$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft File: b558fe83-60e3-423a-b823-c3c24b9a60dd.mft (raw, json) Hash identifier: Q275mGXbZhJbZq7Da3qRu+Bqt/P5ycAIWoyrSGVs+xw= Subject key identifier: DA:88:FD:BA:EF:2D:EB:93:7D:BF:39:EE:E5:4E:B0:1C:5F:19:B5:EE Authority key identifier: 7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC Certificate issuer: /CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Certificate serial: 010D0C9F4328584BC26FF82D5DC6D87578911520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft Manifest number: 010D0C9F4328584073A859718A5913EBADD0EA24 Signing time: Wed 05 Nov 2025 14:00:03 +0000 Manifest this update: Wed 05 Nov 2025 14:00:03 +0000 Manifest next update: Sat 08 Nov 2025 14:00:00 +0000 Files and hashes: 1: afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa (hash: tKm/ihFCxXdy50hNcmcoAP/lqEjbR3BjyQWxp1JHE40=) 2: b558fe83-60e3-423a-b823-c3c24b9a60dd.crl (hash: qyKwyTkloc/sFKsxYa4iYsCdRl+U3Ja2mr78jbWLwBo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:6f:f8:2d:5d:c6:d8:75:78:91:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Validity Not Before: Nov 5 14:00:03 2025 GMT Not After : Nov 8 14:00:00 2025 GMT Subject: CN=2f34f25e-8eea-493e-b3ee-b04fe5f054bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:fb:03:82:d7:98:42:62:60:72:0c:01:49: 81:07:ee:c5:ea:f1:ee:05:0b:f0:ae:a7:a0:9b:49: ae:90:d5:13:a7:4b:b8:0c:0e:e2:00:e1:36:12:3c: cf:97:02:15:f6:a6:c9:61:0e:ac:6f:5b:7f:5a:d6: ad:36:d1:9d:85:39:de:a0:ad:02:e5:ce:0e:7e:e5: 46:6c:8e:3d:6f:d5:5a:54:c8:cc:24:93:c9:c1:9f: 95:11:23:8a:ba:2e:12:87:fe:f1:c3:5e:4f:bd:8e: 4f:9b:ea:e4:03:b7:32:58:10:db:31:73:21:cc:54: dd:e7:28:65:61:bc:6d:a3:b5:1d:0c:22:57:e7:99: a2:5c:5d:19:14:b3:00:29:98:31:50:43:4e:13:0e: d9:3f:66:96:72:57:29:9b:13:38:66:ca:0e:e4:e8: 9b:13:2b:e9:d9:f8:73:83:19:67:8c:87:70:eb:6e: b9:c2:2f:d9:74:af:28:56:2f:79:81:b0:85:d6:2f: ef:a3:8a:c5:f8:b0:08:e1:6e:1d:8e:6d:3c:54:bd: 24:c7:b6:54:ca:70:4d:02:ce:f4:6d:a2:b0:2a:85: 3f:b1:d4:df:52:9b:67:5a:12:b0:4e:4e:ba:ad:27: 9e:c1:47:a5:c5:80:61:e0:62:6f:30:42:85:55:c1: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:FD:BA:EF:2D:EB:93:7D:BF:39:EE:E5:4E:B0:1C:5F:19:B5:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl X509v3 Authority Key Identifier: keyid:7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bf:11:59:31:a4:e8:27:aa:78:ef:56:9e:bf:8a:34:51:43: 