$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft File: 1de513f7-173f-4447-a34f-d58d3b1ce99d.mft (raw, json) Hash identifier: r3ksCq/QqbGJN+vhNTtvihx85W2S+ELvNSJMLoFYn30= Subject key identifier: B8:89:AE:0B:2A:0A:78:97:88:4D:C9:E8:9B:E2:C5:48:61:97:EE:36 Authority key identifier: 88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 Certificate issuer: /CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Certificate serial: 010D0C9F4328584BC1BD58B409FDC950BAF7EB08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft Manifest number: 010D0C9F4328584B81996A5947864DF9C914D858 Signing time: Wed 05 Nov 2025 08:00:08 +0000 Manifest this update: Wed 05 Nov 2025 08:00:08 +0000 Manifest next update: Fri 07 Nov 2025 08:00:00 +0000 Files and hashes: 1: 1de513f7-173f-4447-a34f-d58d3b1ce99d.crl (hash: RQNX/opOaOM3KmLbu71ycMsym1+afAUDuoLmSg8vS6s=) 2: b649b1d0-5d8d-301d-a8c5-4412afe89287.roa (hash: cmqFue2vTBPMEoECp+WFC2Z0/ECCgcT+c93pI1I2KXg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:bd:58:b4:09:fd:c9:50:ba:f7:eb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Validity Not Before: Nov 5 08:00:08 2025 GMT Not After : Nov 7 08:00:00 2025 GMT Subject: CN=1b7025ba-6144-4a66-bb9c-fa7fe961b3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:13:94:03:8c:8d:11:6c:5c:09:66:96:e8: 2e:c3:67:e0:99:18:9a:c7:66:f9:b3:e1:ff:c3:8e: 96:bb:39:30:34:c8:e1:28:bd:b7:a9:7e:5e:df:9a: de:7f:29:1e:f4:c5:27:ea:82:f6:79:0d:c8:08:52: e3:d4:34:34:ce:ef:9a:55:7f:70:43:2d:09:b2:24: 83:54:3b:c0:62:d6:bc:af:8e:35:9e:2e:fa:2c:5f: 72:ec:39:17:47:e8:d9:5c:d9:78:75:4a:5e:31:60: 49:b5:51:ec:fc:c4:e0:1a:5c:ed:3d:12:a8:7c:5e: 2b:5f:08:b7:40:58:5f:ea:9f:07:80:d4:ab:d8:e8: 41:ea:0a:d7:bc:31:f6:c5:78:dc:b8:d0:a9:26:46: 0e:32:a8:8f:c1:71:33:50:1b:0b:f2:ef:a5:07:a6: b3:49:fa:95:df:71:ae:0e:9a:2f:c5:e3:fe:af:8c: a3:d7:f0:8d:0f:de:92:c1:bc:17:80:47:fa:db:62: 43:20:9c:da:3e:c4:f8:e4:47:28:66:87:92:ab:f9: ab:3b:6b:f1:ef:e0:d6:34:90:c9:16:7b:91:a3:ca: 5e:ba:09:d8:f0:9b:67:b5:20:02:5b:90:be:85:3b: 95:5b:7a:ba:00:0e:57:ca:79:07:d3:38:14:ee:9c: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:AE:0B:2A:0A:78:97:88:4D:C9:E8:9B:E2:C5:48:61:97:EE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl X509v3 Authority Key Identifier: keyid:88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:69:e2:c6:4e:71:a1:aa:fa:de:a6:27:0f:87:00:6f:02:4c: 