$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: gGdy6ODDKwqqzW9MIrXr39+2WDyILQjeW/9nmxfmXCM= Subject key identifier: FA:0A:EE:2C:2F:10:F4:59:5E:EC:BE:AE:51:6B:8A:12:68:0E:C0:22 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584B378C7BCAB46CC8952876A1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E2360C Signing time: Tue 16 Sep 2025 20:00:08 +0000 Manifest this update: Tue 16 Sep 2025 20:00:08 +0000 Manifest next update: Thu 18 Sep 2025 20:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: CZigBE6x7fZKxuZJBvE1SlHU5gmNgg99USZqHya+PUw=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: bEROb4GL+NgI3DB6j8ProXEZmX5rNApJLyH0khHxURg=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: EkCRGfwfm6LKpLY7kKSg+eoSxSaHyL5rXkCFjGXosy0=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: Uir1xJ19fg1eQTWgcKWDHcPsHb6UxUneanbs78qz4zQ=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: vyZL/+9SA8yvqtKxpjN2yz27cmlj1oNLtCfKl5WaxBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:8c:7b:ca:b4:6c:c8:95:28:76:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 16 20:00:08 2025 GMT Not After : Sep 18 20:00:00 2025 GMT Subject: CN=5a0e31b1-5907-4398-a34a-712f6f8c5ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:b6:34:32:6d:fe:57:a8:c3:53:70:7a:02: ed:c6:26:26:9d:70:e4:78:fa:e4:ad:cf:f5:dc:35: 72:0e:18:45:f4:9c:8f:c2:5f:2d:cd:f4:8a:0c:3e: 91:9c:2b:78:27:ff:ec:91:17:89:3a:f7:45:9f:2c: f8:98:de:b9:af:f4:7d:32:a1:6d:c3:f6:1a:42:78: fe:74:1c:e1:d4:38:cd:1a:82:2e:2d:12:fe:14:81: 2a:15:e5:90:be:f3:c3:a1:5f:21:48:6f:b9:23:62: 67:31:31:47:5c:bf:e4:69:0a:ea:4b:00:1e:10:88: ee:eb:9e:66:32:df:f5:db:45:69:a2:b0:ac:ae:c5: 5d:de:49:2f:27:d8:49:3c:db:07:54:79:8f:51:a2: c2:78:1e:68:3e:07:e3:70:1a:22:8e:22:9c:d3:42: 68:f0:a4:d3:61:8d:77:37:1a:24:ab:b3:80:cc:09: 7a:42:15:0f:ff:c7:a0:94:25:bb:81:80:cf:55:a8: f9:a7:9a:d6:cd:13:37:8a:96:ac:94:65:fa:f2:11: 8d:df:67:33:29:cd:da:6f:59:85:94:8d:47:7d:fa: f7:f0:84:30:87:b0:19:d9:db:1a:78:5b:c8:e1:9e: c4:32:14:46:9d:3f:47:81:e7:2a:75:43:77:d5:a6: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:EE:2C:2F:10:F4:59:5E:EC:BE:AE:51:6B:8A:12:68:0E:C0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1a:9c:e5:63:c4:33:65:7d:8d:22:b6:b0:9d:c3:f4:99:90: 5d:38:79:1e:5d:80:aa:68:5d:e2:22:ed:48:e5:3a:c9:5e:d6: 2a:98:ee:5a:8f:6c:32:0b:2f:05:26:32:a6:27:03:aa:93:d7: dc:de:4f:bc:5f:9c:14:20:8e:a6:ef:7f:ba:c5:33:4c:46:e5: aa:8d:7d:72:f7:8e:3c:2f:8d:f8:b3:ab:78:8b:76:14:68:f9: 73:f5:c0:55:ab:99:a0:da:aa:d9:56:27:2e:a3:08:a0:d5:dd: f4:1f:48:26:de:3a:8b:da:a0:e7:4c:0c:36:bd:a7:ce:8c:d7: 31:4c:07:f0:a9:a9:1c:51:45:9e:22:26:ed:fb:0c:d8:c9:87: d1:b5:c1:04:b2:e2:0b:fa:7c:63:bd:13:46:25:98:78:e1:34: 72:fe:93:90:8f:5a:82:31:9f:a3:25:55:15:78:5a:e0:86:cd: c1:b2:e3:57:ba:2c:2d:74:e6:b2:b0:fb:20:81:6b:c0:d9:1f: 7e:10:a5:5e:66:77:21:86:cb:fd:bd:aa:7f:17:eb:89:97:cc: 82:6b:aa:b8:1a:eb:9f:dc:4c:37:71:95:5b:4a:5a:50:c6:7a: 54:d1:cd:31:25:1f:2b:a4:2d:1d:f5:20:c5:b6:db:04:3a:47: 06:ec:14:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs3jHvKtGzIlSh2ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDkxNjIwMDAwOFoXDTI1MDkxODIwMDAwMFowLzEtMCsGA1UEAxMk NWEwZTMxYjEtNTkwNy00Mzk4LWEzNGEtNzEyZjZmOGM1YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9K2NDJt/leow1NwegLtxiYmnXDkePrkrc/1 3DVyDhhF9JyPwl8tzfSKDD6RnCt4J//skReJOvdFnyz4mN65r/R9MqFtw/YaQnj+ dBzh1DjNGoIuLRL+FIEqFeWQvvPDoV8hSG+5I2JnMTFHXL/kaQrqSwAeEIju655m Mt/120VporCsrsVd3kkvJ9hJPNsHVHmPUaLCeB5oPgfjcBoijiKc00Jo8KTTYY13 Nxokq7OAzAl6QhUP/8eglCW7gYDPVaj5p5rWzRM3ipaslGX68hGN32czKc3ab1mF lI1Hffr38IQwh7AZ2dsaeFvI4Z7EMhRGnT9HgecqdUN31ababQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPoK7iwvEPRZXuy+rlFrihJoDsAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzGpzlY8QzZX2NIrawncP0 mZBdOHkeXYCqaF3iIu1I5TrJXtYqmO5aj2wyCy8FJjKmJwOqk9fc3k+8X5wUII6m 73+6xTNMRuWqjX1y9448L434s6t4i3YUaPlz9cBVq5mg2qrZVicuowig1d30H0gm 3jqL2qDnTAw2vafOjNcxTAfwqakcUUWeIibt+wzYyYfRtcEEsuIL+nxjvRNGJZh4 4TRy/pOQj1qCMZ+jJVUVeFrghs3BsuNXuiwtdOaysPsggWvA2R9+EKVeZnchhsv9 vap/F+uJl8yCa6q4Guuf3Ew3cZVbSlpQxnpU0c0xJR8rpC0d9SDFttsEOkcG7BRy -----END CERTIFICATE-----Generated at Tue Sep 16 23:06:13 2025 by rpki-client