$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.mft File: 18205b44-1c26-4889-9950-57a29dee3d86.mft (raw, json) Hash identifier: FeRufU7nEMo/dOIODtG5LoQSDEhQ76uYnvg6rpZgSNE= Subject key identifier: 8E:DF:F9:D9:00:81:8F:B6:A5:AA:A1:06:7A:C2:4A:F8:C9:5A:20:11 Authority key identifier: 62:88:98:D6:5D:1A:C4:47:BF:D9:B4:80:1F:86:BA:D8:FD:33:7E:B4 Certificate issuer: /CN=18205b44-1c26-4889-9950-57a29dee3d86 Certificate serial: 010D0C9F4328584BBFE0D7BBEC4A612C09307478 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.mft Manifest number: 010D0C9F4328584B8287B238761F6EDE981960D7 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 18205b44-1c26-4889-9950-57a29dee3d86.crl (hash: wKG5/fQ9tHy3T4rfcRjlftLW92QoEH2qe8Rrv7e1Sqk=) 2: 7be45040-ce46-3d28-ad0e-4cdf71c5e164.roa (hash: GskCGaw24v4SuagBZJRNQWeGZfRz9GPhGvbOruCgeJQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d7:bb:ec:4a:61:2c:09:30:74:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18205b44-1c26-4889-9950-57a29dee3d86 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=f85bd2d1-293d-4ddc-88b4-0b3c52f65304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:81:c7:20:98:6f:41:00:a3:90:98:f7:65: e6:e0:4f:83:50:a8:a5:49:9d:3a:67:8e:f8:94:a9: de:ca:da:eb:a1:70:70:a3:ea:39:0e:36:47:25:33: fe:13:09:4f:71:21:ff:32:1c:19:a4:70:2f:0b:00: ff:35:86:a4:b2:a4:18:ae:5a:21:a6:81:b6:ae:d5: 86:e7:c1:06:88:19:60:b6:b4:c9:10:71:b7:0f:a3: cd:c5:0c:9f:36:7d:8c:69:09:a9:4e:2e:bf:c1:95: ee:e0:74:16:ac:c0:4f:61:85:57:40:dc:b5:a7:57: 9b:96:d3:a7:41:49:96:62:cc:33:37:53:90:c8:1f: a5:56:16:1e:57:2f:25:5f:7f:98:f4:93:53:00:6f: e9:78:78:ef:f9:31:e4:a8:9c:ce:50:a4:7a:2a:de: a8:82:62:d9:05:38:b6:f4:89:c8:6b:e2:e5:47:42: 54:d8:92:f1:ea:52:a0:58:85:e7:55:a5:e8:75:c5: 21:9c:1a:4d:cf:10:a2:ce:94:f3:16:67:00:63:ab: 62:52:4a:97:f2:18:84:59:e4:a8:6b:7e:9e:44:a7: a7:60:71:f6:c0:a3:f2:8f:0f:1e:b6:c3:38:49:8f: 04:01:04:98:fb:27:bb:19:f1:5a:c9:23:0e:6b:33: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DF:F9:D9:00:81:8F:B6:A5:AA:A1:06:7A:C2:4A:F8:C9:5A:20:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.crl X509v3 Authority Key Identifier: keyid:62:88:98:D6:5D:1A:C4:47:BF:D9:B4:80:1F:86:BA:D8:FD:33:7E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b7:9d:56:a0:23:8b:29:0c:63:de:b6:c9:f5:17:37:52:50: 41:a2:b1:b6:d0:6e:85:8a:91:28:25:4f:b6:d0:76:2d:6d:14: