$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft File: be8c0be8-820f-49cc-b759-a1cd0b68028b.mft (raw, json) Hash identifier: At/YF2o/x7PAGsKnnPQcR3o+oH5fsDV5lYqEr7zs3j0= Subject key identifier: 29:19:EE:F1:41:22:A2:30:64:BD:E7:FC:FB:BC:9C:02:0B:E6:00:D3 Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 Certificate issuer: /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Certificate serial: 010D0C9F4328584BC01C679312DB9ED29E06E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft Manifest number: 010D0C9F43285843F9AB868D8ED2EC70F8C5E5D9 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: be8c0be8-820f-49cc-b759-a1cd0b68028b.crl (hash: spH0f8Iil+XeqFjkW8cuIH4LG/PZ5Hg/0fn2r26WTwc=) 2: ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (hash: wE4VapD7myKIn8I24pHpWmBJ53TdS94thE4PpymGFrE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:67:93:12:db:9e:d2:9e:06:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=fb9960f6-2f63-4ba3-8f6f-ded4d0ad25b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:97:c9:df:d4:4b:c3:cd:54:93:ee:8c:0e: 8e:e0:e6:db:70:2c:81:14:c4:b3:a1:e3:a6:b3:df: 7a:ef:c7:34:67:f4:b0:ba:02:83:72:9b:81:49:92: 00:8d:dc:6f:90:29:82:25:b4:cd:27:72:98:69:af: 3a:af:c0:08:ca:62:48:b2:97:94:da:31:fc:bd:ee: 30:45:98:ea:38:63:13:28:fa:13:9b:81:f9:f0:92: aa:07:e4:91:89:9c:5d:ed:76:a4:53:4d:83:a9:e5: 68:5d:bf:c9:ce:22:14:90:b9:66:7d:1d:87:b1:94: c4:e8:1e:08:45:15:bd:2e:59:80:53:73:ac:2a:01: 65:39:dc:fb:a6:a9:89:4c:75:6a:ab:47:53:95:49: 5c:0c:2e:93:d6:36:9f:40:87:61:c9:b7:2c:70:91: 76:78:84:b4:7c:58:ca:29:d8:59:ee:f3:2a:65:d0: 3a:31:97:ad:41:93:07:31:82:4e:9b:54:4f:72:cb: e4:47:2e:2c:1f:c1:05:60:a7:45:7d:ab:72:a4:5e: d1:20:19:91:0a:b6:65:a0:9d:91:41:90:4d:54:5b: 5b:55:86:d4:46:2e:f1:7a:3c:5f:e6:2b:ea:6d:2e: 85:ec:b8:01:ca:41:0b:e9:e7:bc:b1:64:11:3b:07: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:EE:F1:41:22:A2:30:64:BD:E7:FC:FB:BC:9C:02:0B:E6:00:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl X509v3 Authority Key Identifier: keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a5:14:9e:9c:11:b7:32:51:3d:72:b9:07:0c:d2:9a:64:c8: 5d:18:20:79:eb:ea:1a:1a:88:29:4d:f8:62:35:43:20:ec:d0: 49:f6:ad:b2:92:90:2a:2e:7f:d9:39:13:0e:40:d1:16:21:7e: bd:e3:80:da:98:9e:10:44:8d:a5:2f:6c:ce:08:00:51:fd:c1: 4b:c8:a6:16:80:1b:0d:47:a0:33:54:04:fd:f7:98:d8:7a:08: 31:ad:58:f9:e8:11:18:2c:48:02:ef:a5:b0:04:72:47:d4:31: 12:0a:74:0e:69:e8:49:6b:d5:3d:f9:5c:dc:0d:e0:10:a6:57: 79:4d:dc:bf:54:15:48:2a:cc:63:ec:86:52:97:4a:33:0a:8e: d0:2b:b7:5b:c2:8e:2e:06:18:58:7e:f4:20:99:41:40:92:e7: 78:3a:54:cb:b1:b2:eb:6a:98:23:4b:a6:56:67:44:8f:40:bc: f1:2b:27:ba:0c:aa:20:ca:9f:aa:e4:86:92:2b:06:4e:b1:f9: 93:13:6a:e7:18:63:10:f6:71:60:a2:bf:f5:bb:0a:f2:42:f8: ec:3f:24:c0:94:65:17:32:49:64:48:4a:0b:78:e0:29:ba:3c: 92:e9:f6:5f:dd:d3:58:d0:d3:b2:51:11:af:d6:91:d8:37:cb: 52:21:e5:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGeTEtue0p4G4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU4YzBiZTgtODIwZi00OWNjLWI3NTktYTFjZDBiNjgw MjhiMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZmI5OTYwZjYtMmY2My00YmEzLThmNmYtZGVkNGQwYWQyNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiGXyd/US8PNVJPujA6O4ObbcCyBFMSzoeOm s99678c0Z/SwugKDcpuBSZIAjdxvkCmCJbTNJ3KYaa86r8AIymJIspeU2jH8ve4w RZjqOGMTKPoTm4H58JKqB+SRiZxd7XakU02DqeVoXb/JziIUkLlmfR2HsZTE6B4I RRW9LlmAU3OsKgFlOdz7pqmJTHVqq0dTlUlcDC6T1jafQIdhybcscJF2eIS0fFjK KdhZ7vMqZdA6MZetQZMHMYJOm1RPcsvkRy4sH8EFYKdFfatypF7RIBmRCrZloJ2R QZBNVFtbVYbURi7xejxf5ivqbS6F7LgBykEL6ee8sWQROwcMiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCkZ7vFBIqIwZL3n/Pu8nAIL5gDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThj MGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNkMGI2ODAyOGIvYmU4YzBiZTgtODIwZi00 OWNjLWI3NTktYTFjZDBiNjgwMjhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU4YzBiZTgtODIwZi00OWNjLWI3 NTktYTFjZDBiNjgwMjhiL2JlOGMwYmU4LTgyMGYtNDljYy1iNzU5LWExY2QwYjY4 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUIfqVdHsML5CwxNcFkg/RWmP2cQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThjMGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNk MGI2ODAyOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8pRSenBG3MlE9crkHDNKa ZMhdGCB56+oaGogpTfhiNUMg7NBJ9q2ykpAqLn/ZORMOQNEWIX6944DamJ4QRI2l L2zOCABR/cFLyKYWgBsNR6AzVAT995jYeggxrVj56BEYLEgC76WwBHJH1DESCnQO aehJa9U9+VzcDeAQpld5Tdy/VBVIKsxj7IZSl0ozCo7QK7dbwo4uBhhYfvQgmUFA kud4OlTLsbLrapgjS6ZWZ0SPQLzxKye6DKogyp+q5IaSKwZOsfmTE2rnGGMQ9nFg or/1uwryQvjsPyTAlGUXMklkSEoLeOApujyS6fZf3dNY0NOyURGv1pHYN8tSIeVR -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:29 2025 by rpki-client