$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft File: 223a4b84-939d-437b-85a8-9ff465d0541e.mft (raw, json) Hash identifier: Y1/QT7Fs4V0XhJKYZvGFXOf+UIUq7CURHoxieZMmzqI= Subject key identifier: 89:38:65:92:8D:D1:94:9D:0B:B6:63:12:53:3F:0E:B0:85:D7:FD:D2 Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE Certificate issuer: /CN=223a4b84-939d-437b-85a8-9ff465d0541e Certificate serial: 010D0C9F4328584BC34077C5180FACED1D9A9680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft Manifest number: 010D0C9F432858484067FCE4F20A97E257DA7121 Signing time: Wed 05 Nov 2025 21:00:08 +0000 Manifest this update: Wed 05 Nov 2025 21:00:08 +0000 Manifest next update: Sat 08 Nov 2025 21:00:00 +0000 Files and hashes: 1: 223a4b84-939d-437b-85a8-9ff465d0541e.crl (hash: TX1OeEntvUkCt7GLuueAerRSUyV8GvX5SyLSz/DZ7is=) 2: 59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (hash: VPbKiBPCAIq0RRPsLaHdDN7nv5k2YzHBkg49ZOaMC6A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:40:77:c5:18:0f:ac:ed:1d:9a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e Validity Not Before: Nov 5 21:00:08 2025 GMT Not After : Nov 8 21:00:00 2025 GMT Subject: CN=b9ed91a7-95fd-4dac-9bdd-e9013ef514c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:c3:09:28:0b:b6:be:1e:5a:f4:30:81:68: 4f:2b:e6:e4:e8:d2:5e:8a:61:8f:d5:53:ed:f5:59: 34:b5:0c:5d:ef:65:ab:fd:16:ec:40:02:14:50:5f: 97:5b:3e:e8:85:7b:e5:1b:1e:45:05:3e:bf:8e:09: 53:14:ff:28:7e:4f:cf:61:06:b8:a3:c4:db:d6:39: a6:51:9a:bd:2b:b2:9f:64:8d:65:11:fc:bf:ea:a3: a8:19:5e:1b:a6:99:f0:0f:32:4e:e6:26:49:54:98: e2:fb:96:31:43:cd:5f:8d:a5:3e:5c:63:d0:57:76: 2e:db:22:82:29:b7:0f:7a:39:19:d7:df:5d:3c:87: 9a:ed:25:ec:44:ad:a4:72:90:c1:63:2a:4a:86:a0: cf:51:60:3d:06:0a:b2:f0:02:dd:1c:2f:78:13:6f: ef:f0:0f:92:fd:05:42:18:93:c4:e5:73:72:2f:48: 1f:25:23:3a:af:a4:33:6b:d1:e1:2c:48:fe:45:0c: ea:a7:0a:c0:33:cc:b8:f1:dc:5e:c1:33:c6:69:30: 96:57:90:e8:99:72:82:4c:ac:37:b7:99:c8:25:a5: 15:35:be:ae:cc:68:08:6a:76:89:91:e5:68:f6:1d: 28:ca:ac:ed:e0:3c:d8:5d:30:49:cd:44:a4:e5:8a: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:38:65:92:8D:D1:94:9D:0B:B6:63:12:53:3F:0E:B0:85:D7:FD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl X509v3 Authority Key Identifier: keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8e:6a:cb:99:60:1d:8a:ad:a1:e5:22:6b:76:72:12:57:76: 13:80:42:60:6e:95:6c:de:89:ad:66:20:d6:6b:48:9e:d3:f1: 