$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft File: 589a84a2-f62d-414f-915d-810c9265e5de.mft (raw, json) Hash identifier: VDZ0WDRAYleU/2x8KMKEfG1XfVhxuYW9hQtD6PI8PjY= Subject key identifier: C2:72:C7:17:4E:DE:69:66:1A:CE:DB:42:EE:EF:6F:6B:A6:08:48:D3 Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 Certificate issuer: /CN=589a84a2-f62d-414f-915d-810c9265e5de Certificate serial: 010D0C9F4328584BC26FF79FDD04DD147BD3956E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft Manifest number: 010D0C9F4328584B8AA3359A4801463882BB40D4 Signing time: Wed 05 Nov 2025 14:00:03 +0000 Manifest this update: Wed 05 Nov 2025 14:00:03 +0000 Manifest next update: Sat 08 Nov 2025 14:00:00 +0000 Files and hashes: 1: 589a84a2-f62d-414f-915d-810c9265e5de.crl (hash: Rbc5I2e50egPfziXnHfeIZ6jGQdo5XJdgbQKWRQ6/Nk=) 2: b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (hash: vlXU4eT2faLIk39wmxUQEO8QYtaWHpRL1+t9yH/Y0vI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:6f:f7:9f:dd:04:dd:14:7b:d3:95:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de Validity Not Before: Nov 5 14:00:03 2025 GMT Not After : Nov 8 14:00:00 2025 GMT Subject: CN=7b631f7c-88f5-4d74-a5c1-bc6bd00af90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:89:1a:aa:dc:49:0c:cd:0f:e1:a9:b1:07: 9c:11:bf:04:89:b5:15:7b:72:9b:c6:53:fc:4e:7c: 94:d7:08:e8:04:0c:44:d4:2c:9d:08:eb:bc:6d:47: 2e:97:8a:d3:d9:e5:d4:8c:cc:f6:88:91:d8:42:25: 74:24:d0:82:af:0c:7b:27:43:1b:da:77:38:52:87: 6c:53:c5:50:f4:cc:9d:48:f3:70:48:d9:a2:a4:1e: af:79:0e:a4:38:8c:4b:68:06:9d:ea:50:57:07:6f: e4:3a:cb:e1:f3:d5:a7:e2:ca:59:0a:af:86:01:fe: 50:ad:de:f8:3b:3d:19:42:4a:2d:10:d3:09:62:9e: 68:b9:5e:f8:a7:72:0a:f1:51:6c:e2:df:99:13:fc: 75:d4:49:d1:28:24:27:ab:07:cc:30:c1:8a:8f:46: 2b:d6:b3:fb:b1:76:59:ee:b2:71:0b:88:7a:38:be: 2c:6a:45:90:a7:f6:d1:82:45:00:cd:c9:cc:fa:2b: 2f:35:e3:76:44:4e:c0:04:e5:df:16:41:ce:a0:59: 00:16:f1:e4:fe:94:e0:5b:a1:14:7f:da:76:62:4d: 85:68:95:40:56:46:14:06:8a:54:3a:f1:7f:74:dd: 99:f5:d3:0c:f5:f0:d8:26:96:ad:01:e3:b8:73:d2: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:C7:17:4E:DE:69:66:1A:CE:DB:42:EE:EF:6F:6B:A6:08:48:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl X509v3 Authority Key Identifier: keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:36:66:d3:8c:bd:f9:74:81:e4:b2:a6:b5:02:a0:cf:3c:b0: 18:bf:b0:fc:50:bc:2f:54:a6:86:df:39:42:4f:93:62:37:62: 