$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft File: 1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft (raw, json) Hash identifier: XnAXKjsn9D5Iz5mFDhAUVpXobmQD8zcn3FWsTr9RUC4= Subject key identifier: AA:15:5F:7A:F9:25:7C:09:02:7A:C6:73:03:F5:B8:5E:64:C5:2D:21 Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 Certificate issuer: /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Certificate serial: 010D0C9F4328584BBFFEA7CD3977A6BAF1E2CEA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft Manifest number: 010D0C9F43285849D4BE125DF6D71FA8EB7678F9 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl (hash: VCUwTdbgCUmLxO8FpXTj+Na11qysUpqEA8Z7+qJJtK0=) 2: 2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa (hash: ukoi+25v3b0wgi3oE2PY+pw8dU24KMMkMpbsuiMsrjI=) 3: 377cb425-71da-3f60-9225-6a152463fc00.roa (hash: sWlx7Y66oSoy7SZf7r4rdLn5t+wdoJcUFJKP/DR31gc=) 4: 6b1893ff-373c-3edb-9d0a-94649a56ee7a.roa (hash: LvZlpz2LUY5LFC1pwzbFRsgds17o5LHvtM2ZP855PIc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a7:cd:39:77:a6:ba:f1:e2:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=a66fd1d9-e8e1-45d8-9810-96117c3fe5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:f6:76:26:69:ce:ce:7f:3c:cf:fd:ec:fd: 29:55:95:37:5a:9a:6e:16:2f:67:93:3f:03:24:9c: 01:47:e0:03:d8:07:e7:d3:74:49:d8:d9:16:89:0f: 47:20:f3:98:36:52:17:97:e5:bc:09:a4:65:f3:50: 18:4b:70:e1:b6:7c:d4:1a:26:33:9f:c5:ec:93:c3: c9:57:e7:ab:dc:25:9e:6c:82:d5:01:b4:9f:43:68: 2a:83:b6:ee:1a:46:0c:48:d5:89:72:52:28:87:14: e4:3f:a8:42:c4:8b:05:b8:62:f7:a4:ba:e5:d6:75: f1:d1:da:38:51:b4:30:4f:9f:c8:c4:11:70:89:04: 53:8f:86:e9:fe:46:ec:bf:57:91:ff:77:01:13:ea: 6c:db:53:20:b1:9c:e4:8f:23:fa:2e:9b:06:8f:c6: 1b:c4:78:ea:8c:9c:dd:52:36:8f:d9:52:48:3d:d8: 2b:2d:ee:f6:12:67:b8:e0:f1:31:9b:af:9d:80:55: d6:6b:98:6c:d2:4d:9e:0a:59:98:ae:7f:34:62:e4: 0d:ef:7f:b9:51:51:69:ec:e4:d3:3a:04:8e:fa:fd: f9:4a:95:ea:94:a0:bb:39:f0:fe:c3:35:56:46:12: e1:8a:41:36:74:7d:e7:58:72:52:f9:69:86:1b:a2: ae:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:15:5F:7A:F9:25:7C:09:02:7A:C6:73:03:F5:B8:5E:64:C5:2D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl X509v3 Authority Key Identifier: keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:59:ef:93:31:85:11:fc:93:9a:88:33:29:e8:9e:b4:c3:15: 30:b2:ab:0c:cd:dc:b6:d6:4b:f4:be:0e:c7:58:ef:c4:c0:e0: 3b:e3:15:c1:53:2f:56:21:c0:f7:9c:f0:bd:e4:1f:8a:00:b6: 2e:d4:2c:84:df:8b:a5:b3:a6:d2:14:1a:50:ad:d1:5a:cb:3f: 0b:62:dc:15:1e:34:fc:e9:3f:13:d8:46:f0:f1:41:56:8f:ff: f5:ab:13:07:4e:0d:14:e6:e3:29:6c:95:09:fa:23:d6:6b:7a: 7d:24:9c:51:68:e4:a3:87:44:ab:01:af:e9:1e:4c:47:7a:79: 1b:66:13:d8:c5:0e:1a:33:7a:18:b0:ac:d1:7a:b6:8c:87:17: 8b:1d:58:55:53:bf:13:8a:50:77:2e:e1:60:ff:77:73:9d:7d: 29:5a:7b:47:81:da:12:9c:22:f1:fe:7e:b4:0a:08:7b:62:17: 62:4a:44:13:65:56:46:21:c6:32:b8:00:d1:9f:7b:93:09:55: 39:e0:7d:16:58:45:c0:78:20:ca:03:dd:d4:47:b4:4d:98:47: bb:e2:d1:f0:9b:89:46:89:55:d4:4f:f1:4b:82:ee:76:93:e3: 11:32:dc:58:af:88:41:a4:a9:aa:c8:69:5d:b1:ec:14:43:4d: 70:22:41:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qfNOXemuvHizqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlMjM4YzItMmEyYy00ZjIwLTlmODUtNTJmYjhhNDJj MzA0MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk YTY2ZmQxZDktZThlMS00NWQ4LTk4MTAtOTYxMTdjM2ZlNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpT2diZpzs5/PM/97P0pVZU3WppuFi9nkz8D JJwBR+AD2Afn03RJ2NkWiQ9HIPOYNlIXl+W8CaRl81AYS3DhtnzUGiYzn8Xsk8PJ V+er3CWebILVAbSfQ2gqg7buGkYMSNWJclIohxTkP6hCxIsFuGL3pLrl1nXx0do4 UbQwT5/IxBFwiQRTj4bp/kbsv1eR/3cBE+ps21MgsZzkjyP6LpsGj8YbxHjqjJzd UjaP2VJIPdgrLe72Eme44PExm6+dgFXWa5hs0k2eClmYrn80YuQN73+5UVFp7OTT OgSO+v35SpXqlKC7OfD+wzVWRhLhikE2dH3nWHJS+WmGG6KuSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKoVX3r5JXwJAnrGcwP1uF5kxS0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUy MzhjMi0yYTJjLTRmMjAtOWY4NS01MmZiOGE0MmMzMDQvMWZlMjM4YzItMmEyYy00 ZjIwLTlmODUtNTJmYjhhNDJjMzA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZlMjM4YzItMmEyYy00ZjIwLTlm ODUtNTJmYjhhNDJjMzA0LzFmZTIzOGMyLTJhMmMtNGYyMC05Zjg1LTUyZmI4YTQy YzMwNC5jcmwwHwYDVR0jBBgwFoAUWZrMJeJlMnVj6NHXo+Wjsb/+oFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUyMzhjMi0yYTJjLTRmMjAtOWY4NS01MmZi OGE0MmMzMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4We+TMYUR/JOaiDMp6J60 wxUwsqsMzdy21kv0vg7HWO/EwOA74xXBUy9WIcD3nPC95B+KALYu1CyE34uls6bS FBpQrdFayz8LYtwVHjT86T8T2Ebw8UFWj//1qxMHTg0U5uMpbJUJ+iPWa3p9JJxR aOSjh0SrAa/pHkxHenkbZhPYxQ4aM3oYsKzReraMhxeLHVhVU78TilB3LuFg/3dz nX0pWntHgdoSnCLx/n60Cgh7YhdiSkQTZVZGIcYyuADRn3uTCVU54H0WWEXAeCDK A93UR7RNmEe74tHwm4lGiVXUT/FLgu52k+MRMtxYr4hBpKmqyGldsewUQ01wIkF4 -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:23 2025 by rpki-client