$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft File: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft (raw, json) Hash identifier: oPYRpWaUu8r2lYhzxFuhA5IVagDSNUcE6UfUzAQmv2g= Subject key identifier: 2A:DE:80:70:1B:7B:DA:04:D9:8C:D0:33:8F:31:D7:DB:50:C5:F2:33 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F4328584BC01C67A1B13C895F416DEA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft Manifest number: 010D0C9F4328584733F8223248709F44DB21072C Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (hash: t93rSacsNu46jF39cSSe/Bc+JRbPX1e+DWIIHclAuI8=) 2: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl (hash: kb39l6otD/+efvhSzB8R0me6sMNUloVPiMyq5wshbFk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:67:a1:b1:3c:89:5f:41:6d:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=7b855a35-1be5-4997-ad99-e594231b2d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:80:40:a8:b1:d4:7f:ff:75:ec:22:0c:d4: b3:14:39:ac:db:26:64:29:49:5f:70:09:5e:06:82: 51:b4:89:9f:04:cd:51:c2:16:4a:c5:ad:29:f6:aa: 73:6d:04:61:e6:00:06:28:38:bf:46:c2:47:71:20: 79:33:d2:94:06:58:c3:29:e2:04:09:4a:e2:bd:de: c3:00:0b:6f:07:7b:64:73:d0:ba:18:1e:39:17:05: 42:50:b7:b6:3c:4a:ef:ab:4c:55:a2:2b:03:31:71: f7:f7:56:8d:18:39:b1:3e:75:2f:58:a6:33:8d:75: 95:f7:11:fe:3d:13:a7:94:68:b6:1b:bc:54:85:e5: 9d:9e:c2:4f:22:4d:3e:4a:9d:99:7e:8c:9d:a7:7f: db:04:dc:a6:ed:f8:2f:43:69:08:3b:aa:32:14:50: f1:cd:b4:5b:a4:d0:24:c5:e7:b2:69:6a:64:88:ad: 02:0d:47:ed:92:ea:b8:4b:8b:cc:49:f1:16:31:d9: 85:c8:c4:57:f7:55:33:6b:8d:55:4a:9a:cf:37:0c: e2:2e:9e:bb:77:45:45:27:f3:2f:ec:25:29:4d:5b: 67:b5:0b:39:c7:46:4e:a6:19:be:e2:e4:be:76:da: aa:30:ab:ca:33:27:a5:0e:04:cb:9e:99:d3:14:a0: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DE:80:70:1B:7B:DA:04:D9:8C:D0:33:8F:31:D7:DB:50:C5:F2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:49:0c:ea:9f:09:91:a9:36:65:6b:83:f0:52:1e:7e:43:0b: 6a:08:8e:89:7a:78:93:45:04:f8:6b:50:82:cc:ba:3a:3f:d4: 0e:15:03:5d:45:64:c3:9f:aa:a4:f1:bf:7f:04:45:6d:7a:25: c5:ae:74:36:a7:fb:1d:e5:80:75:90:26:89:6c:5e:6f:ed:d5: 9e:8f:6c:d5:f7:94:fc:c2:93:3a:28:14:0f:f3:5d:5d:99:55: 28:84:eb:da:9e:48:f8:ad:35:d6:e1:bd:c2:b3:9b:0b:b3:66: a7:35:e8:c3:df:cf:92:a7:62:f0:df:bb:5b:ba:f6:1d:0c:33: cb:0d:e2:ea:37:24:86:b0:7c:e4:fd:6d:bf:04:90:fb:72:ec: bd:dc:5d:c4:34:f1:01:86:0f:ae:ca:81:fb:ba:e3:94:99:a4: 23:70:0d:d8:9c:e3:cd:7c:8e:76:14:13:71:99:bb:ef:17:2f: 06:2e:de:17:99:5b:14:83:c6:9c:8d:c0:40:6f:3e:63:26:d3: 65:c8:33:29:ce:c3:ad:e6:f5:dc:a3:19:9b:00:8d:a0:96:f3: 2d:b7:1f:73:5d:e2:be:73:b9:f6:d4:60:fe:cd:ff:9a:92:54: ae:f7:b2:e2:24:6c:30:fe:58:38:ca:4d:d1:df:d9:c2:cb:3e: 79:3b:c0:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGehsTyJX0Ft6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk N2I4NTVhMzUtMWJlNS00OTk3LWFkOTktZTU5NDIzMWIyZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU+AQKix1H//dewiDNSzFDms2yZkKUlfcAle BoJRtImfBM1RwhZKxa0p9qpzbQRh5gAGKDi/RsJHcSB5M9KUBljDKeIECUrivd7D AAtvB3tkc9C6GB45FwVCULe2PErvq0xVoisDMXH391aNGDmxPnUvWKYzjXWV9xH+ PROnlGi2G7xUheWdnsJPIk0+Sp2Zfoydp3/bBNym7fgvQ2kIO6oyFFDxzbRbpNAk xeeyaWpkiK0CDUftkuq4S4vMSfEWMdmFyMRX91Uza41VSprPNwziLp67d0VFJ/Mv 7CUpTVtntQs5x0ZOphm+4uS+dtqqMKvKMyelDgTLnpnTFKCunwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCregHAbe9oE2YzQM48x19tQxfIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMWNmOWU1NmEtNWNjMy00 N2EyLWE5NmQtMzY1MGM0ZGU0NWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCSQzqnwmRqTZla4PwUh5+ QwtqCI6JeniTRQT4a1CCzLo6P9QOFQNdRWTDn6qk8b9/BEVteiXFrnQ2p/sd5YB1 kCaJbF5v7dWej2zV95T8wpM6KBQP811dmVUohOvankj4rTXW4b3Cs5sLs2anNejD 38+Sp2Lw37tbuvYdDDPLDeLqNySGsHzk/W2/BJD7cuy93F3ENPEBhg+uyoH7uuOU maQjcA3YnOPNfI52FBNxmbvvFy8GLt4XmVsUg8acjcBAbz5jJtNlyDMpzsOt5vXc oxmbAI2glvMttx9zXeK+c7n21GD+zf+aklSu97LiJGww/lg4yk3R39nCyz55O8Au -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:43 2025 by rpki-client