$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft File: d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft (raw, json) Hash identifier: hvp1Gxi2bcQlEHcxWO/sTtqxBG/eCb4mL9067mDJ5Vc= Subject key identifier: BE:ED:78:36:C7:15:1C:B7:35:42:97:10:92:71:C1:55:ED:6F:C5:F7 Authority key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC Certificate issuer: /CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Certificate serial: 010D0C9F4328584BC0ECE244EBCE920C3182F740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft Manifest number: 010D0C9F4328584AD67D3E7DFA25E4EF510FEBD6 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa (hash: GnikLqw8RJx1dhpE1Dg96n6zxyCe718+UFnUkemO0Vg=) 2: d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl (hash: TF9tYu8kjrppIOMuWJ47KMZstPa0lheZSPiefzLjrKg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e2:44:eb:ce:92:0c:31:82:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=5a1b5e43-9dd6-40fc-b059-e5c3c1bd6709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:51:04:99:a8:65:66:b4:d4:1b:92:f2:01: 12:4e:f0:cf:0b:8b:a7:9b:08:d8:68:ab:74:c6:dc: 81:df:01:71:20:f1:d8:03:4e:97:36:56:21:0d:3e: 73:56:08:4f:8d:50:aa:1d:43:a0:c4:ef:b0:d4:31: 8d:3d:01:4f:c8:1b:54:26:c5:42:98:ec:7e:4d:e6: d9:23:1a:e1:8a:0a:a3:fb:ac:f0:fc:e2:5d:dc:b6: d6:e3:f8:fa:f8:47:77:86:f2:95:36:15:e2:88:ca: 3d:71:ec:bd:d6:82:45:c0:24:80:55:8e:20:e7:72: e4:2c:54:86:7a:b9:a5:49:63:e0:1b:23:11:66:e4: 63:f3:e4:3d:3e:61:e0:6f:c8:f6:54:bc:28:0a:e7: 63:91:03:63:ed:e7:0a:d2:49:60:77:a8:53:a3:68: dd:49:95:66:70:f3:1e:aa:a2:f9:14:1d:b0:6a:00: 49:ca:01:24:6e:94:71:ef:01:32:3d:ba:ba:b9:85: e8:30:10:73:79:1f:aa:9e:11:b2:8d:f4:a5:0e:52: ee:58:77:8f:d7:41:6f:b8:ad:f5:4d:bd:3f:84:02: 11:db:29:55:d3:8c:e2:b8:62:8a:06:8f:55:0d:97: 62:cc:ae:36:31:c0:6d:63:01:98:01:16:a4:7d:58: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:ED:78:36:C7:15:1C:B7:35:42:97:10:92:71:C1:55:ED:6F:C5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl X509v3 Authority Key Identifier: keyid:CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:72:10:80:29:b4:79:97:36:63:31:7b:36:b0:09:5a:c7:11: f7:a6:90:4f:90:5f:e0:26:5d:9d:6c:e4:2b:5d:c6:ac:97:c5: 6d:a6:7d:e1:db:a9:52:ec:15:4b:72:8d:6c:a0:d9:2d:d0:ad: 8e:46:30:a2:6e:ae:25:b6:dd:74:93:72:c4:f1:cc:b3:dd:a1: df:b5:d8:34:83:e6:66:15:08:46:73:a8:11:ce:47:26:ea:9e: ca:35:13:6b:77:45:91:2c:cd:9c:b2:05:6a:57:50:8a:b1:2f: 3c:ad:18:82:05:29:c6:94:b1:c2:97:d8:80:c6:ed:dd:98:6b: 0c:f7:73:6f:63:6b:1a:9f:18:5f:1a:d4:9c:31:51:54:94:85: ba:ac:f2:0f:d2:b1:b8:e8:00:0a:b0:30:9b:a5:57:e9:01:5c: 08:40:b0:94:ed:4c:ee:a2:5e:7a:ca:2b:5c:e5:48:1c:e9:5f: ae:d7:24:7a:a5:fb:2e:24:19:54:26:ab:4f:1b:dc:0b:09:00: e8:e4:7f:05:eb:65:8a:0b:31:01:9e:23:18:de:6d:42:f0:88: ca:d2:b1:49:ab:03:c8:4b:cf:4d:2e:77:7a:c5:ef:d0:54:79: 2c:bc:d8:49:c2:4b:8d:1f:8f:24:54:af:18:fa:a6:e7:0a:c7: f3:6a:bd:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OJE686SDDGC90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI5YzExYWItYzQ3Ny00YzNjLThhNWQtYWE0YWM0MjMz MTMyMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk NWExYjVlNDMtOWRkNi00MGZjLWIwNTktZTVjM2MxYmQ2NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvBRBJmoZWa01BuS8gESTvDPC4unmwjYaKt0 xtyB3wFxIPHYA06XNlYhDT5zVghPjVCqHUOgxO+w1DGNPQFPyBtUJsVCmOx+TebZ Ixrhigqj+6zw/OJd3LbW4/j6+Ed3hvKVNhXiiMo9cey91oJFwCSAVY4g53LkLFSG ermlSWPgGyMRZuRj8+Q9PmHgb8j2VLwoCudjkQNj7ecK0klgd6hTo2jdSZVmcPMe qqL5FB2wagBJygEkbpRx7wEyPbq6uYXoMBBzeR+qnhGyjfSlDlLuWHeP10FvuK31 Tb0/hAIR2ylV04ziuGKKBo9VDZdizK42McBtYwGYARakfVh9eQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL7teDbHFRy3NUKXEJJxwVXtb8X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMjlj MTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRhYzQyMzMxMzIvZDI5YzExYWItYzQ3Ny00 YzNjLThhNWQtYWE0YWM0MjMzMTMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDI5YzExYWItYzQ3Ny00YzNjLThh NWQtYWE0YWM0MjMzMTMyL2QyOWMxMWFiLWM0NzctNGMzYy04YTVkLWFhNGFjNDIz MzEzMi5jcmwwHwYDVR0jBBgwFoAUzjMCG3zt83bDoIIxPPzVbPDoibwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMjljMTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRh YzQyMzMxMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAschCAKbR5lzZjMXs2sAla xxH3ppBPkF/gJl2dbOQrXcasl8Vtpn3h26lS7BVLco1soNkt0K2ORjCibq4ltt10 k3LE8cyz3aHftdg0g+ZmFQhGc6gRzkcm6p7KNRNrd0WRLM2csgVqV1CKsS88rRiC BSnGlLHCl9iAxu3dmGsM93NvY2sanxhfGtScMVFUlIW6rPIP0rG46AAKsDCbpVfp AVwIQLCU7Uzuol56yitc5Ugc6V+u1yR6pfsuJBlUJqtPG9wLCQDo5H8F62WKCzEB niMY3m1C8IjK0rFJqwPIS89NLnd6xe/QVHksvNhJwkuNH48kVK8Y+qbnCsfzar15 -----END CERTIFICATE-----Generated at Wed Nov 5 07:06:16 2025 by rpki-client