$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.mft File: 87132220-d69c-4e1c-9689-e9ecb5a1d847.mft (raw, json) Hash identifier: QeDwcs5US/lkZQLGvWqDC1Wv0w9/6PyD2EyWiybGixc= Subject key identifier: BA:AB:CD:19:27:50:37:7A:13:66:04:EE:E0:0F:4F:9B:CE:1E:8A:24 Authority key identifier: 12:E6:93:7E:46:63:C3:D9:3A:4D:D3:DB:68:2B:F6:89:C7:15:F8:22 Certificate issuer: /CN=87132220-d69c-4e1c-9689-e9ecb5a1d847 Certificate serial: 010D0C9F4328584BBFC3102AA2E5B2CED51195C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.mft Manifest number: 010D0C9F43285849514962704FBD7F0CC9925260 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 037252f7-a099-30b5-8c97-1f4b1f9549ac.roa (hash: rWWMPg6Q5OcdD1ho4VyhTMPnaAp+LvQtzsewvZdeqVg=) 2: 87132220-d69c-4e1c-9689-e9ecb5a1d847.crl (hash: wA6Kjj/LRe8RIjpFP+YLJH95urSX+8VIqTDVQwp3WtQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:10:2a:a2:e5:b2:ce:d5:11:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87132220-d69c-4e1c-9689-e9ecb5a1d847 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=34c689e5-51d2-4795-9a55-d4e4db3857a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:a0:59:cd:e3:a3:75:d7:ea:d2:6d:ae:7c: 26:a1:79:0c:d9:c1:bf:9a:11:1b:6b:02:a0:1d:11: 32:10:2d:be:43:78:e4:3b:29:be:43:a0:85:0f:b5: 37:8c:6e:8b:df:8b:1c:c3:7e:ed:cb:6c:b2:d5:d8: de:18:d0:e9:51:80:cc:1c:35:d7:90:e0:50:70:9f: dc:0a:f6:a1:ce:a1:70:c7:6b:b9:a4:97:79:30:08: dd:ff:81:24:95:c6:c5:ae:49:ad:f8:01:d9:07:2c: 63:09:f3:89:99:cf:eb:34:99:83:cc:5d:09:f2:b9: 94:4c:b9:36:e7:6a:f1:8c:bc:2c:b1:de:5b:7c:43: 47:28:b7:c2:83:bd:99:e2:fc:7a:b3:23:55:87:2a: 71:8c:92:ca:69:f8:a9:60:1f:b8:8d:09:8c:51:76: ca:9d:49:2b:52:17:ec:78:4a:34:85:c0:a4:7b:6e: 24:49:27:c2:f3:f2:5f:7e:22:de:c2:c8:86:56:66: b4:7c:93:a5:90:ed:34:54:02:ba:fc:ee:c5:ef:4f: 4d:f7:08:64:40:29:1c:c4:71:8a:c0:cb:2c:3a:b2: d1:2a:11:92:8f:2c:73:52:81:95:f1:ee:b5:b1:fc: ed:2d:2c:49:19:ab:34:2c:67:c6:52:9e:ed:12:09: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:CD:19:27:50:37:7A:13:66:04:EE:E0:0F:4F:9B:CE:1E:8A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.crl X509v3 Authority Key Identifier: keyid:12:E6:93:7E:46:63:C3:D9:3A:4D:D3:DB:68:2B:F6:89:C7:15:F8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6e:d3:85:d3:b6:b6:b0:21:cf:00:d7:ad:00:f7:dc:32:54: 4a:f1:78:6d:7f:2b:d1:28:bf:c5:e9:ba:2c:d6:d4:fc:1b:9e: d2:2e:bc:88:5c:40:7f:34:8b:f7:b0:a0:f2:2e:47:93:26:e5: f1:23:48:98:d8:bb:0c:c9:4a:6d:34:bb:3b:d7:5f:50:a1:09: 04:1e:82:26:86:b1:ed:58:c9:16:12:72:43:6b:20:50:05:55: a5:8a:d6:2c:f8:80:84:19:bc:64:70:e1:c6:7e:43:f3:f9:76: 3e:ee:d0:f3:bc:bc:97:f4:8d:e9:9e:38:5d:99:96:82:49:38: 6c:a3:26:70:07:05:2e:49:c8:cb:f8:29:4f:3a:f2:43:21:63: 07:60:c0:92:73:d0:9e:5a:16:0c:d5:7c:49:71:a1:5a:96:de: 24:a4:4b:ba:32:00:2d:9f:fa:d2:5f:ea:19:88:1c:cd:d1:c8: ea:e7:a0:58:aa:2b:74:80:b4:41:42:44:fd:c5:14:0a:80:ba: 8e:92:bf:bc:23:d2:2a:3f:be:77:09:cd:b0:3e:4a:4b:a3:be: 3a:44:6e:21:0e:ed:84:15:28:7b:82:8d:aa:dc:6c:2d:38:35: d9:1b:36:cd:98:f0:8b:d2:06:d6:3d:2c:c1:68:fd:df:20:7b: f2:ce:e3:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxAqouWyztURlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxMzIyMjAtZDY5Yy00ZTFjLTk2ODktZTllY2I1YTFk ODQ3MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk MzRjNjg5ZTUtNTFkMi