$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft File: c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft (raw, json) Hash identifier: xiN1C0Ze7/rSMq6FMvq7XXM85YTIT/XHDiKHd++5E8Y= Subject key identifier: 27:96:75:48:10:F9:FC:3B:3F:D1:04:21:20:B5:2A:B8:4D:2E:49:80 Authority key identifier: 8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 Certificate issuer: /CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Certificate serial: 010D0C9F4328584BBF69B75F2658943AA6430540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft Manifest number: 010D0C9F4328584073A851E7AB99689230705EA2 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 175a7774-3b58-3926-8574-a23f74a28ae2.roa (hash: yyWlXrMf06YnqO3XdK4Hmt1lRMCSXhdDnQWF2TeNt+o=) 2: c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl (hash: 6I4ncOr6eCBuMRvUKouteuggwoH6yEQqbGtfgmBlkfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:5f:26:58:94:3a:a6:43:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=7a063928-d360-4985-b8e1-4a7f166e5e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:9a:c6:e4:32:72:b8:a9:41:06:15:a9:3b: 70:44:19:73:7f:3c:4d:dc:1f:a6:d3:25:d0:2c:9b: ab:9f:a4:27:e9:86:12:41:a7:25:af:65:40:ba:cc: 6a:9f:fe:ce:9a:5b:bb:1a:4e:11:4c:6f:26:0d:eb: a5:46:1c:d6:37:f7:4f:82:46:d3:2e:29:a0:cb:bd: a8:09:56:ef:97:2b:16:1e:d2:b0:73:18:43:ae:8f: 9b:10:a3:98:ab:30:fb:28:c6:ed:3e:19:3e:9c:5c: 00:3e:87:52:64:03:64:db:db:07:85:72:f6:1e:51: 58:22:f8:3b:81:7d:4a:90:cb:72:06:cb:49:4b:5a: 8f:6f:40:a7:86:60:f5:3c:4e:d8:9c:c2:53:94:76: c1:ff:4d:02:0f:62:1f:ea:87:2a:18:79:c7:9d:23: ac:36:e1:3f:83:27:7a:df:2e:12:4d:c9:51:79:dc: da:a7:fc:39:49:23:e2:b4:75:3e:c4:61:16:43:cf: db:a6:e6:e3:7b:bf:15:6d:9a:2a:1e:24:cf:da:12: a6:87:e3:0a:96:0a:c1:f1:2a:59:ae:02:69:f3:f6: 30:95:0c:3b:f2:4f:b1:07:a7:10:5f:0c:91:93:79: 47:0e:1e:d4:93:9c:29:27:a6:02:21:42:4f:a4:90: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:75:48:10:F9:FC:3B:3F:D1:04:21:20:B5:2A:B8:4D:2E:49:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl X509v3 Authority Key Identifier: keyid:8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:90:29:7a:93:98:92:f4:74:86:f7:1a:e2:b9:20:9f:c7:8c: 01:32:3f:a3:70:d3:f5:db:98:56:6b:23:46:86:2a:93:cf:6a: 57:81:3a:8a:27:50:8c:d4:45:f8:c0:f6:19:5f:67:54:85:dd: 7b:14:7d:a3:42:76:47:78:04:d2:47:9d:df:fd:b1:58:30:de: ef:a2:88:8b:00:4e:c1:9e:c9:80:86:23:62:74:20:73:fe:6d: 5e:ed:a2:50:8b:ec:77:24:81:81:c7:6e:55:9e:07:e3:3e:35: 49:2f:58:34:94:f8:5c:c6:cd:47:5f:08:73:13:4a:1f:05:db: ec:2a:8a:34:c3:8b:02:32:10:f2:c6:c3:1a:16:7b:3d:f2:e7: 25:d7:26:12:60:4e:93:e4:14:a6:fe:be:95:98:df:23:00:34: 0c:92:94:51:11:8a:9d:57:1c:50:42:2c:b0:e5:80:5a:ac:24: 79:69:16:8e:1b:fc:d4:14:13:2d:6e:9c:ad:a7:86:88:df:00: 8c:8a:e7:22:27:d8:1d:2e:cd:ea:bb:d1:f5:bc:a2:81:01:f8: c9:58:32:5d:ab:63:7d:f1:a5:3a:a3:59:49:c6:69:e8:3e:0d: 94:ca:44:10:a0:45:2e:d8:15:6e:d6:77:5a:89:fa:1f:54:e3: f0:75:3e:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abdfJliUOqZDBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwMGFjZTAtYTc3Zi00NTZiLWIyYTctZGI1ZTZiODll ODdhMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk N2EwNjM5MjgtZDM2MC00OTg1LWI4ZTEtNGE3ZjE2NmU1ZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeWaxuQycripQQYVqTtwRBlzfzxN3B+m0yXQ LJurn6Qn6YYSQaclr2VAusxqn/7Omlu7Gk4RTG8mDeulRhzWN/dPgkbTLimgy72o CVbvlysWHtKwcxhDro+bEKOYqzD7KMbtPhk+nFwAPodSZANk29sHhXL2HlFYIvg7 gX1KkMtyBstJS1qPb0CnhmD1PE7YnMJTlHbB/00CD2If6ocqGHnHnSOsNuE/gyd6 3y4STclRedzap/w5SSPitHU+xGEWQ8/bpubje78VbZoqHiTP2hKmh+MKlgrB8SpZ rgJp8/YwlQw78k+xB6cQXwyRk3lHDh7Uk5wpJ6YCIUJPpJBeHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCeWdUgQ+fw7P9EEISC1KrhNLkmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAw YWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVlNmI4OWU4N2EvYzkwMGFjZTAtYTc3Zi00 NTZiLWIyYTctZGI1ZTZiODllODdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzkwMGFjZTAtYTc3Zi00NTZiLWIy YTctZGI1ZTZiODllODdhL2M5MDBhY2UwLWE3N2YtNDU2Yi1iMmE3LWRiNWU2Yjg5 ZTg3YS5jcmwwHwYDVR0jBBgwFoAUi/bnYA++6ZQC1r/uuyRax337zSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAwYWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVl NmI4OWU4N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXkCl6k5iS9HSG9xriuSCf x4wBMj+jcNP125hWayNGhiqTz2pXgTqKJ1CM1EX4wPYZX2dUhd17FH2jQnZHeATS R53f/bFYMN7vooiLAE7BnsmAhiNidCBz/m1e7aJQi+x3JIGBx25VngfjPjVJL1g0 lPhcxs1HXwhzE0ofBdvsKoo0w4sCMhDyxsMaFns98ucl1yYSYE6T5BSm/r6VmN8j ADQMkpRREYqdVxxQQiyw5YBarCR5aRaOG/zUFBMtbpytp4aI3wCMiuciJ9gdLs3q u9H1vKKBAfjJWDJdq2N98aU6o1lJxmnoPg2UykQQoEUu2BVu1ndaifofVOPwdT44 -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:27 2025 by rpki-client