$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft (raw, json) Hash identifier: 3KmRLL+agJi1nYI3TOB/zakgFaJobwbLs+UaBYbtKV0= Subject key identifier: AA:07:89:CA:5B:0B:73:ED:1D:24:47:06:95:5A:34:CD:79:FB:AF:D8 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584BC181C72661FC14DE20EF2700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft Manifest number: 010D0C9F43285849CB146E7AB4A800E43DFE42B9 Signing time: Wed 05 Nov 2025 06:00:08 +0000 Manifest this update: Wed 05 Nov 2025 06:00:08 +0000 Manifest next update: Sat 08 Nov 2025 06:00:00 +0000 Files and hashes: 1: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (hash: 2tlTNIZgutfOPzwnfewaLwM7OweqH/JSoXK6SprplDE=) 2: f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl (hash: QpvD3YvWFxZYXUWtCedMb+FfBQShdx8fD+QbHWI9cKQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:81:c7:26:61:fc:14:de:20:ef:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Nov 5 06:00:08 2025 GMT Not After : Nov 8 06:00:00 2025 GMT Subject: CN=3c7c4ffc-2184-4597-bf14-ad836a82ccde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:9d:2b:95:0c:22:8f:c8:c0:3c:fe:97:54: d0:76:c7:1e:02:de:0f:45:a3:4d:dc:e5:3d:c8:ee: e0:a1:a7:ae:29:12:50:e4:cd:fc:1b:c7:61:e9:b2: 9a:be:bb:8d:c5:dc:86:dc:8c:36:c2:06:c9:b3:56: a3:42:c9:dd:56:2b:3d:01:53:a9:db:e1:92:41:ed: 72:f6:01:f2:56:b1:5c:ab:c0:1d:30:14:b7:f5:5c: 02:0b:94:86:92:30:df:eb:5a:6e:8a:a1:52:15:0e: 0a:f5:5f:14:8c:e9:98:de:a6:93:f1:d1:48:00:a6: ed:5a:31:bd:6a:de:ee:3b:72:eb:72:30:63:f0:d1: 39:36:2e:06:17:6f:c0:f4:07:d2:d4:a5:19:1c:cb: d9:02:ef:81:1f:65:13:85:39:6f:28:48:0e:50:56: 33:c4:69:9f:51:2f:b3:64:2f:f8:d0:42:22:85:b4: 9a:89:87:6c:88:09:92:ab:d3:8a:39:6e:46:6e:87: 73:a9:f1:26:bf:95:4c:ef:e0:e0:af:b1:61:2a:a8: ef:1f:0a:81:a1:59:3d:9e:45:ad:2c:e4:d8:76:9a: f6:05:03:f9:5e:ba:50:96:bb:53:e8:82:7b:1d:11: 2a:20:23:0e:ab:05:6e:5c:3a:37:b8:33:3c:89:65: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:07:89:CA:5B:0B:73:ED:1D:24:47:06:95:5A:34:CD:79:FB:AF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d6:af:89:55:b1:63:f6:ec:f5:50:df:ae:73:77:ea:16:72: 86:0c:99:a2:d7:94:5a:6e:54:33:64:b5:d2:00:8c:50:f9:85: a6:2b:44:6f:47:ee:8c:46:62:ac:8b:1f:47:09:58:4b:bc:b3: fe:2a:65:d0:63:09:03:a7:f5:ed:0f:14:3c:0f:33:dd:6f:df: 54:a0:3e:4f:bb:7d:21:c9:4c:eb:b6:cf:13:79:4e:d1:9b:91: 02:f6:5b:fb:b5:22:b3:87:aa:8b:d9:15:55:7d:df:1f:93:31: 4a:02:e3:8a:09:e8:88:72:73:5f:cf:0a:7d:b1:49:f2:f9:95: f2:26:be:b9:68:b4:ff:91:22:6d:bc:57:30:ad:04:1e:fd:2b: 12:ac:8d:8e:1b:6b:a4:27:32:d1:a0:d4:cc:70:b2:d1:bd:6a: 15:86:2e:60:94:58:ad:63:98:2d:b0:d5:f4:2d:2e:25:3a:af: 72:52:24:a1:19:f9:2d:05:d5:23:25:dc:e1:6f:33:b3:f8:49: f6:da:fd:62:db:c2:df:b0:19:a4:34:7e:f3:9a:e1:f3:34:70: c6:30:ce:32:c0:6a:d8:ef:d0:82:5f:c1:d6:dc:72:94:df:f7: a3:a9:3e:3f:df:58:fd:36:70:16:56:ca:d0:58:c2:2a:29:4c: 72:b3:cf:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBgccmYfwU3iDvJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MTEwNTA2MDAwOFoXDTI1MTEwODA2MDAwMFowLzEtMCsGA1UEAxMk M2M3YzRmZmMtMjE4NC00NTk3LWJmMTQtYWQ4MzZhODJjY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhedK5UMIo/IwDz+l1TQdsceAt4PRaNN3OU9 yO7goaeuKRJQ5M38G8dh6bKavruNxdyG3Iw2wgbJs1ajQsndVis9AVOp2+GSQe1y 9gHyVrFcq8AdMBS39VwCC5SGkjDf61puiqFSFQ4K9V8UjOmY3qaT8dFIAKbtWjG9 at7uO3LrcjBj8NE5Ni4GF2/A9AfS1KUZHMvZAu+BH2UThTlvKEgOUFYzxGmfUS+z ZC/40EIihbSaiYdsiAmSq9OKOW5GbodzqfEmv5VM7+Dgr7FhKqjvHwqBoVk9nkWt LOTYdpr2BQP5XrpQlrtT6IJ7HREqICMOqwVuXDo3uDM8iWWtvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKoHicpbC3PtHSRHBpVaNM15+6/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvZjcxZDI1MmItOWEwZS00 NDkzLWJlOTMtZTZhOGUyZmZmZWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBl1q+JVbFj9uz1UN+uc3fq FnKGDJmi15RablQzZLXSAIxQ+YWmK0RvR+6MRmKsix9HCVhLvLP+KmXQYwkDp/Xt DxQ8DzPdb99UoD5Pu30hyUzrts8TeU7Rm5EC9lv7tSKzh6qL2RVVfd8fkzFKAuOK CeiIcnNfzwp9sUny+ZXyJr65aLT/kSJtvFcwrQQe/SsSrI2OG2ukJzLRoNTMcLLR vWoVhi5glFitY5gtsNX0LS4lOq9yUiShGfktBdUjJdzhbzOz+En22v1i28LfsBmk NH7zmuHzNHDGMM4ywGrY79CCX8HW3HKU3/ejqT4/31j9NnAWVsrQWMIqKUxys88r -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:02 2025 by rpki-client