$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: vaDHm8mxc5op96c/K+wJDtDnBx6d0ifF8cSw/qbcCB0= Subject key identifier: 51:DC:1F:96:70:C4:79:DD:7D:83:02:81:84:D9:A3:3B:E6:10:88:6D Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584BBF69B76FFB8DB7119F7F9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF2CC Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: coSasgh7ZRDf4pBgMXqXT/YbLOOIWoqpzPZQQtCyK+Y=) 2: 7240f3c2-ab10-300d-8db2-697e0432d604.roa (hash: Im7ulYoF4wBuVDE5m1Smeyc27mtnJqEVBlPZwkEcVto=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:6f:fb:8d:b7:11:9f:7f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=8756c68a-872e-42f9-afe2-9892bfc3b899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:1b:f7:fa:47:0a:25:fe:96:e4:5a:03:b4: 4e:3a:31:cc:40:0b:34:af:46:1b:31:b6:35:2c:ea: f5:db:37:df:0f:43:04:e2:7a:d7:79:59:92:71:78: b0:cc:e1:ba:72:68:58:c4:93:d1:b4:ee:c2:b6:5f: 78:f9:d1:8e:75:bf:e0:c7:bf:57:4d:e6:a9:03:58: 61:a0:5e:76:ca:1c:9e:f0:40:99:d3:64:a7:51:86: 1f:22:e9:ab:e8:74:d2:1c:41:1e:14:8a:f4:16:1c: f1:80:3f:64:46:fb:7c:c8:83:9d:e8:a5:15:33:58: 0d:bd:a8:e6:54:5e:26:7e:e2:4c:d6:4a:68:20:ab: af:15:60:93:fc:c2:b5:85:e5:46:74:01:3e:23:0b: b6:fb:b1:b9:c8:6c:c7:62:47:a3:fd:1a:6f:3e:34: 36:75:a9:e4:19:a9:9c:74:12:55:d6:58:dc:4f:01: b3:6c:01:e7:b0:e5:2f:64:e7:04:54:9d:5a:2d:2c: b4:50:2b:aa:3d:8b:6d:3a:f5:fd:29:e3:39:70:01: ad:d2:33:12:f7:fd:54:0d:ab:8c:c6:ad:1b:7d:a4: 97:1a:0c:13:73:75:d3:e3:08:00:f7:9b:3c:ba:3b: bf:21:1c:6e:69:e5:93:58:a9:cd:9e:ea:34:06:cd: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DC:1F:96:70:C4:79:DD:7D:83:02:81:84:D9:A3:3B:E6:10:88:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:01:d7:28:8a:b1:ae:6d:17:e4:7e:ab:38:3b:63:ff:38:7c: a4:a6:a2:31:ac:1e:7c:16:6a:58:f1:fc:13:fb:08:e9:b4:7d: 4b:b6:e0:bc:4f:6c:d7:a6:b7:34:05:e8:d5:d8:7f:65:03:c8: 1c:2b:06:bc:dc:9d:dd:16:da:0a:0b:33:53:17:ad:43:58:2c: c6:99:85:f7:b5:71:08:5d:28:02:dd:0d:e3:d9:51:4b:bc:b5: 65:d4:21:02:1f:5a:1f:e2:ea:0b:d6:61:02:36:e7:f9:15:dd: 39:65:71:61:09:77:78:d1:39:d4:49:e4:2e:ec:8a:93:25:0d: e9:a9:5f:8c:f7:8a:8b:2b:fc:fa:0e:a1:24:17:87:74:9b:38: 99:78:eb:68:89:7a:81:ba:f3:ec:0b:cb:20:e6:29:28:d4:27: a2:fe:82:28:87:31:bf:fd:2c:01:bf:74:19:34:a9:6f:fd:6b: 18:ad:90:7a:f8:64:d9:98:4c:c3:1e:87:e9:7e:4f:f8:3f:49: b4:b3:e8:26:1a:27:8c:7f:21:0f:5a:be:84:bc:ba:70:08:de: 4c:82:31:fe:85:85:bb:16:f3:60:02:fa:34:b3:ea:29:5d:24: c6:76:ee:a1:6b:d0:67:0e:7e:a6:22:5a:bb:b5:e2:8b:49:42: 40:3c:87:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abdv+423EZ9/kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk ODc1NmM2OGEtODcyZS00MmY5LWFmZTItOTg5MmJmYzNiODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQIb9/pHCiX+luRaA7ROOjHMQAs0r0YbMbY1 LOr12zffD0ME4nrXeVmScXiwzOG6cmhYxJPRtO7Ctl94+dGOdb/gx79XTeapA1hh oF52yhye8ECZ02SnUYYfIumr6HTSHEEeFIr0FhzxgD9kRvt8yIOd6KUVM1gNvajm VF4mfuJM1kpoIKuvFWCT/MK1heVGdAE+Iwu2+7G5yGzHYkej/RpvPjQ2dankGamc dBJV1ljcTwGzbAHnsOUvZOcEVJ1aLSy0UCuqPYttOvX9KeM5cAGt0jMS9/1UDauM xq0bfaSXGgwTc3XT4wgA95s8uju/IRxuaeWTWKnNnuo0Bs0rUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFHcH5ZwxHndfYMCgYTZozvmEIhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8AdcoirGubRfkfqs4O2P/ OHykpqIxrB58FmpY8fwT+wjptH1LtuC8T2zXprc0BejV2H9lA8gcKwa83J3dFtoK CzNTF61DWCzGmYX3tXEIXSgC3Q3j2VFLvLVl1CECH1of4uoL1mECNuf5Fd05ZXFh CXd40TnUSeQu7IqTJQ3pqV+M94qLK/z6DqEkF4d0mziZeOtoiXqBuvPsC8sg5iko 1Cei/oIohzG//SwBv3QZNKlv/WsYrZB6+GTZmEzDHofpfk/4P0m0s+gmGieMfyEP Wr6EvLpwCN5MgjH+hYW7FvNgAvo0s+opXSTGdu6ha9BnDn6mIlq7teKLSUJAPIco -----END CERTIFICATE-----Generated at Wed Nov 5 06:43:00 2025 by rpki-client