$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft File: 1a059caa-dd4f-4480-a089-c3da1959a314.mft (raw, json) Hash identifier: SllIeFgzVnyWz7fm3MJXR2rxbW2V0xYvtHVZDvojXwo= Subject key identifier: 9C:05:C0:A8:91:F0:3C:08:96:15:B6:CA:B0:40:BA:72:6D:55:A5:FE Authority key identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42 Certificate issuer: /CN=1a059caa-dd4f-4480-a089-c3da1959a314 Certificate serial: 010D0C9F4328584BC075C86976207BEBF5524A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft Manifest number: 010D0C9F43285845E5594BF55BD0C6C214853806 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 1a059caa-dd4f-4480-a089-c3da1959a314.crl (hash: gB9ZMgp7qbp+fOk3SZU4i4+2VfG/dX062qrDWPE6OdY=) 2: e4d0207a-085a-31a1-871e-eafcc1a16dab.roa (hash: 4uuAM60ki+8lRlU+orWkhcRS8lAngRwgJfY1F8jeWMQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:69:76:20:7b:eb:f5:52:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a059caa-dd4f-4480-a089-c3da1959a314 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=563b5f9e-6842-4eeb-b9a2-fe761e61b077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:17:bd:e8:ae:72:a9:81:1e:17:ae:67:28: fe:bc:7a:7d:f3:a7:60:30:1f:34:4e:2f:b2:83:23: 79:ed:e8:65:b0:fc:67:71:5c:fa:d4:68:0c:4d:d5: f0:58:39:57:b2:42:7c:93:f8:a3:ee:d8:88:ff:0b: a5:f4:2c:76:63:80:57:59:a2:4e:a3:d9:db:df:6d: dd:ba:5a:8a:9c:98:7c:e3:06:b1:00:f8:e8:97:a7: 8c:b2:dd:ec:ef:5b:d8:db:55:d4:81:3b:df:c8:56: 73:74:d5:14:d1:da:b2:59:65:a7:c1:3f:6a:cd:c3: 4e:bd:15:8c:c0:ff:10:fb:be:b1:d5:1e:c2:c3:9b: a9:2a:23:7a:c5:2c:11:5e:77:23:0c:69:bc:16:ae: 7c:ad:19:bf:16:43:03:28:ce:3e:c8:0c:88:ec:be: 90:59:8b:76:a1:f6:28:aa:1d:10:61:2d:a4:5a:11: 66:1b:a1:3d:02:65:67:4e:80:4a:11:1f:b0:50:ac: 4d:4c:67:a9:81:ab:6a:07:89:71:f5:18:e6:85:bc: 2a:10:c1:21:c6:ae:01:18:ff:1a:a7:67:ab:2e:1e: 19:90:54:41:7d:71:10:9f:d4:ef:ec:7e:bf:a7:0b: 2f:9d:01:d4:8e:76:59:45:ad:cc:a5:e5:12:ae:21: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:05:C0:A8:91:F0:3C:08:96:15:B6:CA:B0:40:BA:72:6D:55:A5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl X509v3 Authority Key Identifier: keyid:F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:42:2c:6d:93:f7:ed:f9:b4:29:8c:fc:6e:2d:11:1b:99:7c: c1:6b:2d:37:f0:2b:96:4e:a3:0c:0e:2c:83:2c:8e:f8:8b:e4: 4d:0b:fd:35:6b:e7:e8:31:1c:2a:89:8b:84:33:18:a8:64:b2: 58:f2:3e:93:0e:60:b8:9a:d0:50:40:f8:2a:21:27:6b:cd:fb: 99:db:65:69:ee:d6:38:51:d8:e5:a0:51:e2:89:ae:76:0e:c2: 7b:fe:38:92:e9:b8:e2:95:d3:fe:1e:7d:47:47:ac:e2:d6:a2: 49:c9:0b:78:5d:0c:3a:29:8c:54:3b:73:c9:c3:ab:87:ce:47: 62:68:67:ce:8e:b8:37:4c:6b:fe:ad:82:51:e1:27:e2:81:56: 16:95:fe:f9:37:e7:69:36:0e:22:83:9b:f0:83:c2:d7:e7:4d: c7:09:c6:71:a4:10:97:14:ea:fe:e2:ed:60:bf:18:fe:ea:b1: 86:60:73:7a:8f:dc:bb:a6:1e:4a:67:88:77:cc:72:38:47:e6: 94:e3:19:01:ec:c6:51:c0:9f:ad:fd:eb:ef:a9:28:92:0f:93: af:34:8c:2f:43:28:db:79:73:7f:78:7a:58:b1:30:56:4b:f1: 48:6d:fd:0e:18:4b:e8:0f:d0:86:f7:0d:0d:d2:65:5f:7b:0d: a8:90:05:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdchpdiB76/VSSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEwNTljYWEtZGQ0Zi00NDgwLWEwODktYzNkYTE5NTlh MzE0MB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk NTYzYjVmOWUtNjg0Mi00ZWViLWI5YTItZmU3NjFlNjFiMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnYXveiucqmBHheuZyj+vHp986dgMB80Ti+y gyN57ehlsPxncVz61GgMTdXwWDlXskJ8k/ij7tiI/wul9Cx2Y4BXWaJOo9nb323d ulqKnJh84waxAPjol6eMst3s71vY21XUgTvfyFZzdNUU0dqyWWWnwT9qzcNOvRWM wP8Q+76x1R7Cw5upKiN6xSwRXncjDGm8Fq58rRm/FkMDKM4+yAyI7L6QWYt2ofYo qh0QYS2kWhFmG6E9AmVnToBKER+wUKxNTGepgatqB4lx9RjmhbwqEMEhxq4BGP8a p2erLh4ZkFRBfXEQn9Tv7H6/pwsvnQHUjnZZRa3MpeUSriGEKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJwFwKiR8DwIlhW2yrBAunJtVaX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYTA1 OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2RhMTk1OWEzMTQvMWEwNTljYWEtZGQ0Zi00 NDgwLWEwODktYzNkYTE5NTlhMzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWEwNTljYWEtZGQ0Zi00NDgwLWEw ODktYzNkYTE5NTlhMzE0LzFhMDU5Y2FhLWRkNGYtNDQ4MC1hMDg5LWMzZGExOTU5 YTMxNC5jcmwwHwYDVR0jBBgwFoAU9FqTZTN0o2erqo73F7RNQO3it0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xYTA1OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2Rh MTk1OWEzMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgQixtk/ft+bQpjPxuLREb mXzBay038CuWTqMMDiyDLI74i+RNC/01a+foMRwqiYuEMxioZLJY8j6TDmC4mtBQ QPgqISdrzfuZ22Vp7tY4UdjloFHiia52DsJ7/jiS6bjildP+Hn1HR6zi1qJJyQt4 XQw6KYxUO3PJw6uHzkdiaGfOjrg3TGv+rYJR4SfigVYWlf75N+dpNg4ig5vwg8LX 503HCcZxpBCXFOr+4u1gvxj+6rGGYHN6j9y7ph5KZ4h3zHI4R+aU4xkB7MZRwJ+t /evvqSiSD5OvNIwvQyjbeXN/eHpYsTBWS/FIbf0OGEvoD9CG9w0N0mVfew2okAUu -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:37 2025 by rpki-client