$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: kWLiRBf3X2V0YKhNuqilDu5JQWqkrBrTLnwWvFk3BVU= Subject key identifier: 21:8A:84:45:BD:6B:11:9B:F9:F5:9D:A5:2E:76:3A:59:C0:75:24:5D Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584BBF69B903D8A323B30FDEAC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1AFD Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: bRtXX56Uzt5VZtQ1qRKTNwWMZmJTc3tHNaNodRmlxUw=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: jJ0tmTUIPV8GgW/6E+C1G2NeWJEBzIrYhyAIFIqIM8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b9:03:d8:a3:23:b3:0f:de:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=6c2c01ca-f84a-49b6-9ac6-d6101f9e0345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:b1:bd:d3:27:e4:00:35:a4:f1:26:27:0a: 3f:d0:b1:31:5f:cf:58:40:55:54:3f:b3:0a:be:af: 77:61:09:fe:fd:84:eb:c6:d8:c5:41:08:00:ec:a2: a2:58:2f:f6:13:43:0d:ff:1d:ac:5b:cc:8f:0a:06: 08:1e:4b:29:68:2b:60:81:68:3e:c0:0e:2d:17:1e: 6f:c5:b7:17:ad:ca:27:9e:6e:dd:f6:4c:0f:db:d9: 49:20:83:18:48:83:c4:3c:dd:91:e9:79:05:32:3b: 19:d2:ab:7c:1b:d8:ba:1d:e3:85:51:b0:76:e3:58: 04:11:5d:03:3c:f4:88:18:e2:02:ad:a5:25:1f:9e: f6:36:da:b7:19:ea:c1:fa:33:67:7a:53:76:f4:c4: f3:3e:08:35:06:2a:0f:a7:74:53:73:b6:f2:b8:0a: 3a:82:b5:f7:8a:ff:ba:d5:47:84:97:15:96:63:be: 59:9d:d0:3d:be:dc:6c:79:25:f1:8a:69:c5:c8:61: 14:85:43:51:71:9e:f6:e5:33:a5:3d:e5:2f:0f:eb: 30:34:ed:0e:73:54:49:d1:64:00:4b:4c:41:06:5f: e7:95:e8:42:a9:1b:3d:6d:e7:42:a8:49:63:2e:0b: 97:d7:01:2f:80:67:6b:80:44:98:ca:d4:32:82:cb: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8A:84:45:BD:6B:11:9B:F9:F5:9D:A5:2E:76:3A:59:C0:75:24:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a5:d0:59:8a:4a:9a:93:8c:26:88:7f:dc:60:38:4f:29:8a: e9:83:80:63:25:14:90:52:f7:d6:69:cb:42:1f:38:e0:13:e8: 99:d4:ef:3a:36:da:65:16:ca:92:0c:c2:21:14:83:bc:1e:a4: b4:4c:8d:02:93:45:0e:55:3d:e9:5d:d3:2d:55:7e:d5:c9:7f: 7e:97:85:54:87:52:22:3b:8b:2f:59:07:2e:38:8f:12:cd:5c: 46:f1:5c:fa:ef:92:66:38:bb:06:59:52:d3:19:e3:1a:46:81: 04:89:62:36:ca:1c:b3:3c:cb:d3:1b:a4:a7:91:5e:88:2e:8b: 57:7b:5e:a3:f0:2f:47:a4:1b:fa:57:5b:06:b1:b2:e5:46:22: 85:14:28:27:76:cd:fb:d5:8a:8b:bd:5e:ef:f8:5e:1b:76:94: 58:df:59:29:9a:5e:18:8c:59:ac:f5:c8:9f:1f:62:e7:92:36: c5:2a:35:19:f8:31:a5:eb:59:6c:8f:77:be:cb:e4:94:e2:74: d9:5a:7d:aa:69:17:cf:c8:40:e4:a9:94:ad:2c:15:e2:1c:d6: a2:46:f5:d4:ea:ae:5a:3c:29:c0:cd:9f:06:75:02:a8:6e:36: b4:dd:56:e4:9b:47:0a:54:47:a3:da:22:d8:a7:dd:d7:f8:56: 8d:cc:e5:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abkD2KMjsw/erAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk NmMyYzAxY2EtZjg0YS00OWI2LTlhYzYtZDYxMDFmOWUwMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh2xvdMn5AA1pPEmJwo/0LExX89YQFVUP7MK vq93YQn+/YTrxtjFQQgA7KKiWC/2E0MN/x2sW8yPCgYIHkspaCtggWg+wA4tFx5v xbcXrconnm7d9kwP29lJIIMYSIPEPN2R6XkFMjsZ0qt8G9i6HeOFUbB241gEEV0D PPSIGOICraUlH572Ntq3GerB+jNnelN29MTzPgg1BioPp3RTc7byuAo6grX3iv+6 1UeElxWWY75ZndA9vtxseSXximnFyGEUhUNRcZ725TOlPeUvD+swNO0Oc1RJ0WQA S0xBBl/nlehCqRs9bedCqEljLguX1wEvgGdrgESYytQygsvxLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCGKhEW9axGb+fWdpS52OlnAdSRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfpdBZikqak4wmiH/cYDhP KYrpg4BjJRSQUvfWactCHzjgE+iZ1O86NtplFsqSDMIhFIO8HqS0TI0Ck0UOVT3p XdMtVX7VyX9+l4VUh1IiO4svWQcuOI8SzVxG8Vz675JmOLsGWVLTGeMaRoEEiWI2 yhyzPMvTG6SnkV6ILotXe16j8C9HpBv6V1sGsbLlRiKFFCgnds371YqLvV7v+F4b dpRY31kpml4YjFms9cifH2LnkjbFKjUZ+DGl61lsj3e+y+SU4nTZWn2qaRfPyEDk qZStLBXiHNaiRvXU6q5aPCnAzZ8GdQKobja03Vbkm0cKVEej2iLYp93X+FaNzOUX -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:45 2025 by rpki-client