$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft File: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft (raw, json) Hash identifier: Ln651ngeqe13DcHH4dpATIBsihbO3RRCV4h7EvyIC7s= Subject key identifier: 28:CC:8B:04:E6:1A:7C:84:CA:93:9B:47:D8:BD:F6:86:9C:54:3C:7F Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F Certificate issuer: /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Certificate serial: 010D0C9F4328584BBEB718E0D7ECC197EA9AE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft Manifest number: 010D0C9F4328584073A8419EE8E3E5AE11DFE523 Signing time: Tue 04 Nov 2025 06:00:08 +0000 Manifest this update: Tue 04 Nov 2025 06:00:08 +0000 Manifest next update: Thu 06 Nov 2025 06:00:00 +0000 Files and hashes: 1: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl (hash: xcWEvWANWHuUG9ZKvz/3cU3Vn6VZA3/EKm7ThxxRTPg=) 2: 6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (hash: XUGSXUtAL5SBVjSuT8PbXAHIM+BwrF+OIE5Tf1+B83k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:b7:18:e0:d7:ec:c1:97:ea:9a:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Validity Not Before: Nov 4 06:00:08 2025 GMT Not After : Nov 6 06:00:00 2025 GMT Subject: CN=38d219cf-841e-42aa-aaff-13ec34cd1e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:02:aa:81:36:d5:c6:d4:61:91:62:1f:f4: 22:22:cc:17:90:e0:48:f5:53:b4:ac:b8:84:27:ed: 4d:e6:37:6a:29:bb:a5:be:e3:00:d3:19:76:8a:29: 87:b8:6f:57:7b:c8:15:45:ca:aa:6e:e5:24:19:dd: 47:8a:52:e6:13:5c:dd:af:98:0d:39:69:c2:dd:63: 4f:c9:fb:28:32:3a:d0:77:93:a4:95:f8:c6:88:ec: cf:74:dd:7a:74:33:5f:ff:3c:93:02:75:99:88:77: c3:0d:6c:a4:a3:02:b4:61:f7:b0:3c:39:9d:cb:d8: 93:98:35:52:6e:76:90:97:fb:b1:f5:83:7b:8a:7a: 85:03:b3:c0:10:b9:ff:11:4c:42:81:f2:40:35:70: c9:5c:b1:85:0f:81:e6:f8:b9:60:2f:41:de:76:ec: 83:04:85:42:07:9b:eb:cd:b0:8a:08:b1:cd:e2:ab: a0:59:31:ea:3e:32:92:4f:f7:77:82:fb:d4:c9:fd: ee:17:50:97:f4:4d:27:4c:88:13:56:23:fc:38:06: 56:a2:00:45:5f:cb:34:5d:93:f8:f1:a2:32:70:bc: 66:f7:aa:63:47:7d:b8:01:c1:31:67:cb:f7:6a:87: 1b:6a:ac:72:30:55:6e:14:70:db:7f:e9:1c:1a:f7: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CC:8B:04:E6:1A:7C:84:CA:93:9B:47:D8:BD:F6:86:9C:54:3C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl X509v3 Authority Key Identifier: keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:72:56:d4:08:e2:85:a7:38:8a:f0:63:18:1f:bd:ab:59:55: 5c:52:ba:6f:c1:cf:c4:70:c2:18:d8:10:33:61:7b:9c:90:27: f7:7d:5e:b6:61:22:e7:f3:77:e8:c3:07:6a:f2:2d:89:9a:75: e1:f6:58:9a:88:a9:fd:fd:1f:8e:dc:af:c1:e4:73:39:a0:33: 7c:72:ee:50:25:ab:73:46:83:7d:f8:e6:a8:ea:73:d3:10:e7: 37:f5:6b:54:64:a7:d7:d6:ab:8a:d3:69:40:80:c6:f6:6c:82: 10:7d:97:0e:f4:58:95:68:36:2e:94:a9:5f:a5:18:0b:71:32: 03:6f:79:f1:b6:3e:78:04:db:01:b1:7a:a6:91:1c:9f:5d:fc: d2:0b:78:67:0b:5b:1a:6b:7b:12:08:b5:41:55:9b:10:de:c8: 0e:26:87:bf:14:9a:26:d3:6b:7d:6d:be:ca:83:a3:dc:e8:49: a1:19:20:84:26:a7:26:3c:48:c6:4d:38:fc:dd:04:4b:31:e8: b2:7e:18:76:bc:01:97:ae:32:01:59:c7:f4:31:c4:b8:91:a1: 59:24:66:5e:29:aa:33:95:6e:de:37:bb:4e:81:d3:6a:e0:96: 5d:5f:67:91:ba:3a:32:0e:e0:75:06:cf:ab:27:dd:5b:73:72: d0:52:6d:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+txjg1+zBl+qa5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk MmIzMB4XDTI1MTEwNDA2MDAwOFoXDTI1MTEwNjA2MDAwMFowLzEtMCsGA1UEAxMk MzhkMjE5Y2YtODQxZS00MmFhLWFhZmYtMTNlYzM0Y2QxZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWACqoE21cbUYZFiH/QiIswXkOBI9VO0rLiE J+1N5jdqKbulvuMA0xl2iimHuG9Xe8gVRcqqbuUkGd1HilLmE1zdr5gNOWnC3WNP yfsoMjrQd5OklfjGiOzPdN16dDNf/zyTAnWZiHfDDWykowK0YfewPDmdy9iTmDVS bnaQl/ux9YN7inqFA7PAELn/EUxCgfJANXDJXLGFD4Hm+LlgL0HeduyDBIVCB5vr zbCKCLHN4qugWTHqPjKST/d3gvvUyf3uF1CX9E0nTIgTViP8OAZWogBFX8s0XZP4 8aIycLxm96pjR324AcExZ8v3aocbaqxyMFVuFHDbf+kcGvdmNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCjMiwTmGnyEypObR9i99oacVDx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvMGRlMzdkMTctMjY2NC00 Yzg1LTliZTQtYTM1YmFmMGZkMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6clbUCOKFpziK8GMYH72r WVVcUrpvwc/EcMIY2BAzYXuckCf3fV62YSLn83fowwdq8i2JmnXh9liaiKn9/R+O 3K/B5HM5oDN8cu5QJatzRoN9+Oao6nPTEOc39WtUZKfX1quK02lAgMb2bIIQfZcO 9FiVaDYulKlfpRgLcTIDb3nxtj54BNsBsXqmkRyfXfzSC3hnC1saa3sSCLVBVZsQ 3sgOJoe/FJom02t9bb7Kg6Pc6EmhGSCEJqcmPEjGTTj83QRLMeiyfhh2vAGXrjIB Wcf0McS4kaFZJGZeKaozlW7eN7tOgdNq4JZdX2eRujoyDuB1Bs+rJ91bc3LQUm1q -----END CERTIFICATE-----Generated at Wed Nov 5 06:51:56 2025 by rpki-client