$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft File: 9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft (raw, json) Hash identifier: kRVAMTHueRMn4VGAEUeV6D22WZJhMR4bucXwztYSktg= Subject key identifier: 08:1A:40:CF:FC:D5:18:2E:4F:91:6E:3E:DA:5B:8E:2B:37:94:98:BB Authority key identifier: 4D:5E:20:4D:4D:46:38:79:B9:96:73:98:2D:B3:7D:62:06:0B:F3:88 Certificate issuer: /CN=9dc1c7a2-4d87-4604-af5b-14239ac232f5 Certificate serial: 010D0C9F4328584BBFA54FDEF05CECC430892B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft Manifest number: 010D0C9F4328584BAC2E5732025B333079F1AB07 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 9dc1c7a2-4d87-4604-af5b-14239ac232f5.crl (hash: duXcGYl/lSHa81SB5Hls6hRQae1MC9s2U/vAKvFuc4k=) 2: e9444396-80d6-34b0-881d-9f8d03804899.roa (hash: O76zGpHzOAAyNpmcqPpAMqrdOdCUZYlJGYIQQ0WU7vk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:4f:de:f0:5c:ec:c4:30:89:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc1c7a2-4d87-4604-af5b-14239ac232f5 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=73e2f459-a01a-4bc0-8577-d7386a4eeae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:fe:18:ac:68:11:7d:10:f9:d0:30:47:2b: e5:9f:c9:0a:90:0c:b1:c2:fc:08:f3:2a:67:9a:e1: 73:94:38:6c:38:ef:d2:0f:bb:56:98:ed:59:7c:6d: b2:37:c5:08:5a:f7:f6:ad:bb:e6:b7:44:17:a0:54: ff:81:b7:36:c8:02:44:36:48:4e:94:65:0b:b5:91: 78:d5:20:0c:13:54:e7:70:41:4f:c7:a3:dd:82:97: 92:89:e8:f0:4d:6a:c6:a8:e1:dc:05:38:cf:2b:4e: c9:5e:3e:e8:e2:2d:9c:b8:12:1a:4d:0b:e0:e3:1c: 7b:a0:6d:07:97:3d:e1:a6:59:27:1b:2c:95:1b:4e: 3d:43:49:31:4d:08:bb:9c:53:1d:9f:a5:b2:f8:72: 80:91:d0:3f:ec:ed:42:24:8d:90:54:97:50:ec:fd: 7d:cd:1f:dc:99:79:24:02:84:0f:27:7b:50:81:70: b5:41:0c:59:81:3d:47:95:be:9c:aa:05:d7:3e:92: e2:1b:74:11:2e:45:39:9c:8f:2e:2f:6e:36:38:9f: f6:43:1f:eb:0c:87:fa:f8:ea:b9:fa:61:46:32:ea: 68:5b:32:06:6f:5e:42:d5:a0:10:90:30:c9:ca:f2: 7d:b1:53:cd:67:82:33:c7:14:b7:71:ef:d6:bb:f7: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:40:CF:FC:D5:18:2E:4F:91:6E:3E:DA:5B:8E:2B:37:94:98:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5/9dc1c7a2-4d87-4604-af5b-14239ac232f5.crl X509v3 Authority Key Identifier: keyid:4D:5E:20:4D:4D:46:38:79:B9:96:73:98:2D:B3:7D:62:06:0B:F3:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dc1c7a2-4d87-4604-af5b-14239ac232f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:79:cf:a0:a4:8d:44:98:6c:61:8e:ca:ae:b5:6c:d0:83:39: