$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft File: 23b53d83-5e68-43e6-b5fe-78a2c4546546.mft (raw, json) Hash identifier: gdPQTknDzAaocaUCwxYc6D2UnQT/tX0c395fjtFsw4M= Subject key identifier: 34:39:EF:4B:7C:78:06:42:92:EC:BD:95:EF:35:2C:97:9C:77:DA:34 Authority key identifier: FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B Certificate issuer: /CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Certificate serial: 010D0C9F4328584BC0ECE3E0EB1AF331D82A7340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft Manifest number: 010D0C9F43285847CE621D47090C35D968F729FB Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 23b53d83-5e68-43e6-b5fe-78a2c4546546.crl (hash: 2qBTQksIhOYvpVAfC8x+JzFicfvJ543n72OTheLxl9c=) 2: a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa (hash: W7h5UvI/Rt3amkra79h8JzjlJ+dMBHFkYRzjxYfK5e0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e3:e0:eb:1a:f3:31:d8:2a:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=2f696fce-ea64-40dc-8594-4a8466fbd12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:20:ee:c6:da:4a:90:c6:99:ae:cd:39:84: 99:92:76:63:5a:08:c8:03:59:fd:7d:e7:29:06:d7: 12:22:5d:0f:67:f3:83:3b:20:5e:a2:b0:4e:d4:ae: 33:fe:c2:8b:26:68:70:97:b9:47:9e:e2:af:e2:92: a1:a4:3b:7b:de:01:72:b6:e7:dd:a3:3a:db:1f:e7: 16:74:fb:24:65:b9:20:46:3d:62:eb:96:fe:77:e7: 18:e3:18:69:6e:9b:27:00:6b:23:20:e1:db:37:92: 19:3b:48:e7:01:a2:bc:e3:68:2a:c8:4e:3f:ef:b8: bb:e6:2f:74:ea:d2:53:d1:42:71:ae:e6:63:ee:a9: bd:9e:0a:61:f7:ab:66:41:55:f8:ad:65:97:8c:63: d8:38:b2:82:bd:5b:87:aa:49:86:fc:00:9f:07:57: 60:2e:a4:b2:07:5e:0a:9a:76:f5:bd:d6:f3:4e:7d: 1e:32:83:98:ea:09:96:8a:36:73:c1:a7:61:28:f5: 8b:fb:17:54:eb:50:b9:1a:a3:0c:d1:09:79:d2:fd: 90:48:46:b2:cb:9a:06:ee:19:53:00:6d:da:01:c0: 17:70:96:76:e2:58:26:69:bd:2c:ed:2a:69:4f:e7: 68:83:ec:45:97:b0:33:03:d3:57:c7:29:46:f9:ed: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:EF:4B:7C:78:06:42:92:EC:BD:95:EF:35:2C:97:9C:77:DA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl X509v3 Authority Key Identifier: keyid:FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b5:67:24:f6:27:75:62:33:b5:40:07:e6:5a:48:0e:6a:eb: 5a:7a:86:bf:24:25:9f:f2:6c:eb:d8:08:f5:9a:3f:ea:48:57: 73:24:08:28:55:fa:35:57:46:7a:b4:1b:e2:54:66:2d:f9:5a: b2:85:b4:fc:f0:4a:a2:c6:5d:d1:55:28:9b:19:36:b2:71:47: fb:7d:b3:b1:bb:7a:fe:3d:6c:f0:6d:e5:3f:cc:46:ca:31:f6: d8:7c:0e:8a:e2:d1:b2:7b:77:45:4e:d5:ca:a0:33:00:3b:05: 4e:5f:82:1a:35:66:f8:82:57:3f:a0:d5:0d:38:6d:86:27:0f: a6:49:a0:a4:fe:f7:e6:3f:5f:7c:86:2b:ff:e5:58:38:6e:27: 77:2a:67:6b:06:cb:75:3d:d3:e6:f7:a2:e3:69:65:d4:4b:7f: e5:31:af:9c:a5:34:94:f8:d6:59:4b:df:34:4d:e1:8f:99:73: f1:50:6b:47:68:68:2e:1d:db:71:ab:d8:52:ef:c2:e9:d4:18: b5:36:6d:4b:9b:03:ea:d9:d0:91:23:e4:ab:b3:f4:96:51:3a: e9:48:e2:e7:d7:dd:45:f7:34:19:77:1a:91:89:6d:f9:9a:51: 9a:29:91:01:4c:0c:46:ea:b1:55:9d:d5:fb:e1:6a:4f:db:a1: 46:ae:8d:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OPg6xrzMdgqc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTNkODMtNWU2OC00M2U2LWI1ZmUtNzhhMmM0NTQ2 NTQ2MB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk MmY2OTZmY2UtZWE2NC00MGRjLTg1OTQtNGE4NDY2ZmJkMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAg7sbaSpDGma7NOYSZknZjWgjIA1n9fecp BtcSIl0PZ/ODOyBeorBO1K4z/sKLJmhwl7lHnuKv4pKhpDt73gFytufdozrbH+cW dPskZbkgRj1i65b+d+cY4xhpbpsnAGsjIOHbN5IZO0jnAaK842gqyE4/77i75i90 6tJT0UJxruZj7qm9ngph96tmQVX4rWWXjGPYOLKCvVuHqkmG/ACfB1dgLqSyB14K mnb1vdbzTn0eMoOY6gmWijZzwadhKPWL+xdU61C5GqMM0Ql50v2QSEayy5oG7hlT AG3aAcAXcJZ24lgmab0s7SppT+dog+xFl7AzA9NXxylG+e0KxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQ570t8eAZCkuy9le81LJecd9o0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1 M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEyYzQ1NDY1NDYvMjNiNTNkODMtNWU2OC00 M2U2LWI1ZmUtNzhhMmM0NTQ2NTQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNiNTNkODMtNWU2OC00M2U2LWI1 ZmUtNzhhMmM0NTQ2NTQ2LzIzYjUzZDgzLTVlNjgtNDNlNi1iNWZlLTc4YTJjNDU0 NjU0Ni5jcmwwHwYDVR0jBBgwFoAU+v+87d2vk5tSjRwfpyf83ZKQ3iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEy YzQ1NDY1NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAItWck9id1YjO1QAfmWkgO autaeoa/JCWf8mzr2Aj1mj/qSFdzJAgoVfo1V0Z6tBviVGYt+VqyhbT88Eqixl3R VSibGTaycUf7fbOxu3r+PWzwbeU/zEbKMfbYfA6K4tGye3dFTtXKoDMAOwVOX4Ia NWb4glc/oNUNOG2GJw+mSaCk/vfmP198hiv/5Vg4bid3KmdrBst1PdPm96LjaWXU S3/lMa+cpTSU+NZZS980TeGPmXPxUGtHaGguHdtxq9hS78Lp1Bi1Nm1LmwPq2dCR I+Srs/SWUTrpSOLn191F9zQZdxqRiW35mlGaKZEBTAxG6rFVndX74WpP26FGro2H -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:10 2025 by rpki-client