$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft File: 5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft (raw, json) Hash identifier: jzxzKdofwKKssNSxl9Aft0tFZ2fzM+TpunT3Sxr7Gz8= Subject key identifier: 86:C6:87:6F:8C:2F:DC:CC:A0:2F:43:3C:91:73:B0:F6:49:7F:13:FA Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Certificate serial: 010D0C9F4328584BBE7B7E7FB3FBC974D5B2C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft Manifest number: 010D0C9F432858424A1F419397D895C14179A17D Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Thu 06 Nov 2025 04:00:00 +0000 Files and hashes: 1: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (hash: JVKq19VVL9OBVzDx2WbCa15wtO/K20T0Ey3HCuOLE98=) 2: 5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl (hash: kzPg83OTzyqIyq8x/i1Xk9NRmxCg7ppHhDGu/WYcFg4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:7e:7f:b3:fb:c9:74:d5:b2:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 6 04:00:00 2025 GMT Subject: CN=4e0df512-1ae5-4731-8740-8b35dbe1511f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:95:7d:cd:22:e7:da:44:a4:66:d1:6f:e1: e8:a8:6c:0f:f1:3f:ab:c9:d4:30:cf:09:46:b8:51: 8f:43:3b:28:e3:29:9f:0a:6a:17:9c:09:16:dd:19: 51:0b:1d:e9:68:d8:9e:31:ce:f4:8b:f0:ca:4a:ce: 04:dc:9b:35:b8:c5:7f:d6:dd:e2:ad:83:5f:2f:6e: dc:9a:1f:89:c4:c8:b5:a0:13:51:6a:31:cf:9c:fc: d0:0e:35:e9:62:9b:36:5f:fb:4c:4d:30:ae:3b:8d: 71:37:38:23:22:17:b3:48:d5:be:bd:8e:1d:c3:2a: 41:89:f3:b9:2a:93:36:6e:11:db:3d:23:a4:a6:3e: 89:11:d7:14:b7:32:f9:93:df:cf:59:64:5b:18:f5: 51:81:17:cc:49:9d:e0:08:c3:0f:84:cd:50:c3:10: 8b:5c:f4:18:2b:1d:44:ba:68:0a:ea:7b:6e:43:1b: c1:fd:20:35:b3:59:03:58:3f:99:ed:1a:73:61:56: 51:96:af:bb:0c:17:26:e2:82:0e:83:b2:f9:59:76: 19:04:9d:80:d9:1d:1f:1d:9b:3e:ae:db:27:23:2c: e2:bb:75:7c:28:bb:8b:84:5a:0d:4b:ca:76:af:51: 5b:cc:78:7f:86:c4:d7:5d:15:55:0b:3d:f2:df:47: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C6:87:6F:8C:2F:DC:CC:A0:2F:43:3C:91:73:B0:F6:49:7F:13:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl X509v3 Authority Key Identifier: keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c9:d7:3f:b5:7d:1c:e8:3a:fd:e1:78:f8:ac:1b:a0:08:2e: 42:2c:3f:7e:53:a7:9d:bb:a0:27:28:ae:a1:3c:91:c6:08:c8: 7a:93:53:f6:60:88:f7:0e:e6:d7:eb:45:d1:d2:bc:a6:0e:61: 80:6a:90:0f:69:a8:30:03:5a:73:70:68:e1:ac:82:59:f7:77: cc:6f:4a:24:87:e9:22:e2:dd:2d:2b:fd:82:a5:cf:8d:61:3d: 52:4a:fa:4b:67:34:25:fb:43:f1:e7:89:c1:14:74:59:e8:d5: 58:0b:97:a5:e5:b3:36:0d:75:01:6d:18:a7:39:22:fe:00:20: 77:e1:59:2f:48:46:fd:9e:60:1c:6b:51:97:7a:73:00:36:7b: 48:f3:9d:d0:4e:da:10:b7:01:29:4b:69:e6:17:e4:a8:04:b1: 83:d8:56:0c:da:fc:b6:3e:26:4a:68:e9:f8:c9:b2:4d:66:71: f7:3b:1f:db:56:ef:bf:8c:25:2f:83:cb:ea:02:67:3d:ab:ea: 43:53:9e:5b:d5:88:01:e6:27:3e:18:d7:17:6b:3b:d2:93:f5: c0:cb:99:89:07:01:2c:57:de:39:2a:1a:a6:cd:21:79:78:a7: e2:7b:c0:b3:ff:5a:3f:52:a5:19:29:56:60:54:a5:ac:92:f9: 76:2a:95:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e35/s/vJdNWyxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmY5NmEtMmFmNS00YmIwLTljOTgtZGI4YjlhOGE5 YzQ4MB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNjA0MDAwMFowLzEtMCsGA1UEAxMk NGUwZGY1MTItMWFlNS00NzMxLTg3NDAtOGIzNWRiZTE1MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMOVfc0i59pEpGbRb+HoqGwP8T+rydQwzwlG uFGPQzso4ymfCmoXnAkW3RlRCx3paNieMc70i/DKSs4E3Js1uMV/1t3irYNfL27c mh+JxMi1oBNRajHPnPzQDjXpYps2X/tMTTCuO41xNzgjIhezSNW+vY4dwypBifO5 KpM2bhHbPSOkpj6JEdcUtzL5k9/PWWRbGPVRgRfMSZ3gCMMPhM1QwxCLXPQYKx1E umgK6ntuQxvB/SA1s1kDWD+Z7RpzYVZRlq+7DBcm4oIOg7L5WXYZBJ2A2R0fHZs+ rtsnIyziu3V8KLuLhFoNS8p2r1FbzHh/hsTXXRVVCz3y30fBdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIbGh2+ML9zMoC9DPJFzsPZJfxP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDEy Zjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhiOWE4YTljNDgvNTAxMmY5NmEtMmFmNS00 YmIwLTljOTgtZGI4YjlhOGE5YzQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxMmY5NmEtMmFmNS00YmIwLTlj OTgtZGI4YjlhOGE5YzQ4LzUwMTJmOTZhLTJhZjUtNGJiMC05Yzk4LWRiOGI5YThh OWM0OC5jcmwwHwYDVR0jBBgwFoAUHl+PVLvCW2Sa4uFRL+U2SPr1+i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDEyZjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhi OWE4YTljNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSydc/tX0c6Dr94Xj4rBug CC5CLD9+U6edu6AnKK6hPJHGCMh6k1P2YIj3DubX60XR0rymDmGAapAPaagwA1pz cGjhrIJZ93fMb0okh+ki4t0tK/2Cpc+NYT1SSvpLZzQl+0Px54nBFHRZ6NVYC5el 5bM2DXUBbRinOSL+ACB34VkvSEb9nmAca1GXenMANntI853QTtoQtwEpS2nmF+So BLGD2FYM2vy2PiZKaOn4ybJNZnH3Ox/bVu+/jCUvg8vqAmc9q+pDU55b1YgB5ic+ GNcXazvSk/XAy5mJBwEsV945KhqmzSF5eKfie8Cz/1o/UqUZKVZgVKWskvl2KpXI -----END CERTIFICATE-----Generated at Wed Nov 5 00:38:17 2025 by rpki-client