$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft File: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft (raw, json) Hash identifier: PVR+u55mI7HG9k4v9e9U3+KNINhZS7HnbeCoJMpQPpM= Subject key identifier: 45:13:4D:1F:65:86:FF:35:AC:6C:25:65:D4:7A:3A:24:ED:07:05:62 Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584BC093827ADBE4A523E31011C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft Manifest number: 010D0C9F43285848785A75BB852C81469E715334 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Thu 06 Nov 2025 22:00:00 +0000 Files and hashes: 1: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (hash: oEZNaDm0VWYXeZIx4YnREh5bDp0M5yn2XKovAlbthtk=) 2: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl (hash: qxAchhj5vVk7RpHScfAj9Aa3XIkHjTUt4zR60Qnso1M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:82:7a:db:e4:a5:23:e3:10:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 6 22:00:00 2025 GMT Subject: CN=2fcd34cc-2d36-4a00-8faa-fae570bedbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:33:38:4d:62:1f:f8:36:5d:84:ac:9d:02: 18:c0:e5:d1:ce:08:a8:e4:70:23:df:5c:e4:a3:58: fa:7c:cf:c6:d8:ea:a9:86:2c:e3:28:02:65:0f:8f: 44:ee:f4:aa:16:29:79:68:24:fd:ce:46:ff:09:05: 38:c3:0e:46:f3:ce:3c:53:6d:94:49:87:62:b2:0c: 89:b5:52:9a:c8:10:d9:a8:23:42:ab:e4:de:d8:89: c6:4b:f1:f4:78:7a:bd:40:ff:ae:91:27:5c:4c:f9: a8:3f:7a:90:63:4f:af:84:01:00:a5:4c:2f:b9:20: 2e:67:e8:94:68:a3:5d:25:40:ab:8b:54:f6:35:61: 78:63:39:04:6d:7e:e7:45:bf:40:03:e2:1b:b3:30: 22:5f:1b:6e:31:f5:89:27:d0:f2:3b:39:ba:f5:a0: 93:49:65:87:2f:ee:a1:90:25:e9:bc:a0:39:fa:ba: de:0a:96:36:57:87:3f:1c:e2:23:54:fb:bc:82:6f: 83:bf:bd:1d:ba:27:c5:05:98:52:35:0b:76:67:72: 17:d5:8b:07:f8:89:b1:4c:61:af:93:b6:e4:d6:0f: 1a:fe:5c:a7:00:f2:ea:7a:48:4a:ef:ab:8d:92:7c: 0c:24:a9:07:50:62:54:50:13:c9:bf:63:54:46:0c: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:4D:1F:65:86:FF:35:AC:6C:25:65:D4:7A:3A:24:ED:07:05:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:93:9e:ac:c6:cd:74:cb:c3:c9:6a:a6:7c:9a:1c:f3:54:31: 14:3f:b7:5b:2a:d2:50:2d:f3:e4:7c:71:31:a2:84:c2:e8:ee: 61:63:59:3e:22:5a:51:73:b4:b4:a4:df:f4:de:80:69:c3:77: c1:7c:b2:90:3b:d2:1f:ff:da:10:22:e2:80:cb:99:69:1d:e9: c4:f2:f2:19:e3:85:fd:f9:56:0a:e3:02:c8:f1:5e:9f:89:93: 7c:f7:21:79:27:6c:c8:df:91:f9:8d:77:90:0a:e6:5e:bd:ef: e3:80:79:91:53:57:0b:d8:2f:e6:86:13:88:c2:0c:5e:38:b1: 6d:fb:78:99:e6:95:79:94:cc:cd:ae:b3:35:c7:b7:8c:bb:8b: 11:75:b8:f3:88:e3:bc:2c:03:14:48:01:f6:4e:d7:3c:e6:08: 8a:c2:42:95:f9:ef:d6:5f:e1:02:52:95:b1:07:bb:46:9a:86: c6:cf:c1:25:ec:b7:5b:c0:79:8a:2b:23:47:9e:36:82:f3:53: de:a1:65:3d:b5:48:3e:1f:15:af:34:e4:31:6e:03:53:1c:df: 31:97:b5:fe:0a:2c:4d:d6:5e:d5:47:90:63:bd:be:f8:5f:2f: 9d:e1:4a:fa:27:b6:3c:95:28:80:d2:b8:43:87:e6:bc:25:d4: ce:5f:2b:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4J62+SlI+MQEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNjIyMDAwMFowLzEtMCsGA1UEAxMk MmZjZDM0Y2MtMmQzNi00YTAwLThmYWEtZmFlNTcwYmVkYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQMzOE1iH/g2XYSsnQIYwOXRzgio5HAj31zk o1j6fM/G2OqphizjKAJlD49E7vSqFil5aCT9zkb/CQU4ww5G8848U22USYdisgyJ tVKayBDZqCNCq+Te2InGS/H0eHq9QP+ukSdcTPmoP3qQY0+vhAEApUwvuSAuZ+iU aKNdJUCri1T2NWF4YzkEbX7nRb9AA+IbszAiXxtuMfWJJ9DyOzm69aCTSWWHL+6h kCXpvKA5+rreCpY2V4c/HOIjVPu8gm+Dv70duifFBZhSNQt2Z3IX1YsH+ImxTGGv k7bk1g8a/lynAPLqekhK76uNknwMJKkHUGJUUBPJv2NURgyrSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEUTTR9lhv81rGwlZdR6OiTtBwViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvZDY4YTJkMWQtMmMzNi00 YTFkLTg4YTctMGMzMGQyNTdmMzg2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgk56sxs10y8PJaqZ8mhzz VDEUP7dbKtJQLfPkfHExooTC6O5hY1k+IlpRc7S0pN/03oBpw3fBfLKQO9If/9oQ IuKAy5lpHenE8vIZ44X9+VYK4wLI8V6fiZN89yF5J2zI35H5jXeQCuZeve/jgHmR U1cL2C/mhhOIwgxeOLFt+3iZ5pV5lMzNrrM1x7eMu4sRdbjziOO8LAMUSAH2Ttc8 5giKwkKV+e/WX+ECUpWxB7tGmobGz8El7LdbwHmKKyNHnjaC81PeoWU9tUg+HxWv NOQxbgNTHN8xl7X+CixN1l7VR5Bjvb74Xy+d4Ur6J7Y8lSiA0rhDh+a8JdTOXyuA -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:17 2025 by rpki-client