$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft File: 89089cbd-0f7a-444f-95e7-38535bb2fc45.mft (raw, json) Hash identifier: b5gynv8k/1xiGVCsrjuTPVBXuFch8uJrQze1qyrqrck= Subject key identifier: 1A:A5:9B:58:EE:A6:2D:63:15:51:E8:1C:5E:6D:7B:09:91:BC:42:C9 Authority key identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 Certificate issuer: /CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Certificate serial: 010D0C9F4328584BBEB718EB1D36D7AA78075480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft Manifest number: 010D0C9F4328584B8157F4240AC008B9B2B16E17 Signing time: Tue 04 Nov 2025 06:00:08 +0000 Manifest this update: Tue 04 Nov 2025 06:00:08 +0000 Manifest next update: Fri 07 Nov 2025 06:00:00 +0000 Files and hashes: 1: 89089cbd-0f7a-444f-95e7-38535bb2fc45.crl (hash: efI7C5wvKUeouVQOA5OgbBCoqgMJI0nJc4id8stXQkI=) 2: c3caf9bf-119d-3b95-8fe2-eb01dec7d936.roa (hash: /et2jswf58gObofFLm5vTtGhrmvIFDN7duvDcBNCKrM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:b7:18:eb:1d:36:d7:aa:78:07:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Validity Not Before: Nov 4 06:00:08 2025 GMT Not After : Nov 7 06:00:00 2025 GMT Subject: CN=925b3115-a669-4cab-8999-aaf682a29afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:7e:ab:f6:c7:b3:ee:22:33:6e:54:57:ad: e7:48:e2:86:f3:b7:98:8a:63:a3:1d:08:c1:d0:12: e3:3f:4b:d8:1b:63:5d:3a:0f:65:0f:e0:27:df:a0: d6:ad:d9:c7:b6:05:93:0d:9c:a4:c6:bf:d7:d7:41: 3b:54:64:8b:4e:94:79:58:0f:31:f2:9f:97:2b:1d: e4:38:70:03:38:a7:36:0d:b9:94:58:99:a2:a2:1d: 7b:dc:ad:47:d7:36:a1:9b:fe:cb:68:5a:be:ca:5a: 90:4b:19:94:e5:96:b4:39:bc:48:8e:ca:5e:f7:2d: 66:97:c5:a6:57:58:6e:8e:c5:34:a2:22:98:f0:34: 73:b1:62:0a:da:46:f1:39:cb:07:1b:a5:75:8f:81: ee:18:f6:e7:fc:51:c4:14:9c:e3:dd:c9:c8:a5:50: fa:8e:0a:98:17:20:bf:b1:48:fd:dd:03:a9:f0:c5: 7a:f5:28:79:c5:36:2f:61:c5:d7:a0:54:09:da:7a: 67:ff:ca:1c:29:fa:af:2d:1a:ec:bd:76:e7:b0:d4: d6:8c:e1:91:c4:64:4e:31:96:1a:35:d9:14:94:98: 53:2c:ce:a4:a9:2e:e5:55:5a:6e:42:41:b2:5b:de: f5:0f:83:a9:22:46:a9:09:40:4e:bf:a2:1b:ef:5a: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A5:9B:58:EE:A6:2D:63:15:51:E8:1C:5E:6D:7B:09:91:BC:42:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl X509v3 Authority Key Identifier: keyid:38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:df:0c:8b:f6:a3:86:e6:2f:fb:c5:42:e1:84:d9:0c:44:5b: ef:31:dd:07:ce:33:0a:d2:5b:c1:74:8b:5b:c6:85:81:17:8a: 25:15:58:17:db:74:5d:73:39:6b:df:34:a4:4e:86:01:a0:84: 0c:5c:74:06:e7:6e:17:14:8d:a2:54:cc:42:85:c7:0f:23:3a: 16:ee:90:d6:bd:05:83:78:d0:90:c2:e1:a7:85:3c:d4:3b:d8: b9:11:dc:7e:71:cf:69:38:34:42:75:1b:1d:46:a8:93:e6:24: 3f:19:d0:9e:54:f8:7c:11:b2:41:25:ab:06:d6:41:7f:84:9f: 76:61:47:07:90:9d:3a:61:6c:21:e2:09:7c:a9:b0:2d:d3:40: f8:9a:52:05:10:81:fa:ac:24:77:12:65:a1:49:2b:78:99:09: d2:8d:0c:42:ce:9c:62:21:a5:ca:e2:7f:6a:4e:ef:43:f0:ab: 07:27:5c:b0:fb:26:e2:51:cc:30:a2:65:e2:35:84:49:8a:ed: c7:0b:e0:82:37:fd:70:28:c4:de:da:66:d5:88:ea:c7:37:1a: fc:e3:86:de:e8:a6:1b:09:a2:7e:3c:92:89:fe:79:fb:f5:c2: 44:5d:78:cf:9a:93:c1:2a:f3:d2:d0:46:08:06:b9:0d:3f:e3: 80:4a:90:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+txjrHTbXqngHVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkwODljYmQtMGY3YS00NDRmLTk1ZTctMzg1MzViYjJm YzQ1MB4XDTI1MTEwNDA2MDAwOFoXDTI1MTEwNzA2MDAwMFowLzEtMCsGA1UEAxMk OTI1YjMxMTUtYTY2OS00Y2FiLTg5OTktYWFmNjgyYTI5YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhp+q/bHs+4iM25UV63nSOKG87eYimOjHQjB 0BLjP0vYG2NdOg9lD+An36DWrdnHtgWTDZykxr/X10E7VGSLTpR5WA8x8p+XKx3k OHADOKc2DbmUWJmioh173K1H1zahm/7LaFq+ylqQSxmU5Za0ObxIjspe9y1ml8Wm V1hujsU0oiKY8DRzsWIK2kbxOcsHG6V1j4HuGPbn/FHEFJzj3cnIpVD6jgqYFyC/ sUj93QOp8MV69Sh5xTYvYcXXoFQJ2npn/8ocKfqvLRrsvXbnsNTWjOGRxGROMZYa NdkUlJhTLM6kqS7lVVpuQkGyW971D4OpIkapCUBOv6Ib71qPFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBqlm1jupi1jFVHoHF5tewmRvELJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4 OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUzNWJiMmZjNDUvODkwODljYmQtMGY3YS00 NDRmLTk1ZTctMzg1MzViYjJmYzQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODkwODljYmQtMGY3YS00NDRmLTk1 ZTctMzg1MzViYjJmYzQ1Lzg5MDg5Y2JkLTBmN2EtNDQ0Zi05NWU3LTM4NTM1YmIy ZmM0NS5jcmwwHwYDVR0jBBgwFoAUOCpaFBZAgvjKkDPdAAB4fSHg8WgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUz NWJiMmZjNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBu3wyL9qOG5i/7xULhhNkM RFvvMd0HzjMK0lvBdItbxoWBF4olFVgX23Rdczlr3zSkToYBoIQMXHQG524XFI2i VMxChccPIzoW7pDWvQWDeNCQwuGnhTzUO9i5Edx+cc9pODRCdRsdRqiT5iQ/GdCe VPh8EbJBJasG1kF/hJ92YUcHkJ06YWwh4gl8qbAt00D4mlIFEIH6rCR3EmWhSSt4 mQnSjQxCzpxiIaXK4n9qTu9D8KsHJ1yw+ybiUcwwomXiNYRJiu3HC+CCN/1wKMTe 2mbViOrHNxr844be6KYbCaJ+PJKJ/nn79cJEXXjPmpPBKvPS0EYIBrkNP+OASpCd -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:51 2025 by rpki-client