$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft File: f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft (raw, json) Hash identifier: Ndc1c6YeS3/wXnwwXT27IwvD4yBJp5eCH8VFEdUqT5Q= Subject key identifier: 18:35:F0:2F:88:1A:BF:D4:DC:49:BE:BF:AD:59:B9:83:4D:0E:D6:98 Authority key identifier: E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27 Certificate issuer: /CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b Certificate serial: 010D0C9F4328584BBF10647C1AAE99D565A74A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft Manifest number: 010D0C9F4328584073A84B46546C9CA00F465EF6 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 11e18d98-1fe3-3ac1-a9f1-ca3727613d10.roa (hash: hWd0+I2LrVfEdHAQNSumjfBt9WtGfTXen5uq1yhTuHc=) 2: f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl (hash: 8pIrNZrycEPdab51Lj07A0sB4lVrSaVxujS8IGQgfes=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:64:7c:1a:ae:99:d5:65:a7:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=34435a02-7d8d-459c-9b0e-80245a630757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:4b:c2:d0:73:a2:4f:83:45:61:68:f5:d6: 47:b2:a7:f9:a7:cd:7e:cc:a1:5f:e5:cd:57:32:31: b7:3e:b1:05:5d:8b:b4:29:9f:fc:77:fe:3a:91:de: 9a:5f:fa:01:ee:cf:f4:11:b6:0c:19:b2:25:d7:09: 48:d5:62:1b:01:c2:f5:3c:a4:41:1c:55:f4:10:f7: ed:8b:4a:08:9f:fd:aa:94:33:f0:ff:36:77:38:d3: b4:42:27:47:6a:78:87:db:db:bc:b2:37:6d:24:84: 56:cd:c8:b1:bb:78:38:c7:9a:76:39:18:c8:de:fd: 53:46:87:a4:2e:94:70:2b:13:5a:23:6f:d8:30:8f: 20:fd:9f:cb:9e:e2:1e:6f:f3:bc:e3:b2:33:2d:c4: 05:af:1b:47:10:07:c1:63:62:21:d9:ea:d0:8f:a1: d6:fc:6d:7a:6c:34:3c:b4:3a:75:76:2b:d9:96:ff: bf:84:8e:50:08:2c:1e:b1:56:41:0f:c4:73:dd:b3: da:26:61:bb:8f:9c:b8:3a:6b:57:c3:f4:4c:3b:00: 67:e6:0c:01:0e:44:49:c4:77:f7:02:96:51:18:4a: b4:d7:f3:fd:6f:d1:b2:4c:2c:72:7e:97:c4:8e:bb: 6e:6d:52:09:09:3b:07:15:a1:9b:98:e3:0e:de:3d: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:35:F0:2F:88:1A:BF:D4:DC:49:BE:BF:AD:59:B9:83:4D:0E:D6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl X509v3 Authority Key Identifier: keyid:E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9b:34:58:25:21:bf:8e:a8:71:b9:54:00:fb:72:8b:b0:09: 8e:40:1e:6f:f6:3d:67:f4:59:47:4b:8f:8a:3a:38:2c:17:07: 76:f4:eb:f1:d1:a3:1c:91:f4:74:db:87:46:c1:9f:65:5d:42: 08:0f:5b:78:88:bd:9a:be:17:b7:f6:91:77:45:ff:86:f4:c7: 87:17:dd:9d:bb:2b:3e:50:a1:b9:da:aa:5c:01:55:2a:cc:9b: be:38:79:60:9a:72:98:27:45:cc:43:88:d6:69:eb:80:f5:ce: 8c:b0:59:d1:a0:2f:27:e5:a6:53:cc:20:9c:a5:78:d6:3d:03: 3e:01:cb:8c:14:31:79:53:2f:d5:d7:68:aa:c6:58:23:8b:de: 9c:a6:55:a8:df:ed:6b:63:29:a2:c6:b7:2c:1a:3e:ba:27:ab: ab:38:bb:b5:1b:23:0d:54:c3:e4:e8:50:57:38:62:8a:4d:d3: a4:32:01:39:68:75:2a:e5:cf:fd:9c:24:7f:d7:d5:23:37:4e: 0b:a0:25:b5:7a:60:d5:93:eb:98:82:d8:7a:a0:14:d3:aa:90: b7:19:74:c4:41:22:d0:4a:f5:d4:f6:71:a3:5d:71:89:ec:fb: f5:88:03:c6:19:02:ff:ac:ac:3d:05:b1:c4:d5:93:89:ed:ae: 0f:fe:3d:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGR8Gq6Z1WWnSiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkxNWQzZDMtMWI4Zi00MmM3LThjNGQtZjlmY2U4MGQ5 YTJiMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk MzQ0MzVhMDItN2Q4ZC00NTljLTliMGUtODAyNDVhNjMwNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnJLwtBzok+DRWFo9dZHsqf5p81+zKFf5c1X MjG3PrEFXYu0KZ/8d/46kd6aX/oB7s/0EbYMGbIl1wlI1WIbAcL1PKRBHFX0EPft i0oIn/2qlDPw/zZ3ONO0QidHaniH29u8sjdtJIRWzcixu3g4x5p2ORjI3v1TRoek LpRwKxNaI2/YMI8g/Z/LnuIeb/O847IzLcQFrxtHEAfBY2Ih2erQj6HW/G16bDQ8 tDp1divZlv+/hI5QCCwesVZBD8Rz3bPaJmG7j5y4OmtXw/RMOwBn5gwBDkRJxHf3 ApZRGEq01/P9b9GyTCxyfpfEjrtubVIJCTsHFaGbmOMO3j3uuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBg18C+IGr/U3Em+v61ZuYNNDtaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTE1 ZDNkMy0xYjhmLTQyYzctOGM0ZC1mOWZjZTgwZDlhMmIvZjkxNWQzZDMtMWI4Zi00 MmM3LThjNGQtZjlmY2U4MGQ5YTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjkxNWQzZDMtMWI4Zi00MmM3LThj NGQtZjlmY2U4MGQ5YTJiL2Y5MTVkM2QzLTFiOGYtNDJjNy04YzRkLWY5ZmNlODBk OWEyYi5jcmwwHwYDVR0jBBgwFoAU5fAfJoeWudAWXIZqu3pXl+3YnycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTE1ZDNkMy0xYjhmLTQyYzctOGM0ZC1mOWZj ZTgwZDlhMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/mzRYJSG/jqhxuVQA+3KL sAmOQB5v9j1n9FlHS4+KOjgsFwd29Ovx0aMckfR024dGwZ9lXUIID1t4iL2avhe3 9pF3Rf+G9MeHF92duys+UKG52qpcAVUqzJu+OHlgmnKYJ0XMQ4jWaeuA9c6MsFnR oC8n5aZTzCCcpXjWPQM+AcuMFDF5Uy/V12iqxlgji96cplWo3+1rYymixrcsGj66 J6urOLu1GyMNVMPk6FBXOGKKTdOkMgE5aHUq5c/9nCR/19UjN04LoCW1emDVk+uY gth6oBTTqpC3GXTEQSLQSvXU9nGjXXGJ7Pv1iAPGGQL/rKw9BbHE1ZOJ7a4P/j2f -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:03 2025 by rpki-client