$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft File: dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft (raw, json) Hash identifier: 0VQJ3zfmT8XqMwMK63TaLR0Rx3K88oV+s4g8f99cmsw= Subject key identifier: A9:52:B8:96:ED:C5:84:C9:3E:B9:6F:23:B2:E8:0A:DF:24:60:8B:30 Authority key identifier: 52:80:D5:17:A7:55:89:70:B3:36:F8:F7:3F:6A:F7:60:23:F8:E1:C2 Certificate issuer: /CN=dad115b4-de3c-4a3c-8279-70a2d0d0f78d Certificate serial: 010D0C9F4328584BBFE0D6A66913F3AE692A0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft Manifest number: 010D0C9F432858492CCED7EA67200334E7592AB1 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa (hash: 7f6OLldyvP7yxdd8dlO5f6c9g13JptnwxHxkUb7Kyaw=) 2: dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl (hash: RsmY9aWHtCVYoQiavucvhdlFsKLN8IUlIWllQSkfryw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d6:a6:69:13:f3:ae:69:2a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dad115b4-de3c-4a3c-8279-70a2d0d0f78d Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=726eb533-b2e2-4d04-bf52-b47f10252e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:51:25:03:7c:ba:ed:d9:f6:9b:2f:65:11: 8b:ee:b0:06:14:7f:0c:54:13:3d:d4:07:64:72:ff: 47:66:d0:e6:90:33:8d:7b:7b:45:1e:5f:31:c1:ed: 6b:f1:ba:0c:54:e7:4f:e7:62:fd:2b:b7:1c:b8:70: 48:14:8e:d3:12:2e:7e:1d:0a:81:b7:d9:dd:ec:b8: c3:04:7b:3f:3b:8a:eb:e4:72:fa:09:f3:7f:59:ec: 3a:d0:93:ce:16:12:81:7f:3d:7f:59:74:81:85:b5: 5e:c4:35:50:e1:0c:47:09:76:a5:cf:2c:3e:b2:15: 64:da:bb:16:c4:48:75:2d:86:15:46:03:4b:3e:da: e6:26:fe:99:ca:7f:24:0b:39:5f:51:67:1e:55:73: 3c:11:76:1c:45:c7:03:fb:72:c0:c9:aa:1b:af:17: d2:78:e5:d1:2f:65:68:a6:0a:a6:19:bb:0a:77:f7: 18:c8:92:2e:2c:fd:63:1d:20:54:0b:df:cf:06:e0: 3c:d0:74:01:ee:26:96:b7:ea:d1:80:31:17:82:d6: ba:8a:5d:3a:37:92:56:48:d9:c1:10:a8:55:4c:f7: 7c:a0:75:e0:e9:24:3b:04:16:fd:57:ff:78:28:23: 75:aa:64:4c:d4:25:ac:53:26:04:1d:2c:0c:e0:59: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:B8:96:ED:C5:84:C9:3E:B9:6F:23:B2:E8:0A:DF:24:60:8B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl X509v3 Authority Key Identifier: keyid:52:80:D5:17:A7:55:89:70:B3:36:F8:F7:3F:6A:F7:60:23:F8:E1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:25:cd:af:37:27:02:0a:c8:49:72:44:af:a0:7f:e7:39:42: 46:d3:64:55:9d:80:2b:8f:e7:19:b5:6c:9e:50:c3:96:e2:aa: ca:a8:94:79:82:ba:19:e4:7f:24:2a:cc:b7:ae:c8:0b:70:cc: f9:8d:93:df:59:7e:65:08:65:34:fc:64:f9:ba:00:62:78:3d: 90:9b:a8:93:da:c4:e1:33:9e:30:a3:79:1f:4e:d0:01:df:4f: 02:e7:8e:b8:f9:0f:14:9b:9c:f8:26:30:c4:18:a3:17:08:e5: 54:f0:a9:dc:5e:19:94:c0:b1:6a:3e:25:22:6b:2b:d9:dd:16: af:94:30:0f:31:28:97:79:4f:e6:98:a9:e8:eb:86:5e:93:f0: 2f:40:83:8a:39:20:88:04:be:7a:f4:88:aa:d4:2b:c2:af:3a: 19:4f:47:4e:08:15:7d:84:f4:dd:39:6f:3d:d0:0c:e9:c6:0d: 12:c7:1e:fd:26:e2:10:3a:fd:b6:e0:af:c1:b9:6b:8b:70:88: 3c:7e:6f:65:4a:78:bf:20:e3:48:50:7f:46:3c:52:c2:1c:94: ff:17:7e:b9:a4:1f:f7:d1:d4:fa:bb:c6:c1:7a:7c:09:94:74: b7:ce:bf:98:6d:96:e5:2f:0d:57:14:8e:0c:b7:44:39:7e:72: ed:96:be:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NamaRPzrmkqDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFkMTE1YjQtZGUzYy00YTNjLTgyNzktNzBhMmQwZDBm NzhkMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NzI2ZWI1MzMtYjJlMi00ZDA0LWJmNTItYjQ3ZjEwMjUyZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsZRJQN8uu3Z9psvZRGL7rAGFH8MVBM91Adk cv9HZtDmkDONe3tFHl8xwe1r8boMVOdP52L9K7ccuHBIFI7TEi5+HQqBt9nd7LjD BHs/O4rr5HL6CfN/Wew60JPOFhKBfz1/WXSBhbVexDVQ4QxHCXalzyw+shVk2rsW xEh1LYYVRgNLPtrmJv6Zyn8kCzlfUWceVXM8EXYcRccD+3LAyaobrxfSeOXRL2Vo pgqmGbsKd/cYyJIuLP1jHSBUC9/PBuA80HQB7iaWt+rRgDEXgta6il06N5JWSNnB EKhVTPd8oHXg6SQ7BBb9V/94KCN1qmRM1CWsUyYEHSwM4FkWPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKlSuJbtxYTJPrlvI7LoCt8kYIswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYWQx MTViNC1kZTNjLTRhM2MtODI3OS03MGEyZDBkMGY3OGQvZGFkMTE1YjQtZGUzYy00 YTNjLTgyNzktNzBhMmQwZDBmNzhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGFkMTE1YjQtZGUzYy00YTNjLTgy NzktNzBhMmQwZDBmNzhkL2RhZDExNWI0LWRlM2MtNGEzYy04Mjc5LTcwYTJkMGQw Zjc4ZC5jcmwwHwYDVR0jBBgwFoAUUoDVF6dViXCzNvj3P2r3YCP44cIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYWQxMTViNC1kZTNjLTRhM2MtODI3OS03MGEy ZDBkMGY3OGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKJc2vNycCCshJckSvoH/n OUJG02RVnYArj+cZtWyeUMOW4qrKqJR5groZ5H8kKsy3rsgLcMz5jZPfWX5lCGU0 /GT5ugBieD2Qm6iT2sThM54wo3kfTtAB308C5464+Q8Um5z4JjDEGKMXCOVU8Knc XhmUwLFqPiUiayvZ3RavlDAPMSiXeU/mmKno64Zek/AvQIOKOSCIBL569Iiq1CvC rzoZT0dOCBV9hPTdOW890Azpxg0Sxx79JuIQOv224K/BuWuLcIg8fm9lSni/IONI UH9GPFLCHJT/F365pB/30dT6u8bBenwJlHS3zr+YbZblLw1XFI4Mt0Q5fnLtlr78 -----END CERTIFICATE-----Generated at Wed Nov 5 08:38:42 2025 by rpki-client