$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft File: 381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft (raw, json) Hash identifier: oYxBXH+cmLdQ5BYgtFqYr3Te/l2AFCwyLOf/ZS69DBE= Subject key identifier: AD:6C:FC:3F:94:61:D3:C0:58:EE:CE:E4:A0:28:53:61:58:93:1D:C2 Authority key identifier: A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7 Certificate issuer: /CN=381d91d1-0a3a-48b2-aca2-5a6f28e3b324 Certificate serial: 010D0C9F4328584BC10A9D5B0F9DC6AE122F47C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft Manifest number: 010D0C9F43285849ABDCEAECEAA06A9A9B463685 Signing time: Wed 05 Nov 2025 02:00:03 +0000 Manifest this update: Wed 05 Nov 2025 02:00:03 +0000 Manifest next update: Fri 07 Nov 2025 02:00:00 +0000 Files and hashes: 1: 381d91d1-0a3a-48b2-aca2-5a6f28e3b324.crl (hash: RyoX6wWiJNcE2bT2VCr+Y4QDctvm2YsCAQbapQ1qZts=) 2: cad5f036-4c3f-30b7-aa38-05ea06a74901.roa (hash: +L7t1T+UQcOx0YG5CAqxRgxWwDS/xuC7GJw8+wBhc6g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:9d:5b:0f:9d:c6:ae:12:2f:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381d91d1-0a3a-48b2-aca2-5a6f28e3b324 Validity Not Before: Nov 5 02:00:03 2025 GMT Not After : Nov 7 02:00:00 2025 GMT Subject: CN=a4a5f6af-a180-483b-9540-53df0162338c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:c4:e4:ca:05:54:46:d8:5b:f6:31:a5:e4: 55:8f:c0:31:10:6d:ed:98:5e:04:d1:54:98:f8:2d: 77:6e:b7:5b:7f:ef:d5:67:98:94:cf:3c:e0:52:f5: 6c:f4:45:70:cd:67:4f:08:94:58:8d:d1:19:8a:db: e6:21:1a:14:7a:d4:9a:1b:90:a8:87:1e:38:32:72: 25:70:04:ac:ea:c0:65:ae:8f:aa:4b:84:c0:b2:63: 36:ad:ea:f5:79:c0:9b:ba:53:f8:1d:57:b1:07:8c: fd:b2:44:b0:2c:fd:92:84:9d:31:ec:15:1f:15:e7: f0:12:6d:a3:fb:85:15:e3:10:54:0e:16:89:d1:88: 8f:71:8d:a4:97:02:fe:c5:ea:19:b0:e9:39:51:94: c7:bd:37:6b:29:6f:2a:88:1b:fd:c4:97:ba:be:73: d3:be:41:66:65:12:3a:a9:4c:e7:ae:e5:76:f2:c7: 42:02:2b:14:e3:7c:77:77:c9:74:cd:87:80:f0:94: 1f:fb:3a:64:2b:66:ea:e2:54:0c:bc:3f:fa:94:f5: 78:71:59:c4:20:3e:16:52:c4:d0:d5:15:6e:29:2e: a5:97:78:84:c7:0a:fb:14:85:6b:88:be:38:8d:f4: 97:97:a0:fe:5f:ef:ea:b6:ab:2a:8c:3c:95:7d:5d: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6C:FC:3F:94:61:D3:C0:58:EE:CE:E4:A0:28:53:61:58:93:1D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.crl X509v3 Authority Key Identifier: keyid:A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:37:c3:62:8f:9b:32:04:e5:78:dd:19:76:81:51:a6:05:66: