$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.mft File: b6a80224-d488-4712-8f22-4b27aaeb45a0.mft (raw, json) Hash identifier: ZJw924NWBLTPlRPX4UsulUMFzqclMVmoqjxZPPVLa3c= Subject key identifier: 98:90:BD:33:CD:93:B0:16:E4:35:16:1D:6F:1D:82:E8:98:26:C9:9B Authority key identifier: 44:B2:40:AB:A9:63:62:93:C3:F6:D2:9B:B8:A4:02:CF:30:12:B5:4A Certificate issuer: /CN=b6a80224-d488-4712-8f22-4b27aaeb45a0 Certificate serial: 010D0C9F4328584BC0B148D84599666B053BFE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.mft Manifest number: 010D0C9F4328584707E1186E7297FCC3B5949E7C Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Thu 06 Nov 2025 23:00:00 +0000 Files and hashes: 1: a5babb5d-d8c9-3ebe-b61d-44c5c987a464.roa (hash: MbSHiAgXc61fOuR7ujYOtF36begD0GQOGhS5RdMnly8=) 2: b6a80224-d488-4712-8f22-4b27aaeb45a0.crl (hash: ezT2JT5fADOMR3KPT6h9DHUbCu+NYI7UvPXq6C8ZAh4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:48:d8:45:99:66:6b:05:3b:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a80224-d488-4712-8f22-4b27aaeb45a0 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 6 23:00:00 2025 GMT Subject: CN=7a0fd795-e8cf-4a29-b5fd-bdeea11d2576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:43:81:d3:c2:4c:b0:75:dc:a9:3c:64:39: 6e:80:be:02:5f:d4:31:07:fa:66:62:fa:64:f1:ab: 54:b9:ac:98:73:a0:75:3a:dd:f5:1f:48:32:12:17: 54:da:9d:7a:8b:c8:07:a0:d7:72:22:c1:2d:27:3a: 70:01:eb:d8:09:8f:f7:ae:8e:25:b7:8d:18:12:a5: b7:a3:76:02:5d:14:fe:82:a5:06:d4:fe:06:b8:e3: 08:93:e5:0e:0c:5d:f1:e2:19:94:9a:c5:6a:a1:d8: f7:9d:33:70:51:9d:7c:99:3d:b9:1e:c4:69:cc:c7: 1a:a4:32:a4:7b:46:ff:21:34:be:a7:5e:17:ee:a2: d4:57:30:6f:2f:19:be:84:53:46:2c:38:de:ef:71: fb:1b:0c:be:1d:0b:15:c5:47:94:ae:2d:4b:62:90: 72:e5:ca:9b:06:cc:46:35:27:0d:3a:e2:65:54:86: e5:48:9c:0a:2d:07:0b:4d:b8:07:d2:08:8d:34:60: c2:fc:29:09:67:a2:09:69:18:b7:57:83:3d:b6:a0: cc:84:1f:22:81:a5:3e:37:c8:ce:95:6b:05:a4:bc: 9f:53:d7:1c:7a:46:d4:82:80:14:4e:9e:88:b1:a4: 44:64:a0:f3:d4:77:56:bf:59:70:8c:a2:1f:d3:d9: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:90:BD:33:CD:93:B0:16:E4:35:16:1D:6F:1D:82:E8:98:26:C9:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.crl X509v3 Authority Key Identifier: keyid:44:B2:40:AB:A9:63:62:93:C3:F6:D2:9B:B8:A4:02:CF:30:12:B5:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e6:9a:b7:6a:99:f0:bd:e8:af:57:58:89:5a:9f:b2:a9:5e: b5:fe:7f:db:f9:72:4a:92:2a:8c:5b:f7:cc:65:a2:69:ec:10: 