$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.mft File: a56a3708-27fd-4435-a52a-57e44da7dab4.mft (raw, json) Hash identifier: nCmfU/RjL4EyRs6uKBFDsYKq1GkJvm83RYSSX8RwT3A= Subject key identifier: 07:0B:27:28:CF:42:ED:19:F3:A6:55:FE:86:A3:60:B1:68:02:72:9A Authority key identifier: 63:17:61:37:A5:B8:6E:08:2E:25:5F:AF:1C:64:FC:4F:8E:78:0E:7D Certificate issuer: /CN=a56a3708-27fd-4435-a52a-57e44da7dab4 Certificate serial: 010D0C9F4328584BC322B214A8F3A45824F91200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.mft Manifest number: 010D0C9F43285842CC6F206E7DD28AD427C12D0B Signing time: Wed 05 Nov 2025 20:00:08 +0000 Manifest this update: Wed 05 Nov 2025 20:00:08 +0000 Manifest next update: Sat 08 Nov 2025 20:00:00 +0000 Files and hashes: 1: 1c410a85-ef61-329c-8758-bd379673e65f.roa (hash: 5VwN42kRL+NNCt8kWUMpE4jOylPwXo3IClB01Ztc8Cw=) 2: a56a3708-27fd-4435-a52a-57e44da7dab4.crl (hash: iNTecSIsYP5NwJKL+0EOV2OMT+ZUIJZtH7vocZ/laXw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:22:b2:14:a8:f3:a4:58:24:f9:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56a3708-27fd-4435-a52a-57e44da7dab4 Validity Not Before: Nov 5 20:00:08 2025 GMT Not After : Nov 8 20:00:00 2025 GMT Subject: CN=70cec1ec-80a4-4a2e-b958-56a0232f3c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:8a:0e:0f:ec:eb:e1:ee:d8:65:58:0c:e4: b6:a0:9b:7e:17:70:cb:99:ec:8a:7c:0c:fa:3c:90: 8b:e5:9d:d3:0d:08:b0:6f:fd:0a:0f:80:55:7c:a6: 43:9f:cc:f4:45:2c:4d:a3:47:46:35:d4:42:2b:b5: f7:f7:6e:12:21:7f:b1:e0:a2:da:ab:ad:82:c3:fe: a1:2d:3f:5e:9e:b9:12:48:f9:ee:3a:70:3e:03:ec: b0:6e:20:9a:17:19:b3:8a:b2:48:e6:35:e8:2c:27: e4:ba:34:01:ab:7d:b2:bc:d5:97:28:27:7a:59:77: 0d:e9:69:5c:8a:ae:e6:9b:cc:b1:6a:34:a6:37:2e: 08:fc:0d:8b:a7:a2:20:b4:56:bc:53:db:83:7b:17: 7d:e6:cd:2d:79:b3:a0:02:26:03:f8:af:fa:18:de: 71:42:0a:d7:cb:6c:9d:81:2c:f0:7b:04:7b:05:18: a7:57:16:59:fe:25:43:88:d1:00:7b:03:66:55:dd: e7:45:e4:dd:49:ce:cb:b6:08:11:cd:9e:af:86:35: 38:ac:38:3a:b4:08:9a:30:0c:54:bf:3b:8a:0c:a0: 6d:6e:82:56:73:b0:54:de:d5:fa:5d:54:80:5d:ad: b9:35:f9:ea:53:92:cc:37:8b:41:95:e0:30:46:2d: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0B:27:28:CF:42:ED:19:F3:A6:55:FE:86:A3:60:B1:68:02:72:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.crl X509v3 Authority Key Identifier: keyid:63:17:61:37:A5:B8:6E:08:2E:25:5F:AF:1C:64:FC:4F:8E:78:0E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c1:9d:0a:4b:94:a6:2c:77:f5:c8:c6:19:e8:0c:49:74:5f: 