f4:49:2b:06:e9:ec:88:8c:a6:b9:83:aa:58:fb:e5:dd:01:ca: 87:2a:83:06:bf:c2:a4:5e:40:28:62:84:1e:0c:ea:bb:21:51: 8f:59:01:4a:01:48:10:d3:dd:a5:84:4e:7c:8d:55:f8:13:1e: 7f:c2:68:91:89:be:2c:92:17:20:9a:da:2d:07:d3:14:77:9f: b9:41:87:24:53:08:e4:d1:d9:fe:05:f3:a1:a4:42:2d:e8:e0: 92:8b:d3:62:cd:8d:77:6c:3e:7c:22:38:79:9c:78:b9:63:f0: d5:a6:d8:44:09:24:c6:29:51:f5:32:08:88:54:11:48:9f:78: d9:f3:77:80:43:e2:f2:c6:2b:10:2d:05:f3:46:db:0e:cc:51: 31:17:3c:2a:e3:af:b6:73:65:87:ee:d0:20:b1:87:64:20:61: e8:a3:57:87:a3:d8:cb:bd:83:36:17:f2:dd:68:e3:f1:ec:47: 4e:9d:af:9d:dd:8d:86:c6:ee:c5:a0:19:83:17:43:59:4f:aa: f8:fd:07:76:7c:96:5a:fd:42:f7:a6:39:bd:38:ad:da:d7:d4: fd:b0:3b:1f:81:7b:8f:23:f8:3f:d6:73:27:cf:6f:16:d7:b7: 83:f3:87:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBCp1bD53GrhIvR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgxZDkxZDEtMGEzYS00OGIyLWFjYTItNWE2ZjI4ZTNi MzI0MB4XDTI1MTEwNTAyMDAwM1oXDTI1MTEwNzAyMDAwMFowLzEtMCsGA1UEAxMk YTRhNWY2YWYtYTE4MC00ODNiLTk1NDAtNTNkZjAxNjIzMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y3E5MoFVEbYW/YxpeRVj8AxEG3tmF4E0VSY +C13brdbf+/VZ5iUzzzgUvVs9EVwzWdPCJRYjdEZitvmIRoUetSaG5Cohx44MnIl cASs6sBlro+qS4TAsmM2rer1ecCbulP4HVexB4z9skSwLP2ShJ0x7BUfFefwEm2j +4UV4xBUDhaJ0YiPcY2klwL+xeoZsOk5UZTHvTdrKW8qiBv9xJe6vnPTvkFmZRI6 qUznruV28sdCAisU43x3d8l0zYeA8JQf+zpkK2bq4lQMvD/6lPV4cVnEID4WUsTQ 1RVuKS6ll3iExwr7FIVriL44jfSXl6D+X+/qtqsqjDyVfV2PhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK1s/D+UYdPAWO7O5KAoU2FYkx3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODFk OTFkMS0wYTNhLTQ4YjItYWNhMi01YTZmMjhlM2IzMjQvMzgxZDkxZDEtMGEzYS00 OGIyLWFjYTItNWE2ZjI4ZTNiMzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzgxZDkxZDEtMGEzYS00OGIyLWFj YTItNWE2ZjI4ZTNiMzI0LzM4MWQ5MWQxLTBhM2EtNDhiMi1hY2EyLTVhNmYyOGUz YjMyNC5jcmwwHwYDVR0jBBgwFoAUplEOH58xmWLnQqUMu5CT0EZmkvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zODFkOTFkMS0wYTNhLTQ4YjItYWNhMi01YTZm MjhlM2IzMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlN8Nij5syBOV43Rl2gVGm BWb0SSsG6eyIjKa5g6pY++XdAcqHKoMGv8KkXkAoYoQeDOq7IVGPWQFKAUgQ092l hE58jVX4Ex5/wmiRib4skhcgmtotB9MUd5+5QYckUwjk0dn+BfOhpEIt6OCSi9Ni zY13bD58Ijh5nHi5Y/DVpthECSTGKVH1MgiIVBFIn3jZ83eAQ+LyxisQLQXzRtsO zFExFzwq46+2c2WH7tAgsYdkIGHoo1eHo9jLvYM2F/LdaOPx7EdOna+d3Y2Gxu7F oBmDF0NZT6r4/Qd2fJZa/UL3pjm9OK3a19T9sDsfgXuPI/g/1nMnz28W17eD84fW -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:44 2025 by rpki-client