$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft File: a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json) Hash identifier: bKbE8mjALjv7mFjBr/67TSP5nZ8Wg480ZhAAQumLR5Y= Subject key identifier: EE:12:D1:06:96:1A:20:79:0F:5E:4C:D2:F7:58:CB:D6:75:C7:66:07 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584BC0938216059657D95A8832E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft Manifest number: 010D0C9F432858496598AC39FE13BB942B9EDF9D Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: /T4eh2bliCSbSZMcnAdws45RScjElSctU98gkFNngzg=) 2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: 8yamAoIq992j8jjxdPPInUL1P8ITRzTOC4idBd/WXTE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:82:16:05:96:57:d9:5a:88:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=3c11ae6b-cd52-4a62-b2ed-140fde48318d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:6f:ca:16:b7:94:8d:e3:07:31:53:2f:9d: 63:ad:65:a4:d6:af:f4:d0:b1:8f:a3:44:79:20:a6: ee:28:fc:78:6c:d1:1e:a0:23:8b:1d:45:bf:4a:04: f5:6f:c4:8c:aa:65:67:fd:33:85:19:3a:3d:c4:a3: dd:e4:f5:12:40:af:db:b5:15:f4:c0:f0:40:ad:0b: 4f:d3:ce:4f:d4:d2:9c:e5:59:d3:65:5e:8d:2b:53: c9:ef:f9:9c:2e:77:50:f4:25:77:94:03:64:14:7d: 65:52:9b:05:30:38:fd:27:85:45:a1:41:7d:6a:a6: 1c:b1:b7:50:97:46:59:42:25:00:bc:fd:2b:d6:2a: 39:83:be:5c:28:c6:c9:3e:66:ff:8f:a4:1c:ca:59: fd:4f:95:06:1e:fd:f6:0b:c7:b7:53:7d:cf:96:c7: 20:28:b3:8e:3e:ad:27:a3:29:8a:5f:8f:0d:39:e9: 69:d6:9a:f1:d1:8c:da:90:bb:61:20:58:1b:ca:37: a8:09:be:89:36:9a:08:58:d4:d1:4b:b4:97:3c:de: 0e:e9:bf:d8:4e:df:9d:42:b7:7c:c4:e4:9c:5e:11: 21:c6:a8:63:be:e3:5c:c7:f4:a5:66:18:38:dd:70: 0d:a7:14:4b:bc:9e:d5:11:c0:4b:9f:99:3b:aa:e0: fc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:D1:06:96:1A:20:79:0F:5E:4C:D2:F7:58:CB:D6:75:C7:66:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e0:7d:63:6d:2c:6d:73:1f:1e:c6:07:44:ef:59:a3:a6:68: 6b:8a:01:21:9f:b1:72:82:99:41:06:ff:20:dc:0a:ed:2d:86: 08:fc:83:ad:1c:c4:4a:93:be:fc:2c:cf:67:48:3d:10:fc:a3: 1d:b9:e0:56:a1:71:24:e2:72:0b:50:8d:72:4d:85:2b:fc:51: 31:76:18:4d:f3:2d:ca:d4:13:1d:8c:3d:1c:c9:6a:d7:af:ce: 44:d9:e1:8d:05:9e:2d:5e:fd:6f:55:f8:a8:3e:59:c4:63:6a: c4:3d:7a:6c:6d:07:e5:1f:17:75:ed:fa:c1:94:c3:b5:ef:1e: ab:c1:df:f8:00:e0:97:0c:ad:48:ba:4c:cf:67:6e:f9:f9:49: 61:aa:a2:a7:e4:5b:78:7e:a9:63:b0:8b:82:15:e8:e7:17:ce: d6:a0:1d:fa:f4:d9:37:22:f4:43:61:4d:ca:2b:3a:a3:5c:65: 48:c4:37:25:db:bd:69:7e:17:39:21:8f:cf:0d:d5:9b:b6:b6: 06:38:de:ee:c1:8b:00:ef:40:d5:96:4e:7c:4d:94:29:84:df: 5a:e7:a8:36:cc:25:58:49:82:b4:64:42:4f:45:85:9e:c8:f5: 58:00:38:88:4e:03:e6:80:b4:e4:85:14:22:e1:0b:4c:7a:b9: 59:cd:89:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4IWBZZX2VqIMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk M2MxMWFlNmItY2Q1Mi00YTYyLWIyZWQtMTQwZmRlNDgzMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWhvyha3lI3jBzFTL51jrWWk1q/00LGPo0R5 IKbuKPx4bNEeoCOLHUW/SgT1b8SMqmVn/TOFGTo9xKPd5PUSQK/btRX0wPBArQtP 085P1NKc5VnTZV6NK1PJ7/mcLndQ9CV3lANkFH1lUpsFMDj9J4VFoUF9aqYcsbdQ l0ZZQiUAvP0r1io5g75cKMbJPmb/j6Qcyln9T5UGHv32C8e3U33PlscgKLOOPq0n oymKX48NOelp1prx0YzakLthIFgbyjeoCb6JNpoIWNTRS7SXPN4O6b/YTt+dQrd8 xOScXhEhxqhjvuNcx/SlZhg43XANpxRLvJ7VEcBLn5k7quD8mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO4S0QaWGiB5D15M0vdYy9Z1x2YHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk4N2M0NDYtNWZjMi00 NGIwLTlhNDEtNjUyOTZkOTBkMGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+4H1jbSxtcx8exgdE71mj pmhrigEhn7FygplBBv8g3ArtLYYI/IOtHMRKk778LM9nSD0Q/KMdueBWoXEk4nIL UI1yTYUr/FExdhhN8y3K1BMdjD0cyWrXr85E2eGNBZ4tXv1vVfioPlnEY2rEPXps bQflHxd17frBlMO17x6rwd/4AOCXDK1IukzPZ275+UlhqqKn5Ft4fqljsIuCFejn F87WoB369Nk3IvRDYU3KKzqjXGVIxDcl271pfhc5IY/PDdWbtrYGON7uwYsA70DV lk58TZQphN9a56g2zCVYSYK0ZEJPRYWeyPVYADiITgPmgLTkhRQi4QtMerlZzYnA -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:34 2025 by rpki-client