$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft File: ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft (raw, json) Hash identifier: UDbmm24XbH9G4seHc0toa5LOqFk4dOpj0irq6wDlwHc= Subject key identifier: 19:62:3B:D3:DD:E0:CC:51:C0:04:8F:C3:50:ED:FB:3E:60:0D:FB:D2 Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F4328584BC2523A64066BF0E5ABC63EA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft Manifest number: 010D0C9F4328584073A8555E8FD3615D57A33DA4 Signing time: Wed 05 Nov 2025 13:00:08 +0000 Manifest this update: Wed 05 Nov 2025 13:00:08 +0000 Manifest next update: Sat 08 Nov 2025 13:00:00 +0000 Files and hashes: 1: 14516a78-5003-3ee4-a230-723f4f86845d.roa (hash: bWNGdAMNmqUe6TGLdxA3ZDSK32ZLPySI/JCW0Cu3xgI=) 2: ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl (hash: hU4v6GO6+M+9V4UhDo5eFCYQa+gF3LVx5k+hOZLHmrk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:52:3a:64:06:6b:f0:e5:ab:c6:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Nov 5 13:00:08 2025 GMT Not After : Nov 8 13:00:00 2025 GMT Subject: CN=5d7ac789-815c-4220-b925-6f2b06c42954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:81:78:8d:9c:52:da:51:43:2f:2d:81:77: a7:6c:2c:d2:b7:18:43:26:e9:f0:e6:ad:10:d0:c3: ef:30:5e:f8:b3:71:c3:6b:ea:88:94:5f:1e:d8:49: d6:99:18:3a:21:b0:6c:30:fb:8f:ca:62:4a:43:a1: 91:55:5d:33:6e:41:39:95:1f:23:5e:b6:4f:cc:c7: 41:5a:fa:90:ad:52:a2:63:fd:d9:26:11:fd:b2:1b: 3b:47:a1:0f:2b:21:9d:b6:09:f0:31:16:46:07:36: 77:22:63:64:39:0d:a1:6e:d0:1c:9f:ef:fd:3b:87: 91:18:53:8c:5e:44:0f:6f:2d:bf:c3:66:ba:79:e9: 4f:84:a1:e8:53:08:a6:39:99:a9:4b:8e:fa:74:5a: bf:aa:b8:aa:4c:1b:f7:e9:d3:88:fe:08:17:5f:44: eb:97:bc:e5:be:62:dd:be:71:ee:d2:ba:fa:27:a8: 41:13:a6:a9:b2:b7:aa:48:56:39:b5:fd:22:11:84: e8:ed:cb:e5:6d:6a:17:bf:24:2c:6e:16:2b:f1:e3: 0f:92:51:0f:fe:35:74:dd:90:df:5d:3a:d4:8d:46: 4f:5c:c5:17:47:77:bc:6a:84:8b:0d:1e:da:d3:04: aa:c9:47:88:28:3c:a2:c4:d7:42:7c:6e:f8:f3:4b: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:62:3B:D3:DD:E0:CC:51:C0:04:8F:C3:50:ED:FB:3E:60:0D:FB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fc:8d:a3:8a:fb:a4:63:09:5c:ad:91:af:22:96:39:3f:7b: b3:ea:c4:f4:b1:bb:64:7b:6e:c5:d4:de:32:50:f4:b4:2a:97: 43:6e:5b:34:d3:02:1f:92:7d:9c:01:f0:69:61:74:4e:34:41: 96:8b:31:e6:69:4f:3d:2b:21:80:fa:12:c6:8a:3c:f6:1f:c6: 11:71:60:c5:0b:b4:5a:0e:d2:d7:ca:96:d9:56:81:f2:46:84: af:56:5d:ff:55:b6:e0:c4:2c:54:d6:33:bd:c4:c3:7d:5c:70: 60:e9:92:bf:b5:07:94:17:f2:f0:eb:70:65:d7:c7:35:a0:91: d9:b2:a9:65:20:80:b0:f4:bf:ed:b6:11:4f:4b:eb:c6:40:81: ca:46:9e:4e:31:bd:57:3d:21:f4:54:dc:c4:fb:8b:47:8e:4d: d6:9f:76:be:7b:52:5b:52:35:d8:f7:39:5c:99:7c:f4:8c:1d: f5:77:1b:5b:b4:02:d2:2f:60:a5:1c:57:44:43:53:32:ec:ca: df:40:10:35:fc:4e:73:cc:f3:1a:52:75:f6:26:c5:c1:c7:d9: 40:15:3f:80:4f:2b:fe:37:42:47:6e:9a:95:16:cf:f9:d5:2d: 79:93:7e:0c:d2:87:3b:3c:63:07:88:74:1c:ce:6d:49:7c:24: c0:fe:ce:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCUjpkBmvw5avGPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI1MTEwNTEzMDAwOFoXDTI1MTEwODEzMDAwMFowLzEtMCsGA1UEAxMk NWQ3YWM3ODktODE1Yy00MjIwLWI5MjUtNmYyYjA2YzQyOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2uBeI2cUtpRQy8tgXenbCzStxhDJunw5q0Q 0MPvMF74s3HDa+qIlF8e2EnWmRg6IbBsMPuPymJKQ6GRVV0zbkE5lR8jXrZPzMdB WvqQrVKiY/3ZJhH9shs7R6EPKyGdtgnwMRZGBzZ3ImNkOQ2hbtAcn+/9O4eRGFOM XkQPby2/w2a6eelPhKHoUwimOZmpS476dFq/qriqTBv36dOI/ggXX0Trl7zlvmLd vnHu0rr6J6hBE6apsreqSFY5tf0iEYTo7cvlbWoXvyQsbhYr8eMPklEP/jV03ZDf XTrUjUZPXMUXR3e8aoSLDR7a0wSqyUeIKDyixNdCfG7480uBTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBliO9Pd4MxRwASPw1Dt+z5gDfvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvYmE0MzRmYjMtMTQ2Yi00 YmM1LWE4Y2QtMzhkZGYxNjAzNDcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCR/I2jivukYwlcrZGvIpY5 P3uz6sT0sbtke27F1N4yUPS0KpdDbls00wIfkn2cAfBpYXRONEGWizHmaU89KyGA +hLGijz2H8YRcWDFC7RaDtLXypbZVoHyRoSvVl3/VbbgxCxU1jO9xMN9XHBg6ZK/ tQeUF/Lw63Bl18c1oJHZsqllIICw9L/tthFPS+vGQIHKRp5OMb1XPSH0VNzE+4tH jk3Wn3a+e1JbUjXY9zlcmXz0jB31dxtbtALSL2ClHFdEQ1My7MrfQBA1/E5zzPMa UnX2JsXBx9lAFT+ATyv+N0JHbpqVFs/51S15k34M0oc7PGMHiHQczm1JfCTA/s4A -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:35 2025 by rpki-client