$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft File: 23fa747f-0e53-4654-913d-ebe4ae8f453b.mft (raw, json) Hash identifier: wLO5hdF/W3goY1CcX8vBxte3F675FJLq3N2X/PZz8jg= Subject key identifier: 1F:D4:31:F0:0B:3F:9A:1D:75:70:33:EF:BC:1D:67:BD:CB:AA:5A:13 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584BBED4E191FEAAFB592C4C4280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft Manifest number: 010D0C9F4328584073A84466A9242657796EB86D Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Thu 06 Nov 2025 07:00:00 +0000 Files and hashes: 1: 0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa (hash: fHnvJx9UCzJchK/prI454uVOl3vdIrNQqeVG0Z4aMzQ=) 2: 23fa747f-0e53-4654-913d-ebe4ae8f453b.crl (hash: jSLIaGhCQtCfN2JgO8tVPJ4a/j2xPnLh9Mw7Qlf5bG8=) 3: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (hash: aL21hNMWdZY8cFDgRvY/I7BRcswFqFs/NP7TROkXvDg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:e1:91:fe:aa:fb:59:2c:4c:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 6 07:00:00 2025 GMT Subject: CN=52834d27-2cc8-4279-97fb-c6ff4cd602d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:be:f8:17:41:14:0c:62:40:8a:4f:74:9c: 81:1f:71:c3:21:9a:cc:b3:22:b4:24:e7:bc:28:60: 97:12:e9:4a:6c:47:c9:b6:af:58:43:22:ce:8a:7c: 75:c2:11:00:3b:88:cf:2c:a7:79:35:33:f6:2e:09: 41:d8:6e:ab:68:91:db:a0:e0:17:dc:d2:02:ff:86: 8b:58:f6:ba:a2:5c:65:f9:48:f5:17:40:22:d1:1f: 07:8a:ae:8b:e9:b3:29:28:22:26:e7:26:d7:57:66: 4a:57:aa:ae:62:97:04:96:fb:52:b3:7f:d7:fb:f2: e0:50:c5:0a:5e:f4:33:8d:79:24:13:72:2c:0b:6a: b4:65:14:3c:11:9e:70:63:67:9d:ba:98:fb:e6:d0: 01:00:9e:63:46:c6:7c:ba:6d:ee:43:31:03:4e:75: 5b:80:2e:fb:7f:d1:80:8c:83:59:bd:ef:e9:af:48: 5d:d8:ff:31:8e:8f:cc:57:d4:ed:18:ce:61:f6:0c: ba:8d:c8:31:9c:3f:da:16:04:d2:64:6e:15:76:51: e5:98:26:a6:8c:ab:26:8a:3c:20:50:48:c3:ad:0f: 40:50:e8:0c:0f:bb:12:fe:cc:18:68:f6:3b:4b:c1: 11:b5:4d:66:36:ec:9c:75:76:3b:f5:ac:39:6f:f0: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:31:F0:0B:3F:9A:1D:75:70:33:EF:BC:1D:67:BD:CB:AA:5A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a3:69:53:ee:a0:6c:35:30:e9:c1:8e:98:fd:03:d3:e1:e2: 95:1f:89:e0:ce:5e:71:9f:4b:b2:df:3e:91:1d:d0:4a:ca:f6: e5:55:0f:f6:a7:68:19:68:e6:39:51:db:80:d4:4e:83:1c:46: 16:8b:9b:5f:4d:9a:3c:1e:74:36:b3:52:35:a6:85:c7:e8:29: cd:13:28:28:c7:33:24:d6:91:60:ac:ad:6a:2b:4c:1e:dc:9d: 90:a3:31:c3:01:d9:40:c1:fb:32:d4:f3:60:47:96:5d:af:5a: 12:b9:09:5f:70:01:ed:84:e8:b4:3d:bf:10:67:97:f8:9b:75: 48:7b:07:d5:89:81:44:c3:65:64:92:c6:bf:1b:3d:e4:3c:b2: 2c:6f:6f:18:f7:3e:f9:82:45:17:0c:7f:84:d7:61:30:48:ab: 13:b8:00:32:22:90:95:4c:2a:0d:5b:69:b9:80:e0:de:2f:7e: 9c:b0:52:6c:1d:bd:ff:cd:09:1b:c4:af:db:21:72:09:02:05: da:e0:e2:84:03:ba:d3:ef:8e:e4:d6:6d:87:39:0b:7e:71:1f: 68:3c:64:ec:8d:63:99:85:2f:98:70:c8:fd:f8:42:f2:85:d4: 7d:c3:d6:dd:64:e8:b5:4f:14:92:ce:8d:89:70:f7:df:b7:24: 4c:e2:ba:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1OGR/qr7WSxMQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNjA3MDAwMFowLzEtMCsGA1UEAxMk NTI4MzRkMjctMmNjOC00Mjc5LTk3ZmItYzZmZjRjZDYwMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mi++BdBFAxiQIpPdJyBH3HDIZrMsyK0JOe8 KGCXEulKbEfJtq9YQyLOinx1whEAO4jPLKd5NTP2LglB2G6raJHboOAX3NIC/4aL WPa6olxl+Uj1F0Ai0R8Hiq6L6bMpKCIm5ybXV2ZKV6quYpcElvtSs3/X+/LgUMUK XvQzjXkkE3IsC2q0ZRQ8EZ5wY2edupj75tABAJ5jRsZ8um3uQzEDTnVbgC77f9GA jINZve/pr0hd2P8xjo/MV9TtGM5h9gy6jcgxnD/aFgTSZG4VdlHlmCamjKsmijwg UEjDrQ9AUOgMD7sS/swYaPY7S8ERtU1mNuycdXY79aw5b/DS9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB/UMfALP5oddXAz77wdZ73LqloTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvMjNmYTc0N2YtMGU1My00 NjU0LTkxM2QtZWJlNGFlOGY0NTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVo2lT7qBsNTDpwY6Y/QPT 4eKVH4ngzl5xn0uy3z6RHdBKyvblVQ/2p2gZaOY5UduA1E6DHEYWi5tfTZo8HnQ2 s1I1poXH6CnNEygoxzMk1pFgrK1qK0we3J2QozHDAdlAwfsy1PNgR5Zdr1oSuQlf cAHthOi0Pb8QZ5f4m3VIewfViYFEw2Vkksa/Gz3kPLIsb28Y9z75gkUXDH+E12Ew SKsTuAAyIpCVTCoNW2m5gODeL36csFJsHb3/zQkbxK/bIXIJAgXa4OKEA7rT747k 1m2HOQt+cR9oPGTsjWOZhS+YcMj9+ELyhdR9w9bdZOi1TxSSzo2JcPfftyRM4rqr -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:14 2025 by rpki-client