$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft File: 0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft (raw, json) Hash identifier: 5vv/OlkAK7qoN3wyWMRCpaOZD5IHpSiQSSfPBDrhCxo= Subject key identifier: 60:B4:50:93:3A:3E:39:71:DF:CA:88:1A:CE:43:7B:08:1C:AF:B4:10 Authority key identifier: 0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41 Certificate issuer: /CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee Certificate serial: 010D0C9F4328584BBFFEAA9255CFC64F36515400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft Manifest number: 010D0C9F43285843B9295D3AC60536A2395268F3 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl (hash: yXlsnHLKL3tLCt/cZcF/yd7l/kBgm4y8ObDFduNGLR4=) 2: 60a1323c-203e-3098-b964-667c4099d08a.roa (hash: ppwSDYkgYtXCf+EsklTTRaUGrJ+w+1IUfPE0TMt4HJU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:aa:92:55:cf:c6:4f:36:51:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=f5e4acc4-3fc5-45b4-adff-c6a5da0ec994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:57:a4:b9:00:db:b8:34:cb:5d:7d:a4:c5: b6:e8:ec:fd:91:3a:8d:d0:d6:9d:d0:b8:41:e0:7c: 98:65:ef:5e:cf:19:77:bb:4e:71:8f:b5:19:00:3a: bf:38:73:7a:2a:c0:39:a1:94:90:be:56:4b:ba:35: 4e:f5:67:96:55:a3:b9:b6:63:c0:4a:da:63:13:d0: 50:94:e1:5f:d6:6a:31:13:1d:39:4c:d2:05:50:99: 16:8f:b1:07:2e:81:45:b3:e8:bf:bd:0e:5a:76:b7: b0:55:23:4b:a5:d8:fb:bc:0b:92:d9:1f:23:c3:8c: 6b:f0:7f:2e:51:69:c5:31:f1:5a:54:0a:a0:ad:83: 76:15:26:4c:b7:9f:f6:c6:20:e0:a0:fb:0e:a7:ed: 0d:1e:54:03:8b:05:b6:46:c5:85:bd:7a:1d:c4:b3: 39:a5:04:7d:12:ce:71:06:ed:8e:ac:b1:2f:a8:60: 86:50:89:8f:f5:0f:3b:9f:e8:87:ec:a7:12:cd:29: 4d:64:53:dc:45:ed:99:d1:43:15:fa:6b:85:1a:f4: 4e:2c:90:0a:08:3a:4d:d2:58:4c:26:3b:b2:3b:5a: 4b:99:a8:ca:fc:0e:dd:d2:60:e5:4d:ca:97:1f:ed: bc:45:59:1d:06:a3:c6:86:cf:23:3f:69:98:7d:07: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:50:93:3A:3E:39:71:DF:CA:88:1A:CE:43:7B:08:1C:AF:B4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl X509v3 Authority Key Identifier: keyid:0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:0b:1f:a9:34:17:66:ec:ba:37:e0:49:85:42:d2:c9:68:34: 25:cd:f0:40:8b:3a:41:88:c2:0e:35:90:01:db:6c:0a:72:f0: 91:e9:92:d8:64:38:ec:b7:d8:47:6b:e2:e2:ef:37:f6:8c:ba: 97:00:af:c4:94:35:f4:2d:ff:e4:82:8f:b2:1b:90:ce:46:bc: 15:9c:32:2f:7e:cd:30:cd:97:39:f6:07:85:22:83:2c:7a:0f: c0:c4:b1:f8:62:74:a7:36:e3:13:ca:c7:df:7e:53:de:a6:05: e2:04:c7:86:64:51:ff:db:2d:40:55:a1:45:84:94:28:15:78: 7f:64:25:11:00:3e:27:49:87:82:22:90:32:55:e0:9f:29:0f: ab:76:de:1a:e5:9a:3c:6a:98:6f:d3:0f:3f:09:94:f1:07:2d: 38:d4:ff:3b:21:70:9e:7b:40:bf:6e:ab:97:8f:1d:bb:31:79: 43:dd:8f:18:42:54:ee:f6:b4:60:f1:98:23:ca:fc:7d:27:a9: 68:b1:3a:42:ed:63:60:93:5b:98:a1:c4:71:12:99:c2:f0:f3: 33:bb:2d:4f:b5:7d:b0:af:57:0a:b9:87:dc:e6:16:78:6e:4f: 73:56:58:92:9e:a7:f8:ed:cf:a6:80:39:d0:b2:92:31:e9:39: d7:3b:a1:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qqSVc/GTzZRVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiYzUxZjMtZDJhNS00NWViLTlmYjgtNjlmOGQ0ZmMy N2VlMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk ZjVlNGFjYzQtM2ZjNS00NWI0LWFkZmYtYzZhNWRhMGVjOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt5XpLkA27g0y119pMW26Oz9kTqN0Nad0LhB 4HyYZe9ezxl3u05xj7UZADq/OHN6KsA5oZSQvlZLujVO9WeWVaO5tmPAStpjE9BQ lOFf1moxEx05TNIFUJkWj7EHLoFFs+i/vQ5adrewVSNLpdj7vAuS2R8jw4xr8H8u UWnFMfFaVAqgrYN2FSZMt5/2xiDgoPsOp+0NHlQDiwW2RsWFvXodxLM5pQR9Es5x Bu2OrLEvqGCGUImP9Q87n+iH7KcSzSlNZFPcRe2Z0UMV+muFGvROLJAKCDpN0lhM JjuyO1pLmajK/A7d0mDlTcqXH+28RVkdBqPGhs8jP2mYfQfAIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGC0UJM6Pjlx38qIGs5Dewgcr7QQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWJj NTFmMy1kMmE1LTQ1ZWItOWZiOC02OWY4ZDRmYzI3ZWUvMGFiYzUxZjMtZDJhNS00 NWViLTlmYjgtNjlmOGQ0ZmMyN2VlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGFiYzUxZjMtZDJhNS00NWViLTlm YjgtNjlmOGQ0ZmMyN2VlLzBhYmM1MWYzLWQyYTUtNDVlYi05ZmI4LTY5ZjhkNGZj MjdlZS5jcmwwHwYDVR0jBBgwFoAUD/hA0fyCyHhqbeCmHIqyv3LxnUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWJjNTFmMy1kMmE1LTQ1ZWItOWZiOC02OWY4 ZDRmYzI3ZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuCx+pNBdm7Lo34EmFQtLJ aDQlzfBAizpBiMIONZAB22wKcvCR6ZLYZDjst9hHa+Li7zf2jLqXAK/ElDX0Lf/k go+yG5DORrwVnDIvfs0wzZc59geFIoMseg/AxLH4YnSnNuMTysffflPepgXiBMeG ZFH/2y1AVaFFhJQoFXh/ZCURAD4nSYeCIpAyVeCfKQ+rdt4a5Zo8aphv0w8/CZTx By041P87IXCee0C/bquXjx27MXlD3Y8YQlTu9rRg8Zgjyvx9J6losTpC7WNgk1uY ocRxEpnC8PMzuy1PtX2wr1cKuYfc5hZ4bk9zVliSnqf47c+mgDnQspIx6TnXO6HS -----END CERTIFICATE-----Generated at Tue Nov 4 21:53:12 2025 by rpki-client