$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.mft File: cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.mft (raw, json) Hash identifier: LZLmaZvWKR4jyBm80hwLnfLYCW3q/V/iYUhDSo6rtaE= Subject key identifier: D8:1A:3E:77:D5:3F:C7:81:4C:20:D9:52:6C:12:F6:8A:A3:EE:C8:33 Authority key identifier: 49:F0:FB:F6:EE:1E:5A:38:2A:E0:3E:68:C8:07:0D:4C:4B:7E:C4:A5 Certificate issuer: /CN=cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4 Certificate serial: 010D0C9F4328584BBF69B7907B30804A989EC6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.mft Manifest number: 010D0C9F4328584073A8513F176727DEEFFED322 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 4784a435-0e06-3cbf-bde6-277d592427d9.roa (hash: 4Jl8KRubNt5QNocOG3/zGPdR8KYY7H509x0kSoacM18=) 2: cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.crl (hash: 2J9BvwseWwDaosMYe48PLaBAF0THCbr7dvf5URYzLZM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:90:7b:30:80:4a:98:9e:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=c75ea924-d091-45cb-bb7c-50cc9970d9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:96:7f:93:48:fe:29:51:12:70:89:81:fd: 09:62:25:94:66:d1:d2:65:91:85:13:1d:80:e3:7c: 9c:2d:6e:13:79:71:e6:f7:76:95:c0:9d:8f:68:03: 16:b8:d2:57:24:35:65:3b:05:5a:83:42:f4:cd:4a: 7f:99:c9:0c:3a:1c:55:45:7a:fd:da:3b:4f:d0:1d: 8e:5b:71:5e:f2:c6:21:26:26:35:6e:2c:1a:8c:f3: b6:6f:3d:3f:14:41:97:06:df:6e:14:4b:5f:2d:0d: 62:45:06:c2:6b:db:1a:35:f8:bd:59:25:f1:dd:be: 0f:05:d6:25:f2:a3:fb:48:29:3b:bf:53:68:c3:f8: 31:a9:66:78:69:0a:27:01:7f:70:4b:bd:0b:d2:db: b2:c5:1c:e2:5a:11:bd:9f:92:98:c0:12:3b:aa:f4: 62:da:f8:0c:c8:ba:73:1a:c9:41:38:05:8e:15:89: ee:6f:15:1f:38:0f:5d:8d:df:46:08:84:17:ff:78: 00:21:3c:98:9d:71:40:0e:b4:b9:9a:62:5e:9c:a6: 6f:0a:21:0f:05:db:00:00:61:83:7b:b7:aa:2b:52: 17:41:37:ad:3e:d2:c0:11:d0:24:ae:fb:05:87:73: 2c:8d:b7:bb:3b:0c:33:8a:c8:f3:22:98:0b:70:cb: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1A:3E:77:D5:3F:C7:81:4C:20:D9:52:6C:12:F6:8A:A3:EE:C8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.crl X509v3 Authority Key Identifier: keyid:49:F0:FB:F6:EE:1E:5A:38:2A:E0:3E:68:C8:07:0D:4C:4B:7E:C4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cc96c0b6-04d4-4b61-9e4a-fb220cd8e2d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:cc:df:5e:04:bf:40:1c:99:ab:02:6d:49:2d:60:05:cd:e6: c8:4d:14:56:b1:43:64:7e:62:70:64:ce:26:82:67:92:92:6d: e7:07:c9:3e:bc:b0:5a:25:1a:ee:4f:53:cc:95:a4:84:17:60: 59:b6:43:ab:32:49:bd:db:0d:aa:86:e1:b7:2c:b9:18:c9:72: c6:e0:b4:83:c4:8e:ea:4f:25:4b:be:91:b0:b5:88:da:22:2f: e4:34:cd:03:d5:f0:8b:30:7a:a0:af:98:fc:2e:ec:e2:e3:61: 06:5d:41:67:94:27:dd:7a:50:7e:9d:84:15:2c:55:1b:12:48: c7:b0:e9:00:76:43:c8:f9:e6:2e:fd:1c:0f:a0:6f:73:25:ee: ec:80:3b:a0:c5:a5:c2:0b:7e:2c:c7:bc:17:2b:2c:f0:86:85: 48:46:cf:b7:a2:42:49:08:7d:82:e0:d5:4d:f4:1b:3e:19:4b: a7:93:a2:7c:85:35:c6:d1:1d:57:d6:17:5c:da:bf:bc:48:4a: 7e:c1:8e:42:82:5f:52:86:c2:c1:25:80:54:1e:38:aa:61:d6: 22:bc:2d:0c:af:aa:d4:c5:50:6c:45:22:75:c7:1b:0c:ad:14: 28:65:57:55:3b:07:bc:39:a3:46:f7:63:fa:de:50:34:68:e7: 69:a1:56:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abeQezCASpiexsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5NmMwYjYtMDRkNC00YjYxLTllNGEtZmIyMjBjZDhl MmQ0MB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk Yzc1ZWE5MjQtZDA5MS00NWNiLWJiN2MtNTBjYzk5NzBkOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllCWf5NI/ilREnCJgf0JYiWUZtHSZZGFEx2A 43ycLW4TeXHm93aVwJ2PaAMWuNJXJDVlOwVag0L0zUp/mckMOhxVRXr92jtP0B2O W3Fe8sYhJiY1biwajPO2bz0/FEGXBt9uFEtfLQ1iRQbCa9saNfi9WSXx3b4PBdYl 8qP7SCk7v1Now/gxqWZ4aQonAX9wS70L0tuyxRziWhG9n5KYwBI7qvRi2vgMyLpz GslBOAWOFYnubxUfOA9djd9GCIQX/3gAITyYnXFADrS5mmJenKZvCiEPBdsAAGGD e7eqK1IXQTetPtLAEdAkrvsFh3Msjbe7OwwzisjzIpgLcMvdVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNgaPnfVP8eBTCDZUmwS9oqj7sgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYzk2 YzBiNi0wNGQ0LTRiNjEtOWU0YS1mYjIyMGNkOGUyZDQvY2M5NmMwYjYtMDRkNC00 YjYxLTllNGEtZmIyMjBjZDhlMmQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2M5NmMwYjYtMDRkNC00YjYxLTll NGEtZmIyMjBjZDhlMmQ0L2NjOTZjMGI2LTA0ZDQtNGI2MS05ZTRhLWZiMjIwY2Q4 ZTJkNC5jcmwwHwYDVR0jBBgwFoAUSfD79u4eWjgq4D5oyAcNTEt+xKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYzk2YzBiNi0wNGQ0LTRiNjEtOWU0YS1mYjIy MGNkOGUyZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwzN9eBL9AHJmrAm1JLWAF zebITRRWsUNkfmJwZM4mgmeSkm3nB8k+vLBaJRruT1PMlaSEF2BZtkOrMkm92w2q huG3LLkYyXLG4LSDxI7qTyVLvpGwtYjaIi/kNM0D1fCLMHqgr5j8Luzi42EGXUFn lCfdelB+nYQVLFUbEkjHsOkAdkPI+eYu/RwPoG9zJe7sgDugxaXCC34sx7wXKyzw hoVIRs+3okJJCH2C4NVN9Bs+GUunk6J8hTXG0R1X1hdc2r+8SEp+wY5Cgl9ShsLB JYBUHjiqYdYivC0Mr6rUxVBsRSJ1xxsMrRQoZVdVOwe8OaNG92P63lA0aOdpoVbS -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:51 2025 by rpki-client