$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft File: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft (raw, json) Hash identifier: YVV+Zm2uZ6as9DmZsOn8yFvCsbwYcAjzHvK/Hx0j4sU= Subject key identifier: 39:A0:EB:A4:AF:34:0F:B1:4C:5C:BD:18:FC:3C:2E:03:3B:A1:95:2A Authority key identifier: D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB Certificate issuer: /CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Certificate serial: 010D0C9F4328584BBE3FFA3B1E4F536E22168290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft Manifest number: 010D0C9F4328584073A836D3D1AF1179948868A4 Signing time: Tue 04 Nov 2025 02:00:08 +0000 Manifest this update: Tue 04 Nov 2025 02:00:08 +0000 Manifest next update: Thu 06 Nov 2025 02:00:00 +0000 Files and hashes: 1: 6377132b-c138-3ca8-903b-d7b5fbef607d.roa (hash: h7mG8oIF3b7Djy7mtwm/TGYhr5kCq3b+zfxQIffhMyE=) 2: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl (hash: 09mzLmWL2TSG4si4SQIRzRlBdFDpuRTip6nX2HXu3Nw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:3f:fa:3b:1e:4f:53:6e:22:16:82:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Validity Not Before: Nov 4 02:00:08 2025 GMT Not After : Nov 6 02:00:00 2025 GMT Subject: CN=69c38792-ad24-4a6d-bf27-9d0e2b2e76d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:de:7d:49:d4:0f:4c:16:49:f3:11:f8:2e: 5b:14:c3:53:19:c6:7b:9d:d3:91:ee:45:25:3d:03: c5:7a:81:ae:5c:94:bb:5d:5c:05:f3:61:f7:ac:f2: ad:3b:a1:06:e4:1d:4a:67:77:2d:e2:3b:1a:15:03: 50:5b:e7:73:3a:e5:14:eb:b6:a8:23:a8:32:d7:b5: 08:0f:97:fb:51:bf:6b:f6:64:c8:97:8a:2b:f6:da: f7:ce:70:2f:1c:54:75:e2:ba:0b:07:7c:78:ed:b7: f5:86:31:10:6b:48:4b:00:e6:9e:3b:33:13:2b:27: 3a:7d:ac:c1:1b:da:26:9e:b1:64:f2:01:41:d7:70: 50:8b:ae:5c:96:f0:20:82:5b:6d:54:2c:10:81:6c: 30:fa:da:89:dc:83:c4:3e:8f:5a:b3:2b:ae:61:e3: 9c:18:3d:62:e0:60:bb:52:81:d0:5e:05:e1:9c:48: bf:31:e4:03:d9:10:66:b7:c8:62:70:ad:22:9c:bd: f0:6c:a9:d3:c9:50:9f:05:ee:b8:09:07:4b:37:58: d9:7f:dc:b5:4b:d8:61:f0:8d:87:ea:8f:04:44:fb: dc:54:cf:e5:5d:bc:91:f1:51:0d:c1:a0:e3:84:ba: 12:d8:d8:6a:7c:84:c4:cb:15:04:e5:51:3e:0e:68: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A0:EB:A4:AF:34:0F:B1:4C:5C:BD:18:FC:3C:2E:03:3B:A1:95:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl X509v3 Authority Key Identifier: keyid:D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:90:16:36:b1:cf:77:ef:2c:43:48:62:80:6d:14:27:d8:4b: 