$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.mft File: 5a0fc957-3e9d-4d5c-9c41-d40d1598543c.mft (raw, json) Hash identifier: zuFWsTSHAFLKdRQtA2T7ickSVXFvRuvr+2Kmz7s1PjY= Subject key identifier: C0:19:72:A0:A0:72:E2:73:D0:14:60:74:83:D9:C0:77:06:28:13:F9 Authority key identifier: 22:44:57:C9:AD:9B:6E:FA:3A:63:96:86:45:1C:A6:E2:F2:FF:04:17 Certificate issuer: /CN=5a0fc957-3e9d-4d5c-9c41-d40d1598543c Certificate serial: 010D0C9F4328584BBE9946EEB2D34C67EFC4F380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.mft Manifest number: 010D0C9F4328584A1EB738804FE04DD92FE76A79 Signing time: Tue 04 Nov 2025 05:00:03 +0000 Manifest this update: Tue 04 Nov 2025 05:00:03 +0000 Manifest next update: Thu 06 Nov 2025 05:00:00 +0000 Files and hashes: 1: 5a0fc957-3e9d-4d5c-9c41-d40d1598543c.crl (hash: wRu5PsRW25a88uwvQoWf47ntF9vsfYBLxVbQptfcUMs=) 2: c6f538fa-9de2-3bcd-89eb-6b5c784b697c.roa (hash: tnM7Ad2BWJpa59VcNL8jO9N9XGtABrAvmgeL/u5IigU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:99:46:ee:b2:d3:4c:67:ef:c4:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0fc957-3e9d-4d5c-9c41-d40d1598543c Validity Not Before: Nov 4 05:00:03 2025 GMT Not After : Nov 6 05:00:00 2025 GMT Subject: CN=f8e13c7e-c957-4ad1-9c4e-aab192d58554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:9b:eb:c6:6f:02:e4:c3:96:41:39:45:5b: 93:fd:b5:ef:63:e7:89:dc:42:d9:d7:65:01:64:a1: ce:0d:f3:31:c0:41:4a:d6:56:f1:56:06:66:5f:f1: 55:c7:29:6e:8a:cf:fc:2e:3f:35:56:bf:69:b8:99: 31:26:42:53:c8:ee:b7:67:b3:a7:c0:39:d3:5b:2c: cf:71:39:5a:8b:e4:0b:4d:e2:65:06:bc:75:f4:37: aa:af:2a:e1:ab:aa:14:33:fc:a5:1d:22:2a:76:6c: 7c:58:63:c4:6d:b4:66:14:ba:a4:3f:f6:ab:de:4d: 56:ed:3e:dd:2c:13:42:c7:94:97:91:41:3d:0f:01: cd:4f:31:50:7e:ff:fe:3c:01:de:8b:7a:16:32:45: 52:b0:48:9d:b0:9e:9e:67:96:16:57:a9:45:ac:0a: cc:08:8c:b2:ec:3f:84:f4:42:c6:bb:eb:ba:0b:68: e8:84:a5:e2:70:f7:b6:0d:6b:be:5b:55:ff:9e:5b: ac:a2:d2:5d:ed:17:05:5e:fe:3c:e1:3c:47:72:9c: 1d:e0:c2:c8:fa:b7:59:ed:c6:83:03:43:a5:5d:7b: 05:cf:3b:6f:b3:c2:94:06:73:51:fa:7f:f5:fe:72: 22:bc:68:7f:dc:02:11:6e:1b:ed:84:03:42:4c:b8: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:72:A0:A0:72:E2:73:D0:14:60:74:83:D9:C0:77:06:28:13:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.crl X509v3 Authority Key Identifier: keyid:22:44:57:C9:AD:9B:6E:FA:3A:63:96:86:45:1C:A6:E2:F2:FF:04:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a0fc957-3e9d-4d5c-9c41-d40d1598543c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:59:76:92:a5:08:1a:d1:8b:7c:56:8b:cb:45:86:a5:9a:56: 