52:a7:bd:df:53:30:c2:0e:56:98:c9:f1:b1:c8:e5:3d:84:32: 7e:63:1b:bb:7c:56:a4:f6:75:43:99:7a:41:b4:1c:8f:09:0d: df:57:64:8b:c3:e8:01:3c:d3:a0:7f:da:25:f3:9f:16:30:a9: 2a:c8:ab:94:52:39:95:1d:81:14:6a:0f:7e:9f:89:94:cc:7e: 79:2c:ac:fb:22:52:68:20:36:aa:4d:03:62:1d:da:59:79:f1: 16:b5:4b:5f:89:49:90:33:05:46:71:e9:01:cd:87:9a:ec:60: fc:8c:5e:4b:53:d7:c8:4e:cf:93:d3:36:6b:a2:49:fb:b9:82: a4:cb:4e:cc:94:f3:62:6f:ba:91:d5:59:ec:12:cf:19:26:70: 8c:5a:ce:a5:cd:29:8d:e3:bc:ff:14:14:23:66:8c:75:d0:d4: c4:8d:5f:db:74:1c:4e:4b:ce:d0:f8:a6:42:8d:63:a9:58:f6: 82:9d:86:35:b7:02:1b:2d:c5:b3:a6:9f:2b:23:4c:17:f8:f5: 32:7e:5d:78:6c:c5:11:66:ff:52:68:e4:bd:ac:50:ed:f6:a4: 52:af:78:1d:f2:c3:f5:bf:cd:a1:4c:d8:76:0d:ec:65:54:df: f2:84:8d:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBvVi0Cf3JULr36wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlNTEzZjctMTczZi00NDQ3LWEzNGYtZDU4ZDNiMWNl OTlkMB4XDTI1MTEwNTA4MDAwOFoXDTI1MTEwNzA4MDAwMFowLzEtMCsGA1UEAxMk MWI3MDI1YmEtNjE0NC00YTY2LWJiOWMtZmE3ZmU5NjFiM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QYTlAOMjRFsXAlmluguw2fgmRiax2b5s+H/ w46WuzkwNMjhKL23qX5e35refyke9MUn6oL2eQ3ICFLj1DQ0zu+aVX9wQy0JsiSD VDvAYta8r441ni76LF9y7DkXR+jZXNl4dUpeMWBJtVHs/MTgGlztPRKofF4rXwi3 QFhf6p8HgNSr2OhB6grXvDH2xXjcuNCpJkYOMqiPwXEzUBsL8u+lB6azSfqV33Gu DpovxeP+r4yj1/CND96SwbwXgEf622JDIJzaPsT45EcoZoeSq/mrO2vx7+DWNJDJ FnuRo8peugnY8JtntSACW5C+hTuVW3q6AA5XynkH0zgU7pz61QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLiJrgsqCniXiE3J6JvixUhhl+42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1 MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThkM2IxY2U5OWQvMWRlNTEzZjctMTczZi00 NDQ3LWEzNGYtZDU4ZDNiMWNlOTlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWRlNTEzZjctMTczZi00NDQ3LWEz NGYtZDU4ZDNiMWNlOTlkLzFkZTUxM2Y3LTE3M2YtNDQ0Ny1hMzRmLWQ1OGQzYjFj ZTk5ZC5jcmwwHwYDVR0jBBgwFoAUiPFj7pAvQgbSHjSJ2D5eHngcCiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThk M2IxY2U5OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVaeLGTnGhqvrepicPhwBv AkxSp73fUzDCDlaYyfGxyOU9hDJ+Yxu7fFak9nVDmXpBtByPCQ3fV2SLw+gBPNOg f9ol858WMKkqyKuUUjmVHYEUag9+n4mUzH55LKz7IlJoIDaqTQNiHdpZefEWtUtf iUmQMwVGcekBzYea7GD8jF5LU9fITs+T0zZrokn7uYKky07MlPNib7qR1VnsEs8Z JnCMWs6lzSmN47z/FBQjZox10NTEjV/bdBxOS87Q+KZCjWOpWPaCnYY1twIbLcWz pp8rI0wX+PUyfl14bMURZv9SaOS9rFDt9qRSr3gd8sP1v82hTNh2DexlVN/yhI1R -----END CERTIFICATE-----Generated at Wed Nov 5 21:21:14 2025 by rpki-client