$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft File: 971a94fb-9c36-412b-ae91-2ddb520de93f.mft (raw, json) Hash identifier: oWf1qga+5HATetDg7spyX2eZoPGIyun0XPzIzObS+pY= Subject key identifier: 8F:88:7B:40:DF:35:84:81:75:FE:EB:FC:BF:8E:BD:12:0D:DA:76:C8 Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED Certificate issuer: /CN=971a94fb-9c36-412b-ae91-2ddb520de93f Certificate serial: 010D0C9F4328584BBF887DCEABC7F525407B3F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft Manifest number: 010D0C9F43285843B073F057FFA88B763CEA0CB2 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (hash: HhBJgeU0JCJfiQE9aPPj0nfimIC9e8rW45ElBoGTZ0A=) 2: 971a94fb-9c36-412b-ae91-2ddb520de93f.crl (hash: XR2/WE40lUmwk1qeXrFpf4BiGsRTxiY7e+GNwPzLnSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7d:ce:ab:c7:f5:25:40:7b:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=2b7981db-f8ea-420b-9fa1-569bab3bd5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:e3:22:a0:62:e4:2d:a6:c7:d3:35:70:68: f9:62:a1:e2:86:4d:c3:fa:91:4b:d7:8e:72:9f:d6: 5e:90:12:20:c8:51:da:99:96:81:db:44:0d:de:56: 2f:ff:f4:ba:48:a3:50:47:cd:ba:07:66:cb:64:a9: 9a:a4:0d:7c:aa:81:6f:7a:d6:55:69:19:4e:29:9e: e6:e1:86:df:cb:b2:0b:26:70:b8:a6:40:2c:f5:d0: f7:95:af:87:99:f4:1d:5c:d0:ed:d6:14:a3:10:7d: 99:49:5d:b3:8d:c7:4d:7b:9f:9b:12:25:ec:b2:9e: f7:b4:40:9d:a0:1f:a4:61:08:73:8b:f6:4a:e9:1c: 61:12:10:79:d5:23:bc:df:de:50:87:78:bd:f0:ae: 2e:d8:6e:d2:d4:63:e6:94:c7:b9:fe:65:d2:87:a9: 27:2b:40:86:2f:91:2a:f8:b0:83:0a:9d:6c:bf:e8: 77:41:2f:3e:c3:e6:e4:c7:32:7e:b8:26:0d:b1:9a: e9:5e:2c:8d:60:b1:d9:b4:28:39:fd:8a:b5:cf:3a: 38:27:f6:84:79:3b:31:ee:09:21:ca:6d:3c:0d:b4: 52:f3:14:18:e8:6a:15:fe:fe:e7:24:d8:89:c1:d7: 90:11:25:bf:b3:65:cd:76:c0:dd:90:6f:3a:0e:28: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:88:7B:40:DF:35:84:81:75:FE:EB:FC:BF:8E:BD:12:0D:DA:76:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl X509v3 Authority Key Identifier: keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:b0:d7:f1:71:2e:c9:23:33:a1:7a:62:c2:d7:d9:17:58:88: a7:0e:d0:13:ea:35:60:e3:3c:22:49:fe:8c:0b:48:f7:c7:cb: 8d:b8:db:a0:16:83:55:d9:8b:5f:c0:42:d4:d8:d0:c6:f6:7c: 6c:6f:61:5c:35:6f:9a:ab:d7:20:48:ef:1a:f6:6e:e0:ee:15: 96:ba:43:ba:ac:23:45:74:27:7a:2d:02:ab:bc:b7:da:a0:d7: 93:f8:3f:8b:fc:0b:d9:fc:bf:ad:0a:67:fe:92:b8:87:9e:db: ca:9c:85:20:98:5f:68:04:42:1c:06:f2:b8:c5:17:50:d0:75: aa:00:95:18:71:dd:6d:4a:d0:20:29:d6:69:9c:47:2d:21:30: 36:45:98:c3:44:85:eb:35:ca:49:73:6f:31:3c:71:29:c4:1c: 81:45:f6:90:7d:3e:86:1e:7a:a5:84:5b:5e:d8:7a:d3:58:9a: aa:6e:3b:16:fe:48:b8:2d:8f:4f:f1:62:e6:94:06:ed:e4:44: dc:94:2e:18:dc:28:a4:8a:c6:77:7d:c2:24:2a:4e:dd:cb:5b: f3:c4:12:d2:ff:1c:eb:06:ea:1e:d2:d6:30:6a:c2:ea:f7:c8: 42:6e:55:16:49:f5:c5:5b:29:72:76:df:b6:76:8b:81:5e:30: d4:74:34:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH3Oq8f1JUB7PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcxYTk0ZmItOWMzNi00MTJiLWFlOTEtMmRkYjUyMGRl OTNmMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk MmI3OTgxZGItZjhlYS00MjBiLTlmYTEtNTY5YmFiM2JkNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7jjIqBi5C2mx9M1cGj5YqHihk3D+pFL145y n9ZekBIgyFHamZaB20QN3lYv//S6SKNQR826B2bLZKmapA18qoFvetZVaRlOKZ7m 4Ybfy7ILJnC4pkAs9dD3la+HmfQdXNDt1hSjEH2ZSV2zjcdNe5+bEiXssp73tECd oB+kYQhzi/ZK6RxhEhB51SO8395Qh3i98K4u2G7S1GPmlMe5/mXSh6knK0CGL5Eq +LCDCp1sv+h3QS8+w+bkxzJ+uCYNsZrpXiyNYLHZtCg5/Yq1zzo4J/aEeTsx7gkh ym08DbRS8xQY6GoV/v7nJNiJwdeQESW/s2XNdsDdkG86DigCiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+Ie0DfNYSBdf7r/L+OvRIN2nbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFh OTRmYi05YzM2LTQxMmItYWU5MS0yZGRiNTIwZGU5M2YvOTcxYTk0ZmItOWMzNi00 MTJiLWFlOTEtMmRkYjUyMGRlOTNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTcxYTk0ZmItOWMzNi00MTJiLWFl OTEtMmRkYjUyMGRlOTNmLzk3MWE5NGZiLTljMzYtNDEyYi1hZTkxLTJkZGI1MjBk ZTkzZi5jcmwwHwYDVR0jBBgwFoAU4CfMngkGAQ+CIBDuSnNsROuGpe0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFhOTRmYi05YzM2LTQxMmItYWU5MS0yZGRi NTIwZGU5M2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDFsNfxcS7JIzOhemLC19kX WIinDtAT6jVg4zwiSf6MC0j3x8uNuNugFoNV2YtfwELU2NDG9nxsb2FcNW+aq9cg SO8a9m7g7hWWukO6rCNFdCd6LQKrvLfaoNeT+D+L/AvZ/L+tCmf+kriHntvKnIUg mF9oBEIcBvK4xRdQ0HWqAJUYcd1tStAgKdZpnEctITA2RZjDRIXrNcpJc28xPHEp xByBRfaQfT6GHnqlhFte2HrTWJqqbjsW/ki4LY9P8WLmlAbt5ETclC4Y3CikisZ3 fcIkKk7dy1vzxBLS/xzrBuoe0tYwasLq98hCblUWSfXFWylydt+2douBXjDUdDR4 -----END CERTIFICATE-----Generated at Wed Nov 5 08:35:56 2025 by rpki-client