ea:76:08:f1:d1:60:6b:7a:67:68:a3:69:c6:d7:51:ff:f1:d4: 57:ae:fb:63:70:73:3a:97:d7:0d:91:4d:c9:7c:58:51:ba:04: 34:34:3a:ab:04:6b:2f:fd:6c:f8:cb:a7:85:3c:00:e1:7b:d6: 44:18:41:e7:2c:c0:27:ee:de:2f:c5:78:a8:bf:8c:78:09:68: e9:ba:9c:9d:66:d4:ed:f3:9c:91:79:8d:1f:14:92:35:c9:af: 16:63:2e:6b:57:d1:64:bb:00:b0:10:40:9e:29:18:9c:23:ad: 68:80:78:40:d1:07:56:bf:7a:f5:a3:76:eb:8d:10:2a:b5:ed: 00:d4:c0:0e:2d:bd:53:d9:ad:f8:20:b1:11:25:db:15:69:64: 97:9a:64:ed:83:ea:25:fa:86:54:d1:27:fc:41:10:72:07:22: 74:67:04:19:cc:80:d9:fc:c2:c9:8b:cd:67:eb:4f:89:0a:23: 56:e4:57:9f:e5:eb:bd:14:08:e2:e0:95:df:94:f3:b5:79:40: 2c:69:dc:9d:b0:f5:e5:b1:fb:43:82:6b:55:fb:bb:b1:2e:15: fd:5d:d7:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Ne77EphLAkwdHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTgyMDViNDQtMWMyNi00ODg5LTk5NTAtNTdhMjlkZWUz ZDg2MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk Zjg1YmQyZDEtMjkzZC00ZGRjLTg4YjQtMGIzYzUyZjY1MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA262BxyCYb0EAo5CY92Xm4E+DUKilSZ06Z474 lKneytrroXBwo+o5DjZHJTP+EwlPcSH/MhwZpHAvCwD/NYaksqQYrlohpoG2rtWG 58EGiBlgtrTJEHG3D6PNxQyfNn2MaQmpTi6/wZXu4HQWrMBPYYVXQNy1p1ebltOn QUmWYswzN1OQyB+lVhYeVy8lX3+Y9JNTAG/peHjv+THkqJzOUKR6Kt6ogmLZBTi2 9InIa+LlR0JU2JLx6lKgWIXnVaXodcUhnBpNzxCizpTzFmcAY6tiUkqX8hiEWeSo a36eRKenYHH2wKPyjw8etsM4SY8EAQSY+ye7GfFaySMOazOxRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI7f+dkAgY+2paqhBnrCSvjJWiARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xODIw NWI0NC0xYzI2LTQ4ODktOTk1MC01N2EyOWRlZTNkODYvMTgyMDViNDQtMWMyNi00 ODg5LTk5NTAtNTdhMjlkZWUzZDg2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTgyMDViNDQtMWMyNi00ODg5LTk5 NTAtNTdhMjlkZWUzZDg2LzE4MjA1YjQ0LTFjMjYtNDg4OS05OTUwLTU3YTI5ZGVl M2Q4Ni5jcmwwHwYDVR0jBBgwFoAUYoiY1l0axEe/2bSAH4a62P0zfrQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xODIwNWI0NC0xYzI2LTQ4ODktOTk1MC01N2Ey OWRlZTNkODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArt51WoCOLKQxj3rbJ9Rc3 UlBBorG20G6FipEoJU+20HYtbRTqdgjx0WBremdoo2nG11H/8dRXrvtjcHM6l9cN kU3JfFhRugQ0NDqrBGsv/Wz4y6eFPADhe9ZEGEHnLMAn7t4vxXiov4x4CWjpupyd ZtTt85yReY0fFJI1ya8WYy5rV9FkuwCwEECeKRicI61ogHhA0QdWv3r1o3brjRAq te0A1MAOLb1T2a34ILERJdsVaWSXmmTtg+ol+oZU0Sf8QRByByJ0ZwQZzIDZ/MLJ i81n60+JCiNW5Fef5eu9FAji4JXflPO1eUAsadydsPXlsftDgmtV+7uxLhX9XdfG -----END CERTIFICATE-----Generated at Wed Nov 5 10:13:30 2025 by rpki-client