$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft File: 9faf7a12-0176-44f9-9938-7bbccac3d238.mft (raw, json) Hash identifier: yF4BukWMQUNEEfcR4Tq0eFWdVtCQ0gkdn9cMAQ3npxw= Subject key identifier: 5D:29:B2:33:02:B0:83:35:F7:81:25:E1:63:A2:D3:31:E2:3A:97:8A Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584B97A179491C8A12C87005CA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft Manifest number: 010D0C9F43285841FEDB925E8271C18E74715CAF Signing time: Tue 21 Oct 2025 06:00:03 +0000 Manifest this update: Tue 21 Oct 2025 06:00:03 +0000 Manifest next update: Fri 24 Oct 2025 06:00:00 +0000 Files and hashes: 1: 4e651070-49d3-379c-9ddb-1c9815e02a76.roa (hash: LkrOWyBT+7ij8p8u6FR1N2FBlKeEi2gXU/v1UfTEuPI=) 2: 7b07ff38-005d-377c-95d7-6ce9da3de600.roa (hash: +CKvrZJZJJDpUFpAFkQdyoNXp8LH5nSADIny8nh/CYg=) 3: 9faf7a12-0176-44f9-9938-7bbccac3d238.crl (hash: z7Zt1Z+/BGzNl3IEQxeSCLdAIO7RuDPqkvoAPLRAths=) 4: a95dabbe-6d2c-3476-8c33-1fdebb9832d4.roa (hash: YXQZ21eZ5N5Fs1XSNeNgRwka9k0dZoR1+O6C1obzMcQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:a1:79:49:1c:8a:12:c8:70:05:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Oct 21 06:00:03 2025 GMT Not After : Oct 24 06:00:00 2025 GMT Subject: CN=e8a90279-ad1f-4cae-84cd-9f78ac6333c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:ce:77:ac:8f:5a:ff:e5:9b:cf:5f:d9:a3: 53:b2:1f:ca:51:e4:c1:ee:6b:5d:fc:45:d1:7c:58: 0d:74:9b:8b:89:49:eb:4d:a9:22:01:d7:2e:6c:d9: aa:83:63:60:7d:cb:34:4f:94:13:6f:9d:c6:8b:6e: 07:6f:c3:d9:64:b4:2a:cf:c8:35:6a:2b:2a:bc:65: 00:90:16:67:87:9d:2f:d9:bb:0a:3e:12:56:24:35: 18:9b:c9:18:b0:91:4f:af:7b:62:c0:a6:1a:bf:28: 93:b2:1e:03:75:6f:25:7c:e3:4a:c3:39:45:b8:91: 43:f1:d0:e3:44:e3:45:1c:80:08:22:30:18:c0:3c: 87:40:25:73:36:d1:b4:05:d1:c5:7f:4a:e5:92:d3: cb:11:a1:c8:3e:2b:69:43:9c:f9:7b:e7:31:98:7a: d7:f3:3f:76:a2:49:a0:5a:95:f0:a2:31:17:bd:0e: f3:4f:d3:93:d9:37:51:04:7d:16:eb:ee:7f:b3:3d: 36:c9:57:a7:71:4c:5d:b9:ae:70:de:1b:40:4e:a6: 48:81:be:5a:a4:cb:fc:d9:2a:9e:bc:9b:f1:ae:cc: 98:75:8a:60:9b:c5:70:2a:0c:ff:ed:56:1f:36:18: 0f:e1:9a:34:23:58:7f:54:28:43:7e:d4:d2:ae:1c: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:B2:33:02:B0:83:35:F7:81:25:E1:63:A2:D3:31:E2:3A:97:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:10:23:ad:13:c9:d3:28:29:d9:29:0e:15:fb:70:66:c9:c7: 11:dc:d6:ce:09:1e:f1:93:b5:54:b8:16:4a:1b:09:5d:07:28: 95:c7:9d:d8:0e:ca:81:0f:25:a4:5d:fc:98:b6:8c:ca:26:11: a3:46:1e:7d:2c:67:ac:4d:81:3f:bf:cf:28:66:e7:2a:2f:f8: fd:98:b8:13:49:ad:b1:7c:82:b8:4f:1b:73:7d:d4:26:ec:b5: 37:aa:62:cb:ce:a6:65:09:7d:d5:36:47:cd:96:37:a3:e1:01: f6:66:e8:51:1a:8f:81:b6:c6:a7:4b:d4:03:ea:93:8c:40:87: 8f:29:82:50:18:16:f5:47:39:b2:3d:d9:f2:9f:99:ef:92:93: ab:54:eb:b6:c9:5e:06:b1:3c:f6:93:5a:35:d5:07:da:54:c3: 77:a2:b4:ab:b2:6f:2b:93:9a:ce:76:57:d4:a5:3e:a9:58:b2: 13:e3:d5:ea:fe:67:45:0d:93:0a:6f:96:e3:68:7e:82:b6:ae: 7a:ee:2a:1d:b3:91:fd:cd:18:89:4e:7b:f8:81:6b:b4:5a:b6: 1e:4f:e8:d5:4d:1b:0c:b5:0b:78:83:d3:b6:a5:ea:da:5e:6d: 15:aa:c1:4f:c4:c7:2c:23:b8:4a:46:0c:c5:00:1c:5e:40:ad: d7:83:3b:4f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXoXlJHIoSyHAFykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI1MTAyMTA2MDAwM1oXDTI1MTAyNDA2MDAwMFowLzEtMCsGA1UEAxMk ZThhOTAyNzktYWQxZi00Y2FlLTg0Y2QtOWY3OGFjNjMzM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhjOd6yPWv/lm89f2aNTsh/KUeTB7mtd/EXR fFgNdJuLiUnrTakiAdcubNmqg2Ngfcs0T5QTb53Gi24Hb8PZZLQqz8g1aisqvGUA kBZnh50v2bsKPhJWJDUYm8kYsJFPr3tiwKYavyiTsh4DdW8lfONKwzlFuJFD8dDj RONFHIAIIjAYwDyHQCVzNtG0BdHFf0rlktPLEaHIPitpQ5z5e+cxmHrX8z92okmg WpXwojEXvQ7zT9OT2TdRBH0W6+5/sz02yVencUxdua5w3htATqZIgb5apMv82Sqe vJvxrsyYdYpgm8VwKgz/7VYfNhgP4Zo0I1h/VChDftTSrhzKCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF0psjMCsIM194El4WOi0zHiOpeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvOWZhZjdhMTItMDE3Ni00 NGY5LTk5MzgtN2JiY2NhYzNkMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3ECOtE8nTKCnZKQ4V+3Bm yccR3NbOCR7xk7VUuBZKGwldByiVx53YDsqBDyWkXfyYtozKJhGjRh59LGesTYE/ v88oZucqL/j9mLgTSa2xfIK4TxtzfdQm7LU3qmLLzqZlCX3VNkfNljej4QH2ZuhR Go+BtsanS9QD6pOMQIePKYJQGBb1RzmyPdnyn5nvkpOrVOu2yV4GsTz2k1o11Qfa VMN3orSrsm8rk5rOdlfUpT6pWLIT49Xq/mdFDZMKb5bjaH6Ctq567iods5H9zRiJ Tnv4gWu0WrYeT+jVTRsMtQt4g9O2peraXm0VqsFPxMcsI7hKRgzFABxeQK3XgztP -----END CERTIFICATE-----Generated at Tue Oct 21 15:20:34 2025 by rpki-client