$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft File: b6e29f76-f782-45f9-8ad8-791d08e6d174.mft (raw, json) Hash identifier: 3qcaO2hok+Z5eXSZFll01d8XotmPr7AheAauU2o0SE8= Subject key identifier: D0:5B:D2:15:10:2D:70:72:8B:40:4D:8B:FC:65:B8:14:9A:B4:73:A8 Authority key identifier: 58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01 Certificate issuer: /CN=b6e29f76-f782-45f9-8ad8-791d08e6d174 Certificate serial: 010D0C9F4328584BBF887CAB022BC503DAE27C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft Manifest number: 010D0C9F4328584073A855DAAD18DF67421AF8E4 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa (hash: hHm5aQ75RYGq2cXZgfIJmKo2fqM+2DC2A6acnQVssLE=) 2: b6e29f76-f782-45f9-8ad8-791d08e6d174.crl (hash: G3m5z4hPZ+k2ctg8Dtym7MnGAWiTcsssfbv5pT1urnI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7c:ab:02:2b:c5:03:da:e2:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e29f76-f782-45f9-8ad8-791d08e6d174 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=770a1f1f-4c27-4ef1-bf24-3440ab6b2662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:3f:2a:b0:f4:78:cb:32:bf:68:81:cc:a3: 81:36:3e:8b:b0:b9:9a:e6:7c:46:8c:6b:f3:f7:06: ae:b1:56:95:40:03:38:74:10:80:6f:57:12:c4:0b: f1:d3:51:c8:ed:74:69:5d:05:d1:68:e0:b3:a8:1a: c3:02:d8:aa:6c:38:2e:9e:88:04:91:c6:b9:bb:fb: 8b:27:6b:13:37:81:58:31:32:af:28:d1:93:95:43: fa:ea:c7:4e:85:1a:48:9f:c6:9b:d8:4d:de:7a:6d: 46:c1:3e:4d:4e:02:7f:1f:fe:c7:7e:27:3d:04:d7: d8:61:08:3a:bc:49:3e:d5:5d:d7:43:06:62:6d:20: 1d:40:61:9b:e5:b8:88:4c:6f:86:56:14:17:05:f2: 8a:3f:88:90:0b:41:53:da:9d:4b:34:c6:be:0e:4b: c2:b1:4d:e6:79:87:8b:2a:27:e2:a5:31:b1:3f:a8: 5c:ac:23:60:48:d2:71:f9:a8:f4:2b:2b:86:5a:07: 11:75:53:c2:c7:6e:62:0f:14:2f:bf:8f:3a:7d:0f: 67:9e:21:e7:52:ab:89:96:12:d6:42:80:29:7e:19: ed:d4:f1:7a:40:7a:7e:1c:f9:3c:ab:b0:08:a9:7f: 73:c0:66:1f:5a:9a:15:ab:ca:f2:67:4f:e7:3c:5b: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5B:D2:15:10:2D:70:72:8B:40:4D:8B:FC:65:B8:14:9A:B4:73:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl X509v3 Authority Key Identifier: keyid:58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:23:83:78:5d:99:17:35:29:97:62:d6:bb:06:26:75:25:99: 1e:23:64:97:f5:fe:35:45:7f:bd:c0:ad:34:56:ba:80:61:ed: 50:e2:80:e9:a8:cd:e4:ce:3d:80:3e:21:92:6b:cb:a7:11:9b: 02:02:70:33:2f:1d:6a:92:df:1a:3a:3a:ae:d9:fe:98:33:de: 9a:3f:b6:87:f1:63:d9:74:fd:71:a8:3a:75:fc:6c:b5:93:96: 6b:7b:d1:e1:83:4b:ec:dc:f8:74:ad:5a:39:26:6d:c2:52:68: 5d:df:69:10:91:e2:ee:ba:07:9f:cf:21:8b:85:ef:25:da:31: 93:6a:92:79:36:a3:3d:26:ad:90:5c:fb:f4:38:22:22:ee:2e: ed:78:8c:b3:ea:3a:7c:76:a2:9a:29:ea:e7:7a:f9:31:52:3d: 66:fb:a2:31:35:5f:63:8c:cc:12:16:b0:44:9f:ae:3b:20:e5: 5e:6d:21:5a:1b:fc:8d:f2:80:14:01:79:79:c7:a7:b5:1b:bf: 3b:1a:f6:e0:1f:dc:8e:cd:25:16:cd:bc:5a:ca:e2:1d:c9:53: 25:b5:d4:cd:93:3f:2d:d6:16:41:3c:ed:5c:51:6d:a7:8a:1f: 41:28:46:19:67:d0:e8:2b:f0:ed:c6:79:cb:cb:f0:99:79:f3: a2:69:30:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iHyrAivFA9rifAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZlMjlmNzYtZjc4Mi00NWY5LThhZDgtNzkxZDA4ZTZk MTc0MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk NzcwYTFmMWYtNGMyNy00ZWYxLWJmMjQtMzQ0MGFiNmIyNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyo/KrD0eMsyv2iBzKOBNj6LsLma5nxGjGvz 9wausVaVQAM4dBCAb1cSxAvx01HI7XRpXQXRaOCzqBrDAtiqbDgunogEkca5u/uL J2sTN4FYMTKvKNGTlUP66sdOhRpIn8ab2E3eem1GwT5NTgJ/H/7Hfic9BNfYYQg6 vEk+1V3XQwZibSAdQGGb5biITG+GVhQXBfKKP4iQC0FT2p1LNMa+DkvCsU3meYeL KifipTGxP6hcrCNgSNJx+aj0KyuGWgcRdVPCx25iDxQvv486fQ9nniHnUquJlhLW QoApfhnt1PF6QHp+HPk8q7AIqX9zwGYfWpoVq8ryZ0/nPFumZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNBb0hUQLXByi0BNi/xluBSatHOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUy OWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFkMDhlNmQxNzQvYjZlMjlmNzYtZjc4Mi00 NWY5LThhZDgtNzkxZDA4ZTZkMTc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjZlMjlmNzYtZjc4Mi00NWY5LThh ZDgtNzkxZDA4ZTZkMTc0L2I2ZTI5Zjc2LWY3ODItNDVmOS04YWQ4LTc5MWQwOGU2 ZDE3NC5jcmwwHwYDVR0jBBgwFoAUWLB6IKgRUwfQQ1rgBQMgU6N0nwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUyOWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFk MDhlNmQxNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC+I4N4XZkXNSmXYta7BiZ1 JZkeI2SX9f41RX+9wK00VrqAYe1Q4oDpqM3kzj2APiGSa8unEZsCAnAzLx1qkt8a Ojqu2f6YM96aP7aH8WPZdP1xqDp1/Gy1k5Zre9Hhg0vs3Ph0rVo5Jm3CUmhd32kQ keLuugefzyGLhe8l2jGTapJ5NqM9Jq2QXPv0OCIi7i7teIyz6jp8dqKaKernevkx Uj1m+6IxNV9jjMwSFrBEn647IOVebSFaG/yN8oAUAXl5x6e1G787GvbgH9yOzSUW zbxayuIdyVMltdTNkz8t1hZBPO1cUW2nih9BKEYZZ9DoK/DtxnnLy/CZefOiaTDp -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:15 2025 by rpki-client