$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft File: c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft (raw, json) Hash identifier: lPGk7JZV00kVK6+92JozJUvpPWAhJIbXGvkTs43bNus= Subject key identifier: 14:D5:BF:D3:EF:13:45:23:0A:FB:62:78:4D:0A:55:1C:C6:F3:BF:D4 Authority key identifier: D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C Certificate issuer: /CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Certificate serial: 010D0C9F4328584BBFE0D5601164000EAD868280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft Manifest number: 010D0C9F4328584073A81CB12D51632932675B74 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 950d8c36-ddb0-3620-b235-c13e150e45f1.roa (hash: eTI7jKwOhZZYdVmBk7M35J8zNOiFAoeNybr6LYGNvhY=) 2: c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl (hash: /PpDc2iQ0AHx8TrjU8JjspzjBdOu9Xtxvo3YmremMAw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d5:60:11:64:00:0e:ad:86:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=af6e2fcd-2c4a-4ec8-9c4b-b694816a7334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:a8:b7:47:2f:3d:10:8c:dc:27:8c:c1:a2: 91:21:73:bf:9d:6c:70:d4:72:02:91:5e:db:28:e6: 4c:4f:c8:6e:2a:81:ae:ef:57:0e:8f:a3:f8:fc:0d: 32:ec:e4:54:82:f1:44:ab:91:94:cb:d0:82:7d:4c: 27:92:3e:c1:41:d8:d1:1a:ab:33:07:b3:3b:87:0a: 48:2e:48:d1:3f:5e:e6:88:ba:7f:06:08:06:06:09: a9:f5:09:62:cf:8a:29:02:9e:2a:9c:d3:19:35:1b: 34:e6:74:62:d2:74:37:be:e4:34:2e:e8:dc:43:8d: 5d:fd:7d:9b:75:6f:bc:53:62:6e:31:80:c8:eb:5d: a1:a6:80:66:3c:a0:17:47:bb:6f:cd:bb:a6:11:6d: 8e:c9:40:d4:41:18:40:13:66:7b:7f:48:19:9e:9d: b4:bc:71:b2:6e:5e:66:f8:16:ec:8f:fa:91:98:90: d1:28:14:93:d8:5f:03:d3:f1:ba:d4:ba:74:15:6f: d9:08:28:bf:37:dc:42:08:5f:5e:91:6f:fc:08:51: 05:50:81:50:27:25:7f:fb:03:c6:2c:ed:95:bc:c8: 69:a2:0d:22:4e:7f:43:c6:9f:03:ed:eb:d4:a0:a0: 64:eb:6e:63:40:48:4e:ae:61:47:83:47:fc:8c:d3: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:BF:D3:EF:13:45:23:0A:FB:62:78:4D:0A:55:1C:C6:F3:BF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl X509v3 Authority Key Identifier: keyid:D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:53:55:55:84:ca:24:e4:05:3d:d9:b7:3d:96:38:d3:03:72: 17:ae:31:ba:7c:0b:a7:92:12:f7:81:3d:69:11:24:56:10:7b: 17:d8:59:3e:10:a2:7c:ea:ee:50:f7:82:89:e4:96:4d:f2:3a: f6:9b:bb:34:4e:c5:ee:9f:ad:a4:58:07:4a:39:47:81:34:49: 64:c3:25:f8:b7:a2:48:41:13:1f:12:0a:48:51:30:0c:c0:80: df:a1:8c:b4:a0:f2:5f:cd:9b:57:86:f7:96:a5:a9:cc:64:3c: d6:a3:88:a6:3e:4c:69:5a:c7:fc:d6:7c:b1:d6:da:75:bb:19: bd:45:06:27:73:4c:34:ef:39:d4:ad:29:12:0d:78:38:28:4f: 56:5a:38:3a:89:14:4f:f6:84:a1:30:db:c6:66:a5:ce:93:d6: 60:35:68:68:80:af:d4:98:34:34:42:c1:7d:a3:ac:f4:b4:9e: d9:ec:bd:b5:8f:ce:fd:04:e5:42:a5:10:6d:1f:1d:43:da:64: e6:b9:cf:7f:25:a9:9f:e6:1a:88:d4:71:9d:3f:8d:b5:7c:ae: 23:06:5e:01:c0:d7:8d:0f:29:f6:40:59:5e:b1:67:0f:e8:0f: a4:13:73:df:5e:2c:f6:f8:82:51:ce:87:2e:59:33:41:ae:bf: 93:6b:a3:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NVgEWQADq2GgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcxYjZhNzYtOGY3Ni00NjM1LWI2ZmQtZmRhYWQ2ZjIx NTA0MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk YWY2ZTJmY2QtMmM0YS00ZWM4LTljNGItYjY5NDgxNmE3MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIOot0cvPRCM3CeMwaKRIXO/nWxw1HICkV7b KOZMT8huKoGu71cOj6P4/A0y7ORUgvFEq5GUy9CCfUwnkj7BQdjRGqszB7M7hwpI LkjRP17miLp/BggGBgmp9Qliz4opAp4qnNMZNRs05nRi0nQ3vuQ0LujcQ41d/X2b dW+8U2JuMYDI612hpoBmPKAXR7tvzbumEW2OyUDUQRhAE2Z7f0gZnp20vHGybl5m +Bbsj/qRmJDRKBST2F8D0/G61Lp0FW/ZCCi/N9xCCF9ekW/8CFEFUIFQJyV/+wPG LO2VvMhpog0iTn9Dxp8D7evUoKBk625jQEhOrmFHg0f8jNP4ZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBTVv9PvE0UjCvtieE0KVRzG87/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFi NmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFhZDZmMjE1MDQvYzcxYjZhNzYtOGY3Ni00 NjM1LWI2ZmQtZmRhYWQ2ZjIxNTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzcxYjZhNzYtOGY3Ni00NjM1LWI2 ZmQtZmRhYWQ2ZjIxNTA0L2M3MWI2YTc2LThmNzYtNDYzNS1iNmZkLWZkYWFkNmYy MTUwNC5jcmwwHwYDVR0jBBgwFoAU2Y6s/TWDQKtPQkUnIXqRhyDVBFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFiNmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFh ZDZmMjE1MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlU1VVhMok5AU92bc9ljjT A3IXrjG6fAunkhL3gT1pESRWEHsX2Fk+EKJ86u5Q94KJ5JZN8jr2m7s0TsXun62k WAdKOUeBNElkwyX4t6JIQRMfEgpIUTAMwIDfoYy0oPJfzZtXhveWpanMZDzWo4im PkxpWsf81nyx1tp1uxm9RQYnc0w07znUrSkSDXg4KE9WWjg6iRRP9oShMNvGZqXO k9ZgNWhogK/UmDQ0QsF9o6z0tJ7Z7L21j879BOVCpRBtHx1D2mTmuc9/Jamf5hqI 1HGdP421fK4jBl4BwNeNDyn2QFlesWcP6A+kE3PfXiz2+IJRzocuWTNBrr+Ta6PF -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:02 2025 by rpki-client