$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft File: 654e0ef8-ac77-456b-9a63-98fdb228488b.mft (raw, json) Hash identifier: FzVEUwL+D5b5yDNl+WH9BMAFtfbZwCdazQCjzAPTfCo= Subject key identifier: 3A:EE:04:14:3E:AB:56:2F:EA:5C:04:81:E2:13:F2:AA:6E:98:63:B6 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F4328584BC0580118AE640AF24F7D2A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft Manifest number: 010D0C9F4328584381CCC6CCB558A47BF9178AAE Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 654e0ef8-ac77-456b-9a63-98fdb228488b.crl (hash: OaRYFZhurhujo6cYY28+qOHCX2L33xIwc5EKWZlVZvA=) 2: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (hash: 2uQc8c57y5XFD7AlLLVnbCij/hfAwfPd1m+5V47TUIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:01:18:ae:64:0a:f2:4f:7d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=bc25098b-133b-4ed8-9501-0fb39dbe00c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ff:f0:5b:d0:ad:b0:a8:3c:d8:c0:e7:8f:4e: e8:7a:c6:c9:03:ab:a0:5a:15:15:14:4a:38:ae:24: 2f:d6:8c:34:e8:ef:5f:bf:0d:79:3d:97:c7:f2:96: 12:0d:21:4f:79:ab:3c:0a:24:d9:9c:f9:53:7b:cd: 82:6e:d9:a6:15:e1:cd:b9:64:b4:3c:37:a5:ea:a7: a0:17:33:e1:51:fc:5e:64:05:5a:f5:82:62:52:de: 87:bd:f9:69:0e:e3:bd:61:e7:6f:e9:70:70:9b:04: 9a:88:fb:3d:76:f4:9a:95:5d:ab:8e:50:1c:6d:13: 5b:72:59:64:38:b0:0f:8f:eb:58:50:1f:7d:c6:5e: 92:47:97:ae:60:af:a9:99:eb:c9:21:e8:d9:23:0e: e5:49:36:d2:a4:e3:4b:3e:6d:0a:0e:46:cf:3c:78: 87:5d:c9:cc:a6:28:ce:ba:4a:c9:ad:ea:79:dc:83: 89:87:88:14:36:28:4a:4a:b6:6a:fc:43:2d:92:3c: a4:68:71:ef:e7:12:ba:2d:0c:8f:38:9e:f1:19:c1: 0a:7d:ca:8b:74:ca:f1:74:91:28:9e:67:ef:5c:79: ff:ac:f7:3f:ab:de:42:eb:53:c7:ed:fb:48:38:00: b1:91:03:8e:93:6e:db:7d:83:62:38:22:55:fc:92: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:04:14:3E:AB:56:2F:EA:5C:04:81:E2:13:F2:AA:6E:98:63:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:53:b1:cd:82:90:9a:3f:46:da:d0:42:7c:d2:64:16:71:d7: c4:fe:9a:1d:7e:d6:b7:a5:dd:da:24:b4:eb:58:73:45:6c:c1: da:54:cf:bb:c7:0d:03:77:96:3a:91:9f:ee:4a:e1:1c:9c:02: 6f:40:6a:c2:46:48:ce:e0:88:0a:f0:e3:01:b5:dc:9c:e0:52: db:c2:ca:af:26:3c:0b:24:68:f9:3d:87:2e:ee:86:6f:67:54: 1c:bb:cd:34:eb:70:c1:93:15:b4:6d:30:cc:e0:bd:1e:89:fd: c3:71:9b:69:ee:57:00:da:dc:4c:8d:9a:4f:72:5b:26:f5:80: e7:3b:36:dc:e6:d5:ef:7f:ca:b0:b4:3f:6b:b0:c9:64:b4:b9: 50:48:7d:f3:b3:9b:c0:01:f9:b3:30:6c:94:01:64:44:d5:0e: d0:f8:bb:ba:35:d3:b3:c2:e9:0f:ce:2a:b7:6e:13:52:15:65: ae:6a:74:01:cf:78:0b:02:88:50:7e:31:ae:12:d6:9f:73:ea: 3d:6d:3f:1c:b0:d9:cf:8b:de:1d:c9:44:45:a9:fe:0a:e8:c0: a1:a9:26:c1:22:c0:09:fc:26:be:3b:b7:ce:de:12:3b:23:a0: ec:8e:70:e9:82:f6:39:5b:df:05:9d:7f:ec:4f:3f:fe:c1:d8: 13:62:01:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAEYrmQK8k99KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk YmMyNTA5OGItMTMzYi00ZWQ4LTk1MDEtMGZiMzlkYmUwMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P/wW9CtsKg82MDnj07oesbJA6ugWhUVFEo4 riQv1ow06O9fvw15PZfH8pYSDSFPeas8CiTZnPlTe82CbtmmFeHNuWS0PDel6qeg FzPhUfxeZAVa9YJiUt6HvflpDuO9Yedv6XBwmwSaiPs9dvSalV2rjlAcbRNbcllk OLAPj+tYUB99xl6SR5euYK+pmevJIejZIw7lSTbSpONLPm0KDkbPPHiHXcnMpijO ukrJrep53IOJh4gUNihKSrZq/EMtkjykaHHv5xK6LQyPOJ7xGcEKfcqLdMrxdJEo nmfvXHn/rPc/q95C61PH7ftIOACxkQOOk27bfYNiOCJV/JL5nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDruBBQ+q1Yv6lwEgeIT8qpumGO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvNjU0ZTBlZjgtYWM3Ny00 NTZiLTlhNjMtOThmZGIyMjg0ODhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuU7HNgpCaP0ba0EJ80mQW cdfE/podfta3pd3aJLTrWHNFbMHaVM+7xw0Dd5Y6kZ/uSuEcnAJvQGrCRkjO4IgK 8OMBtdyc4FLbwsqvJjwLJGj5PYcu7oZvZ1Qcu80063DBkxW0bTDM4L0eif3DcZtp 7lcA2txMjZpPclsm9YDnOzbc5tXvf8qwtD9rsMlktLlQSH3zs5vAAfmzMGyUAWRE 1Q7Q+Lu6NdOzwukPziq3bhNSFWWuanQBz3gLAohQfjGuEtafc+o9bT8csNnPi94d yURFqf4K6MChqSbBIsAJ/Ca+O7fO3hI7I6DsjnDpgvY5W98FnX/sTz/+wdgTYgG8 -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:31 2025 by rpki-client