$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.mft File: eab20ab2-0bb0-40f1-b861-843a84fe42fa.mft (raw, json) Hash identifier: uQXHwyjqSu15S8A3NZ1su1GzcJnOBfn7B2tFGDgglRw= Subject key identifier: 5D:07:3A:73:84:76:BD:BF:21:5B:66:0B:D0:EC:F0:B4:E8:45:50:9B Authority key identifier: AD:2F:B3:1A:8C:35:DB:8C:AE:4B:E4:F6:FE:5B:6F:66:59:E5:21:6D Certificate issuer: /CN=eab20ab2-0bb0-40f1-b861-843a84fe42fa Certificate serial: 010D0C9F4328584BC03A2FBB0CC953B17CD86D60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.mft Manifest number: 010D0C9F4328584A2E4B8269EB9E18C712314093 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: c5244d5b-3acf-3b16-bbcf-143674499c22.roa (hash: +Ed7fiFBUXqtGfzC/4l9v7GOLnizej74XzCoQsEAX20=) 2: eab20ab2-0bb0-40f1-b861-843a84fe42fa.crl (hash: xJ+BtZme65CHKlcfjk3B4fCwj7tzuPo5O7yuN0ld9bM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2f:bb:0c:c9:53:b1:7c:d8:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab20ab2-0bb0-40f1-b861-843a84fe42fa Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=965f9a01-de24-4e6d-b3b8-edc942a730d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:20:b2:94:37:66:7c:2f:68:5d:57:85:9f: be:6e:8a:97:5a:be:e2:78:fc:d4:92:eb:d4:62:c9: e4:93:ee:1a:b3:cf:f5:f9:c7:a5:37:a0:48:16:51: 64:50:d6:84:30:d0:e9:be:45:2e:88:ba:38:3d:73: 5b:e7:66:b4:fd:0d:21:2d:7c:f1:da:8a:b1:d1:96: d3:3b:e3:b7:ce:a2:ef:6a:d3:35:5b:77:b3:6d:bf: 1f:62:fd:b3:df:9b:84:e9:bd:a1:46:fb:ec:e9:0d: 72:7a:02:6f:59:36:be:6f:ac:64:58:aa:4c:f4:ca: be:42:2a:a9:cf:f9:51:8c:fd:5f:ed:fd:1c:77:dc: c9:dc:30:ca:ac:96:72:22:a3:15:59:9b:9f:7b:8a: 25:62:72:5e:7b:2d:eb:19:3c:f4:99:f2:d3:c8:99: 51:91:2c:de:7f:8f:66:ee:86:89:d2:f0:10:3f:d8: d3:0a:0b:0c:54:bf:3e:c0:12:74:3b:4e:2e:05:95: 0c:d3:40:f2:c2:53:bf:22:30:1c:33:65:01:74:fa: 86:41:cb:8c:e9:78:b8:74:e1:4b:1b:93:2b:04:59: 50:d8:cd:ad:83:b3:d8:fb:a0:bf:2e:65:79:41:5b: 3b:aa:27:ed:89:02:3d:1c:d3:68:3a:80:1b:56:82: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:07:3A:73:84:76:BD:BF:21:5B:66:0B:D0:EC:F0:B4:E8:45:50:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.crl X509v3 Authority Key Identifier: keyid:AD:2F:B3:1A:8C:35:DB:8C:AE:4B:E4:F6:FE:5B:6F:66:59:E5:21:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:70:6f:e9:a2:5e:c4:2b:49:5a:c9:fb:f1:9b:ba:89:43:73: ae:be:db:71:1e:88:f7:93:d4:3b:bb:23:1a:f2:73:43:f2:00: 