$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft File: 0c9b7b78-0431-4030-be95-6889ed40d6e6.mft (raw, json) Hash identifier: y1U7mKAXq9YlWUCgkEO6He6lUsM/WWUWbZThf1VtJno= Subject key identifier: 05:F8:BB:FD:A5:B2:58:7D:3A:22:E0:31:D8:75:C0:4E:88:60:39:7F Authority key identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 Certificate issuer: /CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Certificate serial: 010D0C9F4328584BBFA5529BDD51CD601F38A7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft Manifest number: 010D0C9F432858498BBD0C5EE0E54B27F31C4B0F Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Fri 07 Nov 2025 14:00:00 +0000 Files and hashes: 1: 0c9b7b78-0431-4030-be95-6889ed40d6e6.crl (hash: cfLuvsBjWDrMocTnYnh6O/ZZWapJLq9HAPfMdZBP0J0=) 2: d492e89a-8f64-3ae7-a353-597164e47b19.roa (hash: lBLrKmJSXuILaE7zqslwgiTQUuYfyYj8ZRJPj/14x1A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:52:9b:dd:51:cd:60:1f:38:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 7 14:00:00 2025 GMT Subject: CN=f0d216e5-6927-4ba7-b913-31ded7671859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:f5:43:b2:8a:77:fc:e1:a9:29:35:dc:b5: a5:f2:10:a1:bf:ba:eb:03:59:7e:0f:08:49:18:c8: 40:68:ec:e7:50:d8:cf:8f:84:09:b4:7e:56:56:50: 6e:ec:e3:89:0d:0b:7d:b7:be:0b:48:28:82:8b:71: 3c:c6:c8:5b:c6:aa:f4:16:aa:4f:c3:4d:d7:6b:3e: c3:2e:37:56:c8:d1:54:fe:36:32:06:36:87:0a:a8: c7:76:67:82:9e:30:8f:83:4a:7b:7f:78:2e:b0:6a: 51:c4:e6:06:a1:b7:57:41:ed:d3:e0:fc:ba:3f:4a: 5e:d5:98:f5:01:f0:7f:5e:72:89:22:6f:57:cd:86: 8f:d1:54:93:8d:9d:9e:36:0a:88:ca:ca:d5:86:26: be:68:c9:34:80:ac:2b:4d:e3:3b:0c:0b:80:e7:5a: 1d:da:b4:20:12:9c:46:a4:4d:27:55:16:4c:db:83: e7:c4:0c:32:90:ea:9b:e3:6d:74:30:bf:88:cf:a0: d8:ca:d8:54:60:a8:4b:cd:c5:e9:3a:7c:8b:f7:d4: d7:a9:3c:d5:5d:c7:64:a1:5e:80:4b:0b:71:ff:b7: 7b:c2:9b:30:66:37:50:3f:6c:85:1a:57:a9:c2:16: 32:05:14:f7:2c:bc:45:84:a8:17:b4:9c:71:8a:c6: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F8:BB:FD:A5:B2:58:7D:3A:22:E0:31:D8:75:C0:4E:88:60:39:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl X509v3 Authority Key Identifier: keyid:DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:11:50:40:12:e0:b7:99:26:76:97:88:75:77:00:0a:f2:da: a3:cf:01:ba:bf:11:16:98:8c:49:5a:e9:ad:87:22:ca:bb:4c: 92:a9:4c:70:67:e9:5c:87:f7:25:f8:a8:3d:3d:37:21:80:e4: 5e:26:33:ff:70:66:50:d6:ee:59:14:50:82:3c:7b:86:4a:02: 19:2a:51:b5:21:66:89:58:b7:1a:50:61:10:1b:2a:9d:88:3d: 0f:aa:76:8b:dd:e1:21:1e:83:c7:ff:52:99:a1:6b:15:37:ca: fc:1b:86:7f:31:14:24:fa:a0:cc:96:5b:cc:63:97:67:73:bc: 4b:80:df:91:11:5f:35:86:04:87:1a:89:ea:ae:04:08:e9:e0: 56:a8:b8:92:c0:fb:25:2d:60:63:e0:1d:52:59:41:f9:bc:67: c3:08:4e:8f:ca:db:89:2b:67:ad:d9:30:a5:d2:05:db:a5:b7: 37:6c:b8:c9:8e:c8:9a:e8:6c:9e:a4:6e:11:fc:b3:9c:d8:94: a6:b1:54:08:92:51:4a:68:33:47:7b:9a:54:43:11:b6:63:4e: db:d4:2b:f2:a7:15:6d:ed:ea:c5:19:d9:5a:30:fc:42:d2:49: 1f:f4:23:97:9d:bc:14:d7:a7:8b:bc:f1:bb:b8:73:78:2e:9d: bf:08:4e:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVKb3VHNYB84p8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5YjdiNzgtMDQzMS00MDMwLWJlOTUtNjg4OWVkNDBk NmU2MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk ZjBkMjE2ZTUtNjkyNy00YmE3LWI5MTMtMzFkZWQ3NjcxODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAv1Q7KKd/zhqSk13LWl8hChv7rrA1l+DwhJ GMhAaOznUNjPj4QJtH5WVlBu7OOJDQt9t74LSCiCi3E8xshbxqr0FqpPw03Xaz7D LjdWyNFU/jYyBjaHCqjHdmeCnjCPg0p7f3gusGpRxOYGobdXQe3T4Py6P0pe1Zj1 AfB/XnKJIm9XzYaP0VSTjZ2eNgqIysrVhia+aMk0gKwrTeM7DAuA51od2rQgEpxG pE0nVRZM24PnxAwykOqb4210ML+Iz6DYythUYKhLzcXpOnyL99TXqTzVXcdkoV6A Swtx/7d7wpswZjdQP2yFGlepwhYyBRT3LLxFhKgXtJxxisaJMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAX4u/2lslh9OiLgMdh1wE6IYDl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzli N2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5ZWQ0MGQ2ZTYvMGM5YjdiNzgtMDQzMS00 MDMwLWJlOTUtNjg4OWVkNDBkNmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGM5YjdiNzgtMDQzMS00MDMwLWJl OTUtNjg4OWVkNDBkNmU2LzBjOWI3Yjc4LTA0MzEtNDAzMC1iZTk1LTY4ODllZDQw ZDZlNi5jcmwwHwYDVR0jBBgwFoAU232oxTB78la/VAaQxbH0hGpBeEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzliN2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5 ZWQ0MGQ2ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkEVBAEuC3mSZ2l4h1dwAK 8tqjzwG6vxEWmIxJWumthyLKu0ySqUxwZ+lch/cl+Kg9PTchgOReJjP/cGZQ1u5Z FFCCPHuGSgIZKlG1IWaJWLcaUGEQGyqdiD0PqnaL3eEhHoPH/1KZoWsVN8r8G4Z/ MRQk+qDMllvMY5dnc7xLgN+REV81hgSHGonqrgQI6eBWqLiSwPslLWBj4B1SWUH5 vGfDCE6PytuJK2et2TCl0gXbpbc3bLjJjsia6GyepG4R/LOc2JSmsVQIklFKaDNH e5pUQxG2Y07b1CvypxVt7erFGdlaMPxC0kkf9COXnbwU16eLvPG7uHN4Lp2/CE5X -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:46 2025 by rpki-client