$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft File: 2a093e3f-1d9b-4e68-9317-1de77daf9698.mft (raw, json) Hash identifier: vK3B2Z39ZyCTYfr2B299KGFqBt8WQINyePq/eDO+6lY= Subject key identifier: 04:EB:5D:9E:93:EC:A2:D7:2C:C5:38:F6:0B:F2:2B:8A:D7:35:04:1F Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Certificate serial: 010D0C9F4328584BBDE698F3FCE73E37F1C8F840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft Manifest number: 010D0C9F43285843E9795D6A0F89BC0E7A98B6E7 Signing time: Mon 03 Nov 2025 23:00:03 +0000 Manifest this update: Mon 03 Nov 2025 23:00:03 +0000 Manifest next update: Thu 06 Nov 2025 23:00:00 +0000 Files and hashes: 1: 2a093e3f-1d9b-4e68-9317-1de77daf9698.crl (hash: ybI4p6KlByLdEs6Z4kL/XSaFUX2x8K1uCbGl0T4oH1U=) 2: 4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa (hash: DIW/RuHwLEGbcOLCvLL6OLyLV3SbfS20zZTeEYOyrOU=) 3: ef3392a6-ef96-3774-8bd4-9944157036c5.roa (hash: /cFwVeguQhfW1tL8FxpGkozPrCx2NTJBQ0OltcvaSac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:e6:98:f3:fc:e7:3e:37:f1:c8:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Validity Not Before: Nov 3 23:00:03 2025 GMT Not After : Nov 6 23:00:00 2025 GMT Subject: CN=39fd63f2-7e3d-4fc4-88ff-3427004304f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:e3:b1:14:c7:41:33:8d:68:81:68:89:19: f3:3c:18:88:09:1f:9e:41:36:be:48:fb:6a:ff:20: e0:55:76:a6:42:2e:cc:56:21:b7:b6:59:2a:87:13: ac:20:50:d2:83:2a:07:18:e5:47:21:34:93:61:7a: 87:49:80:95:aa:4a:0f:ce:73:12:b6:d5:e6:74:11: b1:3e:7a:d2:21:9b:10:80:65:6b:b7:29:44:22:e8: 55:37:5a:85:be:b4:b9:26:90:fa:95:eb:7c:ed:82: 53:71:25:1e:4e:85:a1:0a:3f:01:13:ce:b8:19:1e: f6:36:5c:e1:87:56:78:84:26:88:0c:aa:23:56:5e: 92:4b:24:8c:a7:0e:7e:e4:62:69:a0:7d:22:39:01: 6f:cf:f3:9c:e5:f8:0d:6c:38:34:86:b5:af:0f:75: 93:60:15:f7:93:4c:94:11:b2:90:91:4e:33:3f:ff: bc:8a:e4:47:bb:50:4b:ac:3b:6c:3a:be:93:8f:b1: 99:21:66:a3:7a:84:4c:27:0a:54:ec:24:c8:e2:d6: 32:2a:f9:18:cd:74:3b:09:70:1e:40:99:bb:22:0a: 81:e5:3d:c9:21:9b:13:43:c3:7a:f1:f8:a2:10:b5: 69:15:d0:70:e1:ee:cd:09:17:0f:b7:17:1f:e8:dc: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:5D:9E:93:EC:A2:D7:2C:C5:38:F6:0B:F2:2B:8A:D7:35:04:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl X509v3 Authority Key Identifier: keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:17:27:10:ab:37:e4:57:7d:86:f8:c3:f0:5e:1d:87:70:af: b4:a0:c4:1a:db:93:fb:50:97:a6:23:10:cb:11:8c:cd:16:81: f4:c5:90:4e:74:be:1a:91:de:9e:22:d0:7e:8a:c0:4b:92:89: 0e:6a:5f:93:45:cb:bd:ee:8f:64:39:3a:6a:7d:ae:08:1e:4b: 2e:b1:b8:72:e3:80:42:e6:b3:e0:59:76:3b:f0:32:75:04:ad: 2a:42:31:e7:75:b0:4b:5a:85:47:44:0d:77:e4:7e:bb:22:09: 52:6b:ff:d5:c6:90:df:70:ca:e9:60:26:7e:5b:0a:89:3c:e8: 14:c5:4d:07:f0:31:48:90:97:a2:2f:7e:be:b0:ed:e2:53:5e: 7b:b5:85:9e:70:61:04:2b:0c:3c:8b:d0:55:d4:79:bb:d2:62: 00:ab:96:db:67:b6:25:a3:33:47:a4:7c:59:6a:8c:9c:f4:cf: c7:82:e2:c0:a4:7c:39:2a:59:87:8e:3c:db:46:0e:94:d1:41: 88:47:4b:3a:26:c8:ad:5d:2a:89:a8:77:1b:db:7a:e6:8a:03: b0:e8:ce:2e:99:23:0c:7d:ec:9f:80:b6:b6:69:e9:de:42:b4: ed:5a:c9:43:c5:72:f0:e7:d9:90:83:54:b5:a3:b3:a5:7f:6b: f8:5d:fc:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu95pjz/Oc+N/HI+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5 Njk4MB4XDTI1MTEwMzIzMDAwM1oXDTI1MTEwNjIzMDAwMFowLzEtMCsGA1UEAxMk MzlmZDYzZjItN2UzZC00ZmM0LTg4ZmYtMzQyNzAwNDMwNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkrjsRTHQTONaIFoiRnzPBiICR+eQTa+SPtq /yDgVXamQi7MViG3tlkqhxOsIFDSgyoHGOVHITSTYXqHSYCVqkoPznMSttXmdBGx PnrSIZsQgGVrtylEIuhVN1qFvrS5JpD6let87YJTcSUeToWhCj8BE864GR72Nlzh h1Z4hCaIDKojVl6SSySMpw5+5GJpoH0iOQFvz/Oc5fgNbDg0hrWvD3WTYBX3k0yU EbKQkU4zP/+8iuRHu1BLrDtsOr6Tj7GZIWajeoRMJwpU7CTI4tYyKvkYzXQ7CXAe QJm7IgqB5T3JIZsTQ8N68fiiELVpFdBw4e7NCRcPtxcf6NwgvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFATrXZ6T7KLXLMU49gvyK4rXNQQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5 M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvMmEwOTNlM2YtMWQ5Yi00 ZTY4LTkzMTctMWRlNzdkYWY5Njk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3 N2RhZjk2OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLFycQqzfkV32G+MPwXh2H cK+0oMQa25P7UJemIxDLEYzNFoH0xZBOdL4akd6eItB+isBLkokOal+TRcu97o9k OTpqfa4IHksusbhy44BC5rPgWXY78DJ1BK0qQjHndbBLWoVHRA135H67IglSa//V xpDfcMrpYCZ+WwqJPOgUxU0H8DFIkJeiL36+sO3iU157tYWecGEEKww8i9BV1Hm7 0mIAq5bbZ7YlozNHpHxZaoyc9M/HguLApHw5KlmHjjzbRg6U0UGIR0s6JsitXSqJ qHcb23rmigOw6M4umSMMfeyfgLa2aeneQrTtWslDxXLw59mQg1S1o7Olf2v4Xfzm -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:48 2025 by rpki-client