6d:5b:ab:8b:05:ae:89:0a:43:77:88:89:76:53:88:b8:c4:fa: 4a:ba:0d:fe:60:53:4e:83:97:b1:ff:0b:68:c5:ea:fc:a0:9e: 3d:86:27:d7:19:22:36:02:9e:04:dc:7b:eb:3a:95:79:25:7e: 3e:e0:6d:de:be:74:4d:55:5e:c8:b9:ec:48:2d:fe:c4:67:0a: 70:72:c5:ae:46:1f:e7:78:6f:d2:71:fd:24:f9:9b:1b:e6:f8: d9:bc:52:dd:d8:d2:e5:48:78:60:9b:8d:15:04:ba:38:10:50: 0f:47:63:e8:ee:7b:1f:a7:78:ff:73:f8:71:b5:0e:69:15:1b: 65:2c:a5:72:c0:04:79:b7:c3:78:1b:11:13:ff:41:d8:27:45: c2:80:3d:4d:d1:c9:7e:a5:6c:13:e8:79:af:5a:df:b6:b4:e6: a6:63:8d:2c:41:72:32:d4:58:55:d9:98:77:52:45:f3:7e:d3: b8:16:a6:c4:41:3b:d2:39:75:a2:0f:b9:8f:68:78:d9:18:af: 92:2a:79:f7:49:de:48:8d:1c:40:0c:26:bc:d4:e8:cd:45:5c: 8d:1e:91:bb:51:70:1c:32:83:76:07:a9:c6:05:cb:34:3e:38: 54:a1:e1:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+P/o7Hk9TbiIWgpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2M1YjUtM2Q4Yi00ZDZkLWFjZjEtNGI3Mjk5ZmJl NGNkMB4XDTI1MTEwNDAyMDAwOFoXDTI1MTEwNjAyMDAwMFowLzEtMCsGA1UEAxMk NjljMzg3OTItYWQyNC00YTZkLWJmMjctOWQwZTJiMmU3NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyITefUnUD0wWSfMR+C5bFMNTGcZ7ndOR7kUl PQPFeoGuXJS7XVwF82H3rPKtO6EG5B1KZ3ct4jsaFQNQW+dzOuUU67aoI6gy17UI D5f7Ub9r9mTIl4or9tr3znAvHFR14roLB3x47bf1hjEQa0hLAOaeOzMTKyc6fazB G9omnrFk8gFB13BQi65clvAgglttVCwQgWww+tqJ3IPEPo9asyuuYeOcGD1i4GC7 UoHQXgXhnEi/MeQD2RBmt8hicK0inL3wbKnTyVCfBe64CQdLN1jZf9y1S9hh8I2H 6o8ERPvcVM/lXbyR8VENwaDjhLoS2NhqfITEyxUE5VE+Dmj5RQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDmg66SvNA+xTFy9GPw8LgM7oZUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWI3 YzViNS0zZDhiLTRkNmQtYWNmMS00YjcyOTlmYmU0Y2QvYTFiN2M1YjUtM2Q4Yi00 ZDZkLWFjZjEtNGI3Mjk5ZmJlNGNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFiN2M1YjUtM2Q4Yi00ZDZkLWFj ZjEtNGI3Mjk5ZmJlNGNkL2ExYjdjNWI1LTNkOGItNGQ2ZC1hY2YxLTRiNzI5OWZi ZTRjZC5jcmwwHwYDVR0jBBgwFoAU1TkV+d8EQOEfbyAEO9JOYLESA6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWI3YzViNS0zZDhiLTRkNmQtYWNmMS00Yjcy OTlmYmU0Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5kBY2sc937yxDSGKAbRQn 2EttW6uLBa6JCkN3iIl2U4i4xPpKug3+YFNOg5ex/wtoxer8oJ49hifXGSI2Ap4E 3HvrOpV5JX4+4G3evnRNVV7IuexILf7EZwpwcsWuRh/neG/Scf0k+Zsb5vjZvFLd 2NLlSHhgm40VBLo4EFAPR2Po7nsfp3j/c/hxtQ5pFRtlLKVywAR5t8N4GxET/0HY J0XCgD1N0cl+pWwT6HmvWt+2tOamY40sQXIy1FhV2Zh3UkXzftO4FqbEQTvSOXWi D7mPaHjZGK+SKnn3Sd5IjRxADCa81OjNRVyNHpG7UXAcMoN2B6nGBcs0PjhUoeHp -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:49 2025 by rpki-client