$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft File: ac870f3e-b014-4387-bb59-63f4192b5665.mft (raw, json) Hash identifier: 7c+XaOv9h7hcpsRjJHNUAVvkvvJgCZBK2whoNapZ0oc= Subject key identifier: AF:43:AC:65:97:5B:25:D1:9C:82:F8:44:30:1E:CB:1F:1B:CD:26:8E Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665 Certificate serial: 010D0C9F4328584BBE2232425008CCB81BECDD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft Manifest number: 010D0C9F43285843C5670C91ACAFC11981795AED Signing time: Tue 04 Nov 2025 01:00:08 +0000 Manifest this update: Tue 04 Nov 2025 01:00:08 +0000 Manifest next update: Thu 06 Nov 2025 01:00:00 +0000 Files and hashes: 1: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (hash: xiUq6jQX/8oM4KaFN9BJVd9w/Jah9AV6er5EJUSGGvs=) 2: ac870f3e-b014-4387-bb59-63f4192b5665.crl (hash: 1/kMJi8ZLPel82w1tuDwd7rujSr/H9nh9p6XchwBVm0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:22:32:42:50:08:cc:b8:1b:ec:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665 Validity Not Before: Nov 4 01:00:08 2025 GMT Not After : Nov 6 01:00:00 2025 GMT Subject: CN=857935de-e65b-45c3-be4d-86aed0c6d0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:be:5e:aa:53:5e:60:5e:7f:31:15:78:7e: 64:df:2a:68:b4:2e:5d:71:26:03:24:b4:d7:f8:45: f1:30:03:fd:4a:61:04:63:28:4c:1c:78:53:0a:c7: 7b:51:34:25:45:a3:a1:39:ef:25:df:04:75:b4:47: 0d:f9:53:49:89:d1:24:eb:94:ac:a4:62:0b:97:ed: f9:f7:1c:1b:7a:8d:1f:d1:a9:f0:9a:9d:c4:8c:b4: 5d:7f:0f:f9:5e:78:bb:f3:08:ac:eb:e7:ef:d7:a0: b6:1b:b0:f9:57:46:85:00:c7:cf:2d:fe:5e:8d:2b: 7f:c8:39:8c:af:72:1f:cf:b2:d5:04:b5:59:2c:39: d9:50:58:e8:bf:e3:7c:75:95:20:52:6c:d5:40:25: 0a:87:39:5d:3d:87:b4:00:76:0f:c5:62:26:d5:d1: 32:99:80:96:78:87:de:00:04:30:6f:77:e9:5c:fc: e8:3a:80:f1:8c:0b:e5:51:93:4d:95:e5:6e:ed:73: 73:91:87:12:c1:8e:d1:a9:83:17:5c:19:69:17:ba: aa:f4:0e:81:d1:92:df:91:9c:9b:7a:0d:57:da:ca: 3d:b3:bd:24:6e:8f:7f:47:b3:01:f3:a6:8e:62:20: 00:96:5d:01:35:f9:44:06:a1:ce:c9:d7:c1:77:59: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:AC:65:97:5B:25:D1:9C:82:F8:44:30:1E:CB:1F:1B:CD:26:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl X509v3 Authority Key Identifier: keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:77:96:66:22:63:0a:eb:e2:fb:ae:6b:b5:87:b9:7e:bc:83: f0:41:21:75:be:b1:61:5d:fd:36:e5:ab:ce:27:49:34:44:23: 30:49:9e:f4:d7:79:64:9c:6e:a5:73:b0:0b:83:ae:aa:39:bb: 76:81:7a:ae:e2:6d:5a:dd:00:a2:2f:e2:60:1f:2d:14:e7:7b: 36:bb:f3:6e:d0:20:2f:f4:bb:de:66:f5:89:1b:48:19:5a:d3: cf:c8:b3:55:bd:c2:e8:8d:fe:d1:af:c6:f0:f7:bb:ea:f4:e3: 2c:22:7b:b5:7a:e6:9c:0c:c3:85:c8:98:03:c0:ad:9b:c8:56: ca:04:da:f9:ce:8b:2d:4b:56:a4:59:cb:ca:dc:e0:cb:67:9a: 33:d9:56:70:c2:68:12:f8:84:c3:48:40:51:5c:74:b3:64:89: 61:ce:f3:d2:70:56:9c:bc:ff:41:cc:e0:b6:f3:3b:ba:c5:06: 80:de:3c:14:c9:52:68:5e:1c:f8:1a:66:0d:8b:89:9d:8c:f3: d7:fa:99:b6:f7:bd:33:01:47:81:00:2f:68:24:fb:ab:66:f3: c8:f8:ea:ee:bd:28:cb:61:8f:d7:ea:62:f0:f1:e7:f6:6d:2a: 9e:62:c0:95:3d:5d:1d:d2:23:85:2e:53:34:d7:b5:4a:a6:d5: e0:e3:e5:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+IjJCUAjMuBvs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM4NzBmM2UtYjAxNC00Mzg3LWJiNTktNjNmNDE5MmI1 NjY1MB4XDTI1MTEwNDAxMDAwOFoXDTI1MTEwNjAxMDAwMFowLzEtMCsGA1UEAxMk ODU3OTM1ZGUtZTY1Yi00NWMzLWJlNGQtODZhZWQwYzZkMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYm+XqpTXmBefzEVeH5k3ypotC5dcSYDJLTX +EXxMAP9SmEEYyhMHHhTCsd7UTQlRaOhOe8l3wR1tEcN+VNJidEk65SspGILl+35 9xwbeo0f0anwmp3EjLRdfw/5Xni78wis6+fv16C2G7D5V0aFAMfPLf5ejSt/yDmM r3Ifz7LVBLVZLDnZUFjov+N8dZUgUmzVQCUKhzldPYe0AHYPxWIm1dEymYCWeIfe AAQwb3fpXPzoOoDxjAvlUZNNleVu7XNzkYcSwY7RqYMXXBlpF7qq9A6B0ZLfkZyb eg1X2so9s70kbo9/R7MB86aOYiAAll0BNflEBqHOydfBd1lxfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK9DrGWXWyXRnIL4RDAeyx8bzSaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3 MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0MTkyYjU2NjUvYWM4NzBmM2UtYjAxNC00 Mzg3LWJiNTktNjNmNDE5MmI1NjY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4NzBmM2UtYjAxNC00Mzg3LWJi NTktNjNmNDE5MmI1NjY1L2FjODcwZjNlLWIwMTQtNDM4Ny1iYjU5LTYzZjQxOTJi NTY2NS5jcmwwHwYDVR0jBBgwFoAUr+waQxcWVf3AqPhLqFxA+OUeicYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0 MTkyYjU2NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxd5ZmImMK6+L7rmu1h7l+ vIPwQSF1vrFhXf025avOJ0k0RCMwSZ7013lknG6lc7ALg66qObt2gXqu4m1a3QCi L+JgHy0U53s2u/Nu0CAv9LveZvWJG0gZWtPPyLNVvcLojf7Rr8bw97vq9OMsInu1 euacDMOFyJgDwK2byFbKBNr5zostS1akWcvK3ODLZ5oz2VZwwmgS+ITDSEBRXHSz ZIlhzvPScFacvP9BzOC28zu6xQaA3jwUyVJoXhz4GmYNi4mdjPPX+pm2970zAUeB AC9oJPurZvPI+OruvSjLYY/X6mLw8ef2bSqeYsCVPV0d0iOFLlM017VKptXg4+Wx -----END CERTIFICATE-----Generated at Tue Nov 4 21:51:12 2025 by rpki-client