$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.mft File: f1bee768-3970-42c5-ad86-94ca59e8551b.mft (raw, json) Hash identifier: P+Takb7S9Whi2DewaBDghvi/I7/vFCIDidVfQ1MGBjM= Subject key identifier: CD:A0:00:9E:EC:C4:1C:64:42:62:8B:62:F7:89:60:71:77:01:4F:E0 Authority key identifier: D5:B8:13:E0:57:CC:78:37:73:98:C7:36:CF:1F:2E:69:4D:13:7C:B8 Certificate issuer: /CN=f1bee768-3970-42c5-ad86-94ca59e8551b Certificate serial: 010D0C9F4328584BBFFEA6429114F87A55AB8728 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.mft Manifest number: 010D0C9F43285849F09DFE9D4CEBBE95430605CA Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 9eb732f0-7dc2-3772-922b-327d51ae0a05.roa (hash: jdrPVvCV02IDeRPd0Dl9u2UT3hb44p+YaDdalz38cc4=) 2: f1bee768-3970-42c5-ad86-94ca59e8551b.crl (hash: yTLHO8yVOfwgfJFVEcoVUbcdINeaZRS8qADsfXOScu0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a6:42:91:14:f8:7a:55:ab:87:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bee768-3970-42c5-ad86-94ca59e8551b Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=1e8d3185-583e-41fd-b242-6c874242178c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:8b:99:32:dd:a7:92:81:1f:fa:38:33:f2: fa:2b:27:06:3f:bd:55:ef:64:f3:09:5c:05:90:c1: b4:00:15:11:5f:3f:19:75:ea:50:f1:dc:0d:2d:fe: 69:62:5d:5f:ad:cd:9c:f1:27:89:14:e1:48:ed:d0: 26:a7:a1:0a:6c:ac:12:ca:23:0e:ac:a9:f6:23:bc: 04:cb:ad:e3:6b:51:64:78:91:1d:7e:96:db:01:98: b1:2b:13:be:a7:43:74:cc:b9:5e:33:8d:7f:16:31: cd:86:4e:bd:85:79:3f:21:aa:de:74:dc:9d:94:9a: fc:96:57:e9:85:0b:eb:6c:7b:71:4f:8a:8d:37:08: aa:ed:c7:71:92:24:dc:44:d8:dc:91:19:e0:d0:83: a0:9e:65:2c:f3:53:89:ee:1c:42:f3:8b:a8:0c:82: cd:4a:5b:dd:b5:d5:24:00:ff:38:96:f8:f6:ec:ed: e7:75:af:90:d8:52:dc:ca:51:d1:de:60:c4:e8:e6: 8f:6d:22:7a:97:25:1c:bd:be:12:7d:ff:f6:e0:52: 77:5f:eb:c4:f2:15:b9:7f:18:c1:b4:7d:1b:26:69: 70:10:60:c4:e4:f0:e2:4e:0a:83:ae:d3:3e:98:2d: 52:50:8b:c4:ce:92:64:39:2f:68:b7:54:27:62:9b: 08:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A0:00:9E:EC:C4:1C:64:42:62:8B:62:F7:89:60:71:77:01:4F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.crl X509v3 Authority Key Identifier: keyid:D5:B8:13:E0:57:CC:78:37:73:98:C7:36:CF:1F:2E:69:4D:13:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:da:09:71:a8:7a:a2:94:db:74:5f:9a:aa:1e:ee:df:18:48: 50:a4:bb:f0:ec:b2:56:d9:b8:1d:64:45:e5:d1:4a:82:3e:0d: 