$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft (raw, json) Hash identifier: pP+Ic+YSaWn0YV1wsZEI6UNbEIP+PLMC5LAIZYbhuvQ= Subject key identifier: A0:82:94:90:C8:34:A4:F3:61:F6:98:86:C4:AB:9F:BB:55:16:25:0C Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584BBFFEA58816E7373D8907B540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft Manifest number: 010D0C9F432858492FFDC9CA712E0CA7211456F2 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (hash: 4AlgL/85fIGhXYA0v7JtdGJuYcrHP+8F62eNBzTXKi8=) 2: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl (hash: NWHFqJbkMktWwdpL2fdlllC4jEFxOa4x8Fw4NOfxjjo=) 3: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (hash: +Yu/9tPLW7diAz0IKcoF2F8dk53ez4+e8W2HcH9knFw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a5:88:16:e7:37:3d:89:07:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=3a3cf4e0-8d17-4fdd-a717-8f63c09030e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:58:46:b1:c8:0c:a1:78:6c:85:74:4b:ff:c8: 31:c7:fd:e8:21:47:59:ac:d5:be:a7:77:67:ea:77: 16:11:22:a9:c2:da:11:e0:a7:cb:18:b5:7f:ac:13: 69:99:0b:6e:c8:b4:32:19:13:89:d4:bd:3d:02:74: d3:54:97:8b:80:25:4a:71:1d:de:d7:6a:02:d0:9e: b9:bb:9d:a0:ef:b0:db:03:01:a9:64:db:d1:48:6a: c2:74:e9:33:c6:b6:bc:cc:0a:c6:4b:35:8f:d4:b8: df:60:05:ea:c8:7d:84:1b:cd:b0:36:ed:4c:f5:7b: 89:22:48:0e:18:0c:13:81:f3:e2:f2:02:76:aa:cd: 00:c0:50:e4:0e:4e:a3:02:23:5e:fc:10:9b:e1:7f: 61:62:df:44:a1:50:f6:c3:3b:f9:17:6a:4a:60:7e: d2:19:e8:c9:44:f1:15:1b:65:b7:dc:71:df:7e:3e: 74:8d:98:1a:40:d0:a7:2d:38:d0:a2:28:6b:cc:46: d6:de:a3:c5:dd:50:09:c2:01:53:4f:e2:c9:b6:64: 2e:10:06:95:9b:72:8e:2a:9f:88:46:e6:6d:5f:03: 16:d1:47:be:9d:07:ab:35:c0:d6:f4:1e:2e:03:c2: 3d:65:f7:1e:3c:ea:73:d3:7a:6b:cc:87:10:13:d0: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:82:94:90:C8:34:A4:F3:61:F6:98:86:C4:AB:9F:BB:55:16:25:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:c3:70:c6:de:50:31:14:b8:b2:90:97:12:68:44:ee:10:85: 11:f1:97:42:9a:1f:4d:cc:05:b3:0e:0e:3b:7d:8e:29:44:b5: 47:fb:a8:a7:b6:90:d4:f5:85:a4:65:4d:25:dc:c0:8b:2d:1b: 1b:2d:eb:db:18:b6:b3:ef:f8:83:94:ab:81:36:5f:56:51:41: c9:65:9f:54:31:88:dc:ca:76:89:cf:06:1d:4f:fd:52:40:b5: d4:cc:9e:5d:f5:51:81:ea:66:b4:e1:f4:7c:7f:2b:97:58:40: 8e:7c:ea:9e:51:30:6c:6b:9d:b5:0a:0f:a9:6d:df:ee:10:9a: d6:c3:9d:54:f9:e1:4b:d2:6a:76:aa:93:32:7f:1e:9c:7d:7a: 7e:25:19:67:cf:db:71:01:28:38:a1:25:6f:f6:36:27:33:8a: 4c:b1:5c:05:9e:7b:86:bb:41:b9:e3:e0:87:a3:5b:7a:c0:fa: 87:e9:1b:40:3c:b0:08:a2:17:d3:97:a8:a9:40:2e:5d:89:50: 88:27:87:15:57:78:c5:83:8a:12:f0:ee:3e:fc:7a:f4:74:bb: 59:63:4a:0c:1e:7a:79:79:d1:0f:f1:43:a2:48:cb:1c:10:95: ab:9e:20:c9:da:a0:c7:3d:91:27:82:64:28:df:7a:aa:8a:59: fa:f2:0d:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qWIFuc3PYkHtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk M2EzY2Y0ZTAtOGQxNy00ZmRkLWE3MTctOGY2M2MwOTAzMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FhGscgMoXhshXRL/8gxx/3oIUdZrNW+p3dn 6ncWESKpwtoR4KfLGLV/rBNpmQtuyLQyGROJ1L09AnTTVJeLgCVKcR3e12oC0J65 u52g77DbAwGpZNvRSGrCdOkzxra8zArGSzWP1LjfYAXqyH2EG82wNu1M9XuJIkgO GAwTgfPi8gJ2qs0AwFDkDk6jAiNe/BCb4X9hYt9EoVD2wzv5F2pKYH7SGejJRPEV G2W33HHffj50jZgaQNCnLTjQoihrzEbW3qPF3VAJwgFTT+LJtmQuEAaVm3KOKp+I RuZtXwMW0Ue+nQerNcDW9B4uA8I9ZfcePOpz03przIcQE9B01wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCClJDINKTzYfaYhsSrn7tVFiUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvODZmNWNkOGEtZjkwMy00 MTc2LTk3YTctNjY3MWU0OWIxYzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvw3DG3lAxFLiykJcSaETu EIUR8ZdCmh9NzAWzDg47fY4pRLVH+6intpDU9YWkZU0l3MCLLRsbLevbGLaz7/iD lKuBNl9WUUHJZZ9UMYjcynaJzwYdT/1SQLXUzJ5d9VGB6ma04fR8fyuXWECOfOqe UTBsa521Cg+pbd/uEJrWw51U+eFL0mp2qpMyfx6cfXp+JRlnz9txASg4oSVv9jYn M4pMsVwFnnuGu0G54+CHo1t6wPqH6RtAPLAIohfTl6ipQC5diVCIJ4cVV3jFg4oS 8O4+/Hr0dLtZY0oMHnp5edEP8UOiSMscEJWrniDJ2qDHPZEngmQo33qqiln68g1G -----END CERTIFICATE-----Generated at Wed Nov 5 07:15:05 2025 by rpki-client