$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft File: 74a9f5cd-6394-4062-8085-0e1da1f04511.mft (raw, json) Hash identifier: khEJDzez8pfH+hE5v79DMH+4QTsqx7ZehOlz0VDJ3r0= Subject key identifier: 01:F9:AC:4A:62:9E:A2:DB:87:DD:59:44:81:55:40:7E:9F:53:03:A7 Authority key identifier: CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52 Certificate issuer: /CN=74a9f5cd-6394-4062-8085-0e1da1f04511 Certificate serial: 010D0C9F4328584BC057FE8EB3B5816363D41D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft Manifest number: 010D0C9F43285842AD87F75781BEA1C2B6D3C595 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 0f23b3b1-954d-3567-bd9a-85457745ed41.roa (hash: rZHAA3xb9jAGCRGs3dOLxrb2BKaCOshcEVo7EtG5ebw=) 2: 74a9f5cd-6394-4062-8085-0e1da1f04511.crl (hash: Vr3Uhzrj/30LGeqTWiDNY1S2/o78oM8yzzcw2nVVpU4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fe:8e:b3:b5:81:63:63:d4:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9f5cd-6394-4062-8085-0e1da1f04511 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=3fb3ea40-b703-4a85-8afb-313c088d0197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:08:6b:85:08:74:bc:99:8c:3c:81:b0:a5: bc:42:f3:66:46:f7:29:c0:03:de:83:0e:b4:88:95: 2f:6d:5a:93:9c:1a:db:25:da:00:dc:cb:da:97:05: 43:07:d3:c9:52:ab:f9:6f:22:37:e6:d6:8a:b2:53: d5:a0:1e:48:af:49:c6:f0:a7:d7:92:9f:99:58:32: df:80:18:16:24:ee:dc:a5:db:7c:fa:2a:17:74:33: 4d:a4:d9:29:1e:ab:fc:36:de:e2:41:dd:d7:0d:2a: cb:3b:94:1d:e5:de:00:c3:86:4b:89:4b:87:6d:97: a8:df:17:3b:52:e3:16:fe:ee:6c:e4:05:82:04:dc: d6:34:70:83:ea:d0:26:52:a9:2d:7a:0a:42:3d:a1: 4d:c9:3c:c5:b7:a7:9d:94:42:29:e3:e5:6f:60:cc: d5:af:78:61:e9:b7:7f:b6:ed:82:a9:b3:e1:d2:d3: 1b:ea:ba:fe:9c:56:92:4e:5e:71:6c:76:68:2c:49: d5:84:9c:61:33:5b:a7:da:8b:5a:a4:c6:29:40:ca: a7:b0:26:3b:d4:dc:f6:ce:6b:65:57:df:88:22:e2: d6:0e:ad:82:f0:9b:44:e2:19:95:39:b5:67:31:d1: 32:53:4a:6c:9c:19:57:4e:0a:1e:00:ef:0d:d9:88: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F9:AC:4A:62:9E:A2:DB:87:DD:59:44:81:55:40:7E:9F:53:03:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl X509v3 Authority Key Identifier: keyid:CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b7:b3:cd:a5:3d:d6:fd:fe:93:e8:22:33:db:a3:04:54:64: 82:48:c4:50:01:34:75:1c:b9:f9:21:0f:f6:8d:9e:53:b8:7b: 61:da:55:5a:19:f1:5e:21:4b:8d:b1:b0:6a:78:98:93:e7:f1: 0f:15:71:60:3b:65:11:85:0d:f7:13:7a:e7:f1:ce:e0:d0:98: 58:77:23:5f:46:c2:16:a4:97:3f:98:5b:e2:bf:ea:04:f3:42: 5f:d5:3e:ee:a0:4d:f0:71:fa:24:74:eb:e6:1d:1c:b4:42:b6: c3:7d:2b:30:5c:aa:3e:79:bc:60:ee:a0:8b:d2:92:36:db:8b: cb:40:bd:d1:81:c3:6e:77:5f:4b:29:88:16:c8:51:f0:64:57: ee:14:67:c0:b2:f5:e0:e2:2a:c9:e1:73:20:90:b4:b9:db:de: 6b:ca:5d:4a:7f:74:8c:00:b0:01:db:11:53:cf:6f:1d:a5:0a: e4:2b:a1:de:d5:4b:95:83:e8:39:26:2f:55:49:fb:0d:04:ff: 84:5c:c4:b6:02:85:c9:ee:ce:39:41:5e:fa:b4:48:34:47:78: e7:e9:ce:d1:6c:f1:9c:96:a0:75:e6:dd:7a:79:fb:13:61:cf: c1:82:7a:d2:ec:f2:b6:1a:6b:bf:67:07:17:b9:86:1d:b3:ee: c2:e2:b3:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/6Os7WBY2PUHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWY1Y2QtNjM5NC00MDYyLTgwODUtMGUxZGExZjA0 NTExMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk M2ZiM2VhNDAtYjcwMy00YTg1LThhZmItMzEzYzA4OGQwMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOUIa4UIdLyZjDyBsKW8QvNmRvcpwAPegw60 iJUvbVqTnBrbJdoA3MvalwVDB9PJUqv5byI35taKslPVoB5Ir0nG8KfXkp+ZWDLf gBgWJO7cpdt8+ioXdDNNpNkpHqv8Nt7iQd3XDSrLO5Qd5d4Aw4ZLiUuHbZeo3xc7 UuMW/u5s5AWCBNzWNHCD6tAmUqktegpCPaFNyTzFt6edlEIp4+VvYMzVr3hh6bd/ tu2CqbPh0tMb6rr+nFaSTl5xbHZoLEnVhJxhM1un2otapMYpQMqnsCY71Nz2zmtl V9+IIuLWDq2C8JtE4hmVObVnMdEyU0psnBlXTgoeAO8N2Yi5yQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAH5rEpinqLbh91ZRIFVQH6fUwOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83NGE5 ZjVjZC02Mzk0LTQwNjItODA4NS0wZTFkYTFmMDQ1MTEvNzRhOWY1Y2QtNjM5NC00 MDYyLTgwODUtMGUxZGExZjA0NTExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzRhOWY1Y2QtNjM5NC00MDYyLTgw ODUtMGUxZGExZjA0NTExLzc0YTlmNWNkLTYzOTQtNDA2Mi04MDg1LTBlMWRhMWYw NDUxMS5jcmwwHwYDVR0jBBgwFoAUzc3HNTCwGkpD/V6Ej6DjaRT4b1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83NGE5ZjVjZC02Mzk0LTQwNjItODA4NS0wZTFk YTFmMDQ1MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYt7PNpT3W/f6T6CIz26ME VGSCSMRQATR1HLn5IQ/2jZ5TuHth2lVaGfFeIUuNsbBqeJiT5/EPFXFgO2URhQ33 E3rn8c7g0JhYdyNfRsIWpJc/mFviv+oE80Jf1T7uoE3wcfokdOvmHRy0QrbDfSsw XKo+ebxg7qCL0pI224vLQL3RgcNud19LKYgWyFHwZFfuFGfAsvXg4irJ4XMgkLS5 295ryl1Kf3SMALAB2xFTz28dpQrkK6He1UuVg+g5Ji9VSfsNBP+EXMS2AoXJ7s45 QV76tEg0R3jn6c7RbPGclqB15t16efsTYc/BgnrS7PK2Gmu/ZwcXuYYds+7C4rNt -----END CERTIFICATE-----Generated at Wed Nov 5 14:10:18 2025 by rpki-client