89:0e:83:ea:a8:e9:c3:b9:9e:58:bf:21:23:e1:2f:2e:46:bf: aa:ea:c2:8b:0c:ad:ec:7e:8a:61:01:66:a0:fe:77:58:6a:09: 3b:70:5b:09:13:2b:1e:5a:ce:a2:12:da:1f:7d:38:a9:ab:33: eb:96:e8:8e:c3:11:71:40:12:03:8b:06:4c:20:a5:56:c6:6d: e9:7b:a9:9d:36:ae:ef:1e:9e:30:f5:6e:5d:d0:1b:97:2e:06: 1b:2e:58:55:06:22:d8:be:74:d0:09:87:52:90:dd:2b:ae:8c: 50:8f:8a:3f:32:e2:a3:3b:bb:04:09:f0:fe:37:d1:74:16:31: 28:4b:71:32:ab:d9:36:d0:43:ae:af:d4:b8:8c:c1:4a:b3:d8: ec:92:c6:1c:7d:21:59:11:59:56:31:4e:17:fe:4a:fd:26:13: 15:e2:84:cb:fc:cf:18:dd:bc:75:3f:fa:cb:11:64:71:fd:f4: 1b:d4:c8:fb:ab:08:4b:2f:5b:6f:24:e5:a4:25:11:3b:23:72: 40:42:e8:ff:21:a3:6a:48:05:c3:15:2a:c8:7d:27:bf:bc:81: b9:e9:a6:36:8f:83:8f:bb:30:44:75:f4:84:3f:bc:fa:4f:2f: bf:d9:98:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+mUbustNMZ+/E84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEwZmM5NTctM2U5ZC00ZDVjLTljNDEtZDQwZDE1OTg1 NDNjMB4XDTI1MTEwNDA1MDAwM1oXDTI1MTEwNjA1MDAwMFowLzEtMCsGA1UEAxMk ZjhlMTNjN2UtYzk1Ny00YWQxLTljNGUtYWFiMTkyZDU4NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGyb68ZvAuTDlkE5RVuT/bXvY+eJ3ELZ12UB ZKHODfMxwEFK1lbxVgZmX/FVxyluis/8Lj81Vr9puJkxJkJTyO63Z7OnwDnTWyzP cTlai+QLTeJlBrx19Deqryrhq6oUM/ylHSIqdmx8WGPEbbRmFLqkP/ar3k1W7T7d LBNCx5SXkUE9DwHNTzFQfv/+PAHei3oWMkVSsEidsJ6eZ5YWV6lFrArMCIyy7D+E 9ELGu+u6C2johKXicPe2DWu+W1X/nlusotJd7RcFXv484TxHcpwd4MLI+rdZ7caD A0OlXXsFzztvs8KUBnNR+n/1/nIivGh/3AIRbhvthANCTLhCWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMAZcqCgcuJz0BRgdIPZwHcGKBP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81YTBm Yzk1Ny0zZTlkLTRkNWMtOWM0MS1kNDBkMTU5ODU0M2MvNWEwZmM5NTctM2U5ZC00 ZDVjLTljNDEtZDQwZDE1OTg1NDNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWEwZmM5NTctM2U5ZC00ZDVjLTlj NDEtZDQwZDE1OTg1NDNjLzVhMGZjOTU3LTNlOWQtNGQ1Yy05YzQxLWQ0MGQxNTk4 NTQzYy5jcmwwHwYDVR0jBBgwFoAUIkRXya2bbvo6Y5aGRRym4vL/BBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81YTBmYzk1Ny0zZTlkLTRkNWMtOWM0MS1kNDBk MTU5ODU0M2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIWXaSpQga0Yt8VovLRYal mlaJDoPqqOnDuZ5YvyEj4S8uRr+q6sKLDK3sfophAWag/ndYagk7cFsJEyseWs6i EtoffTipqzPrluiOwxFxQBIDiwZMIKVWxm3pe6mdNq7vHp4w9W5d0BuXLgYbLlhV BiLYvnTQCYdSkN0rroxQj4o/MuKjO7sECfD+N9F0FjEoS3Eyq9k20EOur9S4jMFK s9jsksYcfSFZEVlWMU4X/kr9JhMV4oTL/M8Y3bx1P/rLEWRx/fQb1Mj7qwhLL1tv JOWkJRE7I3JAQuj/IaNqSAXDFSrIfSe/vIG56aY2j4OPuzBEdfSEP7z6Ty+/2Zjp -----END CERTIFICATE-----Generated at Wed Nov 5 00:50:27 2025 by rpki-client