$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft File: d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft (raw, json) Hash identifier: 9bbVIV2RloD8DjouWAgIi54n8jMXJyT8PWa0LmYDA2s= Subject key identifier: C0:97:39:A9:D5:56:A5:66:7D:09:20:EB:52:AC:97:73:0B:41:FE:89 Authority key identifier: 47:6D:66:85:16:E8:A2:72:31:7E:34:8C:F8:D6:C0:4A:C8:C1:81:62 Certificate issuer: /CN=d7de7549-2ecf-40a7-a647-522e9d5a31d5 Certificate serial: 010D0C9F4328584BC03A2F7A90BCCE463CAFEE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft Manifest number: 010D0C9F4328584073A8245D3BF2FEEA7E633BE4 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 189be362-95c5-327a-8198-88f52fcd56db.roa (hash: wu1iwNMfDSpgC3uhSdAxld1MLv1C++RI7FOxF0I+9YM=) 2: d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl (hash: 5gVBuIf+xSb3XotxVKSbt+cf+uWUYgnVUW5Qa4HrCpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2f:7a:90:bc:ce:46:3c:af:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7de7549-2ecf-40a7-a647-522e9d5a31d5 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=68ad6db2-e2a2-44a6-8338-af7c23d143e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:46:b4:97:6f:d8:e9:8b:ab:70:5e:42:f1: 1b:a2:11:38:1d:ac:0d:d7:d2:04:97:df:f3:7d:74: 3c:7c:ce:16:28:8c:5d:d4:da:f7:be:ed:99:27:ff: 8a:1e:c3:80:19:bf:5b:3d:67:30:43:31:dc:b9:cc: ef:19:ae:a7:8f:64:54:eb:c7:42:3d:a3:81:3c:d7: 8e:aa:b9:1c:47:43:70:1b:2d:7a:90:e8:7d:41:a6: 2d:b6:ed:a0:81:ac:7e:10:8f:58:26:05:9f:d8:5b: 62:5a:76:10:7b:e4:fd:24:d6:0a:cd:f9:2d:be:2f: 43:40:e4:08:bd:34:1a:17:94:63:d0:7f:d7:66:d6: 47:84:b8:46:dc:22:6a:fd:37:4c:d4:8a:ef:70:32: 1e:7d:7c:d6:ca:48:6d:7d:6b:07:6c:cf:b9:97:66: 97:d3:ce:d2:06:f8:12:74:20:d2:e4:8c:a2:30:29: f9:27:56:32:db:ac:a0:8c:bb:c3:0b:54:de:3e:99: 45:ca:b5:15:e7:99:fa:a9:ba:05:9a:d5:4b:94:51: 25:d4:99:c7:1e:e6:84:75:57:95:fe:1e:0b:c3:0a: 17:ee:8c:40:07:76:b7:07:32:52:80:63:9c:f8:d8: d3:60:40:51:7a:48:2f:20:6b:8c:88:f5:a6:f5:03: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:97:39:A9:D5:56:A5:66:7D:09:20:EB:52:AC:97:73:0B:41:FE:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl X509v3 Authority Key Identifier: keyid:47:6D:66:85:16:E8:A2:72:31:7E:34:8C:F8:D6:C0:4A:C8:C1:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:da:9c:09:e0:cf:7e:b2:04:f4:df:f1:61:96:c4:b7:9c:9d: 02:44:0b:f1:45:16:38:78:05:4e:87:08:64:79:7d:0e:bf:1b: 56:9e:79:21:11:8a:1e:5b:d5:02:c8:49:9b:ba:fa:c4:f8:2e: a5:48:00:07:cd:94:08:5b:ab:b4:1b:9c:6f:d5:85:f2:aa:c6: 9f:70:88:1f:67:98:44:b1:1f:3b:48:d3:98:f6:a1:a1:82:cd: 36:e6:47:cd:71:cc:74:ef:e6:ed:11:01:9e:54:8c:1e:22:27: fa:77:e1:22:6f:4e:b5:70:bf:93:ff:cf:b0:3d:a9:9e:5e:37: 78:85:8c:5d:40:5b:b6:81:f9:29:97:fa:2a:61:f1:58:e8:23: 52:b7:90:76:7a:cd:c9:05:a7:b1:27:92:35:e8:50:d5:06:a4: 32:0e:7b:19:64:c1:1c:3b:be:f2:d2:6e:db:76:57:79:10:e0: 92:aa:46:25:62:cb:18:3a:3d:b7:27:30:e7:0a:58:f7:ac:cc: 2e:f8:71:88:a4:62:f4:b3:50:51:62:18:22:5f:24:86:0c:cf: b2:fa:c6:53:64:cb:10:2b:3b:b6:1c:93:52:6c:26:7f:63:48: 2d:18:ab:61:b7:71:fb:5a:82:64:f4:b2:d8:19:e2:a3:5a:ec: 4d:c2:fc:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi96kLzORjyv7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZTc1NDktMmVjZi00MGE3LWE2NDctNTIyZTlkNWEz MWQ1MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NjhhZDZkYjItZTJhMi00NGE2LTgzMzgtYWY3YzIzZDE0M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXFGtJdv2OmLq3BeQvEbohE4HawN19IEl9/z fXQ8fM4WKIxd1Nr3vu2ZJ/+KHsOAGb9bPWcwQzHcuczvGa6nj2RU68dCPaOBPNeO qrkcR0NwGy16kOh9QaYttu2ggax+EI9YJgWf2FtiWnYQe+T9JNYKzfktvi9DQOQI vTQaF5Rj0H/XZtZHhLhG3CJq/TdM1IrvcDIefXzWykhtfWsHbM+5l2aX087SBvgS dCDS5IyiMCn5J1Yy26ygjLvDC1TePplFyrUV55n6qboFmtVLlFEl1JnHHuaEdVeV /h4LwwoX7oxAB3a3BzJSgGOc+NjTYEBRekgvIGuMiPWm9QOEQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMCXOanVVqVmfQkg61Ksl3MLQf6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kN2Rl NzU0OS0yZWNmLTQwYTctYTY0Ny01MjJlOWQ1YTMxZDUvZDdkZTc1NDktMmVjZi00 MGE3LWE2NDctNTIyZTlkNWEzMWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDdkZTc1NDktMmVjZi00MGE3LWE2 NDctNTIyZTlkNWEzMWQ1L2Q3ZGU3NTQ5LTJlY2YtNDBhNy1hNjQ3LTUyMmU5ZDVh MzFkNS5jcmwwHwYDVR0jBBgwFoAUR21mhRboonIxfjSM+NbASsjBgWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kN2RlNzU0OS0yZWNmLTQwYTctYTY0Ny01MjJl OWQ1YTMxZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCO2pwJ4M9+sgT03/FhlsS3 nJ0CRAvxRRY4eAVOhwhkeX0OvxtWnnkhEYoeW9UCyEmbuvrE+C6lSAAHzZQIW6u0 G5xv1YXyqsafcIgfZ5hEsR87SNOY9qGhgs025kfNccx07+btEQGeVIweIif6d+Ei b061cL+T/8+wPameXjd4hYxdQFu2gfkpl/oqYfFY6CNSt5B2es3JBaexJ5I16FDV BqQyDnsZZMEcO77y0m7bdld5EOCSqkYlYssYOj23JzDnClj3rMwu+HGIpGL0s1BR YhgiXySGDM+y+sZTZMsQKzu2HJNSbCZ/Y0gtGKtht3H7WoJk9LLYGeKjWuxNwvy7 -----END CERTIFICATE-----Generated at Wed Nov 5 02:06:54 2025 by rpki-client