$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft File: a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft (raw, json) Hash identifier: imUH0xNYnmI4v8nnG3VjSbbgfSZoQsfWokE4aucSclI= Subject key identifier: 52:4A:B5:3F:FB:54:C5:10:12:DB:43:38:A7:C5:58:1E:0B:5A:20:5F Authority key identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 Certificate issuer: /CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4 Certificate serial: 010D0C9F4328584BBFA55341BA57E9CE44FB79C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft Manifest number: 010D0C9F4328584A01129EAE9BDCD4A143BA0964 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Fri 07 Nov 2025 14:00:00 +0000 Files and hashes: 1: 48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa (hash: Lu+82ffdlEhVN6Mkuo3ItVp3j9hm6NPliFoUbUBPpy0=) 2: a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl (hash: g+XgMfaQa6dihIIFnofQeetNTjyXFVQBpAanKjTwI/A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:53:41:ba:57:e9:ce:44:fb:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 7 14:00:00 2025 GMT Subject: CN=7ce68e26-fcb9-435e-bfbc-f500d8cb907e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:85:11:0b:cb:c0:43:29:3b:f9:36:5c:20: 32:2e:9f:97:97:4d:a2:a7:cb:be:33:a5:50:4f:18: 9a:3f:2a:24:77:9b:e1:d1:a0:38:8b:76:48:26:59: f4:97:a3:31:b4:ea:97:a5:1b:07:4e:e1:19:e6:3d: 22:95:e3:59:16:1b:8a:3a:50:1f:0b:df:08:13:8b: e8:b2:31:ec:5d:19:7b:b6:34:91:26:06:c0:65:10: c5:ad:b6:7f:88:a6:5f:a5:d2:ec:71:c0:01:71:97: d0:68:cf:72:e6:4b:77:cd:2c:f2:27:d6:6d:40:f2: 9d:d0:15:c0:f4:10:28:87:6d:06:63:7c:3f:b1:1d: 39:51:fa:f8:7a:02:ce:33:be:c5:38:0f:5f:8a:34: d4:44:fc:df:29:71:4a:17:b7:d4:7f:d5:06:31:37: 36:95:d7:8e:9b:50:e9:0b:0a:6a:6c:a7:ad:0e:59: 6e:82:5f:03:97:56:5f:80:88:3b:9a:1f:b7:0f:eb: 54:80:24:9f:29:4d:99:f1:99:67:8f:5d:42:6f:36: 65:32:56:4c:c8:eb:5f:33:b7:9b:cc:ca:26:35:02: f3:57:34:23:24:db:57:8f:70:56:05:75:74:1e:9c: 85:81:d3:70:32:f5:25:10:6d:1a:ac:f9:ff:68:5b: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:B5:3F:FB:54:C5:10:12:DB:43:38:A7:C5:58:1E:0B:5A:20:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl X509v3 Authority Key Identifier: keyid:2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4a:2e:6f:0b:a5:15:36:53:69:2a:42:54:40:9a:3b:ed:35: 6a:a1:3e:b2:16:ab:e0:31:61:bf:6f:4b:77:6b:d9:f2:e8:9c: d1:2b:28:6f:20:8d:fb:fe:7f:9b:14:ee:1a:8b:9f:87:2b:df: d6:65:bf:08:68:27:f0:bf:33:53:22:16:a9:8b:58:ee:3d:a5: 89:d0:b2:16:fc:a7:3e:0a:e2:d7:2a:5c:a7:12:c9:09:9a:30: 6b:c7:82:a1:ed:56:ee:d1:ce:a1:37:49:d8:5d:2d:02:e4:03: ce:3f:04:5d:2e:b9:55:39:d2:df:9f:24:7a:32:70:e2:19:db: dc:65:ac:7b:c6:6c:e3:1c:3d:cc:70:d5:e7:c8:b6:90:12:3d: 9b:30:fa:c7:85:34:8f:cd:83:01:54:f6:07:e4:d7:41:07:74: 2f:2a:a7:8b:e0:ca:f0:08:81:f7:6b:82:eb:4f:28:bf:bf:e8: 6c:58:ff:6d:4f:22:66:e6:e7:dc:8a:d8:a4:01:37:f3:5b:b9: 3f:43:c8:97:21:b5:25:f3:1d:31:8f:cd:f6:86:6b:86:8f:7b: b1:1c:6c:af:58:bb:a0:b4:38:09:93:ff:d1:18:74:73:99:8a: ff:8b:25:c1:80:8c:51:72:c4:0a:2e:47:a9:74:cb:07:74:2e: fd:99:ca:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVNBulfpzkT7ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhMzJkZWItMzE0Zi00YTFmLTk4ZWMtMWI2M2I4ZDMx YWQ0MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk N2NlNjhlMjYtZmNiOS00MzVlLWJmYmMtZjUwMGQ4Y2I5MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KWFEQvLwEMpO/k2XCAyLp+Xl02ip8u+M6VQ TxiaPyokd5vh0aA4i3ZIJln0l6MxtOqXpRsHTuEZ5j0ileNZFhuKOlAfC98IE4vo sjHsXRl7tjSRJgbAZRDFrbZ/iKZfpdLsccABcZfQaM9y5kt3zSzyJ9ZtQPKd0BXA 9BAoh20GY3w/sR05Ufr4egLOM77FOA9fijTURPzfKXFKF7fUf9UGMTc2ldeOm1Dp CwpqbKetDllugl8Dl1ZfgIg7mh+3D+tUgCSfKU2Z8Zlnj11CbzZlMlZMyOtfM7eb zMomNQLzVzQjJNtXj3BWBXV0HpyFgdNwMvUlEG0arPn/aFuRdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFJKtT/7VMUQEttDOKfFWB4LWiBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOWEz MmRlYi0zMTRmLTRhMWYtOThlYy0xYjYzYjhkMzFhZDQvYTlhMzJkZWItMzE0Zi00 YTFmLTk4ZWMtMWI2M2I4ZDMxYWQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTlhMzJkZWItMzE0Zi00YTFmLTk4 ZWMtMWI2M2I4ZDMxYWQ0L2E5YTMyZGViLTMxNGYtNGExZi05OGVjLTFiNjNiOGQz MWFkNC5jcmwwHwYDVR0jBBgwFoAULl4d7BW18qiSBpYEqA6Dzj1/WhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOWEzMmRlYi0zMTRmLTRhMWYtOThlYy0xYjYz YjhkMzFhZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmSi5vC6UVNlNpKkJUQJo7 7TVqoT6yFqvgMWG/b0t3a9ny6JzRKyhvII37/n+bFO4ai5+HK9/WZb8IaCfwvzNT Ihapi1juPaWJ0LIW/Kc+CuLXKlynEskJmjBrx4Kh7Vbu0c6hN0nYXS0C5APOPwRd LrlVOdLfnyR6MnDiGdvcZax7xmzjHD3McNXnyLaQEj2bMPrHhTSPzYMBVPYH5NdB B3QvKqeL4MrwCIH3a4LrTyi/v+hsWP9tTyJm5ufcitikATfzW7k/Q8iXIbUl8x0x j832hmuGj3uxHGyvWLugtDgJk//RGHRzmYr/iyXBgIxRcsQKLkepdMsHdC79mcr8 -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:53 2025 by rpki-client