$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft File: 961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft (raw, json) Hash identifier: ZhGk3SScNstguaSlxybFRHTuxPu41mH5xAfz3sgJdYo= Subject key identifier: 3F:13:8D:5C:3C:0A:73:C1:45:EF:F2:A6:BD:A9:86:AA:B7:E1:86:2F Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Certificate issuer: /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Certificate serial: 010D0C9F4328584BC0CF1A2FE5E9FD4F1A0C8F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft Manifest number: 010D0C9F4328584B381F54C516847A56C399E9FB Signing time: Wed 05 Nov 2025 00:00:08 +0000 Manifest this update: Wed 05 Nov 2025 00:00:08 +0000 Manifest next update: Fri 07 Nov 2025 00:00:00 +0000 Files and hashes: 1: 0f5eb37d-0715-3678-aaf1-023715a24565.roa (hash: zUFCB3VumHXdhKr8BsSIU3CjWS25itNxGEcDuNb+a7o=) 2: 961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl (hash: DOtRi1snYDmLKs0AWI3wGKrGCb0/3iYtIy5bHzaFFBw=) 3: fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa (hash: 2BOI4PuCBWkTmxQvvzIjrYjl66zRoLCgY9SQqAfMl1w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:cf:1a:2f:e5:e9:fd:4f:1a:0c:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Validity Not Before: Nov 5 00:00:08 2025 GMT Not After : Nov 7 00:00:00 2025 GMT Subject: CN=afae6c83-cef0-4448-87bf-6e3500c724fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:26:af:d2:9a:75:97:2d:61:bd:06:d8:11:72: 24:8f:ad:7d:ef:b0:e5:c3:7f:ac:89:d2:d1:cd:bb: ec:2e:1a:0c:cf:db:de:75:f6:89:66:41:00:ff:f7: b1:44:75:a5:c1:58:c4:ff:1a:c5:b4:a3:06:8b:f0: 32:03:bd:50:f6:7a:28:02:f0:1f:76:79:26:02:0d: 3f:49:2d:4c:39:83:19:b0:96:31:1b:1b:24:f7:63: a9:2f:ba:c0:d4:53:6b:a5:49:ff:d4:ce:ef:d4:90: 0e:ba:e4:be:59:25:16:a1:45:ca:b3:43:78:b3:6a: fe:b9:7f:f0:51:0a:df:54:af:24:f6:8c:fc:53:e9: 3b:88:bb:66:1b:db:26:b9:d1:19:70:77:28:6c:4d: 6f:4b:c7:15:27:be:14:40:bf:d0:34:59:ea:59:0a: 97:88:f3:1a:f3:46:31:45:d2:b9:ad:0b:ff:a7:92: 6f:c2:77:50:d2:7d:f2:9e:ce:86:18:14:d3:37:e6: 45:16:f3:16:b8:c4:6b:49:ca:af:bb:a0:e6:cd:11: 5d:2f:1b:89:18:a7:0a:fe:17:0c:23:d2:f3:e4:36: 3a:4b:1a:3a:42:50:72:94:ca:b7:84:96:3f:1c:be: cb:d6:f6:4b:7f:88:dc:fb:a1:8b:ef:2e:ae:b6:38: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:8D:5C:3C:0A:73:C1:45:EF:F2:A6:BD:A9:86:AA:B7:E1:86:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl X509v3 Authority Key Identifier: keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:26:7c:d2:01:06:45:e4:8d:de:df:c8:ab:27:51:9b:3a:b9: 4d:f0:68:33:ed:01:27:8d:5e:56:d9:a6:89:a4:05:40:0a:21: 2a:68:a0:1c:71:f8:e6:f6:ac:cb:bd:a2:70:74:f4:a2:38:2d: 5a:83:e6:97:99:4b:6a:82:87:01:73:43:57:2a:24:a4:60:e3: 27:a8:6c:88:51:a8:c4:a2:e3:9f:5c:80:d4:4c:f3:e7:5d:df: 38:6e:52:53:d0:d9:ad:5d:f6:13:cc:76:86:4a:84:c5:e8:f6: 3f:9e:40:22:13:41:c7:54:e6:c7:75:fa:a3:b4:d3:fe:40:bf: e8:d3:c4:0e:bb:0c:11:8e:2f:d4:f4:2e:58:39:7b:a2:12:7e: ed:cf:e1:e9:da:38:26:99:ae:04:9d:80:e7:15:da:fd:ed:f9: a3:d0:f0:07:30:87:8a:dd:92:f6:a9:0a:35:d7:04:61:6c:ec: cd:71:45:3f:b0:e9:8e:d3:83:80:e7:97:3f:0a:34:6f:1b:70: 19:c8:d9:72:d0:3a:07:7f:76:d7:21:b9:96:52:69:c1:44:b2: dd:55:88:be:ba:76:dd:4c:d6:90:a3:6f:20:ac:54:55:19:5f: 18:31:b1:3c:2c:60:2a:21:b6:a1:13:5c:a5:7d:3b:aa:0d:57: 33:4f:66:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAzxov5en9TxoMj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2Ez ZTcyMB4XDTI1MTEwNTAwMDAwOFoXDTI1MTEwNzAwMDAwMFowLzEtMCsGA1UEAxMk YWZhZTZjODMtY2VmMC00NDQ4LTg3YmYtNmUzNTAwYzcyNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyav0pp1ly1hvQbYEXIkj61977Dlw3+sidLR zbvsLhoMz9vedfaJZkEA//exRHWlwVjE/xrFtKMGi/AyA71Q9nooAvAfdnkmAg0/ SS1MOYMZsJYxGxsk92OpL7rA1FNrpUn/1M7v1JAOuuS+WSUWoUXKs0N4s2r+uX/w UQrfVK8k9oz8U+k7iLtmG9smudEZcHcobE1vS8cVJ74UQL/QNFnqWQqXiPMa80Yx RdK5rQv/p5JvwndQ0n3yns6GGBTTN+ZFFvMWuMRrScqvu6DmzRFdLxuJGKcK/hcM I9Lz5DY6Sxo6QlBylMq3hJY/HL7L1vZLf4jc+6GL7y6utjhSdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD8TjVw8CnPBRe/ypr2phqq34YYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NjFj MGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvOTYxYzBlYzgtNjRhOS00 YzUxLWJkNzctYjI4ZTY5M2EzZTcyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTYxYzBlYzgtNjRhOS00YzUxLWJk NzctYjI4ZTY5M2EzZTcyLzk2MWMwZWM4LTY0YTktNGM1MS1iZDc3LWIyOGU2OTNh M2U3Mi5jcmwwHwYDVR0jBBgwFoAUgr/tJi5XV5QT3YvMVzRT2EbNguQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhl NjkzYTNlNzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyJnzSAQZF5I3e38irJ1Gb OrlN8Ggz7QEnjV5W2aaJpAVACiEqaKAccfjm9qzLvaJwdPSiOC1ag+aXmUtqgocB c0NXKiSkYOMnqGyIUajEouOfXIDUTPPnXd84blJT0NmtXfYTzHaGSoTF6PY/nkAi E0HHVObHdfqjtNP+QL/o08QOuwwRji/U9C5YOXuiEn7tz+Hp2jgmma4EnYDnFdr9 7fmj0PAHMIeK3ZL2qQo11wRhbOzNcUU/sOmO04OA55c/CjRvG3AZyNly0DoHf3bX IbmWUmnBRLLdVYi+unbdTNaQo28grFRVGV8YMbE8LGAqIbahE1ylfTuqDVczT2b5 -----END CERTIFICATE-----Generated at Wed Nov 5 10:11:50 2025 by rpki-client