$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft File: 325f62aa-b9c8-4315-87d2-409b60e8840d.mft (raw, json) Hash identifier: D6TPMmhToPfoHBRD3BTHtiA7A2FqSj3KytQ6rH5VHiQ= Subject key identifier: 45:13:EB:C8:55:DD:75:1C:3D:20:3B:08:2B:4E:8A:F9:D2:E8:CE:F9 Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F4328584BC1DB123912AE5123F18D6F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft Manifest number: 010D0C9F432858497A6510E20DC87663E1742116 Signing time: Wed 05 Nov 2025 09:00:03 +0000 Manifest this update: Wed 05 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: 325f62aa-b9c8-4315-87d2-409b60e8840d.crl (hash: Gi8ujqYqcabz25/Fl9/AupMm5XBA7Zf2CuK8vWg55cU=) 2: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (hash: f7BwR8nYyjuWfveGHMywUObYXGgC7X0HZ+gPRdUpHCY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:db:12:39:12:ae:51:23:f1:8d:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Nov 5 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=85e70fa2-994c-49bf-a450-11cb64cb0df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:34:aa:67:d0:ca:4e:ee:1e:80:5b:44:b4: 9d:d0:ba:f9:48:84:02:80:a6:10:62:93:1e:af:28: f4:05:20:da:cd:81:8f:92:45:7e:cd:92:5d:30:d0: c9:4c:87:62:d5:5b:22:be:1b:4a:58:e1:b5:a1:be: ad:96:c7:0f:72:10:80:42:52:7d:4c:90:dd:c8:fd: 2c:8c:83:ef:1e:ab:ad:5e:18:84:bb:62:be:2a:92: 5b:e5:d6:f6:94:9f:5b:b1:ab:6d:60:c3:3b:1f:b5: ed:1a:d6:e7:82:1d:a1:bb:ba:69:69:cd:b7:7f:16: 72:75:30:74:d4:fa:7e:aa:9c:b5:d1:76:db:04:ab: 53:29:e8:1d:5d:dc:c8:47:8a:4a:c4:eb:ce:0f:c5: ba:d8:e1:15:e5:f4:1b:4e:19:73:30:66:d0:08:1e: e9:e0:b9:eb:ff:ac:7b:92:62:53:54:61:5a:d9:bf: 81:cf:3f:a0:98:bc:07:4a:f7:70:0f:0a:cd:02:ee: 3b:f1:8c:7c:2c:6e:ff:e4:05:fd:29:71:04:17:d0: 19:48:70:92:cb:c3:5e:d1:98:b6:1c:f3:3b:c7:81: b1:83:d9:3a:6b:59:20:e0:0c:d3:a2:82:cf:4c:99: be:0f:3f:f8:15:a1:5f:ef:03:d4:0b:cd:01:fc:8e: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:EB:C8:55:DD:75:1C:3D:20:3B:08:2B:4E:8A:F9:D2:E8:CE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f1:dc:d3:23:57:67:8f:7d:7d:65:4f:2f:d7:5e:5a:77:c5: 6e:16:79:0c:d8:e7:4c:bb:d4:fc:3b:4b:82:6e:4a:e6:3a:7d: e3:ca:39:ac:2c:28:c9:48:5a:90:aa:48:2a:25:ff:37:c6:b2: df:00:62:f0:e3:c3:c1:e7:6d:19:c7:7f:13:3a:e7:1b:54:e2: 06:05:29:c7:75:b3:8b:10:27:17:bc:1e:9c:03:21:ea:3d:20: 83:bd:11:b8:c6:da:e5:9a:c6:31:4a:6f:48:95:56:8e:58:05: d1:be:f7:27:58:a7:cd:40:db:13:28:af:69:49:68:41:17:97: 8d:e3:88:c6:4f:dd:9d:5c:e3:3f:00:94:d3:17:79:eb:69:3b: 64:d2:f1:61:9b:b7:23:3b:31:ee:da:a2:83:c0:47:fc:96:ab: 9d:e9:eb:8a:2c:f5:f0:e6:ef:d3:25:da:1a:6e:99:b8:f1:9c: 29:65:f8:75:11:75:8d:d4:1b:46:9c:b3:01:c3:6f:68:a1:1f: f2:0a:84:a5:a8:18:7f:cf:0a:42:b0:2c:bb:e9:ed:08:db:53: 24:7c:7a:f4:7d:bc:4b:a9:6a:3f:45:b7:77:55:4c:bc:18:f4: 05:1b:c8:6f:7a:eb:0d:f8:4d:37:63:13:8f:49:7f:65:e8:73: 13:38:87:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB2xI5Eq5RI/GNbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI1MTEwNTA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk ODVlNzBmYTItOTk0Yy00OWJmLWE0NTAtMTFjYjY0Y2IwZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLw0qmfQyk7uHoBbRLSd0Lr5SIQCgKYQYpMe ryj0BSDazYGPkkV+zZJdMNDJTIdi1VsivhtKWOG1ob6tlscPchCAQlJ9TJDdyP0s jIPvHqutXhiEu2K+KpJb5db2lJ9bsattYMM7H7XtGtbngh2hu7ppac23fxZydTB0 1Pp+qpy10XbbBKtTKegdXdzIR4pKxOvOD8W62OEV5fQbThlzMGbQCB7p4Lnr/6x7 kmJTVGFa2b+Bzz+gmLwHSvdwDwrNAu478Yx8LG7/5AX9KXEEF9AZSHCSy8Ne0Zi2 HPM7x4Gxg9k6a1kg4AzTooLPTJm+Dz/4FaFf7wPUC80B/I6LDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEUT68hV3XUcPSA7CCtOivnS6M75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvMzI1ZjYyYWEtYjljOC00 MzE1LTg3ZDItNDA5YjYwZTg4NDBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCN8dzTI1dnj319ZU8v115a d8VuFnkM2OdMu9T8O0uCbkrmOn3jyjmsLCjJSFqQqkgqJf83xrLfAGLw48PB520Z x38TOucbVOIGBSnHdbOLECcXvB6cAyHqPSCDvRG4xtrlmsYxSm9IlVaOWAXRvvcn WKfNQNsTKK9pSWhBF5eN44jGT92dXOM/AJTTF3nraTtk0vFhm7cjOzHu2qKDwEf8 lqud6euKLPXw5u/TJdoabpm48ZwpZfh1EXWN1BtGnLMBw29ooR/yCoSlqBh/zwpC sCy76e0I21MkfHr0fbxLqWo/Rbd3VUy8GPQFG8hveusN+E03YxOPSX9l6HMTOIcI -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:36 2025 by rpki-client