$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft File: 914c4a10-97c5-4f06-914d-13485f7f3e12.mft (raw, json) Hash identifier: 4C/q+qoSZe+RXLUE9tDiNttJBVIAK9kWEd9tWArBRNI= Subject key identifier: E3:21:1F:BF:46:35:71:58:62:E0:B7:8F:CC:61:16:64:93:4C:69:CC Authority key identifier: DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 Certificate issuer: /CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Certificate serial: 010D0C9F4328584BBFE0D9564AF533520E08C0D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft Manifest number: 010D0C9F4328584913E940F0ADBFFD1622EE547A Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 5e96c0cf-3077-3854-81df-de74836c1b82.roa (hash: PW7m8vnbDmPkJL4Ju8dkjW055GB6kuxs5JUcrmkye8E=) 2: 914c4a10-97c5-4f06-914d-13485f7f3e12.crl (hash: Ur0sDSmpjPW4lRqU0rULz4Y0lOH/Qeu7Vocf4JTuqII=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d9:56:4a:f5:33:52:0e:08:c0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=b217222d-36fc-436d-815a-c1689e7b5ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:c6:f4:3a:3b:22:fa:59:da:d6:77:ae:3a: 56:5c:c8:f3:ba:c5:87:0d:a1:6c:c0:40:0b:da:20: 4c:6f:73:43:38:ac:ac:13:1f:dd:79:31:55:1c:f2: 1c:60:51:92:77:bd:ee:da:93:21:e1:ad:36:da:f0: 37:ec:67:d1:e0:48:79:42:92:a7:7b:c1:52:c6:c0: 69:68:2f:07:46:98:bb:b2:84:b5:67:af:81:ce:1e: 41:b9:b3:d7:34:1e:fa:79:7f:e2:e5:8f:40:21:e7: a3:cb:e7:92:79:91:ba:88:88:ac:3f:8a:ea:99:51: 42:df:b6:82:cc:ff:7e:ac:20:79:40:5a:f0:d8:77: 42:fe:95:ae:1e:d2:5e:e7:44:7d:36:a2:c3:31:69: ab:45:5b:72:16:cc:5d:cf:23:2c:c7:e5:ce:27:cc: 38:17:7d:b7:5f:3a:9f:81:f0:3c:35:18:a3:c1:50: 7c:f1:50:bc:7a:88:ac:9f:3b:de:c0:55:57:4b:eb: 58:c3:55:c6:33:11:16:f8:a5:bb:c4:4f:50:2e:19: 34:81:4f:32:d7:3f:7c:27:e5:ff:e7:45:34:d0:21: a1:7f:b0:8e:9d:1e:c5:e1:18:6e:f1:42:16:c8:04: b4:85:c6:51:32:04:9a:7c:70:df:5b:a4:51:85:62: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:21:1F:BF:46:35:71:58:62:E0:B7:8F:CC:61:16:64:93:4C:69:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl X509v3 Authority Key Identifier: keyid:DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d8:62:b5:a3:9d:cb:d8:cc:df:1d:ca:73:50:61:c9:11:71: 65:d6:15:a4:d6:23:81:92:a0:2b:15:98:97:18:9b:93:8a:9e: 65:3f:9f:15:b7:ed:c0:f5:bd:e4:7e:cb:d1:76:74:f5:7c:e6: 74:12:05:97:45:73:0c:2d:9c:92:c4:d6:31:b3:d6:01:bb:a6: 75:70:d9:17:e6:a1:54:9b:96:68:24:4c:58:4f:fa:ef:85:7b: 6f:6c:ad:03:c4:2c:e8:49:d0:1d:e6:f6:33:a1:66:94:6c:d6: 57:af:89:64:f6:14:8f:3b:38:03:ba:fe:c5:d7:83:6b:3a:8f: 9d:20:64:ef:e3:7c:c5:5a:37:29:2f:68:f9:3c:5c:70:ee:4c: 99:02:e5:e8:5a:f5:ee:6e:f1:31:27:25:d5:0a:6a:04:e3:b9: 67:cd:e7:19:fc:c2:35:a2:f4:24:bf:a7:39:95:8e:51:99:71: 27:4b:23:ba:9a:1f:cd:b7:51:71:14:4a:7d:ee:cb:51:f2:fa: af:f0:c3:97:1c:82:38:3f:d4:c8:2c:c4:92:73:de:44:a2:f4: 3e:fe:c9:3b:e2:dc:b0:15:57:e6:cc:6d:2b:d6:10:38:16:34: a4:70:3b:9b:59:33:da:d1:1a:81:bd:c8:f4:19:49:16:54:9e: c1:60:1e:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NlWSvUzUg4IwNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0YzRhMTAtOTdjNS00ZjA2LTkxNGQtMTM0ODVmN2Yz ZTEyMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk YjIxNzIyMmQtMzZmYy00MzZkLTgxNWEtYzE2ODllN2I1ZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptTG9Do7IvpZ2tZ3rjpWXMjzusWHDaFswEAL 2iBMb3NDOKysEx/deTFVHPIcYFGSd73u2pMh4a022vA37GfR4Eh5QpKne8FSxsBp aC8HRpi7soS1Z6+Bzh5BubPXNB76eX/i5Y9AIeejy+eSeZG6iIisP4rqmVFC37aC zP9+rCB5QFrw2HdC/pWuHtJe50R9NqLDMWmrRVtyFsxdzyMsx+XOJ8w4F323Xzqf gfA8NRijwVB88VC8eoisnzvewFVXS+tYw1XGMxEW+KW7xE9QLhk0gU8y1z98J+X/ 50U00CGhf7COnR7F4Rhu8UIWyAS0hcZRMgSafHDfW6RRhWLkCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOMhH79GNXFYYuC3j8xhFmSTTGnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MTRj NGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4NWY3ZjNlMTIvOTE0YzRhMTAtOTdjNS00 ZjA2LTkxNGQtMTM0ODVmN2YzZTEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTE0YzRhMTAtOTdjNS00ZjA2LTkx NGQtMTM0ODVmN2YzZTEyLzkxNGM0YTEwLTk3YzUtNGYwNi05MTRkLTEzNDg1Zjdm M2UxMi5jcmwwHwYDVR0jBBgwFoAU27iy9N+fLp0UCDfueAqiajEKloMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MTRjNGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4 NWY3ZjNlMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB2GK1o53L2MzfHcpzUGHJ EXFl1hWk1iOBkqArFZiXGJuTip5lP58Vt+3A9b3kfsvRdnT1fOZ0EgWXRXMMLZyS xNYxs9YBu6Z1cNkX5qFUm5ZoJExYT/rvhXtvbK0DxCzoSdAd5vYzoWaUbNZXr4lk 9hSPOzgDuv7F14NrOo+dIGTv43zFWjcpL2j5PFxw7kyZAuXoWvXubvExJyXVCmoE 47lnzecZ/MI1ovQkv6c5lY5RmXEnSyO6mh/Nt1FxFEp97stR8vqv8MOXHII4P9TI LMSSc95EovQ+/sk74tywFVfmzG0r1hA4FjSkcDubWTPa0RqBvcj0GUkWVJ7BYB4z -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:34 2025 by rpki-client