$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft File: 0ec17157-66de-4aab-85e7-28af4de430e2.mft (raw, json) Hash identifier: Je8mqAECkAbCl2XbdjaYhxjOR7WgxBJ+m8XVPIPo+8Y= Subject key identifier: A6:A7:2A:B2:E0:C7:EB:AE:01:2E:D1:E9:BA:E1:81:73:F2:DF:4D:F2 Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584BC01C67C9D10BE166D101CF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft Manifest number: 010D0C9F43285843A8B9A7EBB23BFBB59BA715F8 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 0ec17157-66de-4aab-85e7-28af4de430e2.crl (hash: qFki/ddut8sg9OH1xDntWIBg4iySC9JVQoUr9rIr6/U=) 2: d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer (hash: bnVHlc58Mg0wx2o7yA+CGPNLwczsDsJN9VQkzHBuGPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:67:c9:d1:0b:e1:66:d1:01:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=e4cf13a5-8bb6-45f8-87c4-592291c5002a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:11:74:61:4a:1c:81:af:a6:0b:fd:ce:4e: ca:c8:69:19:09:df:2b:2e:b9:9f:ff:6f:98:50:9c: b7:1e:ea:fc:9a:4e:e0:69:e0:5e:15:6d:76:c6:25: ab:54:30:7d:61:21:7c:bf:1c:ab:87:6a:36:0d:f5: 55:7b:6f:2c:78:65:6a:b4:38:b9:83:ea:b2:16:51: 2f:ac:e3:c5:78:5e:6b:51:cc:09:6c:da:76:f1:4e: c4:9c:6f:7f:f6:26:c7:a9:2f:fe:ef:68:35:70:db: 92:d6:c7:4a:88:b8:fb:e8:9a:be:d6:ed:a6:03:af: 9e:cb:43:2f:2b:42:c2:f3:74:7e:5e:40:67:0e:36: 49:b8:d1:03:36:bf:e9:87:96:b1:86:a3:84:27:2d: ee:54:83:c3:20:94:aa:a3:8d:ed:70:96:a3:a9:e5: 08:ed:7c:8a:08:88:61:83:2a:2f:18:e4:d5:e7:03: cf:15:c5:42:b1:8e:48:99:42:44:6d:9a:58:05:2e: 20:f3:31:51:08:8a:11:85:8b:32:c3:33:4b:b7:3c: 89:59:3f:a2:52:a5:e6:06:6d:01:37:50:48:35:59: 58:d6:0e:5a:38:b1:08:91:67:71:02:d3:f2:e4:e8: 0e:b1:c0:91:16:1a:e0:65:84:e2:a9:fe:be:e8:92: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A7:2A:B2:E0:C7:EB:AE:01:2E:D1:E9:BA:E1:81:73:F2:DF:4D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:06:e2:32:24:0b:fd:54:80:9b:6b:d5:33:14:82:2b:31:7a: 1a:af:83:c3:d1:b3:ec:31:c3:43:1f:56:f8:22:2d:5b:28:da: 0e:a9:20:ba:61:00:ca:6f:66:c6:22:e5:62:d5:7a:a5:f7:96: 77:00:f0:12:5c:32:ac:8e:0f:cf:4b:61:43:02:39:da:d9:dc: f1:b4:17:dc:d8:e1:10:f6:97:ab:09:4a:72:0a:cf:85:ae:37: 64:25:79:ea:fd:52:78:a6:e5:df:4c:3c:9a:0a:a1:b1:d9:82: f0:fe:22:0e:b7:7d:d2:3f:1c:c4:8b:e8:32:46:05:c7:ab:d3: 14:e3:8d:61:2e:9a:fc:fd:d7:0f:71:d6:6b:ca:a3:f9:b1:67: 47:5c:d8:70:2f:18:2e:8c:48:27:9a:6d:0c:33:83:53:04:1b: d4:2e:67:af:6a:1e:bb:ce:c0:ff:26:c7:a1:ec:96:38:d0:53: f1:88:06:9e:cf:8d:8f:7c:d9:f4:f3:21:4e:27:f0:a2:b2:36: b8:76:8c:66:a5:fd:e4:60:ee:bb:cf:5a:27:54:b5:a5:d6:08: 50:89:a7:9c:f2:e8:c3:f3:54:1c:42:6c:62:2e:95:77:8e:70: af:9c:bf:e0:7f:20:7a:1b:e5:c5:91:57:b6:66:d8:1f:a6:01: 9f:5d:f7:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGfJ0QvhZtEBzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZTRjZjEzYTUtOGJiNi00NWY4LTg3YzQtNTkyMjkxYzUwMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8oRdGFKHIGvpgv9zk7KyGkZCd8rLrmf/2+Y UJy3Hur8mk7gaeBeFW12xiWrVDB9YSF8vxyrh2o2DfVVe28seGVqtDi5g+qyFlEv rOPFeF5rUcwJbNp28U7EnG9/9ibHqS/+72g1cNuS1sdKiLj76Jq+1u2mA6+ey0Mv K0LC83R+XkBnDjZJuNEDNr/ph5axhqOEJy3uVIPDIJSqo43tcJajqeUI7XyKCIhh gyovGOTV5wPPFcVCsY5ImUJEbZpYBS4g8zFRCIoRhYsywzNLtzyJWT+iUqXmBm0B N1BINVlY1g5aOLEIkWdxAtPy5OgOscCRFhrgZYTiqf6+6JJ3wwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKanKrLgx+uuAS7R6brhgXPy303yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMx NzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcxNTctNjZkZS00 YWFiLTg1ZTctMjhhZjRkZTQzMGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVjMTcxNTctNjZkZS00YWFiLTg1 ZTctMjhhZjRkZTQzMGUyLzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0 MzBlMi5jcmwwHwYDVR0jBBgwFoAUy1R9vySHpXGysMeIlpnnOSA/cmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFm NGRlNDMwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4BuIyJAv9VICba9UzFIIr MXoar4PD0bPsMcNDH1b4Ii1bKNoOqSC6YQDKb2bGIuVi1Xql95Z3APASXDKsjg/P S2FDAjna2dzxtBfc2OEQ9perCUpyCs+FrjdkJXnq/VJ4puXfTDyaCqGx2YLw/iIO t33SPxzEi+gyRgXHq9MU441hLpr8/dcPcdZryqP5sWdHXNhwLxgujEgnmm0MM4NT BBvULmevah67zsD/Jseh7JY40FPxiAaez42PfNn08yFOJ/Cisja4doxmpf3kYO67 z1onVLWl1ghQiaec8ujD81QcQmxiLpV3jnCvnL/gfyB6G+XFkVe2ZtgfpgGfXfek -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:44 2025 by rpki-client