$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.mft File: 1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.mft (raw, json) Hash identifier: bnzHjOrO9QQ2+dXuNYUijujtqrE3ydMS7oSWQu63was= Subject key identifier: 58:A5:87:45:3A:CD:07:17:BE:EB:31:A6:2C:5E:51:86:26:09:29:09 Authority key identifier: 0A:4B:24:E5:0D:AF:A1:8B:3B:5B:2C:43:80:10:46:B9:A5:A1:C8:28 Certificate issuer: /CN=1ecb3639-a6fe-445e-bf41-9d5f272e0ce9 Certificate serial: 010D0C9F4328584BBFA5502700B7FF23FE58C8F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.mft Manifest number: 010D0C9F432858496D146C6A567E5D7E136D8FD9 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.crl (hash: C7JfRX+fAckDsvAzWTvHsZ4MLf8YzHcf188m26zRbqA=) 2: e83f5e3d-f7f4-3d1f-9382-184878276973.roa (hash: HXf2Uhegj406UDJKGOTRExmKe3GpXkvLbPUTX0reEFU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:50:27:00:b7:ff:23:fe:58:c8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ecb3639-a6fe-445e-bf41-9d5f272e0ce9 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=5a2e39b4-04c6-4a4b-964b-2a4851237ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:ca:36:a0:2d:dc:7a:55:51:2d:ae:c3:83: 03:e6:b7:e7:8e:11:c9:1c:61:0e:e8:30:a8:25:bf: ad:9f:25:20:44:13:c6:ea:9c:86:b4:80:db:46:b4: 14:89:e8:af:b3:c3:de:3b:d4:98:35:e1:27:59:61: db:2a:72:57:29:d9:42:8d:a3:6b:aa:ec:f7:71:3d: 8b:95:7e:7e:7f:72:63:af:b4:82:d6:7b:18:5e:9c: a9:f4:65:23:d3:5e:8a:2a:2f:70:96:22:34:d3:2a: 1d:54:0c:84:64:2f:01:d3:7e:cf:d9:69:de:ce:3c: e3:73:37:89:0a:dd:2d:24:1e:b8:3a:5d:3e:ee:74: c0:1d:16:3f:c0:90:c0:ef:90:6e:fd:31:c0:14:f4: cc:a1:2f:c8:5b:93:7d:73:6d:e3:aa:b4:3f:65:46: c2:1b:8c:af:03:d3:33:fe:2c:61:45:43:98:46:77: 89:0f:7b:e0:a2:85:0f:46:37:40:b0:e6:1a:41:8c: 4c:66:19:a6:18:4d:98:de:15:c4:34:be:4b:d6:79: ac:c8:14:7e:9a:b9:bf:0c:a4:51:d9:73:65:f2:4b: 9d:5b:6e:8f:42:f9:5c:bd:d8:7e:f9:9d:34:67:8d: 31:c2:f4:fa:d5:14:63:47:91:5e:8d:a4:9d:55:33: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A5:87:45:3A:CD:07:17:BE:EB:31:A6:2C:5E:51:86:26:09:29:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.crl X509v3 Authority Key Identifier: keyid:0A:4B:24:E5:0D:AF:A1:8B:3B:5B:2C:43:80:10:46:B9:A5:A1:C8:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ecb3639-a6fe-445e-bf41-9d5f272e0ce9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:af:af:83:de:5a:dd:47:1f:76:d3:da:4c:f9:94:2d:5a:c3: 