$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft File: de8b5430-108d-4deb-960f-6c438a23adc4.mft (raw, json) Hash identifier: mhMW/SHci8Ul6VEBz5CZzsCpPwxKixkvEfKJD3GNvg8= Subject key identifier: 70:E6:E5:69:1E:E6:A9:DD:0C:0C:8F:13:18:BB:50:80:5A:3D:77:5A Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 Certificate issuer: /CN=de8b5430-108d-4deb-960f-6c438a23adc4 Certificate serial: 010D0C9F4328584BC057FE73913287C4BF211860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft Manifest number: 010D0C9F43285846F9A929CA3EB66024E7146FC1 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 481396d5-7946-3e77-a64e-bb23720d1260.roa (hash: zgCK0kR61/6R+eG+WyMqNFA9BUoUaS64UcWhVaH8iag=) 2: 8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (hash: n7VVzpBe4wPb7vvXfs5Mi6gGF16gYXufJ7AnaamL/is=) 3: de8b5430-108d-4deb-960f-6c438a23adc4.crl (hash: rUIubB3Via2byKNtOafJlaxG3p8QuhYBVn2Ta9zz82g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fe:73:91:32:87:c4:bf:21:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=1aa118de-c174-4bb5-9c03-8fed8a340e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:e2:3d:fb:5e:7d:ca:5c:2e:f6:b4:b0:0d: 79:e3:4b:19:cc:c6:99:b3:e6:49:47:f5:82:fb:4a: d3:60:7e:bc:43:fe:0e:47:c8:3c:f8:02:43:4b:4f: c8:45:ab:98:23:11:0f:47:fc:78:d5:47:a1:13:d5: e3:91:94:74:6a:ec:8e:e0:4d:3b:b9:e0:92:cc:72: 5b:f9:3f:52:4c:9f:cd:eb:41:bc:30:e2:35:69:b6: b3:79:ae:cc:f4:3d:e3:68:ad:86:76:f4:b5:23:01: ea:2b:eb:61:28:d2:8a:ea:cf:de:6f:d3:67:bb:a4: 32:b4:4f:81:ac:99:d7:16:11:f7:c2:86:6a:fe:86: f4:cb:ab:d3:d6:31:a7:f7:74:9f:1d:25:f9:c7:0a: d2:f0:6d:e3:82:0c:f6:8b:9d:89:71:f4:ce:f6:8a: ca:05:c1:5e:76:8c:67:70:6a:28:e5:52:34:f1:49: cf:ec:d1:74:7c:d1:68:dd:b5:ce:05:a8:1f:f7:ec: 0c:ab:6b:bf:2d:d0:f2:ad:58:30:02:b1:ca:59:37: 0e:44:bf:ba:17:8e:86:2e:4d:1c:f9:ef:77:db:ed: 0a:69:6f:5b:d0:57:79:15:af:4b:66:93:d7:2e:45: a8:25:3f:b2:cf:c1:73:2f:2a:4d:94:f2:3b:ad:fb: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E6:E5:69:1E:E6:A9:DD:0C:0C:8F:13:18:BB:50:80:5A:3D:77:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl X509v3 Authority Key Identifier: keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b6:99:41:d4:8b:87:10:42:e5:fa:d6:25:18:48:96:1c:c6: 53:4a:97:0a:54:eb:93:55:e0:56:1e:3c:5f:0f:18:f8:20:9d: 4a:4b:18:d2:6e:07:60:6c:e6:3b:8c:b1:4e:dd:1f:02:82:38: 4f:d0:e7:8e:f6:ab:28:6f:dc:23:5c:ae:1c:e7:86:e9:23:2b: 56:ed:c3:66:bf:d7:da:2a:1c:c3:37:00:9a:99:b3:af:1f:10: 39:c2:7e:a3:1e:ad:e3:94:f2:ac:60:57:d4:0f:e0:37:b3:b0: ed:bb:21:4c:13:8b:ae:30:46:6c:f3:74:72:f4:8c:7c:1b:cb: 85:fc:3a:dc:94:39:52:54:87:a6:5c:72:a4:05:e7:9c:7f:0b: a4:1c:e7:67:98:61:cd:bc:1d:0f:ec:84:03:2f:3a:5c:cb:7f: fd:fa:97:cd:e9:0f:e6:84:ad:01:ea:11:c8:5b:04:70:5b:fc: b8:74:11:44:a1:5a:71:68:60:30:94:46:d2:88:72:6c:97:eb: 25:be:e8:4f:16:52:68:90:ab:f1:0f:c6:b1:79:38:19:8c:67: d1:2e:9b:bf:7b:e1:4a:ec:ff:05:47:d8:7b:f6:35:a7:35:be: d4:91:e3:59:ce:33:8a:79:a9:68:c0:d2:f4:3f:6a:39:24:e7: 0a:55:40:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/5zkTKHxL8hGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh ZGM0MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk MWFhMTE4ZGUtYzE3NC00YmI1LTljMDMtOGZlZDhhMzQwZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF/iPftefcpcLva0sA1540sZzMaZs+ZJR/WC +0rTYH68Q/4OR8g8+AJDS0/IRauYIxEPR/x41UehE9XjkZR0auyO4E07ueCSzHJb +T9STJ/N60G8MOI1abazea7M9D3jaK2GdvS1IwHqK+thKNKK6s/eb9Nnu6QytE+B rJnXFhH3woZq/ob0y6vT1jGn93SfHSX5xwrS8G3jggz2i52JcfTO9orKBcFedoxn cGoo5VI08UnP7NF0fNFo3bXOBagf9+wMq2u/LdDyrVgwArHKWTcORL+6F46GLk0c +e932+0KaW9b0Fd5Fa9LZpPXLkWoJT+yz8FzLypNlPI7rfsMCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHDm5Wke5qndDAyPExi7UIBaPXdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvZGU4YjU0MzAtMTA4ZC00 ZGViLTk2MGYtNmM0MzhhMjNhZGM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2 MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz OGEyM2FkYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7tplB1IuHEELl+tYlGEiW HMZTSpcKVOuTVeBWHjxfDxj4IJ1KSxjSbgdgbOY7jLFO3R8CgjhP0OeO9qsob9wj XK4c54bpIytW7cNmv9faKhzDNwCambOvHxA5wn6jHq3jlPKsYFfUD+A3s7DtuyFM E4uuMEZs83Ry9Ix8G8uF/DrclDlSVIemXHKkBeecfwukHOdnmGHNvB0P7IQDLzpc y3/9+pfN6Q/mhK0B6hHIWwRwW/y4dBFEoVpxaGAwlEbSiHJsl+slvuhPFlJokKvx D8axeTgZjGfRLpu/e+FK7P8FR9h79jWnNb7UkeNZzjOKealowNL0P2o5JOcKVUAh -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:48 2025 by rpki-client