$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: MZruOAnyFEvGZkjGVuq9V+1254KMsweyBQ3bzkocdoY= Subject key identifier: 43:59:17:71:62:0B:4F:F1:DD:D1:6F:13:9B:24:89:0E:9D:E1:31:7A Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584BC23468893AF4459C7CA57800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1AFE Signing time: Wed 05 Nov 2025 12:00:03 +0000 Manifest this update: Wed 05 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: Zj49wn8HIIZE+tsx2PtfirWcFe85r7wfD8/mS/UsNto=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: jJ0tmTUIPV8GgW/6E+C1G2NeWJEBzIrYhyAIFIqIM8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:34:68:89:3a:f4:45:9c:7c:a5:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Nov 5 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=c9572026-5b89-4a65-a30f-6eb0e0b66b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:44:f1:9f:7a:4a:3e:ab:45:bd:0c:8a:45: a5:a0:11:bd:32:68:89:a8:29:88:5e:8a:8e:91:dd: 2a:3f:d2:62:a4:48:b0:54:38:a2:35:78:3c:77:ff: c4:d7:9f:f5:1c:d9:41:df:2a:47:3d:4d:0b:2d:57: 4d:d6:6a:db:bc:10:91:fd:23:98:d7:90:6f:39:71: c4:aa:3d:91:ab:5e:65:ad:35:81:2d:7f:3f:93:57: 8d:d4:55:35:6f:9b:58:9a:9b:f8:67:58:fc:fa:61: 99:db:6f:b1:f0:c0:aa:4f:55:d0:43:64:09:41:5b: e6:71:9f:21:9a:d3:a0:4f:7a:9c:2a:52:f2:f8:5b: 04:79:20:25:ad:d8:b4:7b:78:c5:3f:7c:2a:d0:8e: 3c:ca:f9:73:57:8d:2f:bb:c8:3e:87:74:fe:79:2b: 58:a6:23:96:94:63:b8:0b:ff:85:62:38:ee:ec:84: 0b:05:61:39:48:94:f5:e4:ff:50:63:41:ef:38:75: 59:5f:b8:10:12:76:b2:95:61:37:48:e5:f6:73:9c: ce:c8:94:15:e2:ef:32:2e:5a:9b:ee:7b:08:f6:8a: 38:d9:5e:c7:3e:9d:71:39:a3:b8:f1:08:40:74:ef: 1b:62:a6:54:fc:51:8c:25:16:e9:56:f2:b3:e4:79: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:59:17:71:62:0B:4F:F1:DD:D1:6F:13:9B:24:89:0E:9D:E1:31:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b4:75:6a:44:df:74:1f:13:fb:fd:c7:2b:1d:5e:ee:41:83: 01:61:d5:17:38:fa:e4:2a:e5:4c:c5:63:5c:0a:92:ce:0b:d1: 80:95:98:89:9c:6e:6c:c1:1a:8d:07:78:a9:14:b9:0a:82:b9: 85:85:d7:54:89:22:69:60:67:09:fe:01:24:77:b5:da:25:3a: 12:6c:a6:c1:54:f2:75:80:26:a1:29:8c:16:de:2b:84:2b:ff: 04:30:28:ef:0f:56:63:c8:0e:23:24:55:c6:a0:f4:40:b9:ce: 15:3a:97:e3:a5:3b:d4:f2:50:ad:ff:46:e8:21:ae:b1:e6:ea: 53:89:23:7f:f9:89:60:6b:d0:f2:fd:8c:76:7e:25:59:72:40: 8e:bd:d1:69:1a:1b:b9:0b:94:df:a3:90:5f:bc:d6:7d:32:2b: 30:52:d8:62:19:80:79:08:7e:bf:03:88:e5:39:2a:ec:24:2f: 8f:69:6b:85:c0:04:f3:2b:8c:14:84:a5:2e:ef:e2:4c:59:48: 87:22:57:f4:d1:58:37:b0:6e:50:43:e5:df:e0:a9:b1:2f:8f: be:51:99:f5:a9:58:d3:83:76:d8:15:08:d5:19:c8:57:45:82: df:8b:9d:ee:3e:7d:41:0d:5e:83:5d:9f:1b:1c:cb:f8:82:7b: 12:cb:21:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCNGiJOvRFnHyleAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MTEwNTEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk Yzk1NzIwMjYtNWI4OS00YTY1LWEzMGYtNmViMGUwYjY2Yjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApABE8Z96Sj6rRb0MikWloBG9MmiJqCmIXoqO kd0qP9JipEiwVDiiNXg8d//E15/1HNlB3ypHPU0LLVdN1mrbvBCR/SOY15BvOXHE qj2Rq15lrTWBLX8/k1eN1FU1b5tYmpv4Z1j8+mGZ22+x8MCqT1XQQ2QJQVvmcZ8h mtOgT3qcKlLy+FsEeSAlrdi0e3jFP3wq0I48yvlzV40vu8g+h3T+eStYpiOWlGO4 C/+FYjju7IQLBWE5SJT15P9QY0HvOHVZX7gQEnaylWE3SOX2c5zOyJQV4u8yLlqb 7nsI9oo42V7HPp1xOaO48QhAdO8bYqZU/FGMJRbpVvKz5Hld3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFENZF3FiC0/x3dFvE5skiQ6d4TF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEtHVqRN90HxP7/ccrHV7u QYMBYdUXOPrkKuVMxWNcCpLOC9GAlZiJnG5swRqNB3ipFLkKgrmFhddUiSJpYGcJ /gEkd7XaJToSbKbBVPJ1gCahKYwW3iuEK/8EMCjvD1ZjyA4jJFXGoPRAuc4VOpfj pTvU8lCt/0boIa6x5upTiSN/+Ylga9Dy/Yx2fiVZckCOvdFpGhu5C5Tfo5BfvNZ9 MiswUthiGYB5CH6/A4jlOSrsJC+PaWuFwATzK4wUhKUu7+JMWUiHIlf00Vg3sG5Q Q+Xf4KmxL4++UZn1qVjTg3bYFQjVGchXRYLfi53uPn1BDV6DXZ8bHMv4gnsSyyHn -----END CERTIFICATE-----Generated at Wed Nov 5 18:22:04 2025 by rpki-client