$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft File: 0c71d09c-b853-44b9-8b34-8d5283774a5a.mft (raw, json) Hash identifier: I19u04Z4+hdIPha81h2vP/jKwR0aCRgbfrX/CE/TmVQ= Subject key identifier: 05:03:D5:65:A7:F5:8E:54:F8:90:6E:57:8B:E5:F9:60:89:75:2E:6E Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Certificate serial: 010D0C9F4328584BC093821D1689C650AC198500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft Manifest number: 010D0C9F4328584434C5FD29ACBE7CC1BE4F1880 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 0c71d09c-b853-44b9-8b34-8d5283774a5a.crl (hash: bdjKNvVblLx2ljG3mTV5cqoG1iIuR6Qdnd8Kn2mIuoE=) 2: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (hash: dfDh+8ngdP5YXCKLmUlMvUvoIUbbLKhZEYFpuIw4Pec=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:82:1d:16:89:c6:50:ac:19:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=933ad977-8932-484c-861a-ee27947b8d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:3e:01:bf:d8:37:77:22:09:3a:36:db:95: 8d:c0:9f:1e:2b:72:a7:46:13:10:02:61:4d:c6:c4: ad:a4:2c:e7:23:17:82:e1:54:0e:c9:73:91:63:88: f2:62:f8:41:c7:97:d3:b0:ca:90:c9:8b:8e:d8:05: 31:66:e2:5b:a0:61:bf:d9:99:09:3d:03:5a:a1:49: 6d:14:dc:90:08:c2:8f:1f:18:fb:fe:c8:1e:3f:f5: 12:45:45:04:71:bd:46:0a:cc:9a:9f:f7:b0:54:ad: a4:36:4b:fb:bc:7f:55:d3:c5:b2:47:65:1d:9d:98: 52:08:27:02:d2:89:30:f1:2d:25:66:05:f6:72:81: f2:a0:3b:89:ca:82:80:82:b4:6e:68:5f:dd:65:55: 8b:a1:2e:df:20:b6:12:11:f8:87:52:92:d9:b3:69: d0:46:3e:f6:c3:99:a1:b7:08:44:db:60:d9:7d:e9: e0:b8:06:28:63:10:77:49:1e:f4:69:75:64:75:18: cd:b8:f9:1f:ab:ae:30:a0:57:92:83:b3:22:77:04: 73:0a:45:d7:2e:32:21:72:10:c5:5d:ed:65:bf:cd: e7:28:3b:23:3d:24:35:32:dc:6e:ab:18:9a:64:9b: 04:ae:98:e7:fe:df:73:b2:47:7a:d3:c8:dc:2c:5c: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:D5:65:A7:F5:8E:54:F8:90:6E:57:8B:E5:F9:60:89:75:2E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl X509v3 Authority Key Identifier: keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:af:1d:48:e6:02:18:95:69:24:2f:ca:cb:18:1a:7f:fd:be: b8:e7:10:3f:04:fc:f5:39:51:85:98:89:6f:09:f9:cd:7a:80: eb:22:17:00:1e:d9:bc:ac:2c:7e:c7:ff:31:56:9e:44:ea:ba: fb:cf:4a:81:08:3a:58:03:f5:ab:57:3e:5f:8e:42:6a:e0:75: 58:51:4e:0d:eb:1f:db:43:52:ac:f9:e5:bc:0d:e9:fb:58:fe: 64:18:48:a7:91:67:cd:19:a2:7c:2d:04:d6:ce:37:43:72:88: c3:e4:f3:56:66:2d:bd:c9:18:f1:db:a0:57:36:5f:7f:3d:ad: 2a:ae:a2:28:e5:29:0e:cb:b8:e3:a6:c3:7a:04:21:74:63:89: 0e:66:9a:ee:87:ba:71:97:60:5e:70:a8:11:07:76:86:37:4f: 5c:d9:0c:ac:89:23:a5:b1:ef:aa:70:1f:9c:da:0d:8c:4c:15: 3f:47:88:87:0c:08:52:87:bc:69:dc:96:32:2e:b5:49:44:43: e1:66:d7:16:5d:16:45:2a:4f:1f:d3:17:d2:f9:9b:bc:e3:86: b6:a7:a0:ef:0a:d3:c2:cf:89:15:14:43:86:ec:4b:4e:57:b2: 8f:5d:4c:37:9b:44:34:bd:9f:39:c6:6e:8f:06:46:8f:1e:61: 5b:9e:86:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4IdFonGUKwZhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0 YTVhMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk OTMzYWQ5NzctODkzMi00ODRjLTg2MWEtZWUyNzk0N2I4ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlns+Ab/YN3ciCTo225WNwJ8eK3KnRhMQAmFN xsStpCznIxeC4VQOyXORY4jyYvhBx5fTsMqQyYuO2AUxZuJboGG/2ZkJPQNaoUlt FNyQCMKPHxj7/sgeP/USRUUEcb1GCsyan/ewVK2kNkv7vH9V08WyR2UdnZhSCCcC 0okw8S0lZgX2coHyoDuJyoKAgrRuaF/dZVWLoS7fILYSEfiHUpLZs2nQRj72w5mh twhE22DZfenguAYoYxB3SR70aXVkdRjNuPkfq64woFeSg7MidwRzCkXXLjIhchDF Xe1lv83nKDsjPSQ1MtxuqxiaZJsErpjn/t9zskd608jcLFxbLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAUD1WWn9Y5U+JBuV4vl+WCJdS5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMGM3MWQwOWMtYjg1My00 NGI5LThiMzQtOGQ1MjgzNzc0YTVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3 NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy ODM3NzRhNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClrx1I5gIYlWkkL8rLGBp/ /b645xA/BPz1OVGFmIlvCfnNeoDrIhcAHtm8rCx+x/8xVp5E6rr7z0qBCDpYA/Wr Vz5fjkJq4HVYUU4N6x/bQ1Ks+eW8Den7WP5kGEinkWfNGaJ8LQTWzjdDcojD5PNW Zi29yRjx26BXNl9/Pa0qrqIo5SkOy7jjpsN6BCF0Y4kOZpruh7pxl2BecKgRB3aG N09c2QysiSOlse+qcB+c2g2MTBU/R4iHDAhSh7xp3JYyLrVJREPhZtcWXRZFKk8f 0xfS+Zu844a2p6DvCtPCz4kVFEOG7EtOV7KPXUw3m0Q0vZ85xm6PBkaPHmFbnoZM -----END CERTIFICATE-----Generated at Wed Nov 5 14:04:52 2025 by rpki-client