$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft File: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft (raw, json) Hash identifier: cNE2/F6qXUUiQSIVuXsTIL2ur0t0xbgBSN0kZyfEfT0= Subject key identifier: 66:BB:36:E9:EA:DE:0B:73:0B:FF:0C:F9:3B:15:7D:C5:D5:A3:DB:B3 Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F4328584BBF2E2A60A3E8654D400BFB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft Manifest number: 010D0C9F4328584073A84E30D430488252D86324 Signing time: Tue 04 Nov 2025 10:00:03 +0000 Manifest this update: Tue 04 Nov 2025 10:00:03 +0000 Manifest next update: Thu 06 Nov 2025 10:00:00 +0000 Files and hashes: 1: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl (hash: vsPTS6TPHhZSQxnAo7o9kP7nmJrBsecHRQuRIGF7G2s=) 2: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (hash: bSGGr0EhhiMd5Qr3r93uP+hZZ+Ks44xhJRdbWV667qc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2e:2a:60:a3:e8:65:4d:40:0b:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: Nov 4 10:00:03 2025 GMT Not After : Nov 6 10:00:00 2025 GMT Subject: CN=bd6bcd99-a4f0-4cce-a301-015cd54dd17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:e1:9c:28:28:e2:ae:bc:ae:ea:fa:b3:ab: c2:69:20:2f:5d:4a:f5:f9:7b:f8:dd:21:cf:7b:66: 58:cb:ae:17:c2:37:9e:08:8e:fc:01:ac:c6:2f:35: e8:d2:08:1c:e4:93:26:dc:a9:f6:4a:f4:c1:fc:bf: 2a:8b:a2:e5:db:23:bd:0b:2a:36:bf:08:3d:a9:aa: 87:5a:09:a3:88:00:a0:98:4b:52:cd:75:ef:2c:2f: 7e:c6:0f:c8:ee:b2:0f:16:b1:cc:96:ce:fb:8e:d8: 5c:67:62:cb:8d:d8:d3:ac:ba:73:98:86:bb:93:63: 76:2e:6e:72:af:4a:dd:ca:4d:1a:df:fe:75:b9:a4: 54:de:6f:86:d6:1e:29:83:9b:79:29:7b:c4:26:99: 72:36:d9:2e:af:68:92:6b:83:67:6f:1a:a2:d0:c2: 26:51:a6:a7:6e:36:e7:06:2a:e6:eb:e3:62:40:41: 17:40:d8:4a:03:5d:a2:ac:2b:64:32:26:c4:74:53: 91:67:87:82:46:3f:b2:6c:25:22:93:74:44:38:34: e5:1c:2b:a9:66:fd:e2:59:1c:eb:4c:45:5c:38:72: a0:c1:77:07:67:29:b5:19:4c:32:1a:ae:df:1c:30: 1d:32:0a:80:86:78:ec:22:45:bf:a8:0b:20:eb:ac: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BB:36:E9:EA:DE:0B:73:0B:FF:0C:F9:3B:15:7D:C5:D5:A3:DB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:df:32:64:30:84:a5:81:f5:0a:32:db:98:d7:f1:4c:08:dd: a6:42:57:ef:27:e7:fd:54:22:55:c8:6d:04:6f:21:8d:bf:77: 80:23:4b:ae:d1:95:58:93:06:be:14:b3:1f:a4:08:21:d2:ff: a2:fd:7f:ac:d3:c9:a1:b3:f9:4f:69:d6:9c:6b:f4:3b:57:1d: 53:b9:01:36:b3:1c:2a:98:cd:3f:e5:00:02:86:7e:23:f0:af: 32:7e:b6:77:dc:ac:ba:43:be:06:48:8b:23:76:dd:06:48:1b: a4:5f:51:b5:3a:28:df:49:cf:e4:6b:d4:99:14:64:af:c5:87: c3:86:60:8d:74:8c:6e:83:ec:01:e3:63:38:dd:84:11:eb:7c: 7d:a1:55:ef:33:b6:2c:68:44:9e:29:c9:e6:44:9a:30:e4:1a: 33:76:88:79:80:18:da:59:33:d9:98:44:e3:65:2b:93:3c:71: 84:1b:37:03:b1:a9:c2:11:cb:f4:8f:24:34:3c:fd:95:95:ce: 98:b7:16:68:96:64:9c:39:1a:a4:c7:db:13:f3:6c:82:73:00: 45:20:1b:a3:17:7c:83:fd:19:73:f0:b9:6a:8f:ce:92:93:a5: e3:d5:7b:d1:4f:12:64:8c:44:24:e1:10:da:75:20:54:be:83: 4d:29:7d:64 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/Lipgo+hlTUAL+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MTEwNDEwMDAwM1oXDTI1MTEwNjEwMDAwMFowLzEtMCsGA1UEAxMk YmQ2YmNkOTktYTRmMC00Y2NlLWEzMDEtMDE1Y2Q1NGRkMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHjhnCgo4q68rur6s6vCaSAvXUr1+Xv43SHP e2ZYy64XwjeeCI78AazGLzXo0ggc5JMm3Kn2SvTB/L8qi6Ll2yO9Cyo2vwg9qaqH WgmjiACgmEtSzXXvLC9+xg/I7rIPFrHMls77jthcZ2LLjdjTrLpzmIa7k2N2Lm5y r0rdyk0a3/51uaRU3m+G1h4pg5t5KXvEJplyNtkur2iSa4Nnbxqi0MImUaanbjbn Birm6+NiQEEXQNhKA12irCtkMibEdFORZ4eCRj+ybCUik3REODTlHCupZv3iWRzr TEVcOHKgwXcHZym1GUwyGq7fHDAdMgqAhnjsIkW/qAsg66zqMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGa7Nunq3gtzC/8M+TsVfcXVo9uzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvMWU1ZjhmZjgtNzdhMC00 N2U5LWJhNzktY2NhZjE0N2EyMDcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBA3zJkMISlgfUKMtuY1/FM CN2mQlfvJ+f9VCJVyG0EbyGNv3eAI0uu0ZVYkwa+FLMfpAgh0v+i/X+s08mhs/lP adaca/Q7Vx1TuQE2sxwqmM0/5QAChn4j8K8yfrZ33Ky6Q74GSIsjdt0GSBukX1G1 OijfSc/ka9SZFGSvxYfDhmCNdIxug+wB42M43YQR63x9oVXvM7YsaESeKcnmRJow 5Bozdoh5gBjaWTPZmETjZSuTPHGEGzcDsanCEcv0jyQ0PP2Vlc6YtxZolmScORqk x9sT82yCcwBFIBujF3yD/Rlz8Llqj86Sk6Xj1XvRTxJkjEQk4RDadSBUvoNNKX1k -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:27 2025 by rpki-client