$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft File: a58da523-4991-493a-95ce-ff1c2b97244a.mft (raw, json) Hash identifier: 6amA+qiGCZ8f+EwDiJpZ8qOn6LfYYlFzb7P3+gRzig4= Subject key identifier: 9D:0D:B7:9F:20:15:EE:73:A6:7B:BE:68:8F:4B:5D:27:3A:C8:23:4A Authority key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Certificate issuer: /CN=a58da523-4991-493a-95ce-ff1c2b97244a Certificate serial: 010D0C9F4328584BC1DB10594F99AC125484BB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft Manifest number: 010D0C9F432858499BF921459E6C07D47C6BD28F Signing time: Wed 05 Nov 2025 09:00:03 +0000 Manifest this update: Wed 05 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: 94b63554-10f5-3368-a9cc-4d31e3421b4f.roa (hash: vOt2SH/FeGBkbgnZ+vpWW/nm4sin2n4LZVFBVhzaHos=) 2: a58da523-4991-493a-95ce-ff1c2b97244a.crl (hash: 3BfSQATO5s4MGgvkRE6usv2a4jUl2kBUD7iqebgJ/w4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:db:10:59:4f:99:ac:12:54:84:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58da523-4991-493a-95ce-ff1c2b97244a Validity Not Before: Nov 5 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=623eea00-573a-4160-af9a-d5e8bfba5a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:2b:67:49:ed:18:d4:5d:b5:44:db:44:de: aa:c0:e3:f0:21:f6:70:4f:bc:81:bd:31:0a:fe:4a: 08:c7:ab:58:53:b8:ad:6b:f9:27:f4:67:42:b6:62: e6:0b:a3:b2:96:f3:17:0c:d9:aa:c2:c9:5e:9c:8c: 04:26:7f:ad:73:99:ba:7e:f4:2a:b8:10:f9:54:d3: c0:0f:a6:c8:2a:47:69:fc:a3:1a:68:9c:03:03:28: cd:a9:c2:bc:c4:66:5b:53:9d:41:b0:67:0a:b3:fc: 7f:4d:ff:19:81:88:fe:6b:cf:9e:c4:8e:37:c4:30: ba:19:94:47:ee:61:70:1e:26:b6:2a:b4:3c:61:cd: 36:b3:55:3d:87:aa:cd:d5:5d:37:f3:f3:74:79:c1: 3e:96:5d:1c:71:85:04:39:73:df:7a:d0:b8:e3:00: a8:22:15:a7:a4:05:2e:eb:55:3f:42:65:d1:9e:25: 28:e0:88:61:48:39:71:81:05:74:a9:d8:01:9d:e3: ed:2e:8c:a6:a2:1d:2d:1d:a6:44:50:39:8f:9e:1b: 37:bd:dc:d0:c6:84:ae:15:75:69:fb:78:6d:06:08: 55:0a:98:29:84:46:76:cd:bb:c2:13:db:29:dd:a5: b6:ff:7d:df:eb:72:b4:d7:fa:27:07:3b:0e:e7:da: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:B7:9F:20:15:EE:73:A6:7B:BE:68:8F:4B:5D:27:3A:C8:23:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl X509v3 Authority Key Identifier: keyid:70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:27:94:82:80:68:4a:8e:e3:3a:b7:04:64:11:c5:ef:30:1e: 60:a0:68:08:9a:cd:d5:e5:5f:7e:5d:64:76:4b:e2:85:b6:2f: 89:34:a4:44:c2:4b:d9:1e:22:f6:8f:11:cb:d4:50:72:fe:43: c4:f1:a9:6a:ec:c4:89:12:9c:a3:19:6d:19:b7:0e:96:79:7d: bf:cd:37:aa:ad:09:da:8d:5e:c0:8d:1c:b6:bf:88:63:cf:ed: 83:b1:e9:55:9f:be:5f:42:28:d4:46:94:3e:99:ac:14:d0:f9: b9:41:ff:97:0a:c8:9e:51:6e:67:b6:f5:32:2e:16:d8:07:de: 5c:01:e6:1c:f9:9b:1b:18:bf:22:ba:95:e0:a8:5e:c8:16:e9: 9f:41:c6:2d:c0:29:66:07:c5:18:ca:ca:0d:6f:3c:71:02:d8: c6:21:40:bf:c5:ac:4a:65:91:88:ce:f7:47:cb:70:da:7b:3d: f4:0c:e6:f2:c3:44:7f:f5:eb:1a:98:50:92:44:62:83:62:4d: fb:7c:7f:77:52:69:0f:4f:cc:0d:84:ed:fc:3f:62:8a:6e:5b: 1d:a5:5a:2f:d0:b8:7d:07:d2:47:45:81:9d:38:76:e2:fb:d7: 3e:0a:5d:56:3d:4a:de:d8:ea:85:aa:5c:1e:bc:52:88:70:ae: 6b:4b:02:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvB2xBZT5msElSEuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcy NDRhMB4XDTI1MTEwNTA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk NjIzZWVhMDAtNTczYS00MTYwLWFmOWEtZDVlOGJmYmE1YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZYrZ0ntGNRdtUTbRN6qwOPwIfZwT7yBvTEK /koIx6tYU7ita/kn9GdCtmLmC6OylvMXDNmqwslenIwEJn+tc5m6fvQquBD5VNPA D6bIKkdp/KMaaJwDAyjNqcK8xGZbU51BsGcKs/x/Tf8ZgYj+a8+exI43xDC6GZRH 7mFwHia2KrQ8Yc02s1U9h6rN1V038/N0ecE+ll0ccYUEOXPfetC44wCoIhWnpAUu 61U/QmXRniUo4IhhSDlxgQV0qdgBnePtLoymoh0tHaZEUDmPnhs3vdzQxoSuFXVp +3htBghVCpgphEZ2zbvCE9sp3aW2/33f63K01/onBzsO59oUgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ0Nt58gFe5zpnu+aI9LXSc6yCNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNThk YTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvYTU4ZGE1MjMtNDk5MS00 OTNhLTk1Y2UtZmYxYzJiOTcyNDRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU4ZGE1MjMtNDk5MS00OTNhLTk1 Y2UtZmYxYzJiOTcyNDRhL2E1OGRhNTIzLTQ5OTEtNDkzYS05NWNlLWZmMWMyYjk3 MjQ0YS5jcmwwHwYDVR0jBBgwFoAUcMxislMRXOoXY0zWR+dAW/NcAgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFj MmI5NzI0NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApJ5SCgGhKjuM6twRkEcXv MB5goGgIms3V5V9+XWR2S+KFti+JNKREwkvZHiL2jxHL1FBy/kPE8alq7MSJEpyj GW0Ztw6WeX2/zTeqrQnajV7AjRy2v4hjz+2DselVn75fQijURpQ+mawU0Pm5Qf+X CsieUW5ntvUyLhbYB95cAeYc+ZsbGL8iupXgqF7IFumfQcYtwClmB8UYysoNbzxx AtjGIUC/xaxKZZGIzvdHy3Daez30DObyw0R/9esamFCSRGKDYk37fH93UmkPT8wN hO38P2KKblsdpVov0Lh9B9JHRYGdOHbi+9c+Cl1WPUre2OqFqlwevFKIcK5rSwIS -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:45 2025 by rpki-client