:23:93:D9:47:11:9B:07:14:AD:2C:39:BF:2D:02:DE:FA:32:6F:08 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584BBD8D50A06F393320D8030700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E2363C Signing time: Mon 03 Nov 2025 20:00:08 +0000 Manifest this update: Mon 03 Nov 2025 20:00:08 +0000 Manifest next update: Wed 05 Nov 2025 20:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: CZigBE6x7fZKxuZJBvE1SlHU5gmNgg99USZqHya+PUw=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: YH0ws83mN0hhdIgSM8L0GhyYNgMVw3L4CwoUkWfo4n0=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: EkCRGfwfm6LKpLY7kKSg+eoSxSaHyL5rXkCFjGXosy0=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: Uir1xJ19fg1eQTWgcKWDHcPsHb6UxUneanbs78qz4zQ=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: vyZL/+9SA8yvqtKxpjN2yz27cmlj1oNLtCfKl5WaxBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:8d:50:a0:6f:39:33:20:d8:03:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Nov 3 20:00:08 2025 GMT Not After : Nov 5 20:00:00 2025 GMT Subject: CN=04987901-c4e5-46f9-b0ce-0a84212c51c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:08:6e:72:84:76:41:02:66:16:9a:0e:76: 1b:a3:04:63:92:10:09:6c:e8:85:ad:1e:85:36:d3: 8a:54:7b:9c:68:67:fe:65:52:84:46:4b:fa:99:56: 36:65:be:c6:83:3f:5a:22:59:c5:b2:ac:ea:ee:65: 47:71:51:79:a4:7b:01:27:42:0e:20:5d:d6:8f:bd: f4:64:43:cf:81:0f:32:76:f4:76:ad:ab:27:bb:46: 94:29:82:8c:39:c7:ed:2c:e1:85:a0:ff:7c:f4:76: a5:25:0f:4f:ea:0e:ec:bc:0a:c7:64:74:27:16:85: f5:dc:cf:08:aa:06:77:dd:0a:70:e6:89:ad:12:cc: 64:e2:73:24:df:6c:fd:54:43:ba:71:25:e3:22:a5: 64:4d:7b:62:55:bd:c1:4f:03:3a:fe:39:62:57:2a: 4e:43:1f:04:07:a7:1c:cd:02:e5:c8:3d:07:06:73: 4f:c3:8c:8f:30:41:97:10:c9:34:6d:3d:64:79:29: 17:3b:a6:29:62:2b:5f:1d:22:0e:b8:c9:e5:ab:9a: 74:b9:93:63:b3:73:5f:d0:6b:f6:a8:31:c9:48:01: ff:de:95:19:84:a4:92:e3:c2:bb:81:84:a3:0c:89: 30:aa:80:78:fb:ba:3c:4c:34:ab:01:4b:8e:52:88: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:93:D9:47:11:9B:07:14:AD:2C:39:BF:2D:02:DE:FA:32:6F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:14:6e:9d:b8:55:4b:c5:48:80:6f:71:04:2e:3d:c1:e5:1d: d9:e1:77:09:e2:82:e2:7d:1f:ca:dc:33:d9:08:23:ac:f7:ef: ba:2c:04:02:7f:56:bf:29:eb:3c:17:39:21:2e:6d:46:8d:cb: 8c:f2:6c:ec:a7:86:b6:c9:bc:f9:35:31:ff:41:f5:96:88:8f: 34:20:84:55:e5:94:03:2c:90:48:0b:04:a5:48:51:86:c4:01: cb:1d:e4:c9:fd:d0:90:3e:5c:26:6a:f5:18:6a:20:12:e0:a1: 2e:8a:2c:c8:2c:54:44:13:01:87:58:14:08:cb:ed:4d:5a:e0: 44:c0:41:19:aa:ec:a0:0a:11:5c:5d:ee:04:f3:bb:e8:62:a1: 4d:8f:72:29:4a:fa:87:48:93:63:8e:da:47:17:75:bc:9e:ea: ea:e3:04:99:45:6a:1a:c3:f5:b0:91:c3:09:9d:da:77:b9:a7: 0f:ea:09:3e:89:af:d9:aa:8a:23:84:3f:f1:4a:63:4b:7f:be: 50:2e:d2:5b:73:f0:e2:d9:c7:1f:a8:44:c0:85:4b:7a:40:91: af:44:b3:c5:49:6d:5a:05:74:ef:85:f7:6f:5e:7a:a2:8a:7d: 18:28:1d:10:c9:77:79:cb:f4:06:be:cb:df:aa:20:ea:6b:bd: 5e:b8:3b:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9jVCgbzkzINgDBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MTEwMzIwMDAwOFoXDTI1MTEwNTIwMDAwMFowLzEtMCsGA1UEAxMk MDQ5ODc5MDEtYzRlNS00NmY5LWIwY2UtMGE4NDIxMmM1MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8EIbnKEdkECZhaaDnYbowRjkhAJbOiFrR6F NtOKVHucaGf+ZVKERkv6mVY2Zb7Ggz9aIlnFsqzq7mVHcVF5pHsBJ0IOIF3Wj730 ZEPPgQ8ydvR2rasnu0aUKYKMOcftLOGFoP989HalJQ9P6g7svArHZHQnFoX13M8I qgZ33Qpw5omtEsxk4nMk32z9VEO6cSXjIqVkTXtiVb3BTwM6/jliVypOQx8EB6cc zQLlyD0HBnNPw4yPMEGXEMk0bT1keSkXO6YpYitfHSIOuMnlq5p0uZNjs3Nf0Gv2 qDHJSAH/3pUZhKSS48K7gYSjDIkwqoB4+7o8TDSrAUuOUohWgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNcjk9lHEZsHFK0sOb8tAt76Mm8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpFG6duFVLxUiAb3EELj3B 5R3Z4XcJ4oLifR/K3DPZCCOs9++6LAQCf1a/Kes8FzkhLm1GjcuM8mzsp4a2ybz5 NTH/QfWWiI80IIRV5ZQDLJBICwSlSFGGxAHLHeTJ/dCQPlwmavUYaiAS4KEuiizI LFREEwGHWBQIy+1NWuBEwEEZquygChFcXe4E87voYqFNj3IpSvqHSJNjjtpHF3W8 nurq4wSZRWoaw/WwkcMJndp3uacP6gk+ia/ZqoojhD/xSmNLf75QLtJbc/Di2ccf qETAhUt6QJGvRLPFSW1aBXTvhfdvXnqiin0YKB0QyXd5y/QGvsvfqiDqa71euDvh -----END CERTIFICATE-----Generated at Tue Nov 4 00:51:56 2025 by rpki-client