$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft File: a295a695-e91a-4c5a-8a31-a920a42ea44d.mft (raw, json) Hash identifier: Beyreq5rWUxfLRkfNhHm1sy5SuPWXzl7k9EWybsEHhw= Subject key identifier: B9:EB:0D:6C:5B:C9:FB:B4:19:DB:DF:3E:DB:45:89:26:95:C4:61:F9 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584BC0ECE49D8B7EE277BA8A3210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft Manifest number: 010D0C9F43285849ABC8124D60A5EBB8636DE0D8 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Fri 07 Nov 2025 01:00:00 +0000 Files and hashes: 1: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (hash: 2S8Q2ryTuIijVtftlVCM0+TwBpb+ZbCXoZjfDFmdFqE=) 2: a295a695-e91a-4c5a-8a31-a920a42ea44d.crl (hash: kWmCKEKKj1XpHN6W7MIdsRmf0ps1mT58afpv+H/qV/8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e4:9d:8b:7e:e2:77:ba:8a:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 7 01:00:00 2025 GMT Subject: CN=c30258bb-5d6e-4a83-bc98-720bc7bff258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:df:25:38:a8:66:a4:f8:86:ed:93:8b:3a: c7:a8:e0:2c:05:2c:1b:48:ec:06:43:2e:68:3c:d2: d4:ca:f8:16:eb:9f:49:6b:f9:b8:1d:78:b2:80:c7: 0f:37:4f:d2:10:b9:75:63:14:c4:88:36:c7:ad:ed: 5b:cc:3f:a6:1e:7a:e4:20:51:ad:3b:b3:f4:9f:60: 64:2a:a9:45:df:2f:e6:6b:e3:fc:fe:bc:9c:d6:19: d7:24:8e:77:1a:2b:58:81:1d:c0:2b:5a:81:84:f8: 99:f0:db:8d:93:54:58:93:23:6f:4d:3d:18:23:bf: e2:e4:44:e2:1e:4a:cf:68:3b:da:f9:72:97:a8:70: 39:04:1d:07:06:00:71:0a:81:cd:45:7d:c2:fe:82: 4b:c4:df:97:ba:c4:59:85:00:97:cf:03:13:e2:1b: b3:72:00:64:51:e9:22:68:44:58:84:89:36:5d:52: 40:10:42:e7:52:1d:52:de:53:7a:b0:22:21:03:79: e2:a3:99:1c:9b:14:49:c2:fe:69:69:08:f8:82:97: d7:71:75:df:c0:ca:1b:84:aa:f4:12:b2:f7:78:15: 21:ec:1c:a8:91:d9:d8:63:b1:09:61:62:df:b2:b6: a9:d8:4e:b4:a1:c2:a6:85:3e:9f:d0:5f:bc:b2:35: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:0D:6C:5B:C9:FB:B4:19:DB:DF:3E:DB:45:89:26:95:C4:61:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f7:52:71:4b:5e:12:3c:a5:ce:a0:2d:43:e6:7d:89:07:ce: 8d:66:3e:9f:06:e2:91:a9:51:8e:e1:10:fe:ae:10:e9:90:45: b1:2e:dd:a9:28:57:b3:d2:6e:7b:9d:46:e1:b5:b2:ad:f9:1c: d0:1c:e4:95:55:ff:8a:64:f8:e2:b5:db:6d:16:d6:c2:84:bf: 32:1c:59:87:ae:b4:e3:e0:c4:76:34:9e:4e:f1:e4:94:35:8d: 7f:ca:c3:a0:e9:15:ea:ba:52:08:ba:75:96:91:5d:32:89:25: 7a:83:6f:cd:62:a3:a0:33:c9:0b:7a:f1:1f:6a:3e:9b:50:22: f9:3b:54:10:5a:3a:a8:e3:fb:e4:c0:d6:be:78:13:d3:45:2b: 71:ab:78:90:ed:95:bb:1a:8e:eb:71:1c:1c:7d:e0:76:22:7f: 91:94:76:d2:3f:52:e3:8d:f5:f0:30:00:ad:f1:0d:2d:a0:b0: bc:c8:41:e7:77:77:5a:83:d2:d5:fb:fa:b9:b8:a5:87:4b:4b: b1:04:c9:76:2c:73:1f:b6:ac:49:5e:98:ab:d1:4c:69:36:33: eb:c3:c0:a5:49:f5:f4:6c:ab:ea:2c:21:b5:28:87:41:a7:30: 60:f3:3a:be:a3:c6:c1:0e:12:24:6c:58:8b:fe:de:6a:d9:6a: 95:29:f4:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OSdi37id7qKMhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwNzAxMDAwMFowLzEtMCsGA1UEAxMk YzMwMjU4YmItNWQ2ZS00YTgzLWJjOTgtNzIwYmM3YmZmMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCnfJTioZqT4hu2TizrHqOAsBSwbSOwGQy5o PNLUyvgW659Ja/m4HXiygMcPN0/SELl1YxTEiDbHre1bzD+mHnrkIFGtO7P0n2Bk KqlF3y/ma+P8/ryc1hnXJI53GitYgR3AK1qBhPiZ8NuNk1RYkyNvTT0YI7/i5ETi HkrPaDva+XKXqHA5BB0HBgBxCoHNRX3C/oJLxN+XusRZhQCXzwMT4huzcgBkUeki aERYhIk2XVJAEELnUh1S3lN6sCIhA3nio5kcmxRJwv5paQj4gpfXcXXfwMobhKr0 ErL3eBUh7ByokdnYY7EJYWLfsrap2E60ocKmhT6f0F+8sjWH7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLnrDWxbyfu0GdvfPttFiSaVxGH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvYTI5NWE2OTUtZTkxYS00 YzVhLThhMzEtYTkyMGE0MmVhNDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA091JxS14SPKXOoC1D5n2J B86NZj6fBuKRqVGO4RD+rhDpkEWxLt2pKFez0m57nUbhtbKt+RzQHOSVVf+KZPji tdttFtbChL8yHFmHrrTj4MR2NJ5O8eSUNY1/ysOg6RXqulIIunWWkV0yiSV6g2/N YqOgM8kLevEfaj6bUCL5O1QQWjqo4/vkwNa+eBPTRStxq3iQ7ZW7Go7rcRwcfeB2 In+RlHbSP1LjjfXwMACt8Q0toLC8yEHnd3dag9LV+/q5uKWHS0uxBMl2LHMftqxJ Xpir0UxpNjPrw8ClSfX0bKvqLCG1KIdBpzBg8zq+o8bBDhIkbFiL/t5q2WqVKfTh -----END CERTIFICATE-----Generated at Wed Nov 5 09:55:16 2025 by rpki-client