$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: JF7aUMH5fEseo+cDj/yD63NhN7A4PydASPUySXoOXhA= Subject key identifier: AE:BE:C3:7D:BC:7E:96:DB:48:0C:6F:EF:72:76:D8:6B:3F:D6:C0:9C Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584BBFA54F516A4D329808BFDE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB3B9 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Fri 07 Nov 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: 0zBq+GLou4GHz9pDjuk9lDrnSEuswzZmL8w+U9GTgjE=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: +t5VOtq4ZGc8dV5qfQOneRzg7ismvSRuQeYDNkD8Prk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:4f:51:6a:4d:32:98:08:bf:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 7 14:00:00 2025 GMT Subject: CN=aec3e645-877d-4250-86cd-cb9279693040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:45:c3:17:54:a1:df:40:d3:4c:e6:8e:d5:48: a9:1e:1f:d7:72:1b:ba:3a:00:c3:88:4d:fe:c8:5b: 8b:6c:cd:79:1b:2d:22:7c:9b:0a:24:ab:6b:86:4c: 0f:a3:63:fc:2c:68:1f:5b:87:48:43:ef:20:fd:06: 27:3c:39:79:17:57:1a:a1:c1:97:9a:e5:46:04:a4: bd:19:a7:f9:d6:a9:d4:1f:f7:84:ea:c2:72:96:62: 08:63:dd:d6:91:dd:b1:a4:a7:0b:3d:c4:86:82:97: 9c:fc:83:08:ad:06:1d:0d:8f:9a:db:27:6a:ab:1b: 70:d2:db:0a:0f:db:a7:6f:74:98:e0:a9:cb:6a:c4: b3:81:00:40:ad:75:11:31:5b:d5:70:5d:a5:b0:d6: 97:b1:58:1e:f4:15:35:35:eb:f7:a6:af:00:8e:5c: e4:43:7f:2a:1d:09:35:33:e7:19:c3:9d:2d:c9:53: 50:5a:c1:5f:0f:d1:a4:2c:0a:a4:7a:4b:85:93:7d: ac:08:a3:15:68:da:98:17:61:3b:2d:a7:37:b4:3e: 46:64:72:f3:c1:8e:69:94:fd:4e:71:02:c1:8a:f0: 8c:a3:f8:70:9c:c0:07:45:fa:50:40:fa:df:97:5a: d7:20:01:0d:f3:f4:22:6b:43:a0:3e:ae:40:bd:41: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BE:C3:7D:BC:7E:96:DB:48:0C:6F:EF:72:76:D8:6B:3F:D6:C0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:dc:4e:81:6c:78:4a:da:84:19:e7:a6:05:a4:1a:db:8e:50: bb:88:74:76:c4:44:a5:b0:09:3b:82:ac:90:dc:cc:58:88:d8: 84:98:5b:32:ec:67:c3:30:67:47:7e:b9:7b:9a:93:7f:0e:15: ae:67:7b:4a:ec:bd:ef:9a:c3:85:d5:a7:a6:2f:51:24:71:23: 73:36:da:c8:c6:c8:12:64:de:72:80:f8:5b:60:a6:d2:2d:ed: b3:d2:a6:03:e6:58:9d:3a:60:6d:70:dc:67:77:9b:03:36:3f: 7e:63:6d:0d:2a:78:4a:fb:0d:a8:63:c5:30:68:29:6e:15:60: c8:a7:6a:4c:8b:af:83:00:ed:35:71:62:7d:79:0a:01:cc:ba: c8:a1:81:cd:a1:b5:16:5c:ac:e4:00:5b:da:44:54:84:ea:6b: c9:fb:ae:07:2a:e0:11:0d:7e:d9:01:06:7c:eb:8f:f1:37:53: 7b:22:07:cf:0d:1e:74:4a:ab:6d:94:db:cd:4e:18:45:3f:ec: 3c:d1:b3:bd:b7:33:2f:74:b6:93:1a:b3:f1:ac:de:03:f1:dc: ca:d4:dd:b7:60:59:10:93:cf:b3:00:0e:0a:f1:96:32:8a:49: a8:89:67:59:5c:3b:76:35:b6:06:02:9f:af:7d:e8:22:ae:89: cc:87:fa:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pU9Rak0ymAi/3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk YWVjM2U2NDUtODc3ZC00MjUwLTg2Y2QtY2I5Mjc5NjkzMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEXDF1Sh30DTTOaO1UipHh/Xchu6OgDDiE3+ yFuLbM15Gy0ifJsKJKtrhkwPo2P8LGgfW4dIQ+8g/QYnPDl5F1caocGXmuVGBKS9 Gaf51qnUH/eE6sJylmIIY93Wkd2xpKcLPcSGgpec/IMIrQYdDY+a2ydqqxtw0tsK D9unb3SY4KnLasSzgQBArXURMVvVcF2lsNaXsVge9BU1Nev3pq8AjlzkQ38qHQk1 M+cZw50tyVNQWsFfD9GkLAqkekuFk32sCKMVaNqYF2E7Lac3tD5GZHLzwY5plP1O cQLBivCMo/hwnMAHRfpQQPrfl1rXIAEN8/Qia0OgPq5AvUElmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK6+w328fpbbSAxv73J22Gs/1sCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA23E6BbHhK2oQZ56YFpBrb jlC7iHR2xESlsAk7gqyQ3MxYiNiEmFsy7GfDMGdHfrl7mpN/DhWuZ3tK7L3vmsOF 1aemL1EkcSNzNtrIxsgSZN5ygPhbYKbSLe2z0qYD5lidOmBtcNxnd5sDNj9+Y20N KnhK+w2oY8UwaCluFWDIp2pMi6+DAO01cWJ9eQoBzLrIoYHNobUWXKzkAFvaRFSE 6mvJ+64HKuARDX7ZAQZ864/xN1N7IgfPDR50SqttlNvNThhFP+w80bO9tzMvdLaT GrPxrN4D8dzK1N23YFkQk8+zAA4K8ZYyikmoiWdZXDt2NbYGAp+vfegironMh/oY -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:26 2025 by rpki-client