$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft File: ebf21e98-3294-441a-9899-9d935ac6c3d1.mft (raw, json) Hash identifier: gpbZA+VCsHZ/Yr/mHeMiAlqdkZtd5XVNY8RSgIFQCdA= Subject key identifier: CD:CB:6B:54:DA:F1:8A:1B:DC:B3:A3:97:1F:2B:2C:8B:EA:08:F5:B3 Authority key identifier: 85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A Certificate issuer: /CN=ebf21e98-3294-441a-9899-9d935ac6c3d1 Certificate serial: 010D0C9F4328584BC01C62CECAF23DE2015B2D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft Manifest number: 010D0C9F43285848D6C4AE5E8894600F32944554 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: a1333bf7-8497-3910-9db7-0dbeb835edb7.roa (hash: sDCZEO5rC0ETq2NAYvZuihTMsVNelcspAtbwkAuOsCw=) 2: ebf21e98-3294-441a-9899-9d935ac6c3d1.crl (hash: t+Np7VujERkyaDvJ0E999qxFGcMd02ZJWg8JcDyPo1k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:62:ce:ca:f2:3d:e2:01:5b:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf21e98-3294-441a-9899-9d935ac6c3d1 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=48d11c35-95e2-42d3-918f-c8f6e3757430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:da:0f:41:e8:01:f2:ee:1b:e9:06:bd:d5: d5:6d:bb:e6:19:8b:48:8f:79:f3:4b:a8:6b:30:50: b5:87:2e:0f:98:7b:a6:c1:c7:dd:9e:90:18:bf:bf: 8b:e0:8d:c4:82:17:31:3f:e3:b4:89:60:ae:1f:33: ba:0c:31:5a:5b:75:65:0c:b3:0d:c3:f4:34:9b:a0: e4:ee:e0:b9:57:d7:99:59:9d:fe:0a:87:23:4a:f4: 1c:ba:17:7b:51:31:d8:c5:6a:4d:b1:80:4c:10:96: 5d:5e:88:4b:3a:cc:27:9d:72:8e:2b:d6:fa:b8:4c: 75:69:de:ce:81:be:b5:ae:63:e3:35:ce:48:ee:87: 6b:b7:c1:57:a8:88:b0:19:3c:12:75:93:79:e7:8b: 81:9a:b5:b9:fb:9d:a0:72:ba:ca:eb:05:7d:7d:7a: cc:52:af:87:a5:ab:43:94:61:bd:fe:c3:fa:5a:d5: e4:c0:e1:5b:ce:4a:da:5f:16:b7:9d:de:d1:50:e3: bb:45:0f:27:59:50:78:09:cc:54:ea:f8:f0:0b:94: a8:a3:90:ad:39:9b:97:30:27:0d:0f:14:df:8e:64: da:75:f3:a2:75:76:63:f7:f2:86:07:74:21:45:d2: 23:c6:fd:3b:21:5d:fd:c4:13:53:77:3c:43:6a:64: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CB:6B:54:DA:F1:8A:1B:DC:B3:A3:97:1F:2B:2C:8B:EA:08:F5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl X509v3 Authority Key Identifier: keyid:85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:fa:69:f5:e5:f0:ac:97:89:60:9f:ca:2a:fa:57:7a:b1:01: fc:96:0e:c1:66:df:8f:9c:e7:55:80:19:40:c5:c9:3c:7a:9d: 71:e4:32:51:5c:27:07:e2:4f:d7:72:58:39:e5:56:7c:ad:a9: e4:94:f6:5b:cb:81:cd:69:17:53:8e:3a:37:8e:8e:e2:b6:e9: 6d:2a:b7:98:7d:93:8c:8a:29:44:4d:db:8d:8d:54:6a:27:bc: 60:ca:6d:54:e5:25:f2:78:d8:ae:73:43:36:38:08:67:ca:74: bc:a3:5e:45:4b:9d:a3:ff:42:03:b9:72:54:a9:3e:80:6d:11: 5d:9e:67:16:eb:41:c1:13:ed:ff:d9:8a:09:d6:c8:76:df:53: 48:7f:41:9d:00:19:d9:0d:d6:64:da:68:5d:f5:c2:4c:70:20: d1:fe:d2:2a:da:73:3a:14:14:09:9e:49:42:00:26:8c:3c:98: 55:23:71:e6:58:d4:2b:ed:bb:6d:43:08:4b:b4:d7:d6:79:fb: 99:e0:bc:9b:3e:1d:21:2a:57:51:d1:c5:ef:2e:cb:88:17:2e: 8c:a3:b9:48:8e:6d:97:97:46:4b:30:c2:06:4d:4b:44:ab:00: d8:5e:5b:30:d9:f9:4b:f1:fd:13:01:c0:f8:92:ba:0c:38:23: 0c:1a:bc:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGLOyvI94gFbLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmMjFlOTgtMzI5NC00NDFhLTk4OTktOWQ5MzVhYzZj M2QxMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk NDhkMTFjMzUtOTVlMi00MmQzLTkxOGYtYzhmNmUzNzU3NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDbaD0HoAfLuG+kGvdXVbbvmGYtIj3nzS6hr MFC1hy4PmHumwcfdnpAYv7+L4I3EghcxP+O0iWCuHzO6DDFaW3VlDLMNw/Q0m6Dk 7uC5V9eZWZ3+CocjSvQcuhd7UTHYxWpNsYBMEJZdXohLOswnnXKOK9b6uEx1ad7O gb61rmPjNc5I7odrt8FXqIiwGTwSdZN554uBmrW5+52gcrrK6wV9fXrMUq+HpatD lGG9/sP6WtXkwOFbzkraXxa3nd7RUOO7RQ8nWVB4CcxU6vjwC5Soo5CtOZuXMCcN DxTfjmTadfOidXZj9/KGB3QhRdIjxv07IV39xBNTdzxDamQ5QQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM3La1Ta8Yob3LOjlx8rLIvqCPWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmYy MWU5OC0zMjk0LTQ0MWEtOTg5OS05ZDkzNWFjNmMzZDEvZWJmMjFlOTgtMzI5NC00 NDFhLTk4OTktOWQ5MzVhYzZjM2QxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmMjFlOTgtMzI5NC00NDFhLTk4 OTktOWQ5MzVhYzZjM2QxL2ViZjIxZTk4LTMyOTQtNDQxYS05ODk5LTlkOTM1YWM2 YzNkMS5jcmwwHwYDVR0jBBgwFoAUhXO3PX9bpPXChYn0vy/mlZ3TpAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmYyMWU5OC0zMjk0LTQ0MWEtOTg5OS05ZDkz NWFjNmMzZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0+mn15fCsl4lgn8oq+ld6 sQH8lg7BZt+PnOdVgBlAxck8ep1x5DJRXCcH4k/Xclg55VZ8ranklPZby4HNaRdT jjo3jo7itultKreYfZOMiilETduNjVRqJ7xgym1U5SXyeNiuc0M2OAhnynS8o15F S52j/0IDuXJUqT6AbRFdnmcW60HBE+3/2YoJ1sh231NIf0GdABnZDdZk2mhd9cJM cCDR/tIq2nM6FBQJnklCACaMPJhVI3HmWNQr7bttQwhLtNfWefuZ4LybPh0hKldR 0cXvLsuIFy6Mo7lIjm2Xl0ZLMMIGTUtEqwDYXlsw2flL8f0TAcD4kroMOCMMGryg -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:36 2025 by rpki-client