$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft (raw, json) Hash identifier: vIfVQd6BiMdBh+V02K//d1hocHlIKBKQa7TLr9qEX/I= Subject key identifier: B0:99:6B:8D:91:DE:AC:66:7C:B1:84:4D:CD:28:31:61:DC:9F:9E:22 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584BBF69B7C6B861282CEECCF200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft Manifest number: 010D0C9F43285848DE6E17CAE5012D9C33EA3E7A Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (hash: 5lWZKS+9bqFCSid2vVWjKQa9taVv/qBRBwyIA8gnhLA=) 2: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl (hash: uqv7RxifZcsnz6slXVd4DDMKwndboKmvVvTa+Ynr5rQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:c6:b8:61:28:2c:ee:cc:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=260c3b42-f865-4105-9859-36a8b5ef931d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:80:77:eb:6e:13:ef:48:ee:23:8e:31:c6: f2:c4:f9:a5:53:ad:a9:b7:6b:e3:7d:26:44:9f:b0: ba:66:c3:8e:52:53:66:0f:69:7b:ba:97:92:aa:bd: bd:67:0f:39:9c:f6:19:ab:17:c3:d2:a7:b2:5e:7b: fb:c6:80:9b:ac:7f:d7:a5:7b:84:f7:fe:f9:51:ba: e7:4f:35:79:5d:df:46:dd:52:61:26:8a:68:c2:33: 91:f2:00:4c:cf:b3:f8:37:a4:3f:8b:aa:9e:46:87: 37:22:3d:a7:39:76:f3:22:57:4d:bd:11:8f:9b:2a: 8d:0f:9e:28:b2:fe:bc:78:7f:f7:e1:59:07:0d:a9: 2b:59:b2:33:99:b0:91:f0:f0:97:52:4d:fb:45:a6: 06:0c:57:8f:42:be:32:df:ef:9f:91:f4:04:4e:80: 37:c7:83:bb:09:00:77:a7:94:9a:93:aa:52:9b:0e: 89:09:57:2b:6d:d7:e5:30:6c:74:f0:71:45:3c:6a: cc:63:87:9f:26:85:0e:40:29:c7:73:7a:f5:ae:b3: 79:32:b2:e8:bd:4b:cc:a2:4d:e1:45:98:2d:1b:a7: 00:6f:fe:e1:6d:3e:59:4c:33:71:81:63:ce:15:0f: 41:ef:b4:5f:e1:d4:b8:94:05:d3:74:27:6a:61:12: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:6B:8D:91:DE:AC:66:7C:B1:84:4D:CD:28:31:61:DC:9F:9E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:48:d7:b4:42:b7:42:26:b7:c8:b5:e0:79:e4:88:69:30:4a: 41:29:4d:78:08:f9:95:5e:2d:38:17:30:18:84:00:78:f6:38: d2:7f:49:12:96:41:33:0c:a9:1e:ab:cd:4a:d5:e0:1d:dd:23: 3c:f9:02:ff:e6:d8:de:ac:a4:64:c7:2a:c8:31:1e:20:76:7c: 13:b3:ed:b9:d1:07:33:82:d7:14:71:6e:f0:dd:00:a9:51:f0: 56:a3:39:ac:a9:d1:8e:6e:01:9a:1a:50:1f:26:00:0d:83:78: 31:0f:7d:62:b0:de:d2:be:b5:c1:2f:18:8e:7a:ea:0d:f0:7e: 74:b1:6f:a0:7c:e2:dc:52:fc:50:a0:79:2f:ae:be:05:fe:f4: 7d:67:42:a2:9d:63:bf:d5:ab:34:8f:b4:01:6c:fd:8e:72:b4: 10:a0:f7:30:eb:7d:75:0b:46:1d:3b:e1:ec:ec:dd:81:7b:5d: 73:59:d6:74:c2:76:1c:bf:86:b3:2c:e2:69:fc:23:00:06:3c: 4a:c8:e0:09:44:7e:36:e0:08:c2:d3:00:a2:15:6c:84:c3:f1: 4b:ab:cf:3e:95:37:cd:c1:39:13:60:27:0c:4b:76:4b:02:f2: 5f:9d:c9:d4:0c:f8:7b:b2:ef:38:39:67:b3:c0:ae:47:3c:34: af:dd:aa:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abfGuGEoLO7M8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk MjYwYzNiNDItZjg2NS00MTA1LTk4NTktMzZhOGI1ZWY5MzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7uAd+tuE+9I7iOOMcbyxPmlU62pt2vjfSZE n7C6ZsOOUlNmD2l7upeSqr29Zw85nPYZqxfD0qeyXnv7xoCbrH/XpXuE9/75Ubrn TzV5Xd9G3VJhJopowjOR8gBMz7P4N6Q/i6qeRoc3Ij2nOXbzIldNvRGPmyqND54o sv68eH/34VkHDakrWbIzmbCR8PCXUk37RaYGDFePQr4y3++fkfQEToA3x4O7CQB3 p5Sak6pSmw6JCVcrbdflMGx08HFFPGrMY4efJoUOQCnHc3r1rrN5MrLovUvMok3h RZgtG6cAb/7hbT5ZTDNxgWPOFQ9B77Rf4dS4lAXTdCdqYRKdZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLCZa42R3qxmfLGETc0oMWHcn54iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvNWYzZmJhZTAtYWQ2Zi00 ZDI3LWJhYmMtZDJjNmFlMTFhMmNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqSNe0QrdCJrfIteB55Ihp MEpBKU14CPmVXi04FzAYhAB49jjSf0kSlkEzDKkeq81K1eAd3SM8+QL/5tjerKRk xyrIMR4gdnwTs+250QczgtcUcW7w3QCpUfBWozmsqdGObgGaGlAfJgANg3gxD31i sN7SvrXBLxiOeuoN8H50sW+gfOLcUvxQoHkvrr4F/vR9Z0KinWO/1as0j7QBbP2O crQQoPcw6311C0YdO+Hs7N2Be11zWdZ0wnYcv4azLOJp/CMABjxKyOAJRH424AjC 0wCiFWyEw/FLq88+lTfNwTkTYCcMS3ZLAvJfncnUDPh7su84OWezwK5HPDSv3aor -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:14 2025 by rpki-client