$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft File: 23d4344d-e6b1-4a9e-8560-f54da402f39b.mft (raw, json) Hash identifier: Kv3mRFEmdEwLgPOFYZVCjhH/jgo2VDcFFv0boSDIO9o= Subject key identifier: 76:BA:65:67:10:8D:9E:33:1A:C0:A5:85:5C:36:9A:19:1B:73:F9:89 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584BBFA55238A345D157ABBA1580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft Manifest number: 010D0C9F4328584B9B6A4EEE0F54CD7B5602ACCE Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 23d4344d-e6b1-4a9e-8560-f54da402f39b.crl (hash: 33b4hM+PHzPzUxYZffPR3M3ZO8dXvC0Na5unmJ4nWaw=) 2: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (hash: v4xCBy/EC+VupVbFzbqq/rDSzR8q3JqBx0A/KAkkfKQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:52:38:a3:45:d1:57:ab:ba:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=00626199-8d20-4d3f-8034-d99cb4bfe4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:f7:8e:54:41:d5:cc:2a:0d:a7:13:68:dd: fa:8f:27:d5:a6:dd:75:ee:eb:4b:8e:d4:24:dd:32: ae:3f:af:6a:f3:9a:6b:49:c2:5f:99:74:11:12:50: 95:29:3b:a0:50:3b:a2:a8:6d:96:b1:48:7d:f1:3f: 46:7c:05:a8:ab:a2:c1:e1:96:21:26:34:0e:3e:88: c9:ff:32:45:11:0d:cd:1e:a5:d1:44:ad:fa:10:1f: aa:c0:97:a1:44:4b:f6:2d:9e:aa:34:44:86:77:b0: 8c:83:42:90:ab:8b:23:34:24:5c:37:91:37:b7:56: df:f7:f8:ee:c2:3d:d6:6e:84:d1:ce:ba:8f:ce:1d: 1b:67:d6:72:21:59:1c:19:a1:9c:02:45:cb:0b:91: eb:a1:24:5b:6c:c5:37:27:7a:cb:3b:e9:f5:da:1e: 28:ff:84:48:81:a0:7b:10:b4:c3:9c:d6:95:67:de: 35:8c:21:89:34:e6:36:12:79:5f:c0:6d:f6:36:06: d1:68:89:2f:d2:4b:bc:87:d2:70:75:7b:27:01:79: 62:fa:57:a1:46:59:b7:c2:a0:d0:d0:6d:e6:f5:5c: e2:64:81:49:3c:ed:b0:b5:7b:a1:10:b2:0a:7c:9c: 16:1c:d8:94:01:5e:cf:62:71:aa:42:bf:dd:b3:e6: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BA:65:67:10:8D:9E:33:1A:C0:A5:85:5C:36:9A:19:1B:73:F9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f4:80:99:b9:95:09:19:72:f4:39:21:e9:39:98:43:50:bd: 9d:29:cb:77:94:26:c4:a7:0c:f2:44:4c:0a:4e:c9:0a:fa:b4: 49:3c:77:e0:f2:7d:54:cf:53:a9:3d:b8:02:ae:65:9f:45:98: 7c:d3:d1:e0:8c:95:be:8a:f7:a1:f8:f7:f5:10:c2:ae:2c:f5: 4d:a0:7b:27:1c:7c:88:5e:7f:b8:4e:49:be:29:b6:49:59:49: da:a7:75:86:02:e2:e5:93:fa:dc:d8:e0:7d:3e:31:32:f9:75: 97:f4:96:50:25:eb:88:2e:8d:69:fa:4b:04:f8:dd:46:f0:dd: 11:f7:7d:81:01:05:8e:bb:ee:b6:39:44:c6:f7:2f:e6:c8:1c: 64:23:fc:ab:cb:28:47:da:f2:a9:03:7e:6a:f5:88:e2:a5:c2: cb:53:bc:97:fb:e2:ad:d0:a9:23:65:ad:ec:16:12:82:6d:4c: 8d:2e:f9:51:aa:1d:ab:cc:c0:e3:a2:75:99:f4:07:12:25:ea: b0:7c:ba:e3:d9:c1:b3:46:b6:5c:25:65:d6:64:63:ca:29:dc: 8e:bf:fd:e2:e1:15:1b:4a:e4:7d:26:e3:23:cf:d4:60:51:77: 65:d2:7e:a4:99:f3:4e:06:24:a2:ed:94:8e:0a:c7:95:c7:4d: 0a:5d:79:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVI4o0XRV6u6FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk MDA2MjYxOTktOGQyMC00ZDNmLTgwMzQtZDk5Y2I0YmZlNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptb3jlRB1cwqDacTaN36jyfVpt117utLjtQk 3TKuP69q85prScJfmXQRElCVKTugUDuiqG2WsUh98T9GfAWoq6LB4ZYhJjQOPojJ /zJFEQ3NHqXRRK36EB+qwJehREv2LZ6qNESGd7CMg0KQq4sjNCRcN5E3t1bf9/ju wj3WboTRzrqPzh0bZ9ZyIVkcGaGcAkXLC5HroSRbbMU3J3rLO+n12h4o/4RIgaB7 ELTDnNaVZ941jCGJNOY2EnlfwG32NgbRaIkv0ku8h9JwdXsnAXli+lehRlm3wqDQ 0G3m9VziZIFJPO2wtXuhELIKfJwWHNiUAV7PYnGqQr/ds+bOAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHa6ZWcQjZ4zGsClhVw2mhkbc/mJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMjNkNDM0NGQtZTZiMS00 YTllLTg1NjAtZjU0ZGE0MDJmMzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB39ICZuZUJGXL0OSHpOZhD UL2dKct3lCbEpwzyREwKTskK+rRJPHfg8n1Uz1OpPbgCrmWfRZh809HgjJW+iveh +Pf1EMKuLPVNoHsnHHyIXn+4Tkm+KbZJWUnap3WGAuLlk/rc2OB9PjEy+XWX9JZQ JeuILo1p+ksE+N1G8N0R932BAQWOu+62OUTG9y/myBxkI/yryyhH2vKpA35q9Yji pcLLU7yX++Kt0KkjZa3sFhKCbUyNLvlRqh2rzMDjonWZ9AcSJeqwfLrj2cGzRrZc JWXWZGPKKdyOv/3i4RUbSuR9JuMjz9RgUXdl0n6kmfNOBiSi7ZSOCseVx00KXXnh -----END CERTIFICATE-----Generated at Wed Nov 5 09:24:40 2025 by rpki-client