$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft File: 1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft (raw, json) Hash identifier: tpkHm6d9kkxLRwRdnIHuSIn0YE6oA0wo7pHrfMwtIYc= Subject key identifier: DE:4A:C5:4A:08:0F:B3:8A:44:B0:1E:FE:8B:B8:C5:46:A7:0B:EC:E0 Authority key identifier: FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D Certificate issuer: /CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c Certificate serial: 010D0C9F4328584BBF2E2818BFDD645A86990CDF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft Manifest number: 010D0C9F4328584073A84C73C1B6789E4E91D1A3 Signing time: Tue 04 Nov 2025 10:00:03 +0000 Manifest this update: Tue 04 Nov 2025 10:00:03 +0000 Manifest next update: Thu 06 Nov 2025 10:00:00 +0000 Files and hashes: 1: 0f8069e4-fcf4-3fed-8d08-706747fddde5.roa (hash: Rl/1BEG1sKXyDRm91FJVah/IITebD0KI1PEspyayuDU=) 2: 1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl (hash: MWRGoyKLKIB8j4GGMRIBnbH8Hkw2JweNsHeZLzDMvMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2e:28:18:bf:dd:64:5a:86:99:0c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c Validity Not Before: Nov 4 10:00:03 2025 GMT Not After : Nov 6 10:00:00 2025 GMT Subject: CN=ca07748f-2929-4ed4-a48a-531836509afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:30:78:22:98:40:9d:5c:40:85:e2:cd:ba: c5:f3:11:49:2c:d3:c4:fd:f5:ce:46:93:84:e0:63: c5:2a:51:78:80:71:62:aa:ea:34:f3:09:b1:c2:2a: 2d:f1:15:56:1d:cd:65:b3:ce:64:f2:49:0c:ae:b5: 89:69:71:41:85:0e:35:1b:be:c9:9d:00:b9:60:10: ee:b9:53:93:d1:dd:3f:8a:43:6c:fa:72:4e:49:e5: 13:40:81:82:1b:df:37:0c:93:44:b3:16:11:99:d1: 44:70:22:df:f5:ee:cf:5a:e9:07:66:1a:4e:94:84: 14:c5:d4:b8:55:72:37:8e:24:8d:07:ce:9a:a3:9a: 5e:ea:0b:a2:33:1e:61:7b:97:98:97:40:11:10:ee: 7e:12:6d:8f:d6:08:9f:70:d7:09:ff:fe:a4:ca:ab: 86:97:c9:8c:61:bb:82:e6:e9:84:f1:0e:7b:31:ce: 25:6c:b7:01:38:4c:51:fd:d0:d5:85:d5:21:98:46: 9c:28:80:9e:4d:18:9d:6f:cf:0f:7c:92:64:a7:3f: 00:4d:7f:50:f8:87:82:9c:d1:b5:2d:4e:04:bd:ca: c8:ba:54:c7:6e:25:00:bd:31:63:69:6b:3d:1a:44: 97:28:04:31:bf:26:9e:27:8f:7a:48:93:99:f7:75: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:C5:4A:08:0F:B3:8A:44:B0:1E:FE:8B:B8:C5:46:A7:0B:EC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl X509v3 Authority Key Identifier: keyid:FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:45:6d:76:2c:95:ff:1d:f4:f7:33:f3:5a:54:33:a3:40:3d: