$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft File: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft (raw, json) Hash identifier: Cozv3EMw6dDSioYLQHWYc5UJulCCQj4QqROExiK80F4= Subject key identifier: F0:53:40:2A:3C:E0:00:B9:DA:36:CE:8A:9C:B4:07:ED:B3:99:9F:69 Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Certificate issuer: /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Certificate serial: 010D0C9F4328584BBF887EC100847DA1A5146C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft Manifest number: 010D0C9F4328584A1A12077C4B595F510F327C59 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl (hash: DaZociAyEi7rwLrelCJmWglCykLWGB2eF4Mawps4P58=) 2: c5f99082-735a-3bc4-848d-adbcd08fa635.roa (hash: gR7/QKIaUxS6KR01Im955c6HdSpnIIDk30Ag0R6UBQM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7e:c1:00:84:7d:a1:a5:14:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=8e7c12e5-d412-4cba-9cc5-827ee581953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:e6:97:00:ca:08:73:40:91:f7:b7:09:87: c0:3e:1d:ec:89:bc:5c:12:20:f4:10:e0:7c:fd:ee: b0:d2:25:c0:a1:10:17:a3:4f:2b:1c:89:65:3b:5b: fb:d5:f8:83:f5:c8:a5:b5:96:f5:e2:40:dc:92:45: 3f:fe:26:b7:20:16:58:02:b1:4f:71:2d:7a:56:46: 4d:ff:fc:99:4a:17:16:9d:28:30:d1:19:b6:c9:05: 1e:ef:0b:0e:d7:96:62:9e:f2:7d:30:7e:7a:04:70: 33:d7:da:5a:a4:37:9d:2b:58:28:47:a7:e1:c6:03: 94:3c:21:a0:db:14:62:89:1f:e6:3e:0e:bc:97:5f: 49:4a:7a:04:e7:5a:d5:5e:05:cf:3c:ce:c3:e4:63: 7d:e2:f0:b2:cc:a2:c5:ca:2b:ee:a3:e6:90:7c:48: f2:3b:5d:6b:cb:89:72:82:d9:a8:1f:01:04:11:56: 0f:bb:38:d0:6f:6b:af:29:d7:78:3d:40:bb:78:45: 6b:2e:df:13:70:4c:b8:54:a3:42:b2:a2:36:e1:ce: fc:f4:6d:8f:4e:20:ef:46:94:82:99:68:7a:a6:14: 75:95:ab:8a:1a:55:33:3c:52:48:2e:cd:75:b4:23: 84:57:f7:6a:de:4d:83:07:d3:6e:46:f8:da:17:b0: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:53:40:2A:3C:E0:00:B9:DA:36:CE:8A:9C:B4:07:ED:B3:99:9F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl X509v3 Authority Key Identifier: keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0f:dc:24:07:ac:49:b3:5d:bb:92:07:7d:13:64:c8:58:63: 86:b9:f3:dd:6d:8a:26:41:12:64:7a:72:7f:47:83:e0:85:3c: e3:58:b6:ab:18:f2:b5:63:e9:86:19:f7:73:33:c3:a3:10:86: 94:80:d3:27:df:ec:a7:a8:86:79:ca:c1:bd:99:02:be:c2:ea: 77:a7:d6:f4:38:aa:0a:57:c5:31:2c:00:69:46:06:01:72:93: 44:9d:23:a1:d7:35:57:05:c0:4a:74:2f:8a:bd:11:fd:6f:12: 04:b4:83:a4:b1:70:ee:b2:e8:cd:2f:98:23:f4:05:d9:91:f1: 72:a5:cf:01:4f:e2:81:14:dc:d3:57:b4:24:5b:98:0b:5e:20: f8:5d:7a:cd:bf:c0:e7:29:2a:b3:be:51:9d:ed:9e:ad:e7:9e: 85:61:25:30:b4:ad:7c:ee:64:9e:f2:8d:74:c7:d0:0c:c9:94: d6:aa:ec:00:35:fe:f5:96:00:e5:d0:b8:7c:c2:f1:11:be:92: 9d:c0:21:80:1d:73:19:97:8c:e9:35:6a:0f:83:1d:81:b2:5e: e7:92:85:45:81:1b:03:08:be:85:cf:d3:ec:02:2a:6f:7d:ab: e5:09:7c:b5:71:16:df:3c:0a:cf:b4:9b:64:cf:ac:b1:d2:a1: 55:88:68:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH7BAIR9oaUUbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1 ZmY4MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk OGU3YzEyZTUtZDQxMi00Y2JhLTljYzUtODI3ZWU1ODE5NTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqfmlwDKCHNAkfe3CYfAPh3sibxcEiD0EOB8 /e6w0iXAoRAXo08rHIllO1v71fiD9ciltZb14kDckkU//ia3IBZYArFPcS16VkZN //yZShcWnSgw0Rm2yQUe7wsO15ZinvJ9MH56BHAz19papDedK1goR6fhxgOUPCGg 2xRiiR/mPg68l19JSnoE51rVXgXPPM7D5GN94vCyzKLFyivuo+aQfEjyO11ry4ly gtmoHwEEEVYPuzjQb2uvKdd4PUC7eEVrLt8TcEy4VKNCsqI24c789G2PTiDvRpSC mWh6phR1lauKGlUzPFJILs11tCOEV/dq3k2DB9NuRvjaF7BzCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPBTQCo84AC52jbOipy0B+2zmZ9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYy ZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvYTRmMmYxYTctMDdlNS00 MmY4LWIxYWEtMWUyZTk1YTY1ZmY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRmMmYxYTctMDdlNS00MmY4LWIx YWEtMWUyZTk1YTY1ZmY4L2E0ZjJmMWE3LTA3ZTUtNDJmOC1iMWFhLTFlMmU5NWE2 NWZmOC5jcmwwHwYDVR0jBBgwFoAU1qWC4Tn6LXUH223MkamWkgxxO64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJl OTVhNjVmZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWD9wkB6xJs127kgd9E2TI WGOGufPdbYomQRJkenJ/R4PghTzjWLarGPK1Y+mGGfdzM8OjEIaUgNMn3+ynqIZ5 ysG9mQK+wup3p9b0OKoKV8UxLABpRgYBcpNEnSOh1zVXBcBKdC+KvRH9bxIEtIOk sXDusujNL5gj9AXZkfFypc8BT+KBFNzTV7QkW5gLXiD4XXrNv8DnKSqzvlGd7Z6t 556FYSUwtK187mSe8o10x9AMyZTWquwANf71lgDl0Lh8wvERvpKdwCGAHXMZl4zp NWoPgx2Bsl7nkoVFgRsDCL6Fz9PsAipvfavlCXy1cRbfPArPtJtkz6yx0qFViGh2 -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:58 2025 by rpki-client