$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft File: eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft (raw, json) Hash identifier: 6E42lOZyxOgF/1eYyS1vQ6M/5lapKtgNrJpgpi1mpsU= Subject key identifier: 44:81:7E:D8:8A:8E:51:06:F7:96:C8:1A:B5:B3:58:3F:F0:86:A0:2B Authority key identifier: 75:79:D8:A3:21:32:CD:A0:94:AC:F3:82:5F:D4:DB:B5:2C:AB:04:74 Certificate issuer: /CN=eb1de40c-bc28-46a6-9184-ddc5da1f27e3 Certificate serial: 010D0C9F4328584BBFC30EB5AC8F94E751398400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft Manifest number: 010D0C9F43285849FE57D2D5EE8E30D97DA6A724 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 3e86747e-23fd-3785-8c51-9574326f4849.roa (hash: phQQbLTr2F3ZCL7ptSHoC+ZHyq1dCkJZW9+qKCPjmi4=) 2: eb1de40c-bc28-46a6-9184-ddc5da1f27e3.crl (hash: y6lo23PPE1nCGateyTokYPScmMGIw3D5k4JDo2FA3m0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0e:b5:ac:8f:94:e7:51:39:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1de40c-bc28-46a6-9184-ddc5da1f27e3 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=cfe3c3f2-d558-4898-895d-4fced2f3b1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:d9:f9:04:58:66:e4:da:72:6a:05:db:16: e8:24:e1:37:82:ca:71:5f:97:5f:54:7c:33:ce:96: 17:1c:90:27:3c:0d:b4:eb:c0:18:4b:0d:c1:c4:d4: 50:25:7a:9e:9f:b8:4c:a3:a8:d6:bf:49:33:5f:07: 27:13:5c:83:a1:8f:39:1a:cd:ad:f0:e4:76:f0:e1: 8c:c7:f2:f0:04:30:16:d4:00:7b:5c:f6:d6:e4:66: ed:9f:7f:de:fb:d3:98:f5:9c:e4:7a:2a:0b:bd:c6: 22:af:95:91:34:b3:60:7e:dc:2a:c7:3f:e3:a2:61: 81:e0:68:1a:41:4c:26:9e:48:81:67:31:37:87:7b: 00:97:14:9b:e7:b3:59:95:2f:6f:82:75:ad:cc:15: 30:23:9a:8e:4f:91:cc:73:c4:1b:45:4c:14:f3:95: d5:61:b2:2c:32:72:6a:14:93:6c:27:73:0f:95:c5: 2d:80:6e:33:95:b6:27:59:52:0a:ec:31:5b:cd:9b: fe:53:aa:06:7e:6f:d6:5a:4b:c9:5b:27:9f:36:d5: 7f:e0:80:f0:f9:b0:fa:84:0f:4d:44:5b:29:d6:18: d7:fb:cc:66:72:d2:dd:8e:2a:74:7d:1d:4f:26:f2: 0b:07:84:f5:42:24:b1:12:a4:38:6a:34:86:0a:a3: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:81:7E:D8:8A:8E:51:06:F7:96:C8:1A:B5:B3:58:3F:F0:86:A0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.crl X509v3 Authority Key Identifier: keyid:75:79:D8:A3:21:32:CD:A0:94:AC:F3:82:5F:D4:DB:B5:2C:AB:04:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ae:a8:93:3d:5c:38:18:f1:ee:fe:d9:7b:a2:25:ff:81:6a: c9:84:28:94:b6:0f:fd:59:4c:ce:1d:5a:49:f7:68:6e:2e:27: ba:ab:9a:db:40:12:0f:62:29:04:69:20:43:72:e3:08:58:74: c6:fd:bd:4d:b1:b7:8a:da:f2:5c:bc:b7:72:fb:7b:e4:33:bb: 82:53:96:23:a7:29:77:7d:2f:85:32:89:c9:a7:00:a2:60:85: b2:bd:0c:80:e3:6f:93:77:15:77:11:49:77:67:04:e9:51:a5: 1a:43:2f:de:67:c2:48:52:90:64:52:91:ba:81:16:25:07:ef: b8:9a:6b:e8:cf:a9:de:a6:07:36:eb:95:70:8b:85:76:37:cb: 6e:76:84:1f:7b:e8:8b:99:49:ce:ea:bb:d4:04:83:bc:33:50: a8:a0:f9:9b:4f:e2:75:da:ee:af:5b:b6:97:ac:24:9b:22:59: a4:5b:4e:99:b7:f1:4b:75:dc:4a:b1:27:f5:78:9f:b9:f0:79: 2e:00:18:99:8e:b1:8b:39:0c:d5:4b:40:f3:ad:b1:46:42:3e: b3:35:f1:fb:8e:47:b8:40:20:a9:3e:de:43:99:e2:1c:38:16: 25:7a:99:37:48:90:89:a0:6a:78:36:db:d6:42:24:74:b4:b6: dc:6a:81:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww61rI+U51E5hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxZGU0MGMtYmMyOC00NmE2LTkxODQtZGRjNWRhMWYy N2UzMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk Y2ZlM2MzZjItZDU1OC00ODk4LTg5NWQtNGZjZWQyZjNiMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZLZ+QRYZuTacmoF2xboJOE3gspxX5dfVHwz zpYXHJAnPA2068AYSw3BxNRQJXqen7hMo6jWv0kzXwcnE1yDoY85Gs2t8OR28OGM x/LwBDAW1AB7XPbW5Gbtn3/e+9OY9ZzkeioLvcYir5WRNLNgftwqxz/jomGB4Gga QUwmnkiBZzE3h3sAlxSb57NZlS9vgnWtzBUwI5qOT5HMc8QbRUwU85XVYbIsMnJq FJNsJ3MPlcUtgG4zlbYnWVIK7DFbzZv+U6oGfm/WWkvJWyefNtV/4IDw+bD6hA9N RFsp1hjX+8xmctLdjip0fR1PJvILB4T1QiSxEqQ4ajSGCqM71QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFESBftiKjlEG95bIGrWzWD/whqArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYjFk ZTQwYy1iYzI4LTQ2YTYtOTE4NC1kZGM1ZGExZjI3ZTMvZWIxZGU0MGMtYmMyOC00 NmE2LTkxODQtZGRjNWRhMWYyN2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWIxZGU0MGMtYmMyOC00NmE2LTkx ODQtZGRjNWRhMWYyN2UzL2ViMWRlNDBjLWJjMjgtNDZhNi05MTg0LWRkYzVkYTFm MjdlMy5jcmwwHwYDVR0jBBgwFoAUdXnYoyEyzaCUrPOCX9TbtSyrBHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYjFkZTQwYy1iYzI4LTQ2YTYtOTE4NC1kZGM1 ZGExZjI3ZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmrqiTPVw4GPHu/tl7oiX/ gWrJhCiUtg/9WUzOHVpJ92huLie6q5rbQBIPYikEaSBDcuMIWHTG/b1NsbeK2vJc vLdy+3vkM7uCU5Yjpyl3fS+FMonJpwCiYIWyvQyA42+TdxV3EUl3ZwTpUaUaQy/e Z8JIUpBkUpG6gRYlB++4mmvoz6nepgc265Vwi4V2N8tudoQfe+iLmUnO6rvUBIO8 M1CooPmbT+J12u6vW7aXrCSbIlmkW06Zt/FLddxKsSf1eJ+58HkuABiZjrGLOQzV S0DzrbFGQj6zNfH7jke4QCCpPt5DmeIcOBYlepk3SJCJoGp4NtvWQiR0tLbcaoHF -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:43 2025 by rpki-client