$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft File: 5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft (raw, json) Hash identifier: j/fXNArsvN+WuA0rQKZcdRt4uGOwHWkoJMV6yEEUeQ0= Subject key identifier: A3:11:2E:98:B5:AB:90:B7:D6:01:67:C3:EE:15:53:F4:53:73:63:D6 Authority key identifier: 9C:D9:56:21:0B:16:31:49:E9:D0:52:B8:E4:C5:71:98:3D:8A:DF:29 Certificate issuer: /CN=5e8f0254-f046-4c03-9c92-b57af2e5e3bf Certificate serial: 010D0C9F4328584BC1DB120EC3691E0AB179C260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft Manifest number: 010D0C9F432858496F3C51DB2F5E1A0037E6665A Signing time: Wed 05 Nov 2025 09:00:03 +0000 Manifest this update: Wed 05 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: 5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl (hash: CANxLKYqt97/9ZaBbbw9UDQBKmhU5+8xmca4/BVSnJ0=) 2: 6f81ad8c-4cc5-35d1-b472-c048522b016c.roa (hash: AvRg97O8LPYlXtVY7Ecx6zfc+ZBqkpHtZfKuEqEhY80=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:db:12:0e:c3:69:1e:0a:b1:79:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8f0254-f046-4c03-9c92-b57af2e5e3bf Validity Not Before: Nov 5 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=23f512fa-756b-488d-9d6e-51f1d13a9821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:8f:e4:a0:60:db:d6:4d:b9:bc:9b:26:c7: 17:4c:4c:7f:7a:26:8d:b2:05:8f:8c:1d:fe:f3:29: 2a:3d:93:ca:ca:0a:df:0a:fc:3e:25:d4:d1:c4:8b: 1d:f4:af:36:8d:bf:a3:1a:46:84:6c:71:8f:5f:9e: c3:41:f6:3e:45:2c:d1:ec:4c:14:7d:f1:e9:7d:40: 23:bd:b5:3a:7f:12:34:a4:91:a8:e1:b8:58:0c:93: 13:1c:67:ef:5e:f8:39:3b:72:3e:5d:da:a0:42:e0: fb:47:ca:f6:11:31:2d:41:df:c1:e5:9f:d6:6e:ad: ee:84:df:78:9d:91:59:7b:95:bc:ce:d7:fd:5a:62: 93:3d:ee:1b:d5:fe:28:b4:ff:38:fe:4a:ab:2f:a4: 4d:0e:fe:d0:08:f7:3d:d7:a3:5e:a9:e0:63:a4:e5: 6a:6f:45:07:8e:92:80:39:57:a5:b1:ed:c9:fc:05: 73:3c:57:f1:e6:6c:f9:a0:78:89:52:84:c4:03:29: 21:06:d1:db:5b:82:9d:9d:d6:ba:48:c6:15:ea:36: 24:c0:28:74:cb:02:a8:45:40:34:12:69:72:2f:75: c4:cc:f6:e0:dd:51:19:01:59:e8:03:32:2a:5f:28: 26:74:26:53:78:0c:68:8c:94:b8:5c:2c:7c:c7:0b: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:11:2E:98:B5:AB:90:B7:D6:01:67:C3:EE:15:53:F4:53:73:63:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl X509v3 Authority Key Identifier: keyid:9C:D9:56:21:0B:16:31:49:E9:D0:52:B8:E4:C5:71:98:3D:8A:DF:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c8:56:6f:ae:43:2c:86:3f:1d:37:d1:93:51:f3:0e:ea:65: 