$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: s8REWXrW/A3yB8tZ7rcZxVtKVHKBXdeCVQ9+boDpeB4= Subject key identifier: 34:0C:99:5A:D5:5D:99:7C:E1:CD:C0:2E:D0:19:39:53:F8:F1:BB:3D Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584BC01C67DA15D6A229C682BB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD92D Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: 2iN58G3AZvVlOrxEKyf5r6DukcCF7lIPW8iPw4fx9YA=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: vf8ihEp6SGw/txJsOHN6tYx/UY3kql/8pGFdjVhbs6w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:67:da:15:d6:a2:29:c6:82:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=1ba0ec9b-2f92-41c8-af17-1dc6d2b7fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:db:79:03:9d:aa:93:1e:2f:95:1b:c5:bc: d0:b1:d8:91:e0:e0:16:b1:3c:af:dd:bc:00:9a:e5: 45:0e:3a:8a:5f:e0:86:71:dc:7b:21:6c:66:38:c3: 20:51:ef:a3:43:fb:a3:c4:65:60:a5:56:7a:b3:5b: 4d:18:53:90:f5:fb:c5:94:c8:bc:40:2c:7b:6c:e3: f9:f8:67:30:87:b3:2a:fa:5a:ce:e9:3b:bd:4c:ae: 44:1a:de:74:1e:24:40:70:24:3c:07:7a:ab:05:73: 70:60:91:21:ce:ee:09:c2:6f:eb:f5:28:df:b5:49: d4:e9:af:f5:4e:5b:32:87:cb:07:cf:ba:7d:e7:11: 52:b3:ae:94:47:5d:97:69:20:e6:ec:f0:2a:6f:3c: 7b:11:39:c2:67:c3:f0:c9:10:13:32:ce:db:56:a7: d8:a4:cd:2f:b3:42:42:a7:5f:6f:fd:e9:70:63:40: a2:4b:64:c4:67:c2:47:9c:08:55:d2:68:63:26:c1: 11:0b:bb:41:07:3a:25:50:b5:f4:2c:9d:5f:98:80: 4d:17:23:aa:b5:e8:0a:59:68:e5:a8:e1:ee:d0:45: 4a:fd:c2:00:aa:ed:51:1f:b5:ec:5b:3c:77:dc:4a: 9e:3e:4b:bf:a2:0f:f6:d7:ac:e0:d9:52:2e:bd:5d: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0C:99:5A:D5:5D:99:7C:E1:CD:C0:2E:D0:19:39:53:F8:F1:BB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1c:02:97:30:24:03:55:7b:f7:2b:e8:db:2e:94:e8:3d:91: 85:2d:ef:19:cb:08:23:aa:7e:f5:5f:43:17:17:6d:6f:a6:8e: 86:11:ea:56:f0:cf:cc:57:2c:16:c0:d2:82:9f:91:b0:45:82: d8:5d:ac:72:05:a9:01:fa:29:b6:a8:57:ee:4a:a9:f5:03:63: 76:bd:b7:e2:56:7b:f9:d8:34:b8:65:65:f5:e7:78:19:47:6a: 6c:cc:64:89:ee:00:fe:7f:2a:2f:d3:59:93:0d:1d:61:b0:5f: f9:1f:81:00:d4:e3:16:5e:94:1d:c9:28:d7:e2:de:41:7d:05: 0b:66:17:9a:17:ab:0b:de:cb:57:02:39:00:7f:9b:73:ee:ba: 44:32:18:ef:1f:6a:67:ce:a6:dd:fe:67:55:45:21:ef:c1:a6: 76:23:87:1b:cf:88:69:0a:83:b6:bb:9f:3b:7d:f8:1a:3c:4f: c4:a0:d7:5d:03:5e:cc:0a:32:7c:36:1b:32:98:be:10:9b:22: 35:76:e9:47:7e:8e:3d:e3:37:15:6d:8d:d2:78:30:57:77:04: 91:cb:bc:46:99:4f:86:7b:bf:16:72:b2:7c:16:ee:fb:31:69: 4b:2e:fd:90:98:c1:e7:7a:c0:04:10:29:9d:c1:4c:b0:aa:cf: 8e:d0:b1:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGfaFdaiKcaCuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk MWJhMGVjOWItMmY5Mi00MWM4LWFmMTctMWRjNmQyYjdmYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJjbeQOdqpMeL5UbxbzQsdiR4OAWsTyv3bwA muVFDjqKX+CGcdx7IWxmOMMgUe+jQ/ujxGVgpVZ6s1tNGFOQ9fvFlMi8QCx7bOP5 +Gcwh7Mq+lrO6Tu9TK5EGt50HiRAcCQ8B3qrBXNwYJEhzu4Jwm/r9SjftUnU6a/1 Tlsyh8sHz7p95xFSs66UR12XaSDm7PAqbzx7ETnCZ8PwyRATMs7bVqfYpM0vs0JC p19v/elwY0CiS2TEZ8JHnAhV0mhjJsERC7tBBzolULX0LJ1fmIBNFyOqtegKWWjl qOHu0EVK/cIAqu1RH7XsWzx33EqePku/og/216zg2VIuvV1APwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQMmVrVXZl84c3ALtAZOVP48bs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvHAKXMCQDVXv3K+jbLpTo PZGFLe8Zywgjqn71X0MXF21vpo6GEepW8M/MVywWwNKCn5GwRYLYXaxyBakB+im2 qFfuSqn1A2N2vbfiVnv52DS4ZWX153gZR2pszGSJ7gD+fyov01mTDR1hsF/5H4EA 1OMWXpQdySjX4t5BfQULZheaF6sL3stXAjkAf5tz7rpEMhjvH2pnzqbd/mdVRSHv waZ2I4cbz4hpCoO2u587ffgaPE/EoNddA17MCjJ8NhsymL4QmyI1dulHfo494zcV bY3SeDBXdwSRy7xGmU+Ge78WcrJ8Fu77MWlLLv2QmMHnesAEECmdwUywqs+O0LFp -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:14 2025 by rpki-client