$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft File: be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft (raw, json) Hash identifier: qTCFxIhOIarufK4CxcEqgUnbZg2lDOSNAQ9gMhzyQgk= Subject key identifier: 95:AB:D9:EF:88:CE:9D:38:E7:D7:0A:ED:F0:52:0A:61:26:4F:55:4F Authority key identifier: 7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3 Certificate issuer: /CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f Certificate serial: 010D0C9F4328584BC03A2D134998ACD16222E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft Manifest number: 010D0C9F4328584842F2274AC5F40011F428F847 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: a3ddba2a-e859-3207-b00d-f00374375e58.roa (hash: tZlAqGhvsYmHrt1HfGGGr5YpIdMPHsBidHCn9EW2O1I=) 2: be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl (hash: 8soGn0jXPuYp/2Eqvt90TgmJH8ZvaPHIUVP3/+NE1cQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:13:49:98:ac:d1:62:22:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=d290316a-d0ac-4bb2-a50e-42ea3e3bf8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:65:6f:d9:9c:62:fa:60:2e:d5:80:9f:88: 57:d9:95:83:37:ee:63:36:f5:de:fc:54:8a:cf:5f: f2:6e:ef:d6:ad:91:42:34:90:0b:6b:41:b7:01:b8: a7:b2:4e:e6:28:86:1e:f6:2b:bd:7d:73:4f:c1:ff: b2:f3:33:20:d3:52:bb:9a:2a:c6:ed:28:b4:70:c1: cd:3c:db:6e:59:71:eb:6b:70:3e:55:e3:6a:c9:db: ff:af:1b:6b:42:fb:55:13:80:de:e1:a5:a4:33:f5: 13:0d:c8:83:b0:5e:c8:33:ac:71:48:0f:1e:e6:af: b0:79:56:c9:aa:f2:fd:44:c2:0c:49:85:72:82:10: 97:1f:0f:b5:33:3d:27:ee:7b:5e:4c:59:a9:aa:11: ad:04:6f:0f:ab:7d:86:be:23:71:ff:48:8e:0e:60: c6:88:17:42:c8:d5:34:e1:ec:ec:b9:27:af:51:b0: b5:6f:c6:8b:0d:a2:cd:a3:e5:ac:67:15:70:b0:a8: 56:35:f7:ad:36:9d:32:0b:18:b2:fb:8d:0e:ef:36: eb:cd:27:0c:61:e7:4b:e3:51:e9:78:a5:b7:e6:23: 69:af:20:34:a0:33:d7:d9:a5:53:57:b3:bf:75:c5: 03:ca:6e:88:76:4d:2e:fe:4d:60:df:5f:f1:17:05: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AB:D9:EF:88:CE:9D:38:E7:D7:0A:ED:F0:52:0A:61:26:4F:55:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl X509v3 Authority Key Identifier: keyid:7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1f:33:ed:80:9d:d1:b6:73:d1:10:6f:dd:10:35:12:cb:13: e6:34:dc:9c:4c:cc:fb:94:49:f2:9b:de:62:4a:8a:63:29:b7: 6e:9f:8a:bc:1b:bf:c8:8e:f8:f5:d4:b8:84:b6:4b:57:34:a0: 68:f2:fe:9b:c0:90:21:89:e0:82:07:d2:fd:10:54:23:c8:fe: da:87:9d:64:ed:da:22:99:1f:0a:73:4b:60:5a:1b:62:46:61: 22:73:39:77:8a:d5:50:96:54:91:77:e2:79:81:79:a2:55:20: f3:5f:c0:a9:1b:c6:80:2c:ad:36:cc:df:35:70:b4:da:08:d8: 23:20:63:63:1d:56:fd:41:4d:86:b9:34:cf:fc:04:3d:0b:bd: 02:08:bc:03:26:e4:4c:c1:6f:a6:9a:6e:93:b9:f0:51:f8:ee: 56:a7:be:a7:18:df:e5:13:72:64:f5:b7:1a:25:b7:96:f5:bb: 14:4d:b8:81:72:b9:5f:ab:cc:5a:0d:71:41:c4:19:9e:9b:27: f1:c5:68:a5:c6:ca:ee:c8:94:eb:64:0e:8d:b6:94:f7:9a:01: b5:0c:c5:81:65:26:ce:c4:e1:d9:3a:58:82:76:c5:59:05:61: 56:ba:58:4b:6b:e2:52:97:61:61:aa:da:59:6e:dc:49:1e:b3: 40:ac:bc:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi0TSZis0WIi44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyMzYyZGUtNWJjZi00ZTRkLWE1ODItYWY1OWQ1ZmZi NzVmMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZDI5MDMxNmEtZDBhYy00YmIyLWE1MGUtNDJlYTNlM2JmOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi5lb9mcYvpgLtWAn4hX2ZWDN+5jNvXe/FSK z1/ybu/WrZFCNJALa0G3Abinsk7mKIYe9iu9fXNPwf+y8zMg01K7mirG7Si0cMHN PNtuWXHra3A+VeNqydv/rxtrQvtVE4De4aWkM/UTDciDsF7IM6xxSA8e5q+weVbJ qvL9RMIMSYVyghCXHw+1Mz0n7nteTFmpqhGtBG8Pq32GviNx/0iODmDGiBdCyNU0 4ezsuSevUbC1b8aLDaLNo+WsZxVwsKhWNfetNp0yCxiy+40O7zbrzScMYedL41Hp eKW35iNpryA0oDPX2aVTV7O/dcUDym6Idk0u/k1g31/xFwXSVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJWr2e+Izp0459cK7fBSCmEmT1VPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZTIz NjJkZS01YmNmLTRlNGQtYTU4Mi1hZjU5ZDVmZmI3NWYvYmUyMzYyZGUtNWJjZi00 ZTRkLWE1ODItYWY1OWQ1ZmZiNzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmUyMzYyZGUtNWJjZi00ZTRkLWE1 ODItYWY1OWQ1ZmZiNzVmL2JlMjM2MmRlLTViY2YtNGU0ZC1hNTgyLWFmNTlkNWZm Yjc1Zi5jcmwwHwYDVR0jBBgwFoAUe9ydecfVELgs+og0yvBkdhVh5+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZTIzNjJkZS01YmNmLTRlNGQtYTU4Mi1hZjU5 ZDVmZmI3NWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjHzPtgJ3RtnPREG/dEDUS yxPmNNycTMz7lEnym95iSopjKbdun4q8G7/Ijvj11LiEtktXNKBo8v6bwJAhieCC B9L9EFQjyP7ah51k7doimR8Kc0tgWhtiRmEiczl3itVQllSRd+J5gXmiVSDzX8Cp G8aALK02zN81cLTaCNgjIGNjHVb9QU2GuTTP/AQ9C70CCLwDJuRMwW+mmm6TufBR +O5Wp76nGN/lE3Jk9bcaJbeW9bsUTbiBcrlfq8xaDXFBxBmemyfxxWilxsruyJTr ZA6NtpT3mgG1DMWBZSbOxOHZOliCdsVZBWFWulhLa+JSl2FhqtpZbtxJHrNArLw7 -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:14 2025 by rpki-client