$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft File: 5a81d94a-3591-433e-8f6e-da4b9078552b.mft (raw, json) Hash identifier: uE8aVrV8/q/7JTiv7vjCvzG2wadZ5iHv0oeIQypNYKQ= Subject key identifier: 35:9C:1B:C8:C3:32:7B:F1:5C:7E:F4:61:35:A2:3C:56:37:88:E8:AA Authority key identifier: 55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 Certificate issuer: /CN=5a81d94a-3591-433e-8f6e-da4b9078552b Certificate serial: 010D0C9F4328584BBFFEAB23065F54B53CF2B6B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft Manifest number: 010D0C9F43285848562F8573C59705F64E791940 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 5a81d94a-3591-433e-8f6e-da4b9078552b.crl (hash: rEZek9DpjBUQAG3/DKl1N/SPW4gNZKvPoDR58aL9tAc=) 2: fc54ca24-1892-3666-9175-3d07e4e310b4.roa (hash: DMs/WDAR2W600Pb1+8pjVZv4iyv6G3Lb8gwoFOHvMJg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:ab:23:06:5f:54:b5:3c:f2:b6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a81d94a-3591-433e-8f6e-da4b9078552b Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=39cf66c3-07b0-44bf-9a15-d29ae3dbed88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:a4:7d:be:cd:c8:b1:79:3d:97:1c:9d:2a: 0a:0b:39:c8:55:f8:06:4d:2b:36:89:ca:f3:45:7a: 33:16:3a:89:56:ff:89:f0:aa:46:97:c6:90:91:43: fb:3f:7e:84:98:46:c3:43:06:4e:ea:0c:e4:b5:22: a7:3d:d1:f7:b1:c3:4f:03:93:a3:71:c6:13:ee:1e: 08:52:ec:97:1c:e0:e3:80:64:e6:0b:3b:3c:74:b4: dd:b3:3e:ee:9e:05:26:14:77:9b:0f:a2:5f:a7:5a: e3:5d:4c:b0:a4:81:a6:08:d2:4c:07:18:97:e1:b6: 1f:9e:35:75:7e:32:72:23:a5:9f:e1:54:ed:8d:dc: 11:6a:ea:62:35:e1:ae:96:a1:7b:2e:c0:5d:03:b7: 4f:05:89:d3:03:e4:23:1e:ea:2d:9b:43:5a:31:87: bf:69:5a:b7:3f:c8:e4:87:07:5c:26:4d:d6:c0:9c: b1:f0:00:f9:f5:62:67:3c:74:e5:23:40:f8:5e:d5: 1d:b1:a1:0b:e2:ec:30:fa:a2:ef:94:f1:bc:a7:94: e9:9d:3f:d9:b4:ad:7b:fd:e0:f2:03:98:dd:5b:99: d1:fd:d3:73:77:a5:5a:ee:a8:43:80:96:40:07:92: d5:58:e4:96:58:19:b1:bc:d3:23:c2:56:61:c4:e9: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9C:1B:C8:C3:32:7B:F1:5C:7E:F4:61:35:A2:3C:56:37:88:E8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl X509v3 Authority Key Identifier: keyid:55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5a:64:0a:3e:46:50:db:d1:f0:a3:a1:a6:00:8f:4e:3d:23: 7d:4a:8d:a7:da:81:9f:38:ba:9e:5c:b7:02:0b:2b:3d:4f:f3: 7a:cd:79:fa:ef:09:d4:dc:f0:b8:5e:fc:12:13:08:6f:eb:ce: 1b:de:62:29:e1:ef:08:68:bc:db:87:8a:f6:37:76:18:01:9c: ca:0a:25:c1:5f:c3:aa:86:86:c0:55:66:a8:d5:cd:f1:b9:87: 99:ad:c2:26:a6:db:ad:07:a7:ab:b3:32:1f:70:90:89:7d:19: 04:59:c8:9d:e5:7a:c2:9d:c3:e7:83:dd:4d:fc:48:54:52:71: 13:c7:eb:00:f4:dd:a7:be:39:55:0c:c2:a0:b6:a6:08:22:72: 51:50:5f:f5:5f:80:01:ad:27:e8:1e:bb:f5:67:b0:a7:df:96: af:8e:ff:1f:77:d6:c5:35:3e:f2:fb:cb:b0:de:0d:ba:65:ad: f4:a6:ae:b6:dc:a6:a0:b9:7e:81:f5:68:5e:1e:4c:b0:84:13: c5:b9:8b:d7:7b:61:f6:6c:cd:57:0c:c0:17:97:97:b2:c5:c8: fc:2a:84:a9:ce:2e:b1:ab:63:83:53:39:1c:9e:96:2e:c7:30: 22:62:c0:73:f8:7c:3d:f9:08:24:65:0d:21:18:d4:df:e0:fd: e8:3c:8f:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qsjBl9UtTzytrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4MWQ5NGEtMzU5MS00MzNlLThmNmUtZGE0YjkwNzg1 NTJiMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk MzljZjY2YzMtMDdiMC00NGJmLTlhMTUtZDI5YWUzZGJlZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMmkfb7NyLF5PZccnSoKCznIVfgGTSs2icrz RXozFjqJVv+J8KpGl8aQkUP7P36EmEbDQwZO6gzktSKnPdH3scNPA5OjccYT7h4I UuyXHODjgGTmCzs8dLTdsz7ungUmFHebD6Jfp1rjXUywpIGmCNJMBxiX4bYfnjV1 fjJyI6Wf4VTtjdwRaupiNeGulqF7LsBdA7dPBYnTA+QjHuotm0NaMYe/aVq3P8jk hwdcJk3WwJyx8AD59WJnPHTlI0D4XtUdsaEL4uww+qLvlPG8p5TpnT/ZtK17/eDy A5jdW5nR/dNzd6Va7qhDgJZAB5LVWOSWWBmxvNMjwlZhxOkP1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDWcG8jDMnvxXH70YTWiPFY3iOiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTgx ZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRiOTA3ODU1MmIvNWE4MWQ5NGEtMzU5MS00 MzNlLThmNmUtZGE0YjkwNzg1NTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE4MWQ5NGEtMzU5MS00MzNlLThm NmUtZGE0YjkwNzg1NTJiLzVhODFkOTRhLTM1OTEtNDMzZS04ZjZlLWRhNGI5MDc4 NTUyYi5jcmwwHwYDVR0jBBgwFoAUVatwEk3UD10eljH1VS5u8EgioakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTgxZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRi OTA3ODU1MmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPWmQKPkZQ29Hwo6GmAI9O PSN9So2n2oGfOLqeXLcCCys9T/N6zXn67wnU3PC4XvwSEwhv684b3mIp4e8IaLzb h4r2N3YYAZzKCiXBX8OqhobAVWao1c3xuYeZrcImptutB6erszIfcJCJfRkEWcid 5XrCncPng91N/EhUUnETx+sA9N2nvjlVDMKgtqYIInJRUF/1X4ABrSfoHrv1Z7Cn 35avjv8fd9bFNT7y+8uw3g26Za30pq623KaguX6B9WheHkywhBPFuYvXe2H2bM1X DMAXl5eyxcj8KoSpzi6xq2ODUzkcnpYuxzAiYsBz+Hw9+QgkZQ0hGNTf4P3oPI9F -----END CERTIFICATE-----Generated at Tue Nov 4 23:40:48 2025 by rpki-client