$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft File: 85cb1f45-c822-4e3f-9234-71ff680b968d.mft (raw, json) Hash identifier: uAJfA2QV6S+lkAjTCtSe+HbTjofwkButnQ4zkS0nEAw= Subject key identifier: 85:FE:52:86:AA:11:85:70:AE:6B:A9:22:B6:39:21:07:B1:6B:D6:56 Authority key identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C Certificate issuer: /CN=85cb1f45-c822-4e3f-9234-71ff680b968d Certificate serial: 010D0C9F4328584BBFFEAAA28E8DAB327CB0BF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft Manifest number: 010D0C9F4328584073A81B397FCD79EDE91F06C7 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 78911354-ca2f-3462-b52c-2ae7025072db.roa (hash: +N4i9tBLfPZb014GAo184KG/SXv5y1+sCjDBiHz8u3A=) 2: 85cb1f45-c822-4e3f-9234-71ff680b968d.crl (hash: DcE94lexToNiAqnBQ7nraFrLl5/JtN/v3hkNVmp6Mvc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:aa:a2:8e:8d:ab:32:7c:b0:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85cb1f45-c822-4e3f-9234-71ff680b968d Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=61f3d6ba-61e6-4203-b181-d662ea21ed22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:96:97:46:b7:d3:0d:72:a2:00:37:4c:77: 04:11:69:ec:79:77:06:cb:1c:5e:fb:54:eb:e0:e7: bc:8f:3a:42:0e:e1:33:75:b9:a9:e4:4e:0b:7f:47: c3:7c:c9:b8:4f:c0:1a:83:f2:0b:7b:42:7c:93:15: 84:dd:9b:5e:6c:60:5f:e1:2b:5d:d2:9c:20:ca:21: 61:18:c5:0c:91:45:b9:c7:2c:cf:fa:c3:b9:93:38: c3:7c:65:e2:73:4d:43:e8:1a:4a:3a:c2:b4:2f:7e: 5e:3d:dd:fa:d7:53:8b:36:fb:7b:6a:b6:1a:d1:98: 3a:ab:3c:f7:e8:95:b8:bd:45:5c:44:7e:43:60:92: 43:13:ca:4e:76:af:7d:74:a4:fd:b0:a6:d6:b5:fd: 2f:fd:26:6d:a8:cf:e6:2d:44:2f:70:d7:42:eb:54: 0d:4e:d0:c4:5a:e8:7c:58:6b:e5:66:46:b0:1c:dd: 1c:b0:f7:81:47:2e:71:9a:6e:f4:77:12:ca:44:c8: 3f:72:24:0f:c7:6e:31:08:c8:c4:25:1c:55:fc:cc: 7a:42:cc:3f:48:a8:99:9f:64:58:95:ef:38:06:3e: 14:62:17:04:94:9c:44:64:ba:01:16:c0:3e:42:db: 4e:1d:9c:5c:1e:63:f9:a9:08:64:73:6a:07:c0:c6: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FE:52:86:AA:11:85:70:AE:6B:A9:22:B6:39:21:07:B1:6B:D6:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl X509v3 Authority Key Identifier: keyid:6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:76:3e:f0:e5:28:aa:24:8e:76:2a:59:d3:7f:7f:db:84:d2: 3b:ee:34:bc:04:c7:aa:d9:b8:24:97:8d:d0:74:ac:b7:fa:06: fa:91:61:f9:76:95:fa:b4:a6:4a:5e:37:ba:77:41:46:4c:17: 88:75:2f:76:59:66:53:af:72:f3:4d:ee:b1:8e:67:ac:04:6f: 5b:29:36:37:88:1c:ae:b4:f9:eb:e1:16:e9:30:b3:5e:dd:e3: 0a:f9:5b:10:ad:af:4c:ca:5c:27:61:dc:1f:8c:b1:ef:4f:84: df:b4:ea:f7:c1:fc:43:ff:9f:3e:35:bb:63:c5:52:7f:0c:c2: 76:5b:11:3f:5a:76:81:57:5c:37:ef:cc:34:e2:3a:fc:f4:be: 21:99:86:7c:66:8f:d6:8f:df:2c:d6:7f:2f:ee:9e:76:e4:7f: 2d:21:bb:94:06:74:7c:5d:06:a0:4c:62:07:e8:87:b9:de:bf: cb:f2:fb:17:0f:a2:fa:ff:e6:50:d2:99:cf:c1:77:70:7c:12: 32:5d:a8:e7:a9:ec:79:d0:26:8e:4b:08:0f:1a:c8:d9:e2:d9: a2:c4:a5:d2:14:aa:fe:2e:6a:34:d6:ea:11:e3:b9:de:2e:82: ce:b4:0d:fb:e9:ab:11:ad:a6:b3:48:9b:fa:a8:7e:ee:c1:6a: 83:2b:f4:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qqijo2rMnywv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVjYjFmNDUtYzgyMi00ZTNmLTkyMzQtNzFmZjY4MGI5 NjhkMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk NjFmM2Q2YmEtNjFlNi00MjAzLWIxODEtZDY2MmVhMjFlZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknKWl0a30w1yogA3THcEEWnseXcGyxxe+1Tr 4Oe8jzpCDuEzdbmp5E4Lf0fDfMm4T8Aag/ILe0J8kxWE3ZtebGBf4Std0pwgyiFh GMUMkUW5xyzP+sO5kzjDfGXic01D6BpKOsK0L35ePd3611OLNvt7arYa0Zg6qzz3 6JW4vUVcRH5DYJJDE8pOdq99dKT9sKbWtf0v/SZtqM/mLUQvcNdC61QNTtDEWuh8 WGvlZkawHN0csPeBRy5xmm70dxLKRMg/ciQPx24xCMjEJRxV/Mx6Qsw/SKiZn2RY le84Bj4UYhcElJxEZLoBFsA+QttOHZxcHmP5qQhkc2oHwMbSOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIX+UoaqEYVwrmupIrY5IQexa9ZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NWNi MWY0NS1jODIyLTRlM2YtOTIzNC03MWZmNjgwYjk2OGQvODVjYjFmNDUtYzgyMi00 ZTNmLTkyMzQtNzFmZjY4MGI5NjhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODVjYjFmNDUtYzgyMi00ZTNmLTky MzQtNzFmZjY4MGI5NjhkLzg1Y2IxZjQ1LWM4MjItNGUzZi05MjM0LTcxZmY2ODBi OTY4ZC5jcmwwHwYDVR0jBBgwFoAUawphPurgwHJ6dFRINAdEglbaBJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NWNiMWY0NS1jODIyLTRlM2YtOTIzNC03MWZm NjgwYjk2OGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwdj7w5SiqJI52KlnTf3/b hNI77jS8BMeq2bgkl43QdKy3+gb6kWH5dpX6tKZKXje6d0FGTBeIdS92WWZTr3Lz Te6xjmesBG9bKTY3iByutPnr4RbpMLNe3eMK+VsQra9MylwnYdwfjLHvT4TftOr3 wfxD/58+NbtjxVJ/DMJ2WxE/WnaBV1w378w04jr89L4hmYZ8Zo/Wj98s1n8v7p52 5H8tIbuUBnR8XQagTGIH6Ie53r/L8vsXD6L6/+ZQ0pnPwXdwfBIyXajnqex50CaO SwgPGsjZ4tmixKXSFKr+Lmo01uoR47neLoLOtA376asRraazSJv6qH7uwWqDK/Tb -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:24 2025 by rpki-client