68:34:82:92:83:9c:ea:7f:85:48:fb:c3:2e:2a:c6:ce:22:a6: d9:e3:e1:ae:0f:81:38:92:43:88:e4:60:7c:80:4f:7c:c1:1a: 1a:ae:5d:0e:b5:a5:f4:a6:d9:0a:33:b1:c1:21:58:ba:5d:c8: ee:cf:2c:36:8a:83:9c:db:95:d0:06:ac:4f:70:7a:e2:99:1b: 5e:80:01:ce:dc:2c:ab:fa:8e:a3:8b:89:86:6c:2f:e3:b7:69: c0:35:d4:06:b9:44:c1:cd:76:a6:84:4f:19:40:4c:f2:04:fe: b4:31:05:fc:31:e9:9d:74:92:cc:08:ed:db:3a:af:2f:b7:23: 8b:90:bb:04:7b:c1:ff:4a:cd:03:c0:04:c2:23:38:26:b6:03: 14:49:a6:00:0a:71:a4:fc:e6:a9:36:d8:51:10:20:20:da:9d: 3c:3c:af:a6:11:fe:47:1c:a6:ae:35:46:8b:c8:8c:58:f8:fa: 6e:8f:08:82:f1:9a:91:5a:e5:b5:f1:a0:75:71:fa:a4:05:86: dd:41:81:5d:75:71:02:0f:28:e7:ec:0f:af:9f:0e:81:da:34: c1:65:eb:36:7d:91:18:60:9d:02:49:70:07:88:5b:05:84:d4: ab:9a:f0:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVAnALf/I/5YyPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjYjM2MzktYTZmZS00NDVlLWJmNDEtOWQ1ZjI3MmUw Y2U5MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk NWEyZTM5YjQtMDRjNi00YTRiLTk2NGItMmE0ODUxMjM3ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUTKNqAt3HpVUS2uw4MD5rfnjhHJHGEO6DCo Jb+tnyUgRBPG6pyGtIDbRrQUieivs8PeO9SYNeEnWWHbKnJXKdlCjaNrquz3cT2L lX5+f3Jjr7SC1nsYXpyp9GUj016KKi9wliI00yodVAyEZC8B037P2WnezjzjczeJ Ct0tJB64Ol0+7nTAHRY/wJDA75Bu/THAFPTMoS/IW5N9c23jqrQ/ZUbCG4yvA9Mz /ixhRUOYRneJD3vgooUPRjdAsOYaQYxMZhmmGE2Y3hXENL5L1nmsyBR+mrm/DKRR 2XNl8kudW26PQvlcvdh++Z00Z40xwvT61RRjR5FejaSdVTOwhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFilh0U6zQcXvusxpixeUYYmCSkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZWNi MzYzOS1hNmZlLTQ0NWUtYmY0MS05ZDVmMjcyZTBjZTkvMWVjYjM2MzktYTZmZS00 NDVlLWJmNDEtOWQ1ZjI3MmUwY2U5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWVjYjM2MzktYTZmZS00NDVlLWJm NDEtOWQ1ZjI3MmUwY2U5LzFlY2IzNjM5LWE2ZmUtNDQ1ZS1iZjQxLTlkNWYyNzJl MGNlOS5jcmwwHwYDVR0jBBgwFoAUCksk5Q2voYs7WyxDgBBGuaWhyCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZWNiMzYzOS1hNmZlLTQ0NWUtYmY0MS05ZDVm MjcyZTBjZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdr6+D3lrdRx9209pM+ZQt WsNoNIKSg5zqf4VI+8MuKsbOIqbZ4+GuD4E4kkOI5GB8gE98wRoarl0OtaX0ptkK M7HBIVi6Xcjuzyw2ioOc25XQBqxPcHrimRtegAHO3Cyr+o6ji4mGbC/jt2nANdQG uUTBzXamhE8ZQEzyBP60MQX8MemddJLMCO3bOq8vtyOLkLsEe8H/Ss0DwATCIzgm tgMUSaYACnGk/OapNthRECAg2p08PK+mEf5HHKauNUaLyIxY+PpujwiC8ZqRWuW1 8aB1cfqkBYbdQYFddXECDyjn7A+vnw6B2jTBZes2fZEYYJ0CSXAHiFsFhNSrmvDC -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:53 2025 by rpki-client