$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft File: f5354d62-8c66-4153-8fd6-c06a9dacd989.mft (raw, json) Hash identifier: DOeIBlmQ1lWvvFujAirIVCEAUtiYV41MfJ3ZK5JwXgM= Subject key identifier: 2D:84:9E:EC:47:4C:18:9D:4F:BC:A4:57:F2:DC:1A:07:9D:68:60:EA Authority key identifier: 27:7F:52:E8:44:B7:9E:C3:0D:D7:87:5A:3E:AB:C3:54:41:53:FD:C3 Certificate issuer: /CN=f5354d62-8c66-4153-8fd6-c06a9dacd989 Certificate serial: 010D0C9F4328584BBF69B77819BE42539E856700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft Manifest number: 010D0C9F432858497537F58625BF9F0C9D362776 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: abc0c33c-6bee-3a0b-9341-c196a6ef597e.roa (hash: PdYGijyrxQzSX2qC9b9pDeproKyY/6zBokERwO/3iGE=) 2: f5354d62-8c66-4153-8fd6-c06a9dacd989.crl (hash: R3YKj7wwTTn3+petF7h8GvQ2eJu7Pe4+j3pZ445f1sY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b7:78:19:be:42:53:9e:85:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5354d62-8c66-4153-8fd6-c06a9dacd989 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=d9cbc07c-bef5-4468-8545-06aa836fa8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2f:c4:ea:7f:a6:73:3e:e1:9c:25:81:c3:7f: b1:c2:17:15:b7:a7:03:0a:27:99:80:60:dd:e0:cb: cc:e7:ed:9f:00:34:39:a8:4b:6a:f3:a1:bb:c4:e7: 89:ac:06:74:76:a4:58:f6:3d:e8:17:f7:b0:15:5f: 58:bb:9f:9c:70:79:35:30:4f:0a:96:5e:2b:ef:6f: f1:12:8f:60:24:22:9f:11:35:c5:63:46:2d:2a:79: 9d:aa:0d:13:93:d6:c1:3e:b1:f7:95:9a:63:b2:3d: 59:85:0e:68:4a:e3:1b:d7:ab:9f:dd:07:da:05:aa: 94:c9:11:ae:67:20:a8:98:01:bf:78:7e:ef:79:33: 22:59:25:14:cf:4a:78:b6:f0:91:7c:07:b6:b9:7e: 9f:d8:5d:3c:16:b5:c8:1d:7d:c9:92:ba:b5:73:48: 42:a4:cf:bd:c1:d3:59:7b:5e:8e:c7:24:d6:75:89: 23:dd:0b:69:80:9c:62:a0:ee:7c:b8:45:5a:a8:7a: 48:95:54:28:68:a5:c2:1c:a8:e1:90:c4:38:3b:e5: 2b:ed:74:48:bd:cb:d6:5b:11:fb:fc:52:77:15:4b: 26:b8:55:d2:28:ed:2a:1c:3c:90:74:80:5b:43:f7: 2f:e5:25:97:6d:4c:9c:f1:f7:40:0c:1f:da:e8:13: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:9E:EC:47:4C:18:9D:4F:BC:A4:57:F2:DC:1A:07:9D:68:60:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.crl X509v3 Authority Key Identifier: keyid:27:7F:52:E8:44:B7:9E:C3:0D:D7:87:5A:3E:AB:C3:54:41:53:FD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:06:7e:fd:b5:d9:16:97:5b:57:57:02:68:df:08:8f:e8:e7: 76:8a:31:40:35:d9:08:05:79:9b:23:36:1f:fd:da:75:26:9e: 