$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft File: 91c894d6-b991-4966-bec4-7c58dac779b5.mft (raw, json) Hash identifier: IXZFp0IjNBrnoyfhGtHWM3hXcA+iFeox0kTZ+omd/PM= Subject key identifier: 21:7F:9B:CE:8F:8B:42:9B:86:1A:D7:10:F2:8F:1D:34:44:7A:F0:DF Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5 Certificate serial: 010D0C9F4328584B949B462969DFCE9B80B41300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft Manifest number: 010D0C9F4328584073A83B5D8905A808541C5A6B Signing time: Mon 20 Oct 2025 04:00:09 +0000 Manifest this update: Mon 20 Oct 2025 04:00:09 +0000 Manifest next update: Thu 23 Oct 2025 04:00:00 +0000 Files and hashes: 1: 91c894d6-b991-4966-bec4-7c58dac779b5.crl (hash: AWjOtlLhdzzhHPc5sv9zh/qo+nNKB0ukDs9MhKM00XI=) 2: ab708923-0613-3a2c-b170-cadae0fe2f49.roa (hash: 8O2q3PClutOIvzOUoQZ5k9afOGNl9OFJ3wsxtPmLdUs=) 3: e07ffccc-e92d-3740-bf40-b1ce295ad731.roa (hash: DtMxmBkJ0jVty/AG55P9gAjyDIahKoiI/NFV9HJJtAc=) 4: fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa (hash: 5xnCmYCX30ZYSFon8g5B5OK9GBg25kpnlUyuxduF/qY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:9b:46:29:69:df:ce:9b:80:b4:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Validity Not Before: Oct 20 04:00:09 2025 GMT Not After : Oct 23 04:00:00 2025 GMT Subject: CN=0a001d40-6712-40d7-ad3f-e1ab03675dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:9e:b9:63:95:29:a0:eb:97:c2:60:8d:b0: fc:77:6e:71:b6:78:14:e4:32:03:c5:41:15:4b:e0: 96:e6:45:31:d7:53:9d:7d:99:58:f0:12:e3:1e:6f: 0c:1c:79:b0:46:69:c8:71:6b:4d:87:e3:1e:d4:92: 92:f2:68:b9:ac:45:5a:f9:8a:ea:67:11:9f:bb:fd: b1:3b:69:27:1f:ee:77:df:4e:f8:72:2e:2f:42:15: 87:d2:ce:48:37:ca:ec:95:e4:33:95:07:45:b6:86: c4:06:31:24:ee:cd:06:17:9d:53:68:a3:5d:3f:37: d3:c7:f5:bd:ba:e1:6e:46:fe:b1:0e:4b:12:cc:7a: 8b:f5:5f:5f:91:ab:7e:0b:61:5d:67:5e:52:d9:d6: 21:89:fe:1c:e8:51:9d:8e:57:c2:de:99:a3:17:a5: 3a:57:49:d5:2d:77:1b:b0:3e:51:f3:48:8b:02:32: bc:81:e3:f0:29:a9:ab:e3:8b:fc:c1:dc:3f:be:d7: 75:4a:6a:0c:71:70:80:0d:fe:f6:0f:ba:82:09:aa: 44:14:97:1b:3d:d6:72:c9:82:22:61:65:de:45:05: ef:ba:28:94:20:13:52:61:dd:f8:3e:b8:18:e0:1f: 0f:1f:8e:1f:f1:52:92:e2:85:ed:c6:7b:3b:ea:1d: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:9B:CE:8F:8B:42:9B:86:1A:D7:10:F2:8F:1D:34:44:7A:F0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl X509v3 Authority Key Identifier: keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:86:d3:ee:c4:2b:d2:26:cc:39:59:fc:09:5e:a5:c0:4e:f0: 66:e5:1e:ae:b4:89:46:f6:42:55:b4:21:49:b3:dc:5b:6d:73: f9:21:85:9f:b3:59:58:33:7e:c2:0c:07:75:34:c2:d8:3d:57: 8d:86:1c:cc:39:b5:5a:12:94:1a:4b:c1:5d:03:d8:f8:04:a4: 2b:ac:b6:f9:1b:ff:ba:3e:41:b1:84:f2:33:42:27:75:e6:b0: c6:23:08:93:4b:63:af:a3:fa:4f:5d:79:14:9f:d7:dc:b0:fe: 96:30:e3:03:40:7f:93:e8:3c:99:8a:85:17:c9:b2:9f:41:7d: 7c:00:a8:67:19:02:9a:ba:4b:73:c4:77:0c:04:29:58:a9:00: 10:bb:31:49:e2:69:bc:f1:6a:1a:8f:25:c5:2a:e8:a6:73:ad: 46:14:9f:2d:ed:0a:16:7f:40:f9:04:0f:14:51:18:7d:8c:8f: 30:01:cd:16:6d:ae:5f:7c:4a:14:1f:c6:35:77:66:32:35:1b: f9:c9:7d:d4:c3:03:ca:d1:63:56:09:c7:f1:4c:67:b3:c7:7c: 14:1a:08:2e:46:ae:1c:3a:a9:ec:9b:5f:07:ce:90:39:89:83: 4a:10:2b:66:e0:eb:c0:e9:aa:0f:c6:06:dd:a0:f7:10:ea:5a: e5:b8:68:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUm0Ypad/Om4C0EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3 OWI1MB4XDTI1MTAyMDA0MDAwOVoXDTI1MTAyMzA0MDAwMFowLzEtMCsGA1UEAxMk MGEwMDFkNDAtNjcxMi00MGQ3LWFkM2YtZTFhYjAzNjc1ZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcqeuWOVKaDrl8JgjbD8d25xtngU5DIDxUEV S+CW5kUx11OdfZlY8BLjHm8MHHmwRmnIcWtNh+Me1JKS8mi5rEVa+YrqZxGfu/2x O2knH+533074ci4vQhWH0s5IN8rsleQzlQdFtobEBjEk7s0GF51TaKNdPzfTx/W9 uuFuRv6xDksSzHqL9V9fkat+C2FdZ15S2dYhif4c6FGdjlfC3pmjF6U6V0nVLXcb sD5R80iLAjK8gePwKamr44v8wdw/vtd1SmoMcXCADf72D7qCCapEFJcbPdZyyYIi YWXeRQXvuiiUIBNSYd34PrgY4B8PH44f8VKS4oXtxns76h3chQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCF/m86Pi0KbhhrXEPKPHTREevDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4 OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvOTFjODk0ZDYtYjk5MS00 OTY2LWJlYzQtN2M1OGRhYzc3OWI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3 NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4 ZGFjNzc5YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkhtPuxCvSJsw5WfwJXqXA TvBm5R6utIlG9kJVtCFJs9xbbXP5IYWfs1lYM37CDAd1NMLYPVeNhhzMObVaEpQa S8FdA9j4BKQrrLb5G/+6PkGxhPIzQid15rDGIwiTS2Ovo/pPXXkUn9fcsP6WMOMD QH+T6DyZioUXybKfQX18AKhnGQKauktzxHcMBClYqQAQuzFJ4mm88WoajyXFKuim c61GFJ8t7QoWf0D5BA8UURh9jI8wAc0Wba5ffEoUH8Y1d2YyNRv5yX3UwwPK0WNW CcfxTGezx3wUGgguRq4cOqnsm18HzpA5iYNKECtm4OvA6aoPxgbdoPcQ6lrluGjG -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:53 2025 by rpki-client