$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft File: e1a5b703-5dea-47f1-b708-67940244b847.mft (raw, json) Hash identifier: 7HuZcp6g6p8fgQbyvFQvdpOIMw6p7phyCjAOqZ87dl0= Subject key identifier: B6:E1:32:64:4E:48:F4:ED:82:5B:89:3B:D7:92:68:2C:47:EF:C6:31 Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847 Certificate serial: 010D0C9F4328584BC01C64C77B6BD2B3BA8AF480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft Manifest number: 010D0C9F4328584073A820FDA673D13C9EC6313E Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: df5c18b1-7d04-39af-97a4-da803d7e85ff.roa (hash: hV2Wpl44FtCxzlAdSZmpNTkXvKrVLhJq0RgUVBRdJrY=) 2: e1a5b703-5dea-47f1-b708-67940244b847.crl (hash: VdxMhVrqBh0tCyL38P8zvPWz7hZfrtilu1J1gcbBmEo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:c7:7b:6b:d2:b3:ba:8a:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=c3052450-b20d-4f96-ac36-a806e7ffb5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:11:4a:7e:c7:2b:3d:ad:9a:27:e4:ce:97: 2f:b0:db:e9:98:12:38:6f:56:fc:a9:c5:ef:ff:89: a9:71:ba:b5:55:83:7d:a5:9a:4e:04:9f:c1:ec:4f: 7e:d5:ec:b8:09:30:7a:aa:ea:63:9f:9b:d2:2b:ba: 3a:fd:52:97:0a:f2:09:0d:4f:aa:f4:11:cf:54:ff: 09:f4:50:87:bb:75:ed:ab:95:62:b5:df:f9:5a:e6: 64:93:cc:bd:26:2f:59:19:6c:0b:b2:0f:43:01:0b: 82:6a:ba:65:ab:45:97:2b:20:0d:cc:47:8e:fa:80: aa:b3:9c:ef:27:10:f7:45:9e:f1:9e:fc:9e:ec:61: 87:24:ae:09:fe:63:94:e4:37:77:b1:71:ef:6f:e0: 6f:1f:b0:1f:cb:d5:c5:94:94:a6:75:97:18:a2:0c: 81:59:cd:3e:b7:f9:d0:6a:fa:a2:54:d3:f7:9b:90: ff:e1:1a:9a:d4:21:63:b2:5f:fe:b2:e5:60:c1:bf: 11:49:79:23:25:d6:49:f7:4e:a1:87:0a:50:f2:f2: 23:de:63:fc:99:7b:f9:95:2a:b1:71:56:ee:08:f2: c2:15:e8:ce:0d:a1:e6:f4:12:4e:bf:59:bd:06:33: 79:de:2f:62:ed:03:d9:c9:79:cb:ca:b4:fe:4e:70: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E1:32:64:4E:48:F4:ED:82:5B:89:3B:D7:92:68:2C:47:EF:C6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl X509v3 Authority Key Identifier: keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:29:ef:23:0c:12:c5:a0:fa:bf:83:76:60:e6:55:8a:0f:46: b7:40:43:4a:8b:88:e8:c5:47:2b:0a:73:d2:6f:6b:bb:85:89: 88:b3:05:23:01:6e:b1:bb:af:78:86:f1:43:1f:ea:f8:59:4b: 25:f1:df:c1:9f:0b:d2:bf:cc:07:cf:d2:be:0a:9e:12:d8:2f: ee:d4:d2:f4:52:42:9e:0b:52:fa:62:73:1b:3a:ca:19:37:26: 34:c6:40:ce:7c:60:de:d2:5a:70:3b:fb:5c:50:7b:69:c6:f8: fc:6e:65:b4:3f:35:5e:3c:8b:28:67:59:2c:46:01:9c:b0:4f: a7:d4:7f:ad:4e:53:25:fb:19:fc:62:35:40:eb:1b:88:81:1c: 36:81:04:93:4d:a3:ee:42:6b:ee:76:2b:23:82:d9:e5:cc:bd: 28:1e:a8:c2:13:df:3a:2c:e0:55:e6:fb:c6:06:34:9b:0e:a9: 6a:96:fd:53:48:c0:07:3f:0f:72:46:78:82:ee:21:23:48:87: c2:dd:23:76:71:99:f3:05:41:6b:20:82:0e:36:d1:1e:28:13: ee:6d:bc:fa:73:6d:17:e7:bc:bc:64:f8:4a:16:7b:53:47:a1: a9:1e:93:30:72:4e:1a:1a:7c:f6:4b:0b:c8:7b:aa:5f:02:60: c2:d7:19:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGTHe2vSs7qK9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFhNWI3MDMtNWRlYS00N2YxLWI3MDgtNjc5NDAyNDRi ODQ3MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk YzMwNTI0NTAtYjIwZC00Zjk2LWFjMzYtYTgwNmU3ZmZiNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5QRSn7HKz2tmifkzpcvsNvpmBI4b1b8qcXv /4mpcbq1VYN9pZpOBJ/B7E9+1ey4CTB6qupjn5vSK7o6/VKXCvIJDU+q9BHPVP8J 9FCHu3Xtq5Vitd/5WuZkk8y9Ji9ZGWwLsg9DAQuCarplq0WXKyANzEeO+oCqs5zv JxD3RZ7xnvye7GGHJK4J/mOU5Dd3sXHvb+BvH7Afy9XFlJSmdZcYogyBWc0+t/nQ avqiVNP3m5D/4Rqa1CFjsl/+suVgwb8RSXkjJdZJ906hhwpQ8vIj3mP8mXv5lSqx cVbuCPLCFejODaHm9BJOv1m9BjN53i9i7QPZyXnLyrT+TnDxQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLbhMmROSPTtgluJO9eSaCxH78YxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1 YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0MDI0NGI4NDcvZTFhNWI3MDMtNWRlYS00 N2YxLWI3MDgtNjc5NDAyNDRiODQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTFhNWI3MDMtNWRlYS00N2YxLWI3 MDgtNjc5NDAyNDRiODQ3L2UxYTViNzAzLTVkZWEtNDdmMS1iNzA4LTY3OTQwMjQ0 Yjg0Ny5jcmwwHwYDVR0jBBgwFoAUXoxDOPofuUOl7dK+p+GAarbQwv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0 MDI0NGI4NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgKe8jDBLFoPq/g3Zg5lWK D0a3QENKi4joxUcrCnPSb2u7hYmIswUjAW6xu694hvFDH+r4WUsl8d/BnwvSv8wH z9K+Cp4S2C/u1NL0UkKeC1L6YnMbOsoZNyY0xkDOfGDe0lpwO/tcUHtpxvj8bmW0 PzVePIsoZ1ksRgGcsE+n1H+tTlMl+xn8YjVA6xuIgRw2gQSTTaPuQmvudisjgtnl zL0oHqjCE986LOBV5vvGBjSbDqlqlv1TSMAHPw9yRniC7iEjSIfC3SN2cZnzBUFr IIIONtEeKBPubbz6c20X57y8ZPhKFntTR6GpHpMwck4aGnz2SwvIe6pfAmDC1xl2 -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:47 2025 by rpki-client