$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft File: de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft (raw, json) Hash identifier: la9WmYLna3NLbO/Y90vxLBO5GKEITB0sZ2AFIa4uRkM= Subject key identifier: 61:50:22:AA:29:19:F3:8D:69:74:8F:9B:6E:13:E7:BA:70:35:7C:08 Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F4328584BC01C66426A11F4123B4AD300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft Manifest number: 010D0C9F432858418B0E1501B4C6C95989145601 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (hash: dzgZxAXRQBXkFfKQPuzlnC+UssMADXXvcOg4JrrTCbQ=) 2: de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl (hash: NPJxApCNko6tHDEeUTlLtsnbGqu2dcvVrZDwf3z8R0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:66:42:6a:11:f4:12:3b:4a:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=b4b39c9d-b6ad-4669-9b0d-fffde24739dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:aa:85:5d:56:19:0d:53:40:f7:c0:af:95: d6:a4:4f:33:52:39:62:81:14:b9:0c:85:87:ba:cc: 8a:7a:9e:90:55:b1:35:7d:85:8e:93:05:b3:9a:7f: 91:37:2a:91:ee:d7:a7:c5:e1:37:16:5d:12:6d:05: 89:0c:30:d5:eb:a4:e2:3a:69:be:24:a8:71:e4:7b: 0a:b6:c8:76:58:1b:a6:7c:7b:9a:33:2e:60:7d:9d: a8:8c:c1:54:f7:61:cc:4e:9d:4f:a9:28:b6:4c:66: 1b:2e:ca:96:2d:e3:5c:db:f4:c3:58:98:d4:f7:ed: 0c:7a:40:44:09:04:d0:3e:26:98:74:66:c0:43:bf: 6d:fd:ad:1f:8a:82:66:2f:81:de:f1:87:7a:d0:ff: 11:47:52:61:82:96:51:4a:f4:20:0c:1b:7d:14:63: 57:c4:5b:14:9b:31:f6:ff:b3:cb:e6:5e:5d:f3:f0: f1:13:57:c8:10:c7:89:72:02:0a:2a:0f:f2:38:40: d8:4d:05:09:a8:0c:31:ee:55:41:78:95:80:77:93: 25:0d:8f:b5:9c:41:9b:ef:3b:f4:f0:25:1d:3f:ea: 39:df:1d:be:24:06:1b:e9:85:e5:a6:dd:8b:ef:99: fe:21:e3:27:23:ea:b7:62:37:5a:5c:fa:3f:1a:54: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:50:22:AA:29:19:F3:8D:69:74:8F:9B:6E:13:E7:BA:70:35:7C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:94:0f:f0:92:9e:f7:c7:b2:a3:e3:08:3e:77:76:0f:8b:fd: f6:60:f0:fb:c6:9f:0d:8d:36:3a:c1:9f:d7:de:5f:95:6b:20: 30:0f:a7:1b:f8:31:3a:9b:9e:7c:86:aa:8e:4d:d9:44:e6:5f: 56:41:21:a5:3e:f2:28:07:6b:4e:01:bc:21:cd:9d:46:74:03: f3:87:5f:70:da:1f:1c:26:f0:e2:9d:44:0a:c8:8c:d3:44:3e: 77:d3:a6:68:e6:94:f0:cb:7d:45:f9:03:af:08:e8:ff:30:47: a2:78:75:fe:c8:7b:16:cf:35:29:df:b8:b2:1f:6e:b5:32:45: 98:d1:e4:24:0f:5d:fb:95:32:35:f8:41:bc:4e:db:11:04:10: 13:85:22:62:fc:fd:f4:fb:79:27:c5:64:e9:1f:31:b9:97:ac: 55:1d:85:78:e1:5e:c5:8c:fe:cd:16:05:06:64:8a:cf:e1:11: d9:40:bc:6d:2e:e6:ed:28:88:0b:51:d1:a0:66:26:b2:fb:2a: de:86:76:18:1a:cf:27:6a:6e:1e:36:d3:a3:42:91:1e:37:43: 71:db:a1:99:49:a3:da:0d:a4:b1:00:5f:1f:b4:68:bd:85:18: ba:b8:0e:86:e9:85:a0:a9:66:3b:58:42:e7:6e:25:3c:a0:fb: 0f:7d:48:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGZCahH0EjtK0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk YjRiMzljOWQtYjZhZC00NjY5LTliMGQtZmZmZGUyNDczOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYyqhV1WGQ1TQPfAr5XWpE8zUjligRS5DIWH usyKep6QVbE1fYWOkwWzmn+RNyqR7tenxeE3Fl0SbQWJDDDV66TiOmm+JKhx5HsK tsh2WBumfHuaMy5gfZ2ojMFU92HMTp1PqSi2TGYbLsqWLeNc2/TDWJjU9+0MekBE CQTQPiaYdGbAQ79t/a0fioJmL4He8Yd60P8RR1JhgpZRSvQgDBt9FGNXxFsUmzH2 /7PL5l5d8/DxE1fIEMeJcgIKKg/yOEDYTQUJqAwx7lVBeJWAd5MlDY+1nEGb7zv0 8CUdP+o53x2+JAYb6YXlpt2L75n+IeMnI+q3YjdaXPo/GlTsjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGFQIqopGfONaXSPm24T57pwNXwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvZGU4ZTYwYWYtODU3Ny00 YmI3LThlM2UtMjhlNGVjODhiNzI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAglA/wkp73x7Kj4wg+d3YP i/32YPD7xp8NjTY6wZ/X3l+VayAwD6cb+DE6m558hqqOTdlE5l9WQSGlPvIoB2tO AbwhzZ1GdAPzh19w2h8cJvDinUQKyIzTRD5306Zo5pTwy31F+QOvCOj/MEeieHX+ yHsWzzUp37iyH261MkWY0eQkD137lTI1+EG8TtsRBBAThSJi/P30+3knxWTpHzG5 l6xVHYV44V7FjP7NFgUGZIrP4RHZQLxtLubtKIgLUdGgZiay+yrehnYYGs8nam4e NtOjQpEeN0Nx26GZSaPaDaSxAF8ftGi9hRi6uA6G6YWgqWY7WELnbiU8oPsPfUho -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:09 2025 by rpki-client