$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft File: d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft (raw, json) Hash identifier: C0/J9pEP2n2mgKo0R4EZxR5Ht1f7dswRWU5xiHejXf0= Subject key identifier: 02:5F:86:F7:10:A2:2B:E3:CD:2E:1C:92:7E:4E:F3:E9:F3:EA:38:D3 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584BBED4E0E6AF50B803C4EF5C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft Manifest number: 010D0C9F43285843EA6895D0582B362D8AFF1F1D Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Fri 07 Nov 2025 07:00:00 +0000 Files and hashes: 1: 729feade-7337-3db6-bde3-a07ea34504a2.roa (hash: yOP0F+/sRhF6HeRXzRprdTqQnLnUlDXb0MDEiYfYlEQ=) 2: d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl (hash: udiCDNdAvB1DXsM2wa2ZYQx8pHQfMTNKrQXZX7TPSt0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:e0:e6:af:50:b8:03:c4:ef:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 7 07:00:00 2025 GMT Subject: CN=1491b3d4-fd61-4164-977d-ba5b5a9c0a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:bc:98:47:0b:ad:1b:c3:78:a7:47:df:db: 67:e5:f7:6d:32:3e:84:6d:d3:01:5f:61:9d:7c:d2: 82:44:20:69:03:c8:f9:e7:f4:8a:b0:2e:c5:c5:28: 87:cf:ed:97:9f:35:76:c8:5a:c8:ce:00:9c:29:1d: 9b:ba:db:73:55:81:36:4e:80:36:26:d3:a9:44:6a: cb:1f:6e:ab:45:63:d4:31:c5:47:b5:13:66:21:26: 17:ee:77:a8:52:aa:f2:64:72:18:a8:60:37:3f:7d: ff:45:8c:d0:38:a6:99:3a:47:4e:67:82:71:5d:c7: 12:af:d3:6f:59:b5:56:03:29:75:38:32:7f:4d:2d: c8:60:93:cb:76:a7:99:5c:6d:8a:b5:37:4e:83:7b: a9:e2:22:48:f4:64:fc:f1:8b:34:94:96:16:12:e1: ef:00:5c:3e:4f:67:77:a8:d9:10:32:83:79:c5:60: 9e:3a:21:dc:48:10:03:1c:b6:32:32:fb:82:0b:cc: 16:03:eb:c5:ea:f3:28:bf:02:14:47:a1:a8:d5:d7: c9:65:30:54:c1:11:b1:2b:31:01:49:a8:81:b1:c0: 56:f8:09:2a:f9:e6:87:7e:91:e9:93:e4:a6:e3:d6: 9e:20:61:16:40:bc:46:65:28:15:23:17:0f:4d:ab: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:86:F7:10:A2:2B:E3:CD:2E:1C:92:7E:4E:F3:E9:F3:EA:38:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a5:db:0a:07:29:db:b8:a1:a1:df:5a:41:db:08:af:f9:a8: a0:29:0e:10:95:44:b0:ed:b2:d6:b3:2a:67:c0:47:99:f2:0f: 76:8b:bf:36:1d:82:ac:25:c2:ae:49:c4:e9:52:b5:86:32:57: a4:df:bf:38:7d:eb:93:a9:91:c5:a2:cd:d2:d9:b2:24:77:12: d0:86:98:97:cc:9d:b3:96:7f:80:54:cd:27:b9:89:53:5d:ae: b8:b3:8a:81:d9:87:e2:1d:e4:af:6a:3f:7a:49:9f:d8:de:5c: d5:a2:d5:4b:16:d9:e6:c7:85:65:df:ff:33:44:c0:1b:7f:13: 92:82:74:5d:db:82:b1:4f:3e:89:e4:31:5d:84:08:f7:0f:b1: 9e:28:06:98:6f:ff:21:8a:8e:0f:e8:1f:dd:68:a0:fb:71:ec: 57:f8:1d:87:c9:15:ee:62:89:8f:2a:09:07:be:68:4e:39:c7: 0c:03:88:43:7b:67:6d:5e:0d:1a:0f:a5:23:04:b1:ff:ec:79: f8:2b:a5:ad:1a:ef:bc:e0:b4:ac:f3:44:77:53:f6:cd:23:fe: 71:57:62:df:44:8d:ab:09:89:d0:9c:b5:1f:7e:f5:8a:87:4f: 6e:8c:e6:6f:f5:bd:06:d7:08:b4:08:69:f6:dc:98:cc:b9:17: d9:19:77:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1ODmr1C4A8TvXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNzA3MDAwMFowLzEtMCsGA1UEAxMk MTQ5MWIzZDQtZmQ2MS00MTY0LTk3N2QtYmE1YjVhOWMwYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjG8mEcLrRvDeKdH39tn5fdtMj6EbdMBX2Gd fNKCRCBpA8j55/SKsC7FxSiHz+2XnzV2yFrIzgCcKR2buttzVYE2ToA2JtOpRGrL H26rRWPUMcVHtRNmISYX7neoUqryZHIYqGA3P33/RYzQOKaZOkdOZ4JxXccSr9Nv WbVWAyl1ODJ/TS3IYJPLdqeZXG2KtTdOg3up4iJI9GT88Ys0lJYWEuHvAFw+T2d3 qNkQMoN5xWCeOiHcSBADHLYyMvuCC8wWA+vF6vMovwIUR6Go1dfJZTBUwRGxKzEB SaiBscBW+Akq+eaHfpHpk+Sm49aeIGEWQLxGZSgVIxcPTau49QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAJfhvcQoivjzS4ckn5O8+nz6jjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvZDk2ZWE2ZTQtOTVhMy00 NTA4LThjMmYtMDQ2YWVkOTg4ZWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBApdsKBynbuKGh31pB2wiv +aigKQ4QlUSw7bLWsypnwEeZ8g92i782HYKsJcKuScTpUrWGMlek3784feuTqZHF os3S2bIkdxLQhpiXzJ2zln+AVM0nuYlTXa64s4qB2YfiHeSvaj96SZ/Y3lzVotVL Ftnmx4Vl3/8zRMAbfxOSgnRd24KxTz6J5DFdhAj3D7GeKAaYb/8hio4P6B/daKD7 cexX+B2HyRXuYomPKgkHvmhOOccMA4hDe2dtXg0aD6UjBLH/7Hn4K6WtGu+84LSs 80R3U/bNI/5xV2LfRI2rCYnQnLUffvWKh09ujOZv9b0G1wi0CGn23JjMuRfZGXcD -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:37 2025 by rpki-client