$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft File: 1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft (raw, json) Hash identifier: OXSxdUtDXm7GpwJb+1LLqbycQgA/f3TSUbSC0qUihpA= Subject key identifier: 86:5A:B2:A5:EA:86:62:17:B7:76:B0:5D:01:43:A9:D3:8B:9D:4C:96 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F4328584BC03A2F260065C72DFE012900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft Manifest number: 010D0C9F4328584073A821FD8FB715B2F35547C0 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa (hash: wxrbx8c8pGdO1e/YZjWJgBPd0ylmDc8liuziHzXNtKs=) 2: 1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl (hash: lUVXPfuTINUFIGDLIigWfJALodHV+1y3UC8iW04lfFk=) 3: 3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (hash: R20W0N+NhRmJgd98nLL7OJeExf65r2AQouhU0DigwiE=) 4: c02c6ae8-b6bd-31a7-8b4a-5506e9ce24e5.roa (hash: nXdyvVSg8S4Wp+b0cYeAsKX4Bn/o/IfCmaQV3MOym4Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2f:26:00:65:c7:2d:fe:01:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=2d4e5d48-822d-4523-8346-b0208292c577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:31:70:61:81:3a:9a:04:b1:2b:8d:f2:1a: 8a:e5:c9:2b:21:32:03:7b:97:fa:7d:b4:03:d1:a3: 59:e4:30:cd:f0:09:d0:91:08:17:17:03:4f:a9:42: 09:8e:86:d5:fd:95:5b:de:7d:82:4c:53:f9:34:da: a5:1f:fe:de:74:ab:18:94:8e:62:3c:c0:4f:03:c1: d9:d9:13:c3:e9:f9:a1:06:39:ee:bb:c5:54:52:cb: a3:10:cf:28:98:56:03:60:9b:ac:3e:ac:7b:31:68: b9:e5:3a:76:d4:be:ea:42:70:50:c8:f2:d8:e9:e9: 57:bd:6b:33:31:c7:12:09:aa:a3:49:c6:21:ea:9d: e7:63:bb:ec:1c:10:ef:34:35:42:58:93:f4:bc:5b: 44:28:2c:be:77:e2:74:bb:4e:48:6e:4f:d8:85:f1: 1b:43:87:3b:c6:91:9d:18:7e:7e:db:06:e1:c3:00: cd:bd:19:81:b7:16:cb:1a:78:9b:6f:4a:0d:09:1a: 0d:b7:f5:ac:5d:6c:18:13:ac:9d:88:94:f0:00:2d: e0:ee:d0:c2:3c:f0:0b:59:ed:8e:08:0d:92:4e:66: 62:7e:5b:45:1e:06:6f:65:38:a2:0b:38:81:e6:a0: 88:b4:ed:c2:9c:f1:2a:3c:70:d6:0c:32:f1:d0:8f: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5A:B2:A5:EA:86:62:17:B7:76:B0:5D:01:43:A9:D3:8B:9D:4C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b7:db:85:9b:5b:e1:d3:bd:4b:bf:7e:bf:d9:db:7b:16:8c: 94:a7:0a:b3:3e:bd:43:5b:eb:06:20:54:4f:81:40:62:94:94: 20:a0:4f:4b:5e:bb:d9:bd:fb:02:00:9e:f6:1b:de:26:80:96: 86:55:8a:d6:fd:7c:4f:41:d0:30:8a:80:3e:dc:ce:03:f7:16: ad:14:32:6c:30:a4:c5:46:4e:fc:2b:6b:e9:36:f3:1a:dc:59: 70:5f:5b:f7:7e:09:89:a4:fc:73:30:19:e0:5e:c9:82:a9:02: 31:f7:ec:0e:dd:83:51:2c:ff:c5:c1:61:13:ff:a8:3d:e1:f9: 9b:87:00:a3:51:98:90:44:64:ba:25:b2:72:46:1d:36:39:3d: e1:e0:80:96:17:73:8b:ff:11:5f:2f:a6:ae:7f:25:42:3b:6f: 28:de:81:37:84:ea:d1:ca:6f:90:cf:c2:e3:58:98:ba:ea:4e: af:e0:61:3c:aa:02:f9:e3:ae:fc:71:72:c9:25:54:f4:65:71: b1:e9:c7:16:60:cf:81:86:ef:50:46:17:d0:52:f7:18:c7:f1: ae:eb:6f:ec:d6:0f:fd:8a:41:69:15:3d:97:ca:1d:37:84:67: 2e:5d:5d:42:89:d2:80:33:5e:3c:0e:2f:1e:ab:db:8b:9a:d7: 6d:f3:49:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi8mAGXHLf4BKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk MmQ0ZTVkNDgtODIyZC00NTIzLTgzNDYtYjAyMDgyOTJjNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNExcGGBOpoEsSuN8hqK5ckrITIDe5f6fbQD 0aNZ5DDN8AnQkQgXFwNPqUIJjobV/ZVb3n2CTFP5NNqlH/7edKsYlI5iPMBPA8HZ 2RPD6fmhBjnuu8VUUsujEM8omFYDYJusPqx7MWi55Tp21L7qQnBQyPLY6elXvWsz MccSCaqjScYh6p3nY7vsHBDvNDVCWJP0vFtEKCy+d+J0u05Ibk/YhfEbQ4c7xpGd GH5+2wbhwwDNvRmBtxbLGnibb0oNCRoNt/WsXWwYE6ydiJTwAC3g7tDCPPALWe2O CA2STmZifltFHgZvZTiiCziB5qCItO3CnPEqPHDWDDLx0I+0bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIZasqXqhmIXt3awXQFDqdOLnUyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvMWJkOTViYjYtZjhlNi00 ZDY2LThkN2ItZDVhMzQyYjM1ODdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZt9uFm1vh071Lv36/2dt7 FoyUpwqzPr1DW+sGIFRPgUBilJQgoE9LXrvZvfsCAJ72G94mgJaGVYrW/XxPQdAw ioA+3M4D9xatFDJsMKTFRk78K2vpNvMa3FlwX1v3fgmJpPxzMBngXsmCqQIx9+wO 3YNRLP/FwWET/6g94fmbhwCjUZiQRGS6JbJyRh02OT3h4ICWF3OL/xFfL6aufyVC O28o3oE3hOrRym+Qz8LjWJi66k6v4GE8qgL54678cXLJJVT0ZXGx6ccWYM+Bhu9Q RhfQUvcYx/Gu62/s1g/9ikFpFT2Xyh03hGcuXV1CidKAM148Di8eq9uLmtdt80n5 -----END CERTIFICATE-----Generated at Tue Nov 4 22:58:09 2025 by rpki-client