cb:96:92:81:6f:ec:6c:9a:18:18:53:95:58:a7:ff:de:e7:25: 19:a2:59:db:03:d1:6a:3a:7b:a7:e2:10:06:ae:39:08:00:ae: 06:e4:63:03:cc:79:fa:40:47:a3:30:c9:16:40:14:13:4a:94: 4c:7f:e3:a8:62:b7:c3:a0:ff:23:a6:f7:8e:55:3f:df:bf:b1: fe:7f:af:cd:ad:5a:81:98:02:d8:69:cb:41:31:85:4d:38:ba: 2a:9f:96:75:84:0d:96:ad:7a:6b:d2:b8:ef:95:27:a5:6d:bb: 5b:39:d8:ab:98:8d:b3:65:2e:58:ae:67:55:63:87:2e:ff:50: a3:9b:94:b8:53:df:37:11:3c:6b:ef:97:87:46:6b:1d:86:2c: 90:d4:44:90:aa:a0:3b:d5:69:1e:1c:3e:5a:2a:4d:3d:80:56: ee:a6:b8:16:42:dd:d9:39:c7:3f:37:62:b4:66:2f:38:cb:03: 6a:f7:de:04:e8:33:26:bd:66:77:5a:ac:a9:d8:06:fd:56:44: 67:99:14:cb:0d:0f:db:7d:6b:93:67:9c:4b:3e:91:a3:7c:3c: 85:b3:a2:c8:ce:4f:d2:d2:e3:42:a4:68:24:f5:6c:e9:12:4b: d5:2e:a4:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pU/e8FzsxDCJK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRjMWM3YTItNGQ4Ny00NjA0LWFmNWItMTQyMzlhYzIz MmY1MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk NzNlMmY0NTktYTAxYS00YmMwLTg1NzctZDczODZhNGVlYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mr+GKxoEX0Q+dAwRyvln8kKkAyxwvwI8ypn muFzlDhsOO/SD7tWmO1ZfG2yN8UIWvf2rbvmt0QXoFT/gbc2yAJENkhOlGULtZF4 1SAME1TncEFPx6PdgpeSiejwTWrGqOHcBTjPK07JXj7o4i2cuBIaTQvg4xx7oG0H lz3hplknGyyVG049Q0kxTQi7nFMdn6Wy+HKAkdA/7O1CJI2QVJdQ7P19zR/cmXkk AoQPJ3tQgXC1QQxZgT1Hlb6cqgXXPpLiG3QRLkU5nI8uL242OJ/2Qx/rDIf6+Oq5 +mFGMupoWzIGb15C1aAQkDDJyvJ9sVPNZ4IzxxS3ce/Wu/ccEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgaQM/81RguT5FuPtpbjis3lJi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZGMx YzdhMi00ZDg3LTQ2MDQtYWY1Yi0xNDIzOWFjMjMyZjUvOWRjMWM3YTItNGQ4Ny00 NjA0LWFmNWItMTQyMzlhYzIzMmY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWRjMWM3YTItNGQ4Ny00NjA0LWFm NWItMTQyMzlhYzIzMmY1LzlkYzFjN2EyLTRkODctNDYwNC1hZjViLTE0MjM5YWMy MzJmNS5jcmwwHwYDVR0jBBgwFoAUTV4gTU1GOHm5lnOYLbN9YgYL84gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZGMxYzdhMi00ZDg3LTQ2MDQtYWY1Yi0xNDIz OWFjMjMyZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYec+gpI1EmGxhjsqutWzQ gznLlpKBb+xsmhgYU5VYp//e5yUZolnbA9FqOnun4hAGrjkIAK4G5GMDzHn6QEej MMkWQBQTSpRMf+OoYrfDoP8jpveOVT/fv7H+f6/NrVqBmALYactBMYVNOLoqn5Z1 hA2WrXpr0rjvlSelbbtbOdirmI2zZS5YrmdVY4cu/1Cjm5S4U983ETxr75eHRmsd hiyQ1ESQqqA71WkeHD5aKk09gFbuprgWQt3ZOcc/N2K0Zi84ywNq994E6DMmvWZ3 Wqyp2Ab9VkRnmRTLDQ/bfWuTZ5xLPpGjfDyFs6LIzk/S0uNCpGgk9WzpEkvVLqRf -----END CERTIFICATE-----Generated at Wed Nov 5 07:24:31 2025 by rpki-client