$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft File: a856eb04-e27d-4da2-8c39-a38263828e38.mft (raw, json) Hash identifier: xVj5bq5XXsMWYLUtkOACJCV/KhDRVSBmYh9nJfvPvT4= Subject key identifier: 40:DE:0F:E9:90:12:A5:70:F2:70:D0:56:D6:F8:BA:52:C4:6B:CC:60 Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F4328584BC075C3FAD506F297121CCCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft Manifest number: 010D0C9F432858482F910EBCA643DC9360F493CF Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (hash: pgv6+F1SJYkRDt/Fpr+CuUVQMdOY/Fl7w3mPBidyexs=) 2: a856eb04-e27d-4da2-8c39-a38263828e38.crl (hash: e5rfHzylw487LsxWP9Lly2vWiu4l3+3Z7BGFAc4Llq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:fa:d5:06:f2:97:12:1c:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=6c3c38df-5922-44b4-87ed-d1f7b23875af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:92:df:25:68:3f:4a:01:fa:71:ca:41:ed: 8c:4d:38:60:22:a6:84:a0:19:37:c5:db:69:64:ef: 12:b1:e4:f6:56:bc:30:fd:14:cc:15:1e:61:2f:b5: 11:12:b3:8b:e1:df:bf:e1:26:25:ad:09:fd:4d:15: 8e:b2:7f:9d:71:f9:46:1c:58:3c:a9:28:84:e6:1b: 61:4e:41:9e:d4:35:11:97:f2:b1:1c:85:f8:78:b1: c3:31:21:7c:9c:77:9c:e2:0b:53:b7:a8:a9:82:22: cf:cc:d7:4f:ae:ca:b9:0e:af:1c:7c:af:85:2f:ff: f0:33:1f:63:4a:99:32:27:c9:67:0e:40:06:31:57: a8:02:b2:46:1e:06:9d:59:d0:f3:37:25:df:cd:1b: 50:73:a9:79:9d:2b:a8:9b:6f:45:ab:c6:61:86:f6: 03:29:fa:06:d5:95:77:91:d6:fa:f3:9e:98:e7:58: bb:80:b8:eb:9d:d8:49:52:5a:be:de:8c:21:e5:ce: 29:0c:17:10:6f:65:06:68:ae:4a:84:a2:5b:c3:44: 15:ab:05:82:06:81:24:2f:8e:c5:6f:04:f9:de:46: 11:7b:7d:a4:ea:8d:ec:a3:9f:49:b8:41:ea:62:d7: 6e:08:a7:7c:92:fc:47:37:19:09:12:da:06:2b:71: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:0F:E9:90:12:A5:70:F2:70:D0:56:D6:F8:BA:52:C4:6B:CC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f5:29:9d:54:ad:76:46:9d:8e:bf:69:21:d3:0b:a2:c3:5b: 2c:d7:6a:ef:ca:ff:7e:d5:73:e8:17:fd:0e:9e:4e:e2:18:2f: b7:8f:d8:97:b9:05:39:d4:a2:c4:5c:fa:8d:0a:b6:56:50:fb: ad:94:7d:f5:7c:48:8a:97:03:31:ac:10:ea:3c:81:6a:e5:d9: 2b:65:04:81:c2:70:00:41:ca:cf:9b:8c:6f:a7:8b:ac:16:7d: 11:62:61:63:ab:7b:57:d0:be:29:74:a2:92:bc:5b:b0:d3:8c: 60:84:3a:ff:94:2b:63:12:3b:16:85:9b:85:4c:a5:10:7e:9f: a3:b3:72:ec:5e:9b:f1:a1:15:4f:42:48:18:70:e4:1d:4e:43: c2:b0:f3:27:db:32:9f:ec:33:a7:4e:6d:48:03:06:8d:1c:55: 34:c0:57:4f:6b:55:75:e7:5c:b9:e0:70:a2:3b:ad:a6:a7:bf: 45:54:d7:c3:21:ed:62:8d:16:80:05:0a:1f:04:99:43:38:ab: 79:e3:32:e3:71:48:c0:25:84:83:15:2a:a7:d6:bf:0d:c4:d0: 01:2e:ea:44:1e:cd:6e:79:fd:e5:6a:a6:f2:f0:11:5e:a9:79: 51:64:21:92:8b:b9:d8:d8:6a:e0:82:59:2f:e1:0b:f9:8d:c1: 20:ed:f1:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcP61QbylxIczMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk NmMzYzM4ZGYtNTkyMi00NGI0LTg3ZWQtZDFmN2IyMzg3NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww2S3yVoP0oB+nHKQe2MTThgIqaEoBk3xdtp ZO8SseT2Vrww/RTMFR5hL7URErOL4d+/4SYlrQn9TRWOsn+dcflGHFg8qSiE5hth TkGe1DURl/KxHIX4eLHDMSF8nHec4gtTt6ipgiLPzNdPrsq5Dq8cfK+FL//wMx9j SpkyJ8lnDkAGMVeoArJGHgadWdDzNyXfzRtQc6l5nSuom29Fq8ZhhvYDKfoG1ZV3 kdb6856Y51i7gLjrndhJUlq+3owh5c4pDBcQb2UGaK5KhKJbw0QVqwWCBoEkL47F bwT53kYRe32k6o3so59JuEHqYtduCKd8kvxHNxkJEtoGK3EQFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEDeD+mQEqVw8nDQVtb4ulLEa8xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvYTg1NmViMDQtZTI3ZC00 ZGEyLThjMzktYTM4MjYzODI4ZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD9SmdVK12Rp2Ov2kh0wui w1ss12rvyv9+1XPoF/0Onk7iGC+3j9iXuQU51KLEXPqNCrZWUPutlH31fEiKlwMx rBDqPIFq5dkrZQSBwnAAQcrPm4xvp4usFn0RYmFjq3tX0L4pdKKSvFuw04xghDr/ lCtjEjsWhZuFTKUQfp+js3LsXpvxoRVPQkgYcOQdTkPCsPMn2zKf7DOnTm1IAwaN HFU0wFdPa1V151y54HCiO62mp79FVNfDIe1ijRaABQofBJlDOKt54zLjcUjAJYSD FSqn1r8NxNABLupEHs1uef3laqby8BFeqXlRZCGSi7nY2Grgglkv4Qv5jcEg7fHA -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:41 2025 by rpki-client