20:1f:0c:2f:c6:2b:db:c0:35:60:4d:f0:5f:63:b7:59:a7:d8: bd:df:68:a6:bc:fe:ea:58:e9:50:32:27:86:1b:04:86:10:c8: 74:17:e0:83:84:c8:a8:be:58:40:7f:76:52:fd:41:59:62:5f: 9b:bd:e6:a5:87:96:7f:fe:8a:50:50:60:5b:0e:a7:ef:8e:dc: 66:b1:f0:4d:a1:a0:9c:70:4f:88:bb:3d:1d:d0:74:b3:a5:a4: 6a:b9:65:61:29:5a:f2:a5:6c:12:60:0a:9a:2b:9b:d9:db:c9: a3:9a:1b:19:c8:b7:ef:d5:bf:00:75:80:4d:29:db:26:f0:9e: cc:60:5c:79:23:28:9e:ff:c8:dc:d3:14:db:47:11:c0:de:3a: 9d:75:e7:ab:41:0c:5c:7e:de:f5:be:6e:dc:46:53:41:8b:e3: 57:b6:db:ca:d2:57:10:70:1b:45:14:d1:4e:b8:b7:73:2a:f9: ac:c6:9f:e7:d7:f8:b1:5d:f5:62:a3:28:bf:28:a4:30:bb:65: e2:ae:35:dc:a8:0d:a5:0d:e0:d5:9e:85:4f:b3:61:dc:aa:1b: 37:38:25:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qZCkRT4elWrhygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFiZWU3NjgtMzk3MC00MmM1LWFkODYtOTRjYTU5ZTg1 NTFiMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MWU4ZDMxODUtNTgzZS00MWZkLWIyNDItNmM4NzQyNDIxNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr6LmTLdp5KBH/o4M/L6KycGP71V72TzCVwF kMG0ABURXz8ZdepQ8dwNLf5pYl1frc2c8SeJFOFI7dAmp6EKbKwSyiMOrKn2I7wE y63ja1FkeJEdfpbbAZixKxO+p0N0zLleM41/FjHNhk69hXk/IaredNydlJr8llfp hQvrbHtxT4qNNwiq7cdxkiTcRNjckRng0IOgnmUs81OJ7hxC84uoDILNSlvdtdUk AP84lvj27O3nda+Q2FLcylHR3mDE6OaPbSJ6lyUcvb4Sff/24FJ3X+vE8hW5fxjB tH0bJmlwEGDE5PDiTgqDrtM+mC1SUIvEzpJkOS9ot1QnYpsIywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM2gAJ7sxBxkQmKLYveJYHF3AU/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mMWJl ZTc2OC0zOTcwLTQyYzUtYWQ4Ni05NGNhNTllODU1MWIvZjFiZWU3NjgtMzk3MC00 MmM1LWFkODYtOTRjYTU5ZTg1NTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjFiZWU3NjgtMzk3MC00MmM1LWFk ODYtOTRjYTU5ZTg1NTFiL2YxYmVlNzY4LTM5NzAtNDJjNS1hZDg2LTk0Y2E1OWU4 NTUxYi5jcmwwHwYDVR0jBBgwFoAU1bgT4FfMeDdzmMc2zx8uaU0TfLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mMWJlZTc2OC0zOTcwLTQyYzUtYWQ4Ni05NGNh NTllODU1MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+2glxqHqilNt0X5qqHu7f GEhQpLvw7LJW2bgdZEXl0UqCPg0gHwwvxivbwDVgTfBfY7dZp9i932imvP7qWOlQ MieGGwSGEMh0F+CDhMiovlhAf3ZS/UFZYl+bvealh5Z//opQUGBbDqfvjtxmsfBN oaCccE+Iuz0d0HSzpaRquWVhKVrypWwSYAqaK5vZ28mjmhsZyLfv1b8AdYBNKdsm 8J7MYFx5Iyie/8jc0xTbRxHA3jqddeerQQxcft71vm7cRlNBi+NXttvK0lcQcBtF FNFOuLdzKvmsxp/n1/ixXfVioyi/KKQwu2XirjXcqA2lDeDVnoVPs2Hcqhs3OCVO -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:01 2025 by rpki-client