5e:47:4d:92:40:ed:2c:94:80:c2:5b:67:49:ca:83:94:29:a9: 69:c5:5f:44:24:45:1c:5e:51:25:ec:4a:1f:ec:f0:08:f4:22: 16:34:fd:80:42:54:3b:ba:9e:82:f2:41:73:7d:9d:6e:4e:6a: c4:14:a2:98:74:af:bd:43:20:72:b4:a3:fd:e1:bb:42:db:84: 47:d0:0a:35:a3:4d:41:e0:b3:77:df:4d:6e:84:79:0f:1f:9d: 69:63:09:c3:c7:09:94:81:20:c5:62:6e:7c:c0:21:11:9e:28: a4:aa:10:cb:bd:67:09:b5:33:95:91:e0:76:31:ad:16:bf:9f: dc:7d:70:2b:23:d1:7a:4a:3c:df:ad:23:00:9f:b5:fa:59:73: 8b:9b:da:7f:5d:48:41:95:7d:e3:f2:4b:d9:bf:62:71:38:ff: 81:19:0a:cb:5c:e9:5f:c2:63:4a:42:4e:38:30:29:e6:6d:8b: 76:a4:dd:27:dd:b9:cc:a0:74:ed:28:4b:45:88:95:5e:c7:c8: 8f:12:ff:01:70:9b:e9:9a:86:8e:c7:5c:3d:a9:1c:75:c7:73: 03:62:75:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abd4Gb5CU56FZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUzNTRkNjItOGM2Ni00MTUzLThmZDYtYzA2YTlkYWNk OTg5MB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk ZDljYmMwN2MtYmVmNS00NDY4LTg1NDUtMDZhYTgzNmZhOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy/E6n+mcz7hnCWBw3+xwhcVt6cDCieZgGDd 4MvM5+2fADQ5qEtq86G7xOeJrAZ0dqRY9j3oF/ewFV9Yu5+ccHk1ME8Kll4r72/x Eo9gJCKfETXFY0YtKnmdqg0Tk9bBPrH3lZpjsj1ZhQ5oSuMb16uf3QfaBaqUyRGu ZyComAG/eH7veTMiWSUUz0p4tvCRfAe2uX6f2F08FrXIHX3Jkrq1c0hCpM+9wdNZ e16OxyTWdYkj3QtpgJxioO58uEVaqHpIlVQoaKXCHKjhkMQ4O+Ur7XRIvcvWWxH7 /FJ3FUsmuFXSKO0qHDyQdIBbQ/cv5SWXbUyc8fdADB/a6BPbWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC2EnuxHTBidT7ykV/LcGgedaGDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTM1 NGQ2Mi04YzY2LTQxNTMtOGZkNi1jMDZhOWRhY2Q5ODkvZjUzNTRkNjItOGM2Ni00 MTUzLThmZDYtYzA2YTlkYWNkOTg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUzNTRkNjItOGM2Ni00MTUzLThm ZDYtYzA2YTlkYWNkOTg5L2Y1MzU0ZDYyLThjNjYtNDE1My04ZmQ2LWMwNmE5ZGFj ZDk4OS5jcmwwHwYDVR0jBBgwFoAUJ39S6ES3nsMN14daPqvDVEFT/cMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTM1NGQ2Mi04YzY2LTQxNTMtOGZkNi1jMDZh OWRhY2Q5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvBn79tdkWl1tXVwJo3wiP 6Od2ijFANdkIBXmbIzYf/dp1Jp5eR02SQO0slIDCW2dJyoOUKalpxV9EJEUcXlEl 7Eof7PAI9CIWNP2AQlQ7up6C8kFzfZ1uTmrEFKKYdK+9QyBytKP94btC24RH0Ao1 o01B4LN3301uhHkPH51pYwnDxwmUgSDFYm58wCERniikqhDLvWcJtTOVkeB2Ma0W v5/cfXArI9F6SjzfrSMAn7X6WXOLm9p/XUhBlX3j8kvZv2JxOP+BGQrLXOlfwmNK Qk44MCnmbYt2pN0n3bnMoHTtKEtFiJVex8iPEv8BcJvpmoaOx1w9qRx1x3MDYnUx -----END CERTIFICATE-----Generated at Wed Nov 5 09:41:15 2025 by rpki-client