7a:1e:f1:54:84:86:4f:7b:15:6d:27:9f:fb:92:6d:40:b1:67: 29:90:51:36:1f:fd:99:64:ff:01:3f:4f:96:2f:f9:c9:9a:78: eb:a5:1b:23:a1:f7:89:a1:a4:42:f0:8c:19:c0:dc:62:94:f1: 92:71:78:06:fb:a0:58:07:fe:6f:80:f5:02:bc:06:d3:22:aa: 53:80:49:06:b5:b4:85:3e:49:63:a4:75:3f:23:7f:47:c2:02: f6:1b:fe:b3:ea:80:a5:5c:59:a6:1e:79:82:5f:90:03:56:e2: d1:d8:73:39:8f:37:a1:08:9f:ee:e5:a5:86:3a:57:9f:6d:ea: b6:54:98:0a:56:3c:1f:91:f7:90:1c:3e:6d:9e:b3:37:1e:7f: 07:ac:89:7b:d4:93:25:c9:0d:ee:1c:19:95:58:30:85:4f:fd: 99:61:3e:c1:c1:7c:68:15:35:1a:d8:28:5d:3a:4e:52:09:da: c2:e9:48:c9:1d:5f:0a:40:b5:dd:dd:18:33:a1:48:99:f6:9b: 3f:3f:a1:b3:a5:7e:8e:a4:5e:73:49:16:ae:5f:97:03:18:de: 8f:6b:69:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCb/ef3QTdFHvTlW4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTg0YTItZjYyZC00MTRmLTkxNWQtODEwYzkyNjVl NWRlMB4XDTI1MTEwNTE0MDAwM1oXDTI1MTEwODE0MDAwMFowLzEtMCsGA1UEAxMk N2I2MzFmN2MtODhmNS00ZDc0LWE1YzEtYmM2YmQwMGFmOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JGJGqrcSQzND+GpsQecEb8EibUVe3KbxlP8 TnyU1wjoBAxE1CydCOu8bUcul4rT2eXUjMz2iJHYQiV0JNCCrwx7J0Mb2nc4Uods U8VQ9MydSPNwSNmipB6veQ6kOIxLaAad6lBXB2/kOsvh89Wn4spZCq+GAf5Qrd74 Oz0ZQkotENMJYp5ouV74p3IK8VFs4t+ZE/x11EnRKCQnqwfMMMGKj0Yr1rP7sXZZ 7rJxC4h6OL4sakWQp/bRgkUAzcnM+isvNeN2RE7ABOXfFkHOoFkAFvHk/pTgW6EU f9p2Yk2FaJVAVkYUBopUOvF/dN2Z9dMM9fDYJpatAeO4c9KmXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJyxxdO3mlmGs7bQu7vb2umCEjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlh ODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBjOTI2NWU1ZGUvNTg5YTg0YTItZjYyZC00 MTRmLTkxNWQtODEwYzkyNjVlNWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5YTg0YTItZjYyZC00MTRmLTkx NWQtODEwYzkyNjVlNWRlLzU4OWE4NGEyLWY2MmQtNDE0Zi05MTVkLTgxMGM5MjY1 ZTVkZS5jcmwwHwYDVR0jBBgwFoAUOWNzekScrv/UWgulI7hgQzXGX1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlhODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBj OTI2NWU1ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVNmbTjL35dIHksqa1AqDP PLAYv7D8ULwvVKaG3zlCT5NiN2J6HvFUhIZPexVtJ5/7km1AsWcpkFE2H/2ZZP8B P0+WL/nJmnjrpRsjofeJoaRC8IwZwNxilPGScXgG+6BYB/5vgPUCvAbTIqpTgEkG tbSFPkljpHU/I39HwgL2G/6z6oClXFmmHnmCX5ADVuLR2HM5jzehCJ/u5aWGOlef beq2VJgKVjwfkfeQHD5tnrM3Hn8HrIl71JMlyQ3uHBmVWDCFT/2ZYT7BwXxoFTUa 2ChdOk5SCdrC6UjJHV8KQLXd3RgzoUiZ9ps/P6GzpX6OpF5zSRauX5cDGN6Pa2nu -----END CERTIFICATE-----Generated at Wed Nov 5 20:21:06 2025 by rpki-client