$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft File: a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft (raw, json) Hash identifier: F108OCutARX1eIT0ch0miv+cfg050ac7xjz+LmV3sBM= Subject key identifier: 58:7E:A7:A5:2E:1C:A5:A6:0B:92:14:27:46:BB:FB:87:CB:37:C0:FD Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Certificate serial: 010D0C9F4328584BC0ECE2BDD0AD6FA42DD4AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft Manifest number: 010D0C9F432858488115D56E4D1B00B290CDCA76 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa (hash: mGvohyuZEmOPfpU52gLOm2xKiwsbPND62NUR92cq/EY=) 2: a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl (hash: j9qv1Hl5fePew9mf+t0Ew0MTlGLiYlr8wrkgr1zc6R4=) 3: efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa (hash: t6MYmIPQ7/cALKDhVuw974oBa7WE1hQsD+09ka+i/WA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e2:bd:d0:ad:6f:a4:2d:d4:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=f2b21981-2452-4352-bdd9-450169cfd728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:be:fe:d5:88:97:97:9f:c2:16:45:25:32: ed:f4:e5:02:95:69:fb:43:f3:69:05:92:f6:07:52: f2:7d:e3:f6:7d:67:38:81:bf:73:69:0f:db:39:30: df:93:06:47:2c:21:68:a2:91:85:89:1c:79:6c:64: 15:85:4f:93:b4:ed:cf:2f:5d:8c:91:aa:88:00:03: 69:76:5c:79:36:81:91:8a:7a:cd:e0:87:75:af:bf: 47:76:6d:e0:3a:4f:11:7f:d9:4c:b1:c9:e9:f2:74: 3f:3f:26:8c:5c:88:67:12:db:28:fc:6e:93:44:a1: 18:58:7b:e3:f4:c2:ee:10:8f:40:a8:b3:c0:f8:dc: 51:bb:58:e3:61:50:08:28:87:3c:a9:91:4f:66:88: f5:64:42:a2:fc:df:ca:81:52:e0:df:91:08:0d:6c: 2a:b7:d0:24:2f:6a:10:3d:3c:8f:6c:43:15:80:ce: de:08:9f:f8:14:46:d4:36:6d:fe:de:b1:7a:c7:29: 5c:c6:a5:08:9d:a6:15:5f:f8:f0:02:cd:ce:de:87: 9e:4b:f3:0d:a2:6f:62:0d:f3:73:42:68:a3:41:09: 11:59:98:40:f2:f7:87:8b:38:4d:a6:97:a8:a8:58: e3:04:dc:98:31:a3:b4:18:1b:f3:75:37:11:95:89: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7E:A7:A5:2E:1C:A5:A6:0B:92:14:27:46:BB:FB:87:CB:37:C0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl X509v3 Authority Key Identifier: keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:90:95:d1:dd:0a:0d:89:bb:7a:29:61:f2:aa:5e:40:ee:9c: 4e:0f:d6:d1:4c:61:db:8b:fc:fd:cd:2e:c2:29:af:73:ef:11: 4a:d0:cb:0b:55:fe:39:15:51:2b:31:7e:36:4f:d7:73:f5:8b: 27:04:2e:fb:f2:21:43:5a:cc:be:c6:6a:63:55:d3:13:25:aa: 17:2e:2c:83:35:4e:97:f9:00:ee:87:f1:95:3e:27:13:bd:41: 45:b3:d8:7f:af:ca:c6:29:ec:27:42:d8:73:de:52:89:5a:93: 01:85:fe:a1:1a:bb:07:88:47:e6:e1:45:8a:75:f1:65:e1:62: 38:05:e4:0d:52:56:e1:40:e1:ef:41:ab:9a:15:35:fb:d6:4e: ab:8a:07:e0:fe:60:51:e7:5d:66:5b:da:38:07:dd:c7:21:da: 43:55:42:6e:c1:ff:bb:5b:ca:0e:52:04:4b:eb:74:2f:6a:50: 0c:31:57:a3:ae:39:9e:d0:1c:60:8f:9f:f9:18:24:26:1d:32: cf:ff:a9:2b:2d:a9:ea:91:a1:fa:33:ff:3f:33:eb:32:ac:e2: 60:9c:69:52:4e:ec:c9:f7:8a:c6:59:c9:93:40:b5:bb:1d:b6: 35:02:74:48:a0:83:87:f1:e7:e3:32:e1:b2:cc:65:79:b2:16: 8f:66:a2:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OK90K1vpC3UrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyM2E1ZjEtZTllNy00ZDUzLWI2MTUtZjhhZmIxN2Iy OWM1MB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk ZjJiMjE5ODEtMjQ1Mi00MzUyLWJkZDktNDUwMTY5Y2ZkNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFO+/tWIl5efwhZFJTLt9OUClWn7Q/NpBZL2 B1LyfeP2fWc4gb9zaQ/bOTDfkwZHLCFoopGFiRx5bGQVhU+TtO3PL12MkaqIAANp dlx5NoGRinrN4Id1r79Hdm3gOk8Rf9lMscnp8nQ/PyaMXIhnEtso/G6TRKEYWHvj 9MLuEI9AqLPA+NxRu1jjYVAIKIc8qZFPZoj1ZEKi/N/KgVLg35EIDWwqt9AkL2oQ PTyPbEMVgM7eCJ/4FEbUNm3+3rF6xylcxqUInaYVX/jwAs3O3oeeS/MNom9iDfNz QmijQQkRWZhA8veHizhNppeoqFjjBNyYMaO0GBvzdTcRlYk7IwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFh+p6UuHKWmC5IUJ0a7+4fLN8D9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMTIz YTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFmYjE3YjI5YzUvYTEyM2E1ZjEtZTllNy00 ZDUzLWI2MTUtZjhhZmIxN2IyOWM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTEyM2E1ZjEtZTllNy00ZDUzLWI2 MTUtZjhhZmIxN2IyOWM1L2ExMjNhNWYxLWU5ZTctNGQ1My1iNjE1LWY4YWZiMTdi MjljNS5jcmwwHwYDVR0jBBgwFoAUyW18ReNNaaWN99LTwrp4KHA8TlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMTIzYTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFm YjE3YjI5YzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGkJXR3QoNibt6KWHyql5A 7pxOD9bRTGHbi/z9zS7CKa9z7xFK0MsLVf45FVErMX42T9dz9YsnBC778iFDWsy+ xmpjVdMTJaoXLiyDNU6X+QDuh/GVPicTvUFFs9h/r8rGKewnQthz3lKJWpMBhf6h GrsHiEfm4UWKdfFl4WI4BeQNUlbhQOHvQauaFTX71k6rigfg/mBR511mW9o4B93H IdpDVUJuwf+7W8oOUgRL63QvalAMMVejrjme0Bxgj5/5GCQmHTLP/6krLanqkaH6 M/8/M+syrOJgnGlSTuzJ94rGWcmTQLW7HbY1AnRIoIOH8efjMuGyzGV5shaPZqK4 -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:20 2025 by rpki-client