3d:8c:9a:e9:cb:55:ed:eb:7c:33:ae:e8:64:9a:c2:39:69:d5: 4a:c9:a3:bf:2a:26:00:28:43:70:74:71:c8:a2:f1:b7:f7:92: b3:16:c1:12:1e:72:75:34:e3:34:96:90:ec:b7:25:aa:86:9f: ff:47:72:73:5c:b2:17:5f:27:55:f1:5a:cd:15:f3:e2:99:5c: 60:49:da:cd:57:8d:da:96:ab:2f:f2:d0:52:91:85:e5:ed:8f: 16:42:c1:f2:86:1f:a4:f4:11:f2:1e:29:0a:30:77:bb:79:1c: f1:6d:2a:62:01:e5:60:99:db:bc:b5:b9:6c:29:a0:91:b4:6e: fc:65:5e:c5:09:03:78:20:bf:a3:ce:77:79:ec:8b:f2:4f:f4: a4:11:98:c4:39:27:4a:86:5f:4b:0c:9b:e3:6f:73:7a:4c:34: 2d:64:9c:dc:b9:ec:b5:b0:49:8f:5a:71:7d:9c:a7:d3:c6:55: c2:e6:4c:93:59:b4:1c:76:95:42:14:87:2b:86:a9:f8:94:81: 5d:19:a0:9b:b1:66:5c:a3:82:a5:3d:da:09:c7:2b:bb:51:a3: f6:66:17:91:c4:d8:e3:4a:52:31:7e:97:79:ee:02:ac:e3:09: 4a:ad:cf:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvDIrIUqPOkWCT5EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU2YTM3MDgtMjdmZC00NDM1LWE1MmEtNTdlNDRkYTdk YWI0MB4XDTI1MTEwNTIwMDAwOFoXDTI1MTEwODIwMDAwMFowLzEtMCsGA1UEAxMk NzBjZWMxZWMtODBhNC00YTJlLWI5NTgtNTZhMDIzMmYzYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJiKDg/s6+Hu2GVYDOS2oJt+F3DLmeyKfAz6 PJCL5Z3TDQiwb/0KD4BVfKZDn8z0RSxNo0dGNdRCK7X3924SIX+x4KLaq62Cw/6h LT9enrkSSPnuOnA+A+ywbiCaFxmzirJI5jXoLCfkujQBq32yvNWXKCd6WXcN6Wlc iq7mm8yxajSmNy4I/A2Lp6IgtFa8U9uDexd95s0tebOgAiYD+K/6GN5xQgrXy2yd gSzwewR7BRinVxZZ/iVDiNEAewNmVd3nReTdSc7LtggRzZ6vhjU4rDg6tAiaMAxU vzuKDKBtboJWc7BU3tX6XVSAXa25NfnqU5LMN4tBleAwRi2XAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAcLJyjPQu0Z86ZV/oajYLFoAnKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hNTZh MzcwOC0yN2ZkLTQ0MzUtYTUyYS01N2U0NGRhN2RhYjQvYTU2YTM3MDgtMjdmZC00 NDM1LWE1MmEtNTdlNDRkYTdkYWI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTU2YTM3MDgtMjdmZC00NDM1LWE1 MmEtNTdlNDRkYTdkYWI0L2E1NmEzNzA4LTI3ZmQtNDQzNS1hNTJhLTU3ZTQ0ZGE3 ZGFiNC5jcmwwHwYDVR0jBBgwFoAUYxdhN6W4bgguJV+vHGT8T454Dn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hNTZhMzcwOC0yN2ZkLTQ0MzUtYTUyYS01N2U0 NGRhN2RhYjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4wZ0KS5SmLHf1yMYZ6AxJ dF89jJrpy1Xt63wzruhkmsI5adVKyaO/KiYAKENwdHHIovG395KzFsESHnJ1NOM0 lpDstyWqhp//R3JzXLIXXydV8VrNFfPimVxgSdrNV43alqsv8tBSkYXl7Y8WQsHy hh+k9BHyHikKMHe7eRzxbSpiAeVgmdu8tblsKaCRtG78ZV7FCQN4IL+jznd57Ivy T/SkEZjEOSdKhl9LDJvjb3N6TDQtZJzcuey1sEmPWnF9nKfTxlXC5kyTWbQcdpVC FIcrhqn4lIFdGaCbsWZco4KlPdoJxyu7UaP2ZheRxNjjSlIxfpd57gKs4wlKrc+b -----END CERTIFICATE-----Generated at Thu Nov 6 00:09:33 2025 by rpki-client