7e:fd:41:48:eb:38:3c:6d:57:e3:dc:50:e2:45:68:c6:9f:42: a9:cf:53:19:5f:5b:07:70:f4:11:5d:c0:2b:92:ef:b2:2e:5b: 15:8b:0f:61:c0:3c:c6:c8:1e:63:ac:eb:d0:36:26:ce:fb:3c: 49:f2:78:1f:07:f3:60:fb:b5:31:ea:87:11:f8:00:66:16:68: 9b:1c:34:be:b2:33:bd:2d:a3:33:3e:13:59:25:66:92:05:a8: 2e:19:7b:ed:62:9f:8e:ab:97:e0:ab:8b:4f:77:e6:eb:4f:c2: 8b:36:cb:a3:44:1a:53:26:29:1c:22:44:00:ef:f6:d5:4b:53: 80:c9:33:50:7e:03:d0:64:a6:e2:c0:29:d5:6a:5d:e8:71:bc: d6:3d:37:a1:fb:92:ac:d3:ab:d2:cb:cc:6e:de:d9:33:f6:cb: 83:83:38:e2:b0:54:c8:a3:97:11:e1:8a:87:ad:2d:a1:b1:51: 2a:da:96:d6:53:b5:8d:a1:ba:13:8a:c3:ce:bd:bb:b5:52:d6: e9:a2:d5:93:f2:0b:d3:d1:01:e4:a5:b6:1f:be:aa:ac:1a:da: fd:14:be:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUjYRZlmawU7/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZhODAyMjQtZDQ4OC00NzEyLThmMjItNGIyN2FhZWI0 NWEwMB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNjIzMDAwMFowLzEtMCsGA1UEAxMk N2EwZmQ3OTUtZThjZi00YTI5LWI1ZmQtYmRlZWExMWQyNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug9DgdPCTLB13Kk8ZDlugL4CX9QxB/pmYvpk 8atUuayYc6B1Ot31H0gyEhdU2p16i8gHoNdyIsEtJzpwAevYCY/3ro4lt40YEqW3 o3YCXRT+gqUG1P4GuOMIk+UODF3x4hmUmsVqodj3nTNwUZ18mT25HsRpzMcapDKk e0b/ITS+p14X7qLUVzBvLxm+hFNGLDje73H7Gwy+HQsVxUeUri1LYpBy5cqbBsxG NScNOuJlVIblSJwKLQcLTbgH0giNNGDC/CkJZ6IJaRi3V4M9tqDMhB8igaU+N8jO lWsFpLyfU9ccekbUgoAUTp6IsaREZKDz1HdWv1lwjKIf09kOXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJiQvTPNk7AW5DUWHW8dguiYJsmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iNmE4 MDIyNC1kNDg4LTQ3MTItOGYyMi00YjI3YWFlYjQ1YTAvYjZhODAyMjQtZDQ4OC00 NzEyLThmMjItNGIyN2FhZWI0NWEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjZhODAyMjQtZDQ4OC00NzEyLThm MjItNGIyN2FhZWI0NWEwL2I2YTgwMjI0LWQ0ODgtNDcxMi04ZjIyLTRiMjdhYWVi NDVhMC5jcmwwHwYDVR0jBBgwFoAURLJAq6ljYpPD9tKbuKQCzzAStUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iNmE4MDIyNC1kNDg4LTQ3MTItOGYyMi00YjI3 YWFlYjQ1YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA75pq3apnwveivV1iJWp+y qV61/n/b+XJKkiqMW/fMZaJp7BB+/UFI6zg8bVfj3FDiRWjGn0Kpz1MZX1sHcPQR XcArku+yLlsViw9hwDzGyB5jrOvQNibO+zxJ8ngfB/Ng+7Ux6ocR+ABmFmibHDS+ sjO9LaMzPhNZJWaSBaguGXvtYp+Oq5fgq4tPd+brT8KLNsujRBpTJikcIkQA7/bV S1OAyTNQfgPQZKbiwCnVal3ocbzWPTeh+5Ks06vSy8xu3tkz9suDgzjisFTIo5cR 4YqHrS2hsVEq2pbWU7WNoboTisPOvbu1UtbpotWT8gvT0QHkpbYfvqqsGtr9FL7p -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:21 2025 by rpki-client