22:0e:1e:74:60:d9:8e:f0:72:cb:e1:84:21:40:59:ce:57:77: 33:e6:33:a9:f5:17:dc:fa:95:2a:8a:66:98:3b:02:e6:c2:72: 0a:7f:71:65:bf:46:19:4a:68:17:f7:b6:11:37:3a:dd:d6:f0: e0:b1:17:12:c7:7a:71:44:02:53:f9:dd:97:71:12:96:d2:c2: 4d:3f:f0:26:59:60:9e:5f:e1:fe:05:68:78:aa:e7:3c:e2:29: 0c:16:84:91:82:bf:96:6c:f7:bf:19:85:02:2a:ea:bf:b7:83: 5b:00:81:cf:2f:28:cd:01:16:7e:0f:6d:32:8c:bd:6d:cc:f2: 43:48:f4:d2:af:d6:40:cc:bc:c1:d0:97:33:a8:ff:ba:4e:25: 6d:02:96:0e:54:9a:8d:4d:ab:84:ad:b0:0f:65:92:21:e2:08: 33:57:d9:71:d5:aa:bc:6e:9e:20:4d:19:fb:05:e0:83:77:32: 8f:41:45:64:1f:7f:d4:00:a0:90:c4:1f:3c:4a:d7:8a:fd:65: f6:b5:3c:be:75:05:df:83:91:51:73:27:01:c4:a5:5b:29:83: 5f:b5:a9:95:e3:6d:83:6e:4b:ab:4f:3b:a2:7f:bc:70:d6:fc: 38:02:5c:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB2xIOw2keCrF5wmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4ZjAyNTQtZjA0Ni00YzAzLTljOTItYjU3YWYyZTVl M2JmMB4XDTI1MTEwNTA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk MjNmNTEyZmEtNzU2Yi00ODhkLTlkNmUtNTFmMWQxM2E5ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHiP5KBg29ZNubybJscXTEx/eiaNsgWPjB3+ 8ykqPZPKygrfCvw+JdTRxIsd9K82jb+jGkaEbHGPX57DQfY+RSzR7EwUffHpfUAj vbU6fxI0pJGo4bhYDJMTHGfvXvg5O3I+XdqgQuD7R8r2ETEtQd/B5Z/Wbq3uhN94 nZFZe5W8ztf9WmKTPe4b1f4otP84/kqrL6RNDv7QCPc916NeqeBjpOVqb0UHjpKA OVelse3J/AVzPFfx5mz5oHiJUoTEAykhBtHbW4Kdnda6SMYV6jYkwCh0ywKoRUA0 EmlyL3XEzPbg3VEZAVnoAzIqXygmdCZTeAxojJS4XCx8xwuO8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKMRLpi1q5C31gFnw+4VU/RTc2PWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZThm MDI1NC1mMDQ2LTRjMDMtOWM5Mi1iNTdhZjJlNWUzYmYvNWU4ZjAyNTQtZjA0Ni00 YzAzLTljOTItYjU3YWYyZTVlM2JmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWU4ZjAyNTQtZjA0Ni00YzAzLTlj OTItYjU3YWYyZTVlM2JmLzVlOGYwMjU0LWYwNDYtNGMwMy05YzkyLWI1N2FmMmU1 ZTNiZi5jcmwwHwYDVR0jBBgwFoAUnNlWIQsWMUnp0FK45MVxmD2K3ykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZThmMDI1NC1mMDQ2LTRjMDMtOWM5Mi1iNTdh ZjJlNWUzYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEyFZvrkMshj8dN9GTUfMO 6mUiDh50YNmO8HLL4YQhQFnOV3cz5jOp9Rfc+pUqimaYOwLmwnIKf3Flv0YZSmgX 97YRNzrd1vDgsRcSx3pxRAJT+d2XcRKW0sJNP/AmWWCeX+H+BWh4quc84ikMFoSR gr+WbPe/GYUCKuq/t4NbAIHPLyjNARZ+D20yjL1tzPJDSPTSr9ZAzLzB0JczqP+6 TiVtApYOVJqNTauErbAPZZIh4ggzV9lx1aq8bp4gTRn7BeCDdzKPQUVkH3/UAKCQ xB88SteK/WX2tTy+dQXfg5FRcycBxKVbKYNftamV422DbkurTzuif7xw1vw4AlzU -----END CERTIFICATE-----Generated at Wed Nov 5 13:12:46 2025 by rpki-client