$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft File: 6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft (raw, json) Hash identifier: PT4b9MPQJ75BFQYVrz2k9FglNdL1+HYAHN0egTZvuIM= Subject key identifier: 82:63:88:18:51:33:C3:BA:4C:E0:A1:D1:C1:A4:9B:3B:14:4C:B8:5A Authority key identifier: 2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3 Certificate issuer: /CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3 Certificate serial: 010D0C9F4328584BBFE0D7C0484A8E7FBC18E480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft Manifest number: 010D0C9F43285843E8B0DB2E025283B3E863A060 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl (hash: +vodfdy3eRVHGHtYy5gcIdoMZSfbAzvHCRjfB7JpYsg=) 2: eb71a70a-24f1-3abd-8225-b45fd87b3249.roa (hash: 0So5Gs9MoRnoI4edmsA7bOzbdlMebBM4zD7fzgOVcYo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d7:c0:48:4a:8e:7f:bc:18:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=98485d23-0ed2-4ec4-8b64-d62594e0ea04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:97:e4:aa:5a:d7:9d:3e:f0:4d:92:c9:e7: ad:2c:8f:66:51:1a:75:d0:6b:c7:6b:df:b6:ea:01: fc:cf:43:29:b7:36:10:64:db:64:5a:33:87:cc:0f: eb:47:34:e5:2c:36:15:4d:41:08:88:7a:06:2e:2a: 0a:12:05:41:36:7c:49:c8:c3:27:4d:fa:3c:d1:30: d5:11:3a:1b:e1:cd:68:d8:f0:c8:dc:86:1e:0f:10: 23:73:8a:8f:92:26:ff:aa:70:d5:74:25:d9:84:89: 3d:78:8b:27:37:22:b1:87:e2:d6:6a:3d:a7:28:f0: 0f:8d:1d:f2:da:30:44:47:81:11:ed:a6:46:de:ed: d9:73:ae:21:f9:c6:ca:1a:e4:19:a6:4f:fe:cd:51: 95:23:f8:c1:35:c5:9c:37:ec:d6:69:8b:95:3a:27: 45:b7:4f:77:ef:15:22:54:94:35:fc:42:b8:5f:0c: ee:28:34:7d:38:0c:16:c3:2e:d9:1b:e5:87:9b:27: 29:1e:42:f8:02:0b:fb:64:3d:d0:07:6b:8b:02:26: 93:05:a8:53:47:84:15:ea:1a:67:d1:0e:12:bf:86: e8:78:b9:27:0a:e7:e2:e4:87:a8:ca:7f:65:4e:48: ad:a6:47:71:65:0f:2a:dd:e9:f1:29:86:27:ba:94: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:63:88:18:51:33:C3:BA:4C:E0:A1:D1:C1:A4:9B:3B:14:4C:B8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl X509v3 Authority Key Identifier: keyid:2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a7:a8:c6:4d:a4:f8:21:3b:58:c2:0d:78:54:ef:59:43:1c: 66:03:fa:96:a0:b1:e4:d4:04:c8:99:6b:c9:21:3f:6a:23:de: 11:9d:6c:df:5f:1a:8b:fc:46:ee:a0:47:7b:a1:98:70:33:0e: 45:29:ab:77:e1:e9:08:fc:f8:2b:74:6a:82:3f:4e:86:a5:20: 48:a7:9c:a5:e0:cc:01:00:10:30:a7:49:45:e4:71:b5:72:ac: f8:de:52:35:8f:fd:53:8d:6c:49:36:9c:18:cc:7d:1e:74:08: c9:ae:9e:c9:22:d6:0e:37:7a:04:57:94:4f:49:73:bf:22:75: 2b:73:af:10:aa:9a:9e:b8:21:5c:88:41:70:b6:13:0d:e8:07: 56:31:e3:51:b8:02:8e:09:55:69:4b:79:93:48:d0:21:16:d3: 1c:41:1d:81:6e:f9:c6:89:3c:d2:71:27:55:d7:1c:c2:2c:7d: 72:ae:4e:c5:4e:34:c9:f8:bc:7d:0f:48:05:33:e0:cc:54:a2: 96:49:42:9b:91:57:10:10:98:5d:c6:8c:42:a3:d9:b2:12:cd: 6e:00:aa:3c:b3:2f:fb:ca:ee:eb:9c:59:d3:08:79:c7:ba:e6: df:3a:03:c9:82:c7:f8:81:b8:52:27:07:42:bf:23:60:d2:18: 59:7d:b8:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NfASEqOf7wY5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4MWQ3YzAtODIxNy00M2YyLTkwNDctNWU2YzBiODVh OGUzMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk OTg0ODVkMjMtMGVkMi00ZWM0LThiNjQtZDYyNTk0ZTBlYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBGX5Kpa150+8E2SyeetLI9mURp10GvHa9+2 6gH8z0MptzYQZNtkWjOHzA/rRzTlLDYVTUEIiHoGLioKEgVBNnxJyMMnTfo80TDV ETob4c1o2PDI3IYeDxAjc4qPkib/qnDVdCXZhIk9eIsnNyKxh+LWaj2nKPAPjR3y 2jBER4ER7aZG3u3Zc64h+cbKGuQZpk/+zVGVI/jBNcWcN+zWaYuVOidFt0937xUi VJQ1/EK4XwzuKDR9OAwWwy7ZG+WHmycpHkL4Agv7ZD3QB2uLAiaTBahTR4QV6hpn 0Q4Sv4boeLknCufi5Ieoyn9lTkitpkdxZQ8q3enxKYYnupQQLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIJjiBhRM8O6TOCh0cGkmzsUTLhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82Yzgx ZDdjMC04MjE3LTQzZjItOTA0Ny01ZTZjMGI4NWE4ZTMvNmM4MWQ3YzAtODIxNy00 M2YyLTkwNDctNWU2YzBiODVhOGUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmM4MWQ3YzAtODIxNy00M2YyLTkw NDctNWU2YzBiODVhOGUzLzZjODFkN2MwLTgyMTctNDNmMi05MDQ3LTVlNmMwYjg1 YThlMy5jcmwwHwYDVR0jBBgwFoAULWu8/Lk4uSzUugcMG8G50t3xoaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82YzgxZDdjMC04MjE3LTQzZjItOTA0Ny01ZTZj MGI4NWE4ZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEp6jGTaT4ITtYwg14VO9Z QxxmA/qWoLHk1ATImWvJIT9qI94RnWzfXxqL/EbuoEd7oZhwMw5FKat34ekI/Pgr dGqCP06GpSBIp5yl4MwBABAwp0lF5HG1cqz43lI1j/1TjWxJNpwYzH0edAjJrp7J ItYON3oEV5RPSXO/InUrc68QqpqeuCFciEFwthMN6AdWMeNRuAKOCVVpS3mTSNAh FtMcQR2BbvnGiTzScSdV1xzCLH1yrk7FTjTJ+Lx9D0gFM+DMVKKWSUKbkVcQEJhd xoxCo9myEs1uAKo8sy/7yu7rnFnTCHnHuubfOgPJgsf4gbhSJwdCvyNg0hhZfbhR -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:46 2025 by rpki-client