6d:79:d6:19:39:b3:9b:38:ef:22:f7:d6:5a:5f:dd:5f:dd:d3: 6f:b8:23:75:37:1b:45:9f:cd:db:61:d8:64:39:ec:14:64:80: 41:99:de:e2:9b:bb:76:78:ee:91:46:84:20:ea:56:3d:42:ba: b8:6b:c3:b9:f6:d6:2b:0b:cf:e8:ca:be:87:dc:0e:63:79:0d: f2:ab:be:63:b4:25:c4:4d:64:81:64:d6:5e:47:4c:f0:ef:a2: 40:d7:b1:ab:3a:cd:12:ec:64:11:31:76:8b:ca:8e:1c:e0:0d: f9:5b:03:53:83:9f:ef:f8:6d:d4:e9:cb:28:04:67:a2:e6:27: f6:e5:59:d6:85:c1:33:4d:c2:e8:ac:c4:e8:a0:ff:f7:87:09: 5f:78:39:5a:b2:96:9a:d2:0a:d9:cc:70:58:86:fb:f2:8b:0b: 2d:59:30:18:d2:8d:a9:3b:6e:df:f7:25:f9:12:89:39:8d:84: a9:a8:aa:b5:de:ca:fb:11:a3:a0:0d:69:71:bd:1c:42:4e:3a: 0f:e7:bf:22:67:1e:bf:8f:fe:ca:90:cc:5d:60:ea:10:77:47: a2:ba:e8:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvDQHfFGA+s7R2aloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIzYTRiODQtOTM5ZC00MzdiLTg1YTgtOWZmNDY1ZDA1 NDFlMB4XDTI1MTEwNTIxMDAwOFoXDTI1MTEwODIxMDAwMFowLzEtMCsGA1UEAxMk YjllZDkxYTctOTVmZC00ZGFjLTliZGQtZTkwMTNlZjUxNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d3DCSgLtr4eWvQwgWhPK+bk6NJeimGP1VPt 9Vk0tQxd72Wr/RbsQAIUUF+XWz7ohXvlGx5FBT6/jglTFP8ofk/PYQa4o8Tb1jmm UZq9K7KfZI1lEfy/6qOoGV4bppnwDzJO5iZJVJji+5YxQ81fjaU+XGPQV3Yu2yKC KbcPejkZ199dPIea7SXsRK2kcpDBYypKhqDPUWA9Bgqy8ALdHC94E2/v8A+S/QVC GJPE5XNyL0gfJSM6r6Qza9HhLEj+RQzqpwrAM8y48dxewTPGaTCWV5DomXKCTKw3 t5nIJaUVNb6uzGgIanaJkeVo9h0oyqzt4DzYXTBJzUSk5Yr8xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIk4ZZKN0ZSdC7ZjElM/DrCF1/3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNh NGI4NC05MzlkLTQzN2ItODVhOC05ZmY0NjVkMDU0MWUvMjIzYTRiODQtOTM5ZC00 MzdiLTg1YTgtOWZmNDY1ZDA1NDFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjIzYTRiODQtOTM5ZC00MzdiLTg1 YTgtOWZmNDY1ZDA1NDFlLzIyM2E0Yjg0LTkzOWQtNDM3Yi04NWE4LTlmZjQ2NWQw NTQxZS5jcmwwHwYDVR0jBBgwFoAUty2YvxMnHjhhqY5/W/c+SXA3684wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNhNGI4NC05MzlkLTQzN2ItODVhOC05ZmY0 NjVkMDU0MWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgjmrLmWAdiq2h5SJrdnIS V3YTgEJgbpVs3omtZiDWa0ie0/FtedYZObObOO8i99ZaX91f3dNvuCN1NxtFn83b YdhkOewUZIBBmd7im7t2eO6RRoQg6lY9Qrq4a8O59tYrC8/oyr6H3A5jeQ3yq75j tCXETWSBZNZeR0zw76JA17GrOs0S7GQRMXaLyo4c4A35WwNTg5/v+G3U6csoBGei 5if25VnWhcEzTcLorMTooP/3hwlfeDlaspaa0grZzHBYhvvyiwstWTAY0o2pO27f 9yX5Eok5jYSpqKq13sr7EaOgDWlxvRxCTjoP578iZx6/j/7KkMxdYOoQd0eiuuhq -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:20 2025 by rpki-client