$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft File: 5cab4920-f916-4f6e-89be-328cbbe66f94.mft (raw, json) Hash identifier: xKgna6lqHPGJuOM73GVKXvhmiF5B0hFC1h5sjVqzltk= Subject key identifier: 20:45:9B:6D:BF:67:59:32:30:3C:C1:0A:47:59:53:D6:B6:BA:92:8D Authority key identifier: EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16 Certificate issuer: /CN=5cab4920-f916-4f6e-89be-328cbbe66f94 Certificate serial: 010D0C9F4328584BC2523B3F999B2A6CEFC31D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft Manifest number: 010D0C9F432858449B0A4015E173972293FC8C21 Signing time: Wed 05 Nov 2025 13:00:08 +0000 Manifest this update: Wed 05 Nov 2025 13:00:08 +0000 Manifest next update: Sat 08 Nov 2025 13:00:00 +0000 Files and hashes: 1: 41dcca07-860f-381f-8c2a-e453ea6881d3.roa (hash: Z2vUxIIEwxf4G+ErVm99iZIIOjRaK2mt0r+MA9GaRBs=) 2: 5cab4920-f916-4f6e-89be-328cbbe66f94.crl (hash: zrViLaOabljVLUewhHExOHABCbW5jG9QR21bxp8Qflc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:52:3b:3f:99:9b:2a:6c:ef:c3:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cab4920-f916-4f6e-89be-328cbbe66f94 Validity Not Before: Nov 5 13:00:08 2025 GMT Not After : Nov 8 13:00:00 2025 GMT Subject: CN=bfb9154e-ebae-493c-a309-c1d8818116cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:f8:17:13:5b:06:12:2e:b6:bf:8f:4b:79: 3b:d0:49:dc:0a:51:ac:e7:6a:1b:fc:25:ac:50:9f: fa:14:7b:10:20:25:2f:1f:4d:0e:6f:b5:d8:26:f3: fa:6f:ff:84:09:28:0a:5d:c1:8b:0f:c9:bd:f0:7e: ab:11:55:2f:ce:3c:93:19:37:7a:ef:d5:8a:2b:37: 6d:44:73:42:2b:11:27:65:17:7a:28:20:e3:bd:db: be:6b:f8:69:3d:54:df:0c:1c:39:a8:be:04:c2:68: 17:57:30:6c:d8:d7:c9:12:e0:3f:88:06:49:d7:13: c9:ec:f6:d5:05:d4:28:01:9a:d4:b2:3d:87:d8:1e: 26:da:9d:e4:85:49:0c:0a:63:84:c3:44:02:e1:61: 3f:83:c9:9a:16:56:b7:b9:93:be:49:84:c1:91:82: 94:c5:90:ef:c3:0d:8d:e9:51:de:b4:c7:3b:9a:ed: 4c:32:43:71:56:ac:dc:c3:ba:34:0b:ce:43:75:a7: 73:7f:a8:60:e0:4f:2e:4f:53:a5:0e:98:e6:74:60: b9:62:97:37:6c:47:25:90:10:e7:58:7b:38:a1:0b: 71:e9:d6:bf:93:20:03:5a:b7:2d:71:ed:8a:ee:84: 0c:9a:d1:57:1f:4b:96:d8:5d:c5:83:0e:ae:b6:74: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:9B:6D:BF:67:59:32:30:3C:C1:0A:47:59:53:D6:B6:BA:92:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl X509v3 Authority Key Identifier: keyid:EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c3:a3:7f:4d:7c:f7:01:22:5d:5d:b4:51:47:cb:03:3c:00: be:b9:12:1b:1b:90:bf:a0:f9:47:9c:e3:db:58:a4:c3:ca:9f: 87:db:c3:a6:8c:9f:f3:57:d3:00:e0:cb:fa:ee:d5:15:81:a8: 2a:89:57:44:8d:79:be:ff:e8:b5:f0:82:1e:91:a2:6a:ff:8a: c2:8c:fe:e9:c9:c4:e3:a9:8b:5f:08:93:19:e3:c0:08:e6:38: 78:34:df:ce:c7:6a:32:5b:73:23:b9:c6:2d:a2:57:30:42:90: 3f:7c:b9:4e:99:79:75:b6:3a:8e:11:d1:e5:33:86:ea:5c:79: ed:19:18:36:84:6a:55:8d:eb:6a:cb:01:40:7c:36:ef:f0:e6: ae:41:df:78:fa:5b:0d:49:b2:dc:ed:16:b2:c9:ef:29:3f:ed: 7a:4c:cc:b3:af:1b:18:eb:67:8d:50:ec:d8:88:fa:53:59:e3: 24:43:ef:f0:dd:da:9b:05:52:56:d3:57:98:c3:b5:a6:5e:23: b2:dd:aa:82:d4:0f:b2:80:7d:82:c3:02:46:43:4d:9e:c3:e8: 0d:4d:37:a5:c1:67:a9:c8:38:f9:9a:01:61:7b:c4:17:45:ef: 02:6e:90:a6:1b:65:85:40:21:8f:a2:f7:09:d3:09:70:22:59: e7:29:b1:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCUjs/mZsqbO/DHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhYjQ5MjAtZjkxNi00ZjZlLTg5YmUtMzI4Y2JiZTY2 Zjk0MB4XDTI1MTEwNTEzMDAwOFoXDTI1MTEwODEzMDAwMFowLzEtMCsGA1UEAxMk YmZiOTE1NGUtZWJhZS00OTNjLWEzMDktYzFkODgxODExNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC34FxNbBhIutr+PS3k70EncClGs52ob/CWs UJ/6FHsQICUvH00Ob7XYJvP6b/+ECSgKXcGLD8m98H6rEVUvzjyTGTd679WKKzdt RHNCKxEnZRd6KCDjvdu+a/hpPVTfDBw5qL4EwmgXVzBs2NfJEuA/iAZJ1xPJ7PbV BdQoAZrUsj2H2B4m2p3khUkMCmOEw0QC4WE/g8maFla3uZO+SYTBkYKUxZDvww2N 6VHetMc7mu1MMkNxVqzcw7o0C85Ddadzf6hg4E8uT1OlDpjmdGC5Ypc3bEclkBDn WHs4oQtx6da/kyADWrctce2K7oQMmtFXH0uW2F3Fgw6utnSzgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCBFm22/Z1kyMDzBCkdZU9a2upKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Fi NDkyMC1mOTE2LTRmNmUtODliZS0zMjhjYmJlNjZmOTQvNWNhYjQ5MjAtZjkxNi00 ZjZlLTg5YmUtMzI4Y2JiZTY2Zjk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNhYjQ5MjAtZjkxNi00ZjZlLTg5 YmUtMzI4Y2JiZTY2Zjk0LzVjYWI0OTIwLWY5MTYtNGY2ZS04OWJlLTMyOGNiYmU2 NmY5NC5jcmwwHwYDVR0jBBgwFoAU607OeNfdcGN4vMRXxIsGXwoyZhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2FiNDkyMC1mOTE2LTRmNmUtODliZS0zMjhj YmJlNjZmOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6w6N/TXz3ASJdXbRRR8sD PAC+uRIbG5C/oPlHnOPbWKTDyp+H28OmjJ/zV9MA4Mv67tUVgagqiVdEjXm+/+i1 8IIekaJq/4rCjP7pycTjqYtfCJMZ48AI5jh4NN/Ox2oyW3MjucYtolcwQpA/fLlO mXl1tjqOEdHlM4bqXHntGRg2hGpVjetqywFAfDbv8OauQd94+lsNSbLc7Rayye8p P+16TMyzrxsY62eNUOzYiPpTWeMkQ+/w3dqbBVJW01eYw7WmXiOy3aqC1A+ygH2C wwJGQ02ew+gNTTelwWepyDj5mgFhe8QXRe8CbpCmG2WFQCGPovcJ0wlwIlnnKbGO -----END CERTIFICATE-----Generated at Wed Nov 5 15:10:33 2025 by rpki-client