$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft File: 896f0624-c28d-44c0-93cf-3f879f877518.mft (raw, json) Hash identifier: pNXMAwQZXrCr+mny2gf57vmmowYgjqOfXw/1YmKvM5U= Subject key identifier: C3:7A:91:1E:E2:D9:BB:A4:EE:0A:82:2D:2E:E5:AC:CD:1F:0F:73:02 Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518 Certificate serial: 010D0C9F4328584BBDC8D056542F5AFABA584830 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft Manifest number: 010D0C9F4328584073A82C2A4EB03B1388B631FA Signing time: Mon 03 Nov 2025 22:00:03 +0000 Manifest this update: Mon 03 Nov 2025 22:00:03 +0000 Manifest next update: Wed 05 Nov 2025 22:00:00 +0000 Files and hashes: 1: 896f0624-c28d-44c0-93cf-3f879f877518.crl (hash: 1p368foeADa1YfA3tvTTd4wGTvN9XRfTxLbWUrOtkrI=) 2: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (hash: z0xGKqVgsWfh96v0HsUL1VeR0n//LZJXyWJ8LL5N79k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:c8:d0:56:54:2f:5a:fa:ba:58:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518 Validity Not Before: Nov 3 22:00:03 2025 GMT Not After : Nov 5 22:00:00 2025 GMT Subject: CN=1e20efb9-2f10-41d3-9404-73514c734598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:fd:a1:62:49:09:8e:dd:37:81:f0:27:ed: 80:56:b6:10:3a:c6:8e:56:9c:66:d7:5c:95:a5:e3: c6:ed:5f:ac:4a:06:ff:2e:3b:cd:09:93:cb:b3:6a: ba:02:0c:de:4c:38:38:45:91:17:f7:79:26:1c:3c: 1b:81:dd:da:65:19:e9:92:1d:9f:1a:0f:20:54:51: 27:37:4a:3a:a5:79:f4:6a:d6:ef:d4:91:a6:fb:5e: 2e:a7:56:31:2a:50:fe:12:d3:21:bd:24:bb:4d:ca: e0:63:08:ee:a3:ee:25:17:ed:62:fe:3e:48:06:96: c3:75:be:69:38:71:d7:ca:e7:ed:67:6c:6d:c4:8d: b3:fa:39:fb:8f:b9:0f:9a:ba:85:2b:96:18:90:fd: 94:12:66:c9:70:32:5f:6a:2f:da:e2:ed:ef:b9:d8: 9d:7b:5c:44:92:9f:7f:4f:1c:36:79:2a:53:7f:46: 2e:eb:c1:81:b0:fe:89:3d:9b:ed:d5:24:02:fe:ce: f2:a7:cd:3b:ac:7d:55:29:72:18:eb:c7:a0:f9:e1: b8:48:d4:36:34:d1:a4:d6:7a:72:bc:0c:7e:28:cb: 6b:c6:54:0e:e9:ab:eb:14:fa:94:84:59:10:ef:2d: 1d:08:f2:37:99:37:75:b0:df:9e:b1:4b:40:e4:f5: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7A:91:1E:E2:D9:BB:A4:EE:0A:82:2D:2E:E5:AC:CD:1F:0F:73:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl X509v3 Authority Key Identifier: keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:72:c0:fd:b5:15:b0:07:76:61:9d:f9:39:0c:ee:0a:33:c0: 56:f0:4f:57:28:97:0b:e5:34:55:56:97:8b:80:92:b2:29:08: d3:19:a2:49:ad:b9:98:88:a1:00:c9:1e:58:2e:51:e1:a0:8d: e8:34:75:c0:9c:f7:c9:2e:cc:a8:72:aa:81:fc:ae:0c:f6:d5: 23:55:94:67:3e:0a:31:1a:37:41:0d:88:cd:e2:41:b9:fe:b6: 74:ac:6c:d0:ad:d9:33:61:c8:d9:e8:ae:ca:d7:6d:80:37:00: 78:ee:d9:9b:9e:c7:36:65:58:ee:f2:da:02:11:5e:47:a4:0c: d7:7a:48:00:da:65:18:ac:69:d0:ad:b9:26:f0:d4:41:32:86: 41:af:a4:fd:3d:fb:8b:20:15:3c:26:8b:b2:fd:54:34:c6:76: b3:5a:2f:00:9f:73:75:7d:0a:16:0d:4b:2e:cf:fd:e1:85:27: 41:2e:00:2d:05:2b:dd:b1:c9:63:89:f7:ca:3d:ea:98:5f:15: 37:5d:8e:fa:08:c5:08:80:21:c0:cc:d0:74:71:a0:0f:05:25: 54:7b:24:a9:0b:25:dc:4b:58:b9:13:86:08:13:66:59:9e:a5: 30:a9:25:db:c8:80:5a:d0:5b:50:61:c6:75:c4:ec:8d:57:eb: d0:cb:38:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9yNBWVC9a+rpYSDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3 NTE4MB4XDTI1MTEwMzIyMDAwM1oXDTI1MTEwNTIyMDAwMFowLzEtMCsGA1UEAxMk MWUyMGVmYjktMmYxMC00MWQzLTk0MDQtNzM1MTRjNzM0NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioj9oWJJCY7dN4HwJ+2AVrYQOsaOVpxm11yV pePG7V+sSgb/LjvNCZPLs2q6AgzeTDg4RZEX93kmHDwbgd3aZRnpkh2fGg8gVFEn N0o6pXn0atbv1JGm+14up1YxKlD+EtMhvSS7TcrgYwjuo+4lF+1i/j5IBpbDdb5p OHHXyuftZ2xtxI2z+jn7j7kPmrqFK5YYkP2UEmbJcDJfai/a4u3vudide1xEkp9/ Txw2eSpTf0Yu68GBsP6JPZvt1SQC/s7yp807rH1VKXIY68eg+eG4SNQ2NNGk1npy vAx+KMtrxlQO6avrFPqUhFkQ7y0dCPI3mTd1sN+esUtA5PXzuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMN6kR7i2buk7gqCLS7lrM0fD3MCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvODk2ZjA2MjQtYzI4ZC00 NGMwLTkzY2YtM2Y4NzlmODc3NTE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3 NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3 OWY4Nzc1MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAcsD9tRWwB3Zhnfk5DO4K M8BW8E9XKJcL5TRVVpeLgJKyKQjTGaJJrbmYiKEAyR5YLlHhoI3oNHXAnPfJLsyo cqqB/K4M9tUjVZRnPgoxGjdBDYjN4kG5/rZ0rGzQrdkzYcjZ6K7K122ANwB47tmb nsc2ZVju8toCEV5HpAzXekgA2mUYrGnQrbkm8NRBMoZBr6T9PfuLIBU8Jouy/VQ0 xnazWi8An3N1fQoWDUsuz/3hhSdBLgAtBSvdscljiffKPeqYXxU3XY76CMUIgCHA zNB0caAPBSVUeySpCyXcS1i5E4YIE2ZZnqUwqSXbyIBa0FtQYcZ1xOyNV+vQyziS -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:41 2025 by rpki-client