$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft File: 5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft (raw, json) Hash identifier: bckhGOXzEf/2wkYf+X8KiB7b7Vs1QG4HsyDzkRpXziE= Subject key identifier: 01:5A:B8:C9:FF:FC:4C:A7:9A:B0:70:D3:94:3D:36:F5:97:FB:95:E1 Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F4328584BC28DCEA3CC24E647B4292F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft Manifest number: 010D0C9F43285840FC52DDAE61C894CB22D41F95 Signing time: Wed 05 Nov 2025 15:00:08 +0000 Manifest this update: Wed 05 Nov 2025 15:00:08 +0000 Manifest next update: Sat 08 Nov 2025 15:00:00 +0000 Files and hashes: 1: 5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl (hash: 9gZtLM8rW6BIqFky5SInstqhicYTfdkn8os40uQ53Y8=) 2: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (hash: RQH0NElxUB8TJRzHyBN2SyyyTeSu8bIeJRAMfqoCPBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:8d:ce:a3:cc:24:e6:47:b4:29:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Nov 5 15:00:08 2025 GMT Not After : Nov 8 15:00:00 2025 GMT Subject: CN=4920d3b9-9e4a-400d-a9d8-5a0beffea9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:a0:9f:74:20:c1:d3:ee:45:97:3d:95:d0: 9e:9d:28:ca:bf:00:ef:df:40:25:02:0f:c6:d7:2c: a6:ce:81:fb:b7:9b:88:45:14:c8:80:d9:7d:c1:c4: 0a:2b:65:c1:33:f4:3b:43:a3:a5:2d:ce:b7:11:f8: 3b:b9:6a:d7:c2:3c:8e:c9:85:e8:3f:54:b1:54:4a: ee:de:55:01:86:af:77:6c:c8:83:42:5b:37:93:12: fb:b0:83:27:1d:ba:6c:4a:50:ae:00:8d:96:6c:08: a3:42:d7:6f:99:eb:26:ab:98:c6:f1:3a:9c:67:4c: c5:97:32:50:9b:60:71:e1:fc:09:78:94:74:f1:aa: 05:52:68:37:87:d9:71:c5:10:6b:95:56:02:5f:9d: 42:b2:91:36:df:a0:8d:7c:0e:44:16:b1:76:3d:a3: 68:57:04:35:d2:52:5a:aa:f0:04:00:b2:84:9f:73: e2:81:64:4a:42:36:f2:82:6a:02:ca:74:c6:15:1a: bb:24:17:95:df:a1:3b:9b:47:d5:ba:aa:d7:7e:99: 64:64:d5:17:aa:21:a7:d3:56:82:b7:ad:e4:04:fe: 9e:2b:8b:88:8d:2d:1c:ce:87:ca:6f:d7:c1:1e:a9: 4e:77:d7:5a:3d:bf:eb:35:af:c8:be:76:7e:7f:48: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:B8:C9:FF:FC:4C:A7:9A:B0:70:D3:94:3D:36:F5:97:FB:95:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:35:c7:6e:df:f6:a1:d4:d5:e9:12:5f:b2:1c:f1:82:54:ee: bf:20:70:fb:3d:61:2f:73:c2:22:5b:02:32:61:d2:c9:6e:70: ed:a7:7f:2f:e8:b7:f1:40:ad:f1:23:42:47:51:11:9f:52:98: 08:85:ef:5a:30:df:30:da:15:36:a3:87:d5:7b:9a:61:80:0f: 59:7c:36:31:14:59:46:34:51:40:f0:1f:8f:a6:e9:ed:d0:13: 21:6e:1a:5a:cb:da:11:b7:15:7b:f9:32:8e:cd:8e:47:20:2e: f0:89:f9:87:94:5c:83:66:71:91:26:15:b5:c6:43:8d:2c:39: a5:53:5b:cf:70:ca:44:35:dc:5e:07:2c:58:ad:76:7f:57:f1: a1:75:01:75:5e:e7:74:16:98:b9:00:ff:65:39:36:62:cf:ee: c0:cc:52:b6:72:ec:18:c2:95:00:92:b5:e8:18:4c:74:79:b3: 18:4c:da:be:7c:e6:1b:e3:88:92:0c:04:ad:cf:db:72:1c:2f: 57:bc:9b:2c:9e:4d:e6:60:e1:3a:a3:6e:a3:3e:16:08:76:6c: 44:63:72:19:c1:8d:91:88:95:3f:b4:11:b3:ce:65:10:61:95: 82:33:2d:b0:3b:40:9b:c3:88:c7:da:0c:ed:27:a3:61:5b:88: 5f:29:09:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCjc6jzCTmR7QpL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI1MTEwNTE1MDAwOFoXDTI1MTEwODE1MDAwMFowLzEtMCsGA1UEAxMk NDkyMGQzYjktOWU0YS00MDBkLWE5ZDgtNWEwYmVmZmVhOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzGgn3QgwdPuRZc9ldCenSjKvwDv30AlAg/G 1yymzoH7t5uIRRTIgNl9wcQKK2XBM/Q7Q6OlLc63Efg7uWrXwjyOyYXoP1SxVEru 3lUBhq93bMiDQls3kxL7sIMnHbpsSlCuAI2WbAijQtdvmesmq5jG8TqcZ0zFlzJQ m2Bx4fwJeJR08aoFUmg3h9lxxRBrlVYCX51CspE236CNfA5EFrF2PaNoVwQ10lJa qvAEALKEn3PigWRKQjbygmoCynTGFRq7JBeV36E7m0fVuqrXfplkZNUXqiGn01aC t63kBP6eK4uIjS0czofKb9fBHqlOd9daPb/rNa/IvnZ+f0gWcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFauMn//EynmrBw05Q9NvWX+5XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvNWExYzNiMWEtZDExZS00 NmYyLWI4YmEtMTk3NGI0NGM4NGIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDSNcdu3/ah1NXpEl+yHPGC VO6/IHD7PWEvc8IiWwIyYdLJbnDtp38v6LfxQK3xI0JHURGfUpgIhe9aMN8w2hU2 o4fVe5phgA9ZfDYxFFlGNFFA8B+Ppunt0BMhbhpay9oRtxV7+TKOzY5HIC7wifmH lFyDZnGRJhW1xkONLDmlU1vPcMpENdxeByxYrXZ/V/GhdQF1Xud0Fpi5AP9lOTZi z+7AzFK2cuwYwpUAkrXoGEx0ebMYTNq+fOYb44iSDAStz9tyHC9XvJssnk3mYOE6 o26jPhYIdmxEY3IZwY2RiJU/tBGzzmUQYZWCMy2wO0Cbw4jH2gztJ6NhW4hfKQkw -----END CERTIFICATE-----Generated at Thu Nov 6 06:04:26 2025 by rpki-client