$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft File: cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft (raw, json) Hash identifier: xANKJpU774ZnMqt+nuvVMz+EcGTQQt6bvLNTrtox/PI= Subject key identifier: AB:91:AA:71:46:03:5D:16:F7:D7:D9:8C:14:DF:1F:B9:C1:9D:51:F0 Authority key identifier: DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 Certificate issuer: /CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Certificate serial: 010D0C9F4328584BC01C681391F19E084E804300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft Manifest number: 010D0C9F4328584073A822003F42BAF0B9DFB80F Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer (hash: Q766is9CsNxf+oAeoFRHBlF3rRv+yC8thSLO7UN+2pU=) 2: cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl (hash: R3xn5nMYA9bu5H3mmeIG7m8NYOjmHwGa4fDATj2LUTc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:68:13:91:f1:9e:08:4e:80:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=1a2297fe-6f58-40ec-b39d-70023e0c564f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:76:52:dd:63:2c:b9:23:f7:c6:b2:58:6b: de:52:ef:a7:3f:16:91:32:53:3d:4f:d2:8d:e1:ac: 40:c3:0d:9c:25:95:b0:57:9a:4f:bb:09:46:fb:5f: d3:0d:41:b6:11:25:b0:c1:40:45:00:45:b5:9a:ea: 51:47:0c:33:25:54:95:67:44:9c:24:db:dc:2c:03: e8:00:6f:2e:34:f0:7a:53:5e:93:db:bf:80:f7:f8: 24:75:0d:13:78:32:19:e2:a8:2e:40:6f:c7:3c:ea: fe:cc:16:2f:b0:8c:04:26:da:b3:2c:a9:07:9c:f2: 7b:e1:d3:00:e8:f8:ba:38:fb:83:4b:f9:d6:79:a5: 24:e2:5e:dd:28:50:50:88:dc:5f:d8:c4:3f:b8:b3: c9:21:d0:f7:36:19:cf:38:20:c6:14:fa:39:43:b7: 21:41:36:37:02:38:a5:ef:0e:87:fa:71:8f:69:1c: ab:39:92:db:83:da:2e:35:3b:2b:1b:20:99:31:0b: 11:32:3b:9c:ab:a4:85:fb:d2:b1:fb:c3:9f:e9:29: db:5c:19:f2:dd:0a:92:14:57:95:a0:75:44:a0:e0: 00:be:5e:6c:10:5e:ca:8f:46:4a:c0:37:c5:9f:7b: fc:11:6c:00:ee:03:a3:12:a0:a0:4c:51:61:ee:6f: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:91:AA:71:46:03:5D:16:F7:D7:D9:8C:14:DF:1F:B9:C1:9D:51:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl X509v3 Authority Key Identifier: keyid:DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:66:23:14:91:da:58:5b:bf:44:7f:04:79:91:37:84:e2:0c: 6d:8f:50:8f:00:2c:0c:7a:37:fb:41:48:40:48:fd:3d:ec:2a: 99:dc:b2:2e:61:ee:f7:90:93:f7:f4:3a:07:8a:fc:05:94:d8: c1:8c:67:ee:e6:5d:4c:a9:49:aa:5e:6c:1f:22:d3:eb:3c:12: 9c:8f:93:46:90:bd:d1:0e:19:92:f8:1d:1d:e5:77:ce:e1:32: b4:9c:11:1e:07:6d:3c:97:ae:62:ba:53:68:c5:df:9d:b1:62: 70:ca:32:9c:bc:39:a0:ac:94:71:88:7a:00:d5:2b:da:2f:75: f9:b2:6d:f0:b7:f1:25:42:52:ca:5d:86:55:8e:b0:6f:69:3e: b0:97:f1:5c:d1:f4:a3:cc:70:55:10:fc:a5:33:7f:43:77:82: e6:07:83:07:27:1b:20:d3:99:7a:ce:96:4f:e3:1c:1c:77:cc: 95:42:b9:e8:b0:ec:27:af:4e:23:8b:5d:6a:e7:6c:f8:bc:fc: 5d:5c:47:c9:ec:32:3a:d1:ff:f7:2c:a4:8f:10:08:a5:c4:57: d2:9a:15:83:45:db:45:15:66:79:5a:48:96:1b:a2:c9:67:7e: c7:aa:12:ba:98:28:89:51:bd:5f:7a:37:bd:80:cc:ac:7e:9f: e4:00:90:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGgTkfGeCE6AQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNlOTlk MDhmMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk MWEyMjk3ZmUtNmY1OC00MGVjLWIzOWQtNzAwMjNlMGM1NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArph2Ut1jLLkj98ayWGveUu+nPxaRMlM9T9KN 4axAww2cJZWwV5pPuwlG+1/TDUG2ESWwwUBFAEW1mupRRwwzJVSVZ0ScJNvcLAPo AG8uNPB6U16T27+A9/gkdQ0TeDIZ4qguQG/HPOr+zBYvsIwEJtqzLKkHnPJ74dMA 6Pi6OPuDS/nWeaUk4l7dKFBQiNxf2MQ/uLPJIdD3NhnPOCDGFPo5Q7chQTY3Ajil 7w6H+nGPaRyrOZLbg9ouNTsrGyCZMQsRMjucq6SF+9Kx+8Of6SnbXBny3QqSFFeV oHVEoOAAvl5sEF7Kj0ZKwDfFn3v8EWwA7gOjEqCgTFFh7m/kEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKuRqnFGA10W99fZjBTfH7nBnVHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZjNh ODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3M2U5OWQwOGYvY2YzYTgxMmMtMGYxMC00 NWVjLWFjYTMtNjhhNzNlOTlkMDhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2YzYTgxMmMtMGYxMC00NWVjLWFj YTMtNjhhNzNlOTlkMDhmL2NmM2E4MTJjLTBmMTAtNDVlYy1hY2EzLTY4YTczZTk5 ZDA4Zi5jcmwwHwYDVR0jBBgwFoAU3JtUtNtPLDoiI9Ba12aAQGt5H1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZjNhODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3 M2U5OWQwOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmZiMUkdpYW79EfwR5kTeE 4gxtj1CPACwMejf7QUhASP097CqZ3LIuYe73kJP39DoHivwFlNjBjGfu5l1MqUmq XmwfItPrPBKcj5NGkL3RDhmS+B0d5XfO4TK0nBEeB208l65iulNoxd+dsWJwyjKc vDmgrJRxiHoA1SvaL3X5sm3wt/ElQlLKXYZVjrBvaT6wl/Fc0fSjzHBVEPylM39D d4LmB4MHJxsg05l6zpZP4xwcd8yVQrnosOwnr04ji11q52z4vPxdXEfJ7DI60f/3 LKSPEAilxFfSmhWDRdtFFWZ5WkiWG6LJZ37HqhK6mCiJUb1feje9gMysfp/kAJDS -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:59 2025 by rpki-client