$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft (raw, json) Hash identifier: bpd1GjQ6Nbe7D32hGdhVUHb6zPeMvDOtrBr6mnpAIvE= Subject key identifier: E2:3D:B5:0B:5B:82:9E:C2:08:BA:6E:62:16:91:0B:09:51:F6:F4:69 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584BC0ECE281A587CAF0C71DA380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft Manifest number: 010D0C9F4328584073A8338FE8C46476050B21A4 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl (hash: 1y7F4dW7iUylIPF3OFxaQi6eyhDOYOE4DX11f3rHeYU=) 2: af0a8e4a-42b9-3667-8ce3-865564983774.roa (hash: gNp5ub58EvYvyv4GvzPSKAjV+Hl8h0AfP7xDHgyNreo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e2:81:a5:87:ca:f0:c7:1d:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=44f56786-2edb-49f8-b5d7-1b16db0156bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:cc:f0:26:62:e9:55:2b:4e:39:37:d4:0a: 1f:f4:51:93:25:7c:cb:5e:da:41:a2:3f:89:c9:bc: c5:e1:ee:1a:8c:39:9a:e3:53:09:ef:9a:ab:63:27: 2a:1a:b2:a9:35:ba:d1:37:5a:4b:bf:06:c5:20:37: cf:44:4f:c3:9c:93:3b:6a:da:32:5c:17:fe:f6:8b: 2a:73:80:a9:5d:96:88:6e:c4:06:7f:d3:72:33:f4: b2:f8:dc:d4:56:45:d5:a6:ff:6f:64:03:de:cf:d8: 11:3d:c9:47:d1:f5:61:7a:05:0b:0b:58:15:75:5e: 52:71:64:46:8a:f3:37:5c:5a:db:da:66:85:a0:3c: 81:97:0d:92:4d:19:f4:1d:1a:e4:30:3e:c8:3d:b8: 2f:0c:94:5f:2f:08:90:b3:7d:15:b6:c0:19:fe:9a: 99:78:2b:f8:3a:10:30:4e:33:7d:3d:36:27:ac:56: 3b:bb:4f:a4:e9:54:4e:e3:16:5e:d3:3a:33:75:8a: 82:24:57:1e:83:3a:08:57:26:4e:7e:5f:df:97:c5: 5d:54:f1:b3:ce:e4:a4:9e:4b:5e:58:67:f3:c9:8b: 36:41:0a:96:d8:ab:21:ef:39:f6:d0:ef:ef:4e:f8: fe:42:f5:d2:b0:10:91:3a:3d:51:8e:85:6a:1d:e7: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3D:B5:0B:5B:82:9E:C2:08:BA:6E:62:16:91:0B:09:51:F6:F4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a1:14:8d:55:85:80:6b:a0:f5:0d:4e:5c:20:60:94:04:08: 75:89:d2:69:5c:41:50:fc:be:75:6f:e0:28:65:c9:29:91:e5: f4:9f:e0:be:56:3b:83:d9:03:50:8c:23:21:46:9e:00:9b:0b: df:cb:9c:45:8f:88:fc:10:a8:ec:a3:da:28:3a:ab:d2:81:9e: e8:60:9a:ec:d0:ce:0d:13:a1:d2:46:15:74:f4:91:9b:2a:e0: 71:c0:14:33:ce:db:bf:e1:0c:83:98:d6:b1:66:72:20:cc:5d: 1f:58:65:68:35:46:3f:2a:15:b0:ab:12:7a:b9:0c:56:12:e7: 8d:39:f3:7a:1e:55:93:a4:43:d3:75:6e:57:96:60:f9:01:7c: ec:32:c8:07:84:6c:bb:38:e3:89:4a:3f:d3:b5:fb:5e:ad:d7: 71:e6:36:07:23:78:ec:a9:58:2d:d7:76:da:ab:7f:8c:48:74: 86:d7:2c:15:c9:b8:41:39:b7:bf:26:c7:c9:76:65:2b:3b:78: 05:a2:c8:f4:da:b4:5c:fc:7e:62:2d:4d:be:12:f8:7e:2b:be: 57:76:e4:f2:90:4b:94:c5:c6:ec:98:9c:c7:71:af:74:af:e9: d8:11:94:cd:4d:ee:e5:7c:db:1c:7b:1a:dd:7e:eb:58:3d:11: 8a:06:fa:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OKBpYfK8Mcdo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk NDRmNTY3ODYtMmVkYi00OWY4LWI1ZDctMWIxNmRiMDE1NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYHM8CZi6VUrTjk31Aof9FGTJXzLXtpBoj+J ybzF4e4ajDma41MJ75qrYycqGrKpNbrRN1pLvwbFIDfPRE/DnJM7atoyXBf+9osq c4CpXZaIbsQGf9NyM/Sy+NzUVkXVpv9vZAPez9gRPclH0fVhegULC1gVdV5ScWRG ivM3XFrb2maFoDyBlw2STRn0HRrkMD7IPbgvDJRfLwiQs30VtsAZ/pqZeCv4OhAw TjN9PTYnrFY7u0+k6VRO4xZe0zozdYqCJFcegzoIVyZOfl/fl8VdVPGzzuSknkte WGfzyYs2QQqW2Ksh7zn20O/vTvj+QvXSsBCROj1RjoVqHecgEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOI9tQtbgp7CCLpuYhaRCwlR9vRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvNjRhNjAwOWQtMTJiOC00 YjM0LTk1ZjktZDI2MTgwZDhiZjRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEoRSNVYWAa6D1DU5cIGCU BAh1idJpXEFQ/L51b+AoZckpkeX0n+C+VjuD2QNQjCMhRp4Amwvfy5xFj4j8EKjs o9ooOqvSgZ7oYJrs0M4NE6HSRhV09JGbKuBxwBQzztu/4QyDmNaxZnIgzF0fWGVo NUY/KhWwqxJ6uQxWEueNOfN6HlWTpEPTdW5XlmD5AXzsMsgHhGy7OOOJSj/Ttfte rddx5jYHI3jsqVgt13baq3+MSHSG1ywVybhBObe/JsfJdmUrO3gFosj02rRc/H5i LU2+Evh+K75XduTykEuUxcbsmJzHca90r+nYEZTNTe7lfNscexrdfutYPRGKBvqn -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:32 2025 by rpki-client