73:86:dd:25:cf:f5:64:98:a9:3d:65:ef:7a:17:9f:9c:8d:6d: 50:ed:81:06:bc:24:ac:c0:83:a6:c6:d3:55:2e:cd:fc:d1:da: 9d:ca:09:9d:4a:56:df:38:47:e2:88:65:b4:9d:05:88:92:63: ef:a0:53:7f:13:df:ac:cb:36:18:70:e2:db:36:ab:32:58:78: ec:20:34:37:52:48:71:bd:52:d7:e9:33:1a:8e:c4:a3:ff:36: 6a:16:fb:f0:63:74:db:65:04:b9:93:00:85:34:10:0b:8b:87: 6e:54:2d:03:0c:14:3b:d1:0e:bf:ae:b8:81:2d:7d:79:eb:fb: 07:6d:50:f3:ab:71:15:2f:1a:fd:f4:53:88:94:ee:10:58:ce: 77:52:59:cc:16:37:e0:a6:8f:53:fb:07:15:21:47:e9:79:9d: 5f:af:08:08:5e:54:2b:9e:12:48:04:74:d6:b4:10:4c:59:f5: 5d:6f:f5:29:0b:d7:26:21:ed:a4:10:df:e7:1e:93:a7:80:e9: c6:7e:98:ec:31:fc:0c:38:25:2b:ee:59:6e:54:81:0c:8b:70: 8c:38:31:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi+7DMlTsXzYbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFiMjBhYjItMGJiMC00MGYxLWI4NjEtODQzYTg0ZmU0 MmZhMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk OTY1ZjlhMDEtZGUyNC00ZTZkLWIzYjgtZWRjOTQyYTczMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOIgspQ3ZnwvaF1XhZ++boqXWr7iePzUkuvU Ysnkk+4as8/1+celN6BIFlFkUNaEMNDpvkUuiLo4PXNb52a0/Q0hLXzx2oqx0ZbT O+O3zqLvatM1W3ezbb8fYv2z35uE6b2hRvvs6Q1yegJvWTa+b6xkWKpM9Mq+Qiqp z/lRjP1f7f0cd9zJ3DDKrJZyIqMVWZufe4olYnJeey3rGTz0mfLTyJlRkSzef49m 7oaJ0vAQP9jTCgsMVL8+wBJ0O04uBZUM00DywlO/IjAcM2UBdPqGQcuM6Xi4dOFL G5MrBFlQ2M2tg7PY+6C/LmV5QVs7qiftiQI9HNNoOoAbVoLq5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF0HOnOEdr2/IVtmC9Ds8LToRVCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYWIy MGFiMi0wYmIwLTQwZjEtYjg2MS04NDNhODRmZTQyZmEvZWFiMjBhYjItMGJiMC00 MGYxLWI4NjEtODQzYTg0ZmU0MmZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWFiMjBhYjItMGJiMC00MGYxLWI4 NjEtODQzYTg0ZmU0MmZhL2VhYjIwYWIyLTBiYjAtNDBmMS1iODYxLTg0M2E4NGZl NDJmYS5jcmwwHwYDVR0jBBgwFoAUrS+zGow124yuS+T2/ltvZlnlIW0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYWIyMGFiMi0wYmIwLTQwZjEtYjg2MS04NDNh ODRmZTQyZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCecG/pol7EK0layfvxm7qJ Q3OuvttxHoj3k9Q7uyMa8nND8gBzht0lz/VkmKk9Ze96F5+cjW1Q7YEGvCSswIOm xtNVLs380dqdygmdSlbfOEfiiGW0nQWIkmPvoFN/E9+syzYYcOLbNqsyWHjsIDQ3 UkhxvVLX6TMajsSj/zZqFvvwY3TbZQS5kwCFNBALi4duVC0DDBQ70Q6/rriBLX15 6/sHbVDzq3EVLxr99FOIlO4QWM53UlnMFjfgpo9T+wcVIUfpeZ1frwgIXlQrnhJI BHTWtBBMWfVdb/UpC9cmIe2kEN/nHpOngOnGfpjsMfwMOCUr7lluVIEMi3CMODGw -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:34 2025 by rpki-client