$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft File: 0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft (raw, json) Hash identifier: QYnZw+bF5yydruAO/RmT0/mYhPVSclUZtdx1+9QcYv4= Subject key identifier: 72:51:1B:6D:4B:C9:12:EA:4C:1F:27:13:DB:6B:C9:8E:68:AD:E7:C8 Authority key identifier: 59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF Certificate issuer: /CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de Certificate serial: 010D0C9F4328584BC075C77A5E58BFFF1FFFF548 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft Manifest number: 010D0C9F4328584073A828925F5DE82584A8E004 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 0e7c2507-d7b8-4812-a32c-3921f99fe3de.crl (hash: xjSEubkn9unM1UobcNHYhdwQ1SZfXgRcQcm0WXELZTk=) 2: b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa (hash: BtoZzIxi0+V8DL8KRhhWywLGN07RZKLOvdfIiSf0xtM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c7:7a:5e:58:bf:ff:1f:ff:f5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=f1f2e06e-7af9-4961-9e6a-7f05ffec71d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:36:57:90:8f:0d:44:9a:79:e2:e9:aa:22: 68:17:5d:a0:07:09:b3:be:ed:4d:85:8e:6c:11:4a: 67:5c:5f:0c:bd:07:5b:2b:c7:f3:3f:b5:3e:40:16: ff:68:88:ee:52:39:66:38:1f:0b:02:3f:b8:78:ed: 5e:ff:e3:47:d3:4b:cc:a6:52:a5:0a:a9:04:7f:35: d9:d7:84:8a:5b:8c:8a:ca:12:a9:b8:72:4c:e3:49: cc:6e:82:ba:88:de:8c:bc:43:18:e4:9b:c4:5b:4b: 87:a2:85:48:05:2c:45:1d:3b:43:cb:f3:72:94:61: eb:08:37:1e:88:b3:ee:9c:75:65:2a:f4:dc:8f:5a: e8:25:57:ba:41:32:b3:e8:53:a2:f4:2e:da:1c:0e: 3c:90:94:aa:89:0c:6b:79:83:8d:55:0b:c6:30:2c: 95:88:4d:64:9b:19:85:c3:ec:51:e2:3d:69:a9:61: 0b:aa:78:8a:01:36:83:81:c8:be:71:21:c1:97:52: ef:3e:ba:76:f3:15:45:2b:a4:43:3c:21:3d:3a:93: fb:52:a4:b0:8c:3b:df:98:8a:ce:6f:1c:9f:ab:c3: f3:cf:74:e3:ad:19:eb:c2:75:e7:ab:52:d2:fa:50: a1:e0:e4:f4:c9:97:67:e1:29:3e:3b:ee:bf:cb:95: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:51:1B:6D:4B:C9:12:EA:4C:1F:27:13:DB:6B:C9:8E:68:AD:E7:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.crl X509v3 Authority Key Identifier: keyid:59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e4:4d:f1:05:eb:34:1d:c0:d2:b8:42:55:77:72:d1:52:0f: 7f:ac:5f:ee:f0:81:a7:08:d6:f5:fe:4a:2f:0c:92:e4:24:39: 03:af:a1:ff:ac:3a:d9:37:5d:3b:a1:2b:a9:31:e6:12:d6:45: f3:76:89:ba:40:e3:59:8e:e1:8d:82:7f:71:37:2a:53:d4:79: 32:b8:a5:9a:b9:d6:5a:e4:9b:83:07:1a:5c:86:49:8c:e3:19: 5a:0a:77:b0:04:b0:3d:d3:9a:a0:8d:84:bf:7b:ca:db:5d:32: fd:cd:f5:fa:11:78:ab:1b:3a:d9:50:fe:a5:e4:b9:1c:87:3f: b8:4e:17:3e:a1:f3:61:e6:c7:7c:93:27:9c:e2:08:70:c1:a9: bb:65:6d:bf:3b:27:67:1b:3b:89:99:c3:27:a1:3d:2a:b0:c3: 9d:1f:00:d3:0e:5e:c8:23:80:40:15:12:e0:9f:09:e3:36:35: 46:2b:7f:11:fb:cc:50:4d:97:bd:78:6f:37:ab:fa:48:2a:c4: 6e:3b:15:51:e2:5f:23:f7:84:f5:a9:74:00:dc:ca:b3:38:f3: a5:e6:d0:e1:88:fe:45:c6:77:2f:f6:28:95:86:25:b1:1e:9c: 1a:8e:be:63:0d:5e:e9:e6:65:88:5f:a1:6e:b9:f2:c9:dd:a6: 31:71:b3:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcd6Xli//x//9UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU3YzI1MDctZDdiOC00ODEyLWEzMmMtMzkyMWY5OWZl M2RlMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk ZjFmMmUwNmUtN2FmOS00OTYxLTllNmEtN2YwNWZmZWM3MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbI2V5CPDUSaeeLpqiJoF12gBwmzvu1NhY5s EUpnXF8MvQdbK8fzP7U+QBb/aIjuUjlmOB8LAj+4eO1e/+NH00vMplKlCqkEfzXZ 14SKW4yKyhKpuHJM40nMboK6iN6MvEMY5JvEW0uHooVIBSxFHTtDy/NylGHrCDce iLPunHVlKvTcj1roJVe6QTKz6FOi9C7aHA48kJSqiQxreYONVQvGMCyViE1kmxmF w+xR4j1pqWELqniKATaDgci+cSHBl1LvPrp28xVFK6RDPCE9OpP7UqSwjDvfmIrO bxyfq8Pzz3TjrRnrwnXnq1LS+lCh4OT0yZdn4Sk+O+6/y5VB1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHJRG21LyRLqTB8nE9tryY5orefIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZTdj MjUwNy1kN2I4LTQ4MTItYTMyYy0zOTIxZjk5ZmUzZGUvMGU3YzI1MDctZDdiOC00 ODEyLWEzMmMtMzkyMWY5OWZlM2RlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGU3YzI1MDctZDdiOC00ODEyLWEz MmMtMzkyMWY5OWZlM2RlLzBlN2MyNTA3LWQ3YjgtNDgxMi1hMzJjLTM5MjFmOTlm ZTNkZS5jcmwwHwYDVR0jBBgwFoAUWZNlckvHweJQOCH3DsjaIJz8Ee8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZTdjMjUwNy1kN2I4LTQ4MTItYTMyYy0zOTIx Zjk5ZmUzZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAb5E3xBes0HcDSuEJVd3LR Ug9/rF/u8IGnCNb1/kovDJLkJDkDr6H/rDrZN107oSupMeYS1kXzdom6QONZjuGN gn9xNypT1HkyuKWaudZa5JuDBxpchkmM4xlaCnewBLA905qgjYS/e8rbXTL9zfX6 EXirGzrZUP6l5Lkchz+4Thc+ofNh5sd8kyec4ghwwam7ZW2/OydnGzuJmcMnoT0q sMOdHwDTDl7II4BAFRLgnwnjNjVGK38R+8xQTZe9eG83q/pIKsRuOxVR4l8j94T1 qXQA3MqzOPOl5tDhiP5Fxncv9iiVhiWxHpwajr5jDV7p5mWIX6FuufLJ3aYxcbMM -----END CERTIFICATE-----Generated at Wed Nov 5 02:07:22 2025 by rpki-client