$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft File: d037641d-aa90-4eab-864e-a73e03e24cfa.mft (raw, json) Hash identifier: CbfYknlAB4ZFc1Wl+8oD+D6DpyqQca+gpds+C35cfQk= Subject key identifier: 3F:E7:B0:73:E6:77:38:6A:16:E8:71:67:16:7F:DE:80:6B:BA:6E:8B Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F4328584BBFFEA7ABA647E4C75A989000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft Manifest number: 010D0C9F43285843FBEA40EA4335E4CBDC4FF874 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (hash: BVLmWK0aXN3b5CWxNqtdoL9spSV/QPkKRMdaxZZ1/EA=) 2: d037641d-aa90-4eab-864e-a73e03e24cfa.crl (hash: u8EGkKZpRjDByq1NS0f3ruYiETULbmGqRJT/0TyoI2A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a7:ab:a6:47:e4:c7:5a:98:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=3b777e9f-6179-4a10-b2ce-fc3062cd8a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:ef:a4:83:ac:5f:f8:07:be:4e:5a:5b:8b: dd:61:70:a4:06:6c:14:3b:10:e6:34:56:c2:3c:63: 3f:25:8e:8d:02:13:74:dc:54:4f:88:9f:85:66:14: f1:b8:f0:46:0f:9a:f3:41:45:f0:46:39:0d:43:e3: 24:53:c0:13:84:d7:26:23:ea:7c:2e:62:11:d2:2f: 8a:96:9a:72:8b:37:e9:0f:66:e1:6f:20:a2:fd:fe: 8a:48:5f:60:2d:40:fa:0f:a0:a6:25:3b:7a:a8:86: 42:d2:12:5d:3f:6e:d4:d5:9b:eb:a4:a2:c0:3f:d7: 35:86:ba:fc:32:d6:d1:f5:b7:65:56:7a:a2:ea:44: f2:55:d6:8a:bd:7a:2c:81:9a:4d:9b:78:7f:57:60: 67:8d:6a:9b:ba:87:25:a6:c6:61:b5:d5:0c:21:08: c6:ae:3a:f1:1e:6d:f5:14:21:f7:31:a9:c0:e3:e7: 0a:64:2e:df:63:1f:2d:78:0a:ac:d3:35:2a:2e:72: 22:7c:a1:9f:92:63:95:3b:59:73:6b:50:d4:1f:37: 5b:d4:44:40:de:11:12:6d:a8:83:cf:12:9f:c8:57: dd:dd:c2:5c:b4:58:1f:72:49:cc:51:60:df:4a:d6: f7:76:34:04:5f:e6:5e:f0:b2:dc:90:23:1a:60:9b: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E7:B0:73:E6:77:38:6A:16:E8:71:67:16:7F:DE:80:6B:BA:6E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:59:62:90:46:53:81:a9:76:ac:26:1b:da:6c:f2:80:0e:1e: b7:9b:f9:fc:b0:2b:a7:b4:3d:3a:e3:23:2c:f5:0c:eb:89:5e: 52:d1:f3:5f:25:df:ba:58:f4:d7:c8:07:a6:4c:75:f6:b8:7c: 97:44:c4:14:ec:61:c8:23:8d:f4:ce:7a:bc:aa:03:29:a3:fd: c7:21:f6:63:bf:aa:80:50:ca:2c:37:c2:17:df:09:cc:5d:4c: f0:d4:dd:b6:9c:a6:b4:99:2c:d5:e5:f8:8c:4a:00:63:b6:93: 5e:2e:0e:21:7d:ee:c4:e5:34:18:4a:80:37:64:6f:f9:5d:76: 33:da:9e:3a:32:82:05:f3:02:4a:28:fd:82:40:3f:74:62:44: dc:06:6f:f7:f8:96:11:c3:9e:f8:f4:62:9e:b5:d7:be:8a:1e: 1b:40:8a:45:f2:0d:1a:5b:c7:6f:13:15:ad:0c:86:28:b3:fc: d9:ec:b6:5d:3d:98:de:c9:bd:cd:a2:a9:09:b2:15:4a:fe:d1: 82:52:30:75:75:60:aa:a9:7e:19:7d:3e:73:db:45:6e:90:16: c5:b1:87:4b:70:71:4f:04:07:ca:5b:9e:30:2f:7a:f4:94:88: 3d:a8:e5:9c:36:ad:f1:63:f2:42:d0:14:48:ef:84:1f:7f:9a: e0:48:c8:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qerpkfkx1qYkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk M2I3NzdlOWYtNjE3OS00YTEwLWIyY2UtZmMzMDYyY2Q4YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVfvpIOsX/gHvk5aW4vdYXCkBmwUOxDmNFbC PGM/JY6NAhN03FRPiJ+FZhTxuPBGD5rzQUXwRjkNQ+MkU8AThNcmI+p8LmIR0i+K lppyizfpD2bhbyCi/f6KSF9gLUD6D6CmJTt6qIZC0hJdP27U1ZvrpKLAP9c1hrr8 MtbR9bdlVnqi6kTyVdaKvXosgZpNm3h/V2BnjWqbuoclpsZhtdUMIQjGrjrxHm31 FCH3ManA4+cKZC7fYx8teAqs0zUqLnIifKGfkmOVO1lza1DUHzdb1ERA3hESbaiD zxKfyFfd3cJctFgfcknMUWDfStb3djQEX+Ze8LLckCMaYJtPjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD/nsHPmdzhqFuhxZxZ/3oBrum6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvZDAzNzY0MWQtYWE5MC00 ZWFiLTg2NGUtYTczZTAzZTI0Y2ZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgWWKQRlOBqXasJhvabPKA Dh63m/n8sCuntD064yMs9QzriV5S0fNfJd+6WPTXyAemTHX2uHyXRMQU7GHII430 znq8qgMpo/3HIfZjv6qAUMosN8IX3wnMXUzw1N22nKa0mSzV5fiMSgBjtpNeLg4h fe7E5TQYSoA3ZG/5XXYz2p46MoIF8wJKKP2CQD90YkTcBm/3+JYRw5749GKetde+ ih4bQIpF8g0aW8dvExWtDIYos/zZ7LZdPZjeyb3NoqkJshVK/tGCUjB1dWCqqX4Z fT5z20VukBbFsYdLcHFPBAfKW54wL3r0lIg9qOWcNq3xY/JC0BRI74Qff5rgSMhy -----END CERTIFICATE-----Generated at Tue Nov 4 21:53:14 2025 by rpki-client