$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft File: fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft (raw, json) Hash identifier: WVUsDW62BkIcwYJcMM4dK49387addp5bzMLRPKReczI= Subject key identifier: 73:2B:24:96:25:91:1A:A2:16:B2:2F:F5:14:AE:27:BA:93:92:73:91 Authority key identifier: EF:46:59:72:29:1A:89:CE:07:82:4C:54:37:08:B8:A6:36:F1:AC:7D Certificate issuer: /CN=fcda63d6-4746-4a8d-9398-5f81cd3bc46e Certificate serial: 010D0C9F4328584BBF69B7EC1938141681B38F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft Manifest number: 010D0C9F432858478F680878023827A4732FD589 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 6cf76152-779e-3ae1-beeb-3bb9792ba1ad.roa (hash: I6u6KG+V1qdvly8+yzZggEyqVn3ow5sc49BQxlOHy8A=) 2: fcda63d6-4746-4a8d-9398-5f81cd3bc46e.crl (hash: iZet2KeXRSooBww5VJygtUrMLzeGKVFAD6bpqj13rlU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:ec:19:38:14:16:81:b3:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcda63d6-4746-4a8d-9398-5f81cd3bc46e Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=7a76f7b5-ee32-4475-88b4-f8e82e81d2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:95:fe:1d:92:f3:3d:fa:5d:68:55:70:df: 29:08:48:52:72:45:fb:e1:02:43:f9:17:30:17:d9: 98:7a:87:84:c4:c9:8f:80:66:85:ab:2a:13:c2:8d: 37:ad:67:5e:0b:88:17:59:0c:5e:2c:82:1f:b5:c5: 7b:a2:e2:56:df:a6:80:3e:5f:25:89:3a:e4:92:4f: 81:0d:31:da:46:db:10:22:c3:7f:e5:c9:d3:4c:e1: 95:9d:d1:6b:7e:1b:b7:b1:99:62:03:7a:ea:ab:7e: f3:cd:d4:7d:5d:a5:94:09:18:dd:ff:1a:d8:4d:40: d2:4d:4a:19:80:05:12:8c:3d:96:66:68:13:86:d4: f8:30:bc:2b:da:85:90:a1:8e:c5:12:79:1c:18:69: 28:10:5d:44:e6:55:4d:71:27:5f:ec:61:ed:43:5a: 8a:47:dc:3d:44:78:2b:b9:19:e0:44:43:85:8a:88: 8a:4e:bf:29:bb:b9:fd:02:9f:d5:7f:f5:00:58:47: ba:90:59:da:35:cb:7b:1c:40:bd:39:6a:17:eb:fe: 45:cb:20:90:7d:cd:25:34:61:f0:fa:a4:93:ac:57: 87:95:70:0b:48:45:2f:6c:8b:0d:be:5b:a8:51:ff: 88:b2:75:31:df:cc:97:6b:21:ec:63:13:ac:a8:f2: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:24:96:25:91:1A:A2:16:B2:2F:F5:14:AE:27:BA:93:92:73:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.crl X509v3 Authority Key Identifier: keyid:EF:46:59:72:29:1A:89:CE:07:82:4C:54:37:08:B8:A6:36:F1:AC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4f:8a:fa:ff:f2:e4:9a:bf:73:c5:b2:55:f1:6f:61:32:ec: 18:e1:b2:d3:91:fd:e6:16:7b:77:95:c1:a4:53:92:49:f5:8b: 05:92:36:26:aa:15:b0:78:a3:16:bd:31:1e:f2:6f:3a:ea:ed: 95:a5:2e:53:78:45:85:43:27:83:21:6f:90:1d:de:98:7c:a9: 8d:e5:3d:5d:20:83:25:a5:af:3d:13:88:f1:11:a4:11:6e:b7: 79:56:0a:04:80:ad:40:9c:40:3d:e4:ff:57:2b:0f:d3:82:d4: 54:87:c7:15:90:94:f8:4b:a3:1e:df:45:20:ba:25:01:50:80: d2:72:5a:af:98:6d:b3:3a:10:41:7c:c8:14:8c:44:97:2b:5f: e4:f2:1e:be:58:d0:e1:3e:ad:f4:85:95:f2:2f:9d:59:5d:d2: a4:07:9b:1b:3b:0c:ce:f5:b0:14:bf:e3:30:65:9b:0b:8b:bf: b5:36:67:f6:e4:27:d1:0d:0d:b4:73:ca:87:2b:59:55:a7:e8: 68:eb:03:eb:1d:6f:0a:b1:ce:ef:6a:63:42:62:67:18:9f:97: 3b:83:bf:d6:ca:38:d9:e6:66:70:21:4d:fd:dd:68:09:4e:49: 9a:b1:a9:88:99:8a:d1:09:67:6a:44:a7:1c:fa:97:fe:53:73: c3:83:bd:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abfsGTgUFoGzjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkYTYzZDYtNDc0Ni00YThkLTkzOTgtNWY4MWNkM2Jj NDZlMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk N2E3NmY3YjUtZWUzMi00NDc1LTg4YjQtZjhlODJlODFkMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmeV/h2S8z36XWhVcN8pCEhSckX74QJD+Rcw F9mYeoeExMmPgGaFqyoTwo03rWdeC4gXWQxeLIIftcV7ouJW36aAPl8liTrkkk+B DTHaRtsQIsN/5cnTTOGVndFrfhu3sZliA3rqq37zzdR9XaWUCRjd/xrYTUDSTUoZ gAUSjD2WZmgThtT4MLwr2oWQoY7FEnkcGGkoEF1E5lVNcSdf7GHtQ1qKR9w9RHgr uRngREOFioiKTr8pu7n9Ap/Vf/UAWEe6kFnaNct7HEC9OWoX6/5FyyCQfc0lNGHw +qSTrFeHlXALSEUvbIsNvluoUf+IsnUx38yXayHsYxOsqPJBRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHMrJJYlkRqiFrIv9RSuJ7qTknORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mY2Rh NjNkNi00NzQ2LTRhOGQtOTM5OC01ZjgxY2QzYmM0NmUvZmNkYTYzZDYtNDc0Ni00 YThkLTkzOTgtNWY4MWNkM2JjNDZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmNkYTYzZDYtNDc0Ni00YThkLTkz OTgtNWY4MWNkM2JjNDZlL2ZjZGE2M2Q2LTQ3NDYtNGE4ZC05Mzk4LTVmODFjZDNi YzQ2ZS5jcmwwHwYDVR0jBBgwFoAU70ZZcikaic4HgkxUNwi4pjbxrH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mY2RhNjNkNi00NzQ2LTRhOGQtOTM5OC01Zjgx Y2QzYmM0NmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkT4r6//Lkmr9zxbJV8W9h MuwY4bLTkf3mFnt3lcGkU5JJ9YsFkjYmqhWweKMWvTEe8m866u2VpS5TeEWFQyeD IW+QHd6YfKmN5T1dIIMlpa89E4jxEaQRbrd5VgoEgK1AnEA95P9XKw/TgtRUh8cV kJT4S6Me30UguiUBUIDSclqvmG2zOhBBfMgUjESXK1/k8h6+WNDhPq30hZXyL51Z XdKkB5sbOwzO9bAUv+MwZZsLi7+1Nmf25CfRDQ20c8qHK1lVp+ho6wPrHW8Ksc7v amNCYmcYn5c7g7/WyjjZ5mZwIU393WgJTkmasamImYrRCWdqRKcc+pf+U3PDg70i -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:40 2025 by rpki-client