$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft File: c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft (raw, json) Hash identifier: 5h3l2ufn7mM7Tck0lFjEgcUM22x2umF0rnlnIBlpw98= Subject key identifier: 0B:C1:DE:FF:4E:08:F0:A4:41:72:44:C0:73:DC:3B:55:19:82:8F:D7 Authority key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Certificate issuer: /CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Certificate serial: 010D0C9F4328584BC01C68F85292F4C864D3AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft Manifest number: 010D0C9F4328584A17DA3FA749DC24C8808F305C Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 8d95541a-b336-3100-a13d-7931c32d52f2.roa (hash: bZq8qGeooC6wxYP0zm/erKPtPD7ibdK1lCa57JQnMyk=) 2: c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl (hash: FwYvp0EbjBASbPAekhwsUpdL75JysjR+hcEibbMdRP0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:68:f8:52:92:f4:c8:64:d3:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=874b187e-3ef9-4050-94da-fe34c56ca2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:42:bf:aa:fb:61:87:61:b7:d9:0a:6d:f6: fd:01:e6:d3:de:0d:90:10:a5:8a:04:b6:2c:44:7d: cd:df:1b:d4:21:3a:d9:2f:c8:33:fb:46:89:1d:17: b5:92:e1:29:9e:82:8e:07:f4:a0:d0:60:cb:62:15: 90:f5:03:e8:9c:6c:54:7a:f1:7d:12:10:6f:8c:df: 9b:29:e9:54:ee:9b:96:1d:f3:6c:e3:ab:c7:8b:73: 08:05:75:5a:ce:a9:15:aa:a5:28:41:38:23:58:3f: 65:42:ac:5b:3d:1d:a8:8a:ca:13:a0:c4:a7:cd:16: b7:3e:ce:e0:d5:a6:e9:e8:2f:68:ec:a3:56:f0:cd: 98:30:da:49:b9:03:ad:b1:03:b3:6d:0f:6d:68:b6: 00:32:ec:77:2c:34:23:31:b5:81:d1:59:9c:d0:a8: 61:ae:f3:15:75:a8:50:53:d5:6d:ef:ca:af:6c:09: 4c:1d:11:6e:05:f2:14:c4:e4:15:9e:79:e7:d8:39: 0a:63:84:66:84:4f:e0:6f:4e:06:eb:34:b3:85:96: 54:88:c2:ee:10:e1:cb:d0:a5:d3:e4:fb:a9:b6:2a: 31:48:4e:8d:c4:b5:14:48:a8:5c:47:42:80:b2:45: 5d:ca:9f:b1:11:ca:3f:17:77:6c:21:10:74:57:45: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:DE:FF:4E:08:F0:A4:41:72:44:C0:73:DC:3B:55:19:82:8F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl X509v3 Authority Key Identifier: keyid:02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:55:62:b6:48:e3:26:b4:03:0b:7f:17:7e:72:84:8e:28:07: 5f:79:38:2a:83:c0:3d:8d:53:a7:84:5a:55:1b:da:4d:d7:aa: 42:73:07:98:48:37:c9:33:ac:b8:7a:1d:97:c7:bc:71:7e:34: 90:e0:a3:d5:91:f1:b0:81:70:9e:54:fc:96:b6:43:b8:17:f5: 57:c9:41:ac:28:74:aa:ad:06:2e:ae:bc:c5:d1:03:a7:53:1c: 03:3b:7a:95:85:e3:ec:83:2c:af:1c:42:e0:16:eb:6f:b3:86: 38:f9:87:c8:25:f0:a2:d6:b7:ce:cd:e5:53:7e:16:68:57:3a: 13:13:ef:be:09:92:87:e3:30:98:62:a5:5d:ed:76:1c:8f:68: 9b:77:8d:b6:9d:ed:0f:f7:a9:c5:86:20:9c:ed:c3:1e:70:fd: 0b:8b:56:2e:a8:cb:e4:b6:6f:19:7b:3d:fe:ff:3a:f1:c6:03: 8c:e6:24:99:00:09:c2:27:5f:1e:50:14:0c:d6:63:82:84:e7: f7:4c:12:c1:eb:12:e0:7b:7b:64:83:8d:69:20:8a:59:1c:27: e3:0e:42:73:ff:de:c0:e3:36:9c:a3:a5:7a:65:3b:12:dc:4e: 09:e6:ff:74:41:d1:f6:cf:88:cf:93:4b:47:ef:58:7b:68:e9: 43:a0:3b:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGj4UpL0yGTTrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhZWE3ZTItZTM4MC00NTU5LTlmZjMtNGZjNzEzOGM0 MzVlMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ODc0YjE4N2UtM2VmOS00MDUwLTk0ZGEtZmUzNGM1NmNhMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H1Cv6r7YYdht9kKbfb9AebT3g2QEKWKBLYs RH3N3xvUITrZL8gz+0aJHRe1kuEpnoKOB/Sg0GDLYhWQ9QPonGxUevF9EhBvjN+b KelU7puWHfNs46vHi3MIBXVazqkVqqUoQTgjWD9lQqxbPR2oisoToMSnzRa3Ps7g 1abp6C9o7KNW8M2YMNpJuQOtsQOzbQ9taLYAMux3LDQjMbWB0Vmc0KhhrvMVdahQ U9Vt78qvbAlMHRFuBfIUxOQVnnnn2DkKY4RmhE/gb04G6zSzhZZUiMLuEOHL0KXT 5PuptioxSE6NxLUUSKhcR0KAskVdyp+xEco/F3dsIRB0V0XYCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAvB3v9OCPCkQXJEwHPcO1UZgo/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jN2Fl YTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4YzQzNWUvYzdhZWE3ZTItZTM4MC00 NTU5LTlmZjMtNGZjNzEzOGM0MzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzdhZWE3ZTItZTM4MC00NTU5LTlm ZjMtNGZjNzEzOGM0MzVlL2M3YWVhN2UyLWUzODAtNDU1OS05ZmYzLTRmYzcxMzhj NDM1ZS5jcmwwHwYDVR0jBBgwFoAUAueJuYYj4tMp8jV4mdgRxdPaCpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jN2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3 MTM4YzQzNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGVWK2SOMmtAMLfxd+coSO KAdfeTgqg8A9jVOnhFpVG9pN16pCcweYSDfJM6y4eh2Xx7xxfjSQ4KPVkfGwgXCe VPyWtkO4F/VXyUGsKHSqrQYurrzF0QOnUxwDO3qVhePsgyyvHELgFutvs4Y4+YfI JfCi1rfOzeVTfhZoVzoTE+++CZKH4zCYYqVd7XYcj2ibd422ne0P96nFhiCc7cMe cP0Li1YuqMvktm8Zez3+/zrxxgOM5iSZAAnCJ18eUBQM1mOChOf3TBLB6xLge3tk g41pIIpZHCfjDkJz/97A4zaco6V6ZTsS3E4J5v90QdH2z4jPk0tH71h7aOlDoDuT -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:05 2025 by rpki-client