0c:8f:ba:68:33:75:58:0b:a2:91:00:63:01:01:7f:f9:12:a3: 5f:cc:5e:31:69:8b:2b:0d:09:ae:ba:ac:26:fe:0b:70:e3:cb: dc:47:c2:4f:5f:61:4d:b5:fc:23:5d:35:39:1e:b8:49:ac:8a: bd:d5:96:3c:ca:f5:8a:31:05:b0:55:fb:d5:1d:fd:92:11:32: 90:b0:90:68:46:2b:57:45:3d:2a:3b:e3:ea:4b:dc:ba:cf:85: 60:18:44:55:8b:76:3a:82:7b:dc:66:14:8a:d4:2d:33:52:65: 0e:6e:88:bf:93:a8:27:2b:c8:66:7b:f8:79:0b:4a:ed:d6:b4: f7:f1:c0:9e:1b:8e:a7:6c:cd:c9:dc:e7:7e:e3:74:73:48:95: 92:ca:d3:5e:9b:ef:16:a9:be:d5:af:25:6d:9f:10:d3:a0:a4: 88:3b:72:b7:a4:be:95:01:a0:71:a1:3f:15:16:8f:5a:a0:2d: 82:26:6f:e3:4c:fc:b3:da:aa:b2:2e:94:c6:f7:12:48:73:d1: e6:96:00:80:c9:d8:17:79:ef:de:ff:0f:39:ed:29:18:65:3a: 36:03:dd:80:c0:37:d8:b0:67:86:76:8f:8d:03:7f:ef:9d:36: 6f:b5:1e:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCb/gtXcbYdXiRFSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU1OGZlODMtNjBlMy00MjNhLWI4MjMtYzNjMjRiOWE2 MGRkMB4XDTI1MTEwNTE0MDAwM1oXDTI1MTEwODE0MDAwMFowLzEtMCsGA1UEAxMk MmYzNGYyNWUtOGVlYS00OTNlLWIzZWUtYjA0ZmU1ZjA1NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXX7A4LXmEJiYHIMAUmBB+7F6vHuBQvwrqeg m0mukNUTp0u4DA7iAOE2EjzPlwIV9qbJYQ6sb1t/WtatNtGdhTneoK0C5c4OfuVG bI49b9VaVMjMJJPJwZ+VESOKui4Sh/7xw15PvY5Pm+rkA7cyWBDbMXMhzFTd5yhl Ybxto7UdDCJX55miXF0ZFLMAKZgxUENOEw7ZP2aWclcpmxM4ZsoO5OibEyvp2fhz gxlnjIdw6265wi/ZdK8oVi95gbCF1i/vo4rF+LAI4W4djm08VL0kx7ZUynBNAs70 baKwKoU/sdTfUptnWhKwTk66rSeewUelxYBh4GJvMEKFVcFILwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNqI/brvLeuTfb857uVOsBxfGbXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4 ZmU4My02MGUzLTQyM2EtYjgyMy1jM2MyNGI5YTYwZGQvYjU1OGZlODMtNjBlMy00 MjNhLWI4MjMtYzNjMjRiOWE2MGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU1OGZlODMtNjBlMy00MjNhLWI4 MjMtYzNjMjRiOWE2MGRkL2I1NThmZTgzLTYwZTMtNDIzYS1iODIzLWMzYzI0Yjlh NjBkZC5jcmwwHwYDVR0jBBgwFoAUfNuurgigkqgxUlUmvivhB0Plm8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4ZmU4My02MGUzLTQyM2EtYjgyMy1jM2My NGI5YTYwZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0vxFZMaToJ6p471aev4o0 UUMMj7poM3VYC6KRAGMBAX/5EqNfzF4xaYsrDQmuuqwm/gtw48vcR8JPX2FNtfwj XTU5HrhJrIq91ZY8yvWKMQWwVfvVHf2SETKQsJBoRitXRT0qO+PqS9y6z4VgGERV i3Y6gnvcZhSK1C0zUmUOboi/k6gnK8hme/h5C0rt1rT38cCeG46nbM3J3Od+43Rz SJWSytNem+8Wqb7VryVtnxDToKSIO3K3pL6VAaBxoT8VFo9aoC2CJm/jTPyz2qqy LpTG9xJIc9HmlgCAydgXee/e/w857SkYZTo2A92AwDfYsGeGdo+NA3/vnTZvtR6Z -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:48 2025 by rpki-client