$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft File: f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft (raw, json) Hash identifier: Y0/FJJKjmiD0Lo3NoSm5mWMpMSAD5acUOlZNHWUAnTE= Subject key identifier: 64:FD:D5:C1:FE:5C:4C:01:E3:11:34:A8:D6:52:1F:42:4A:DD:C5:5B Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Certificate issuer: /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Certificate serial: 010D0C9F4328584BBE04634EB892A7A321DF4F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft Manifest number: 010D0C9F43285843F4D1C31AD63B296EB0229561 Signing time: Tue 04 Nov 2025 00:00:03 +0000 Manifest this update: Tue 04 Nov 2025 00:00:03 +0000 Manifest next update: Fri 07 Nov 2025 00:00:00 +0000 Files and hashes: 1: 43870171-fec9-3adf-a047-9532779804f9.roa (hash: 9lhinR+wuQf8SR4UfWc0FNbS859Q4wW7LMr6E8eGc0o=) 2: f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl (hash: oDkgMsC/wbAwxGmadGw7ygv8sxIdePCFUzDly6Yw2OU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:04:63:4e:b8:92:a7:a3:21:df:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Validity Not Before: Nov 4 00:00:03 2025 GMT Not After : Nov 7 00:00:00 2025 GMT Subject: CN=57c0db5a-c065-4d9b-9817-a39fc86ad2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c5:2e:20:04:e8:a1:d9:68:f7:9d:68:49:42: 92:e1:30:3a:de:0e:c9:33:f0:64:7e:5f:a8:89:dc: e4:e3:65:8a:fe:00:42:8a:12:1a:5e:97:04:5c:44: b4:7b:74:eb:35:7d:70:85:5b:50:3a:5a:47:c0:81: 83:97:22:e7:df:31:f4:a8:a7:0a:dd:0d:93:74:85: 3c:c6:2d:68:a8:3e:0f:80:60:7d:6c:54:c9:c7:e4: 13:04:20:fa:a7:28:60:cd:26:f5:c7:48:9d:a3:ea: 5f:86:22:a3:92:37:67:c9:00:fa:3e:74:e6:a0:68: a0:9d:e6:d6:47:46:40:71:72:13:0f:9c:f8:b5:98: 94:5b:3d:71:9e:98:5b:d1:b8:87:db:a4:52:44:06: c2:0f:d0:89:aa:59:19:44:bd:7d:9e:3e:fa:63:d9: 9e:b3:ef:71:7e:8b:c7:b7:92:98:13:66:6b:be:ce: d6:63:8c:0d:d0:89:9c:4b:12:c7:bc:a7:4b:e7:17: 46:58:33:3d:40:39:88:c6:95:b4:95:cc:23:64:2a: 2a:2d:e1:d4:87:52:d4:cf:c2:bb:60:cb:cf:03:3e: fa:01:a9:09:49:4d:f1:f4:d2:1b:bc:c1:a0:55:be: 92:6b:6d:b7:66:0c:0c:89:2b:91:e9:c5:0c:30:76: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:D5:C1:FE:5C:4C:01:E3:11:34:A8:D6:52:1F:42:4A:DD:C5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl X509v3 Authority Key Identifier: keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c4:30:45:13:22:90:aa:73:fd:1e:64:23:9b:ac:08:89:63: a3:51:36:4d:54:5a:13:6e:e2:db:5d:7c:f0:35:99:4f:8f:ea: 4c:d1:c0:75:33:21:83:ed:af:f9:7e:36:52:9f:32:7b:99:22: 5b:e2:e8:0c:34:74:f8:2e:c3:69:76:71:54:8c:d6:51:28:5d: f1:5f:bf:eb:ec:7f:ca:4f:f3:8b:49:f3:16:d1:ae:c2:ef:8c: 2a:48:47:b7:4e:fc:80:d0:8d:ed:ab:08:9f:4f:e4:7d:da:26: d6:1e:5b:9a:7f:6e:f6:41:3f:3d:34:73:03:9c:1a:29:d0:33: 1e:d6:93:2c:f9:33:1d:c8:37:9b:83:e3:85:a7:76:fb:32:26: ed:6c:96:db:a6:1d:51:5d:6f:b1:6f:ae:a1:87:a6:4e:fb:e2: 69:ca:1d:be:7e:64:f1:f4:ae:82:94:75:c1:c8:90:e3:59:01: 2c:46:95:0c:8f:3b:c7:cd:01:77:8a:00:8a:68:8c:19:0a:0b: 92:d6:4f:56:44:27:8c:5e:3c:9e:4c:9e:3f:8d:f9:00:d3:33: ab:e4:44:75:ff:30:5f:51:0b:b7:d9:6c:2b:d7:20:e1:02:b8: e5:0f:47:0c:e8:e1:76:12:76:99:c3:89:3b:c0:fa:dc:d3:00: 0f:9b:cd:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+BGNOuJKnoyHfTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAxZjdlMGItMDBjYi00N2EyLThlMjAtMDMzYjM1Njdj YzZkMB4XDTI1MTEwNDAwMDAwM1oXDTI1MTEwNzAwMDAwMFowLzEtMCsGA1UEAxMk NTdjMGRiNWEtYzA2NS00ZDliLTk4MTctYTM5ZmM4NmFkMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMUuIAToodlo951oSUKS4TA63g7JM/Bkfl+o idzk42WK/gBCihIaXpcEXES0e3TrNX1whVtQOlpHwIGDlyLn3zH0qKcK3Q2TdIU8 xi1oqD4PgGB9bFTJx+QTBCD6pyhgzSb1x0ido+pfhiKjkjdnyQD6PnTmoGignebW R0ZAcXITD5z4tZiUWz1xnphb0biH26RSRAbCD9CJqlkZRL19nj76Y9mes+9xfovH t5KYE2Zrvs7WY4wN0ImcSxLHvKdL5xdGWDM9QDmIxpW0lcwjZCoqLeHUh1LUz8K7 YMvPAz76AakJSU3x9NIbvMGgVb6Sa223ZgwMiSuR6cUMMHbC7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGT91cH+XEwB4xE0qNZSH0JK3cVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFm N2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2N2NjNmQvZjAxZjdlMGItMDBjYi00 N2EyLThlMjAtMDMzYjM1NjdjYzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjAxZjdlMGItMDBjYi00N2EyLThl MjAtMDMzYjM1NjdjYzZkL2YwMWY3ZTBiLTAwY2ItNDdhMi04ZTIwLTAzM2IzNTY3 Y2M2ZC5jcmwwHwYDVR0jBBgwFoAUxBCwz+7PLW5YneCYZYFXgiGkKEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNi MzU2N2NjNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9xDBFEyKQqnP9HmQjm6wI iWOjUTZNVFoTbuLbXXzwNZlPj+pM0cB1MyGD7a/5fjZSnzJ7mSJb4ugMNHT4LsNp dnFUjNZRKF3xX7/r7H/KT/OLSfMW0a7C74wqSEe3TvyA0I3tqwifT+R92ibWHlua f272QT89NHMDnBop0DMe1pMs+TMdyDebg+OFp3b7MibtbJbbph1RXW+xb66hh6ZO ++Jpyh2+fmTx9K6ClHXByJDjWQEsRpUMjzvHzQF3igCKaIwZCguS1k9WRCeMXjye TJ4/jfkA0zOr5ER1/zBfUQu32Wwr1yDhArjlD0cM6OF2EnaZw4k7wPrc0wAPm83i -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:32 2025 by rpki-client