a6:ec:e1:ca:4b:d1:ca:27:38:f0:68:5d:c5:20:2c:eb:d2:d8: fa:29:5a:7c:67:b4:de:c6:ec:83:45:35:bc:43:c6:64:28:1f: 0c:f8:b6:f6:2c:e5:dd:61:26:da:4b:02:5f:26:b1:07:1c:f7: e3:10:dc:fa:3e:76:80:b6:d6:30:cd:80:90:aa:b1:9a:90:91: e3:33:b8:36:1c:ae:c3:aa:20:07:62:7c:0b:ca:77:2e:2c:a3: 7c:a3:b2:82:3f:a8:fd:18:bd:d3:d5:5f:54:80:1f:a8:9f:94: d7:2b:3b:da:89:9b:86:71:21:bd:3d:5a:db:b6:65:3a:f7:30: f6:29:33:82:f4:0a:bc:0c:ab:25:e8:57:aa:3b:30:8a:59:df: 6e:10:b5:40:f5:21:1d:72:87:85:7e:eb:7f:cc:36:c6:7b:fc: 55:52:35:e4:e5:b8:0c:f0:e4:ae:5b:a9:4b:08:8f:be:82:9f: f9:21:79:b5:ab:ae:dd:85:e3:05:c2:c3:e1:f2:ca:36:5a:10: 40:49:d7:b4:61:c2:44:2e:17:60:00:32:1c:f4:c5:ba:45:ee: a4:cb:4c:e2:4b:ce:af:c3:61:06:43:04:a8:24:92:4b:10:4d: 2b:d4:f2:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/LigYv91kWoaZDN8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzZhMjYtZTNjZi00Y2E1LWJmMmUtZTU3MjU3NWE4 ZDdjMB4XDTI1MTEwNDEwMDAwM1oXDTI1MTEwNjEwMDAwMFowLzEtMCsGA1UEAxMk Y2EwNzc0OGYtMjkyOS00ZWQ0LWE0OGEtNTMxODM2NTA5YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtwweCKYQJ1cQIXizbrF8xFJLNPE/fXORpOE 4GPFKlF4gHFiquo08wmxwiot8RVWHc1ls85k8kkMrrWJaXFBhQ41G77JnQC5YBDu uVOT0d0/ikNs+nJOSeUTQIGCG983DJNEsxYRmdFEcCLf9e7PWukHZhpOlIQUxdS4 VXI3jiSNB86ao5pe6guiMx5he5eYl0AREO5+Em2P1gifcNcJ//6kyquGl8mMYbuC 5umE8Q57Mc4lbLcBOExR/dDVhdUhmEacKICeTRidb88PfJJkpz8ATX9Q+IeCnNG1 LU4EvcrIulTHbiUAvTFjaWs9GkSXKAQxvyaeJ496SJOZ93WMjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN5KxUoID7OKRLAe/ou4xUanC+zgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZDhj NmEyNi1lM2NmLTRjYTUtYmYyZS1lNTcyNTc1YThkN2MvMWQ4YzZhMjYtZTNjZi00 Y2E1LWJmMmUtZTU3MjU3NWE4ZDdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWQ4YzZhMjYtZTNjZi00Y2E1LWJm MmUtZTU3MjU3NWE4ZDdjLzFkOGM2YTI2LWUzY2YtNGNhNS1iZjJlLWU1NzI1NzVh OGQ3Yy5jcmwwHwYDVR0jBBgwFoAU+4u3DZqjud3g1eMTHuiI1w4EeQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZDhjNmEyNi1lM2NmLTRjYTUtYmYyZS1lNTcy NTc1YThkN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+RW12LJX/HfT3M/NaVDOj QD2m7OHKS9HKJzjwaF3FICzr0tj6KVp8Z7TexuyDRTW8Q8ZkKB8M+Lb2LOXdYSba SwJfJrEHHPfjENz6PnaAttYwzYCQqrGakJHjM7g2HK7DqiAHYnwLyncuLKN8o7KC P6j9GL3T1V9UgB+on5TXKzvaiZuGcSG9PVrbtmU69zD2KTOC9Aq8DKsl6FeqOzCK Wd9uELVA9SEdcoeFfut/zDbGe/xVUjXk5bgM8OSuW6lLCI++gp/5IXm1q67dheMF wsPh8so2WhBASde0YcJELhdgADIc9MW6Re6ky0ziS86vw2EGQwSoJJJLEE0r1PLh -----END CERTIFICATE-----Generated at Wed Nov 5 04:29:44 2025 by rpki-client