$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft File: a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft (raw, json) Hash identifier: 77puLRifDJijrBrAUSxLsNtiLQy+LkQtRp7KuhIDI4o= Subject key identifier: 46:6E:0A:64:94:BC:41:9C:59:8D:23:E8:D7:4A:21:E9:28:CE:04:72 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584BBDAB1A987859AE7CEB36F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft Manifest number: 010D0C9F43285843E950AA0F557A5B5938B60781 Signing time: Mon 03 Nov 2025 21:00:08 +0000 Manifest this update: Mon 03 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa (hash: wospGR2++fB1AnE/YljysTjNaFDPDFLuIgoG9sJSE1E=) 2: 4f00197c-82ad-39dc-96d1-b0d2703738e7.roa (hash: bMWNb9SGzxRx5G3yyGTZy+/kQX9YDdoY+H4Tz4bbobI=) 3: a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl (hash: qwzOVVRSSKi5hfxjIcQYjOqasJnSHtvwYcMWXny4tzM=) 4: d3f55b78-b0db-358b-92ae-a01f4943931a.roa (hash: 04+DxMMbb45Zv3tadi789LxslILIDUXTWqRxbYB0beM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:ab:1a:98:78:59:ae:7c:eb:36:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Nov 3 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=65f14a8a-50d0-414a-afb0-e4bf57135243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:ae:22:cb:48:20:d1:ba:b8:d9:a8:7a:f1: c5:10:54:12:0b:18:55:cd:19:14:4e:5f:89:c2:0d: 11:3e:59:e6:3e:d0:00:23:34:2a:0e:7d:0b:a2:25: 17:7b:d4:65:c8:d6:62:e0:72:21:6f:60:40:57:10: 7f:ad:a2:fc:93:98:b6:f3:10:eb:c0:47:ce:6f:c9: 51:7a:0f:a7:1a:85:0e:f5:c4:56:a4:b6:38:bd:c4: 18:5b:64:7b:66:8c:c5:16:b4:3f:7f:38:1c:9b:a0: 92:db:02:f8:4b:b5:c8:ff:a1:a6:ca:f9:c4:75:2d: ae:5c:61:82:7e:6e:6e:73:a1:e1:d2:cd:19:66:92: 13:c6:ff:f9:d9:d9:e8:4b:33:36:81:73:cb:98:0c: 30:d8:88:22:41:ac:b8:0c:3c:65:eb:53:a2:88:6f: 44:bc:11:09:c0:aa:62:0d:f9:cb:71:c6:91:23:5f: 93:3c:d5:f9:b0:5b:55:87:56:2b:2f:e2:4a:4d:05: 7f:48:34:d0:3c:b0:d3:b3:42:d9:27:5c:40:c0:1e: 33:94:87:5e:e3:ff:2d:25:89:ab:e1:ba:3f:09:12: ea:d5:c1:f8:b9:40:27:18:f7:9c:1c:4f:59:07:a7: bd:66:47:5d:1a:af:1a:f3:a8:b4:c8:56:6b:f8:e3: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6E:0A:64:94:BC:41:9C:59:8D:23:E8:D7:4A:21:E9:28:CE:04:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f5:4d:3d:3f:18:6e:1f:70:d5:af:d9:ca:ed:c1:64:5a:29: 83:aa:e2:04:31:15:bc:29:ab:47:54:3a:e5:0b:45:c3:dd:5f: 83:4a:69:03:de:b5:b2:b8:5c:78:cb:34:b5:0d:7d:36:a1:ff: 1a:19:a9:1b:78:55:7c:72:4c:f0:2e:e2:ed:7e:8a:7a:82:2a: 4f:85:21:06:37:50:20:15:53:55:61:8a:03:9b:34:10:72:1d: 38:91:cb:26:f9:40:35:fb:00:5e:1e:65:4d:ea:53:3c:83:55: f3:7c:32:b4:32:db:93:53:96:84:a6:5e:a5:4e:43:1e:83:e1: de:e2:4b:ff:74:6c:a8:c1:d5:6e:8b:be:b2:38:ec:c4:2c:41: 89:f2:cf:1a:48:1f:c7:1e:75:33:0a:e1:d7:69:8e:25:49:41: f5:17:e3:56:68:53:08:6f:47:2d:0c:6c:92:5b:f1:7a:71:55: 38:80:1a:02:58:9d:1e:0c:b5:dc:55:dc:03:34:58:75:ad:a7: 7a:79:3d:bf:d6:9c:7b:29:d6:fb:c2:2a:6c:3f:f6:0c:02:72: 34:72:be:48:b0:87:11:29:3c:08:c2:96:f4:2e:d0:c5:09:d9: ad:a9:f0:63:6f:37:d4:6f:de:23:18:ff:ff:4a:d0:3b:63:4e: 61:4a:e9:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9qxqYeFmufOs28gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MTEwMzIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk NjVmMTRhOGEtNTBkMC00MTRhLWFmYjAtZTRiZjU3MTM1MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhauIstIING6uNmoevHFEFQSCxhVzRkUTl+J wg0RPlnmPtAAIzQqDn0LoiUXe9RlyNZi4HIhb2BAVxB/raL8k5i28xDrwEfOb8lR eg+nGoUO9cRWpLY4vcQYW2R7ZozFFrQ/fzgcm6CS2wL4S7XI/6GmyvnEdS2uXGGC fm5uc6Hh0s0ZZpITxv/52dnoSzM2gXPLmAww2IgiQay4DDxl61OiiG9EvBEJwKpi DfnLccaRI1+TPNX5sFtVh1YrL+JKTQV/SDTQPLDTs0LZJ1xAwB4zlIde4/8tJYmr 4bo/CRLq1cH4uUAnGPecHE9ZB6e9ZkddGq8a86i0yFZr+OMgPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEZuCmSUvEGcWY0j6NdKIekozgRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvYTFiZDlkNDMtYzEyNy00 YTllLWIwMzgtMGM0MzZjNWQ5MDVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr9U09PxhuH3DVr9nK7cFk WimDquIEMRW8KatHVDrlC0XD3V+DSmkD3rWyuFx4yzS1DX02of8aGakbeFV8ckzw LuLtfop6gipPhSEGN1AgFVNVYYoDmzQQch04kcsm+UA1+wBeHmVN6lM8g1XzfDK0 MtuTU5aEpl6lTkMeg+He4kv/dGyowdVui76yOOzELEGJ8s8aSB/HHnUzCuHXaY4l SUH1F+NWaFMIb0ctDGySW/F6cVU4gBoCWJ0eDLXcVdwDNFh1rad6eT2/1px7Kdb7 wipsP/YMAnI0cr5IsIcRKTwIwpb0LtDFCdmtqfBjbzfUb94jGP//StA7Y05hSuk2 -----END CERTIFICATE-----Generated at Tue Nov 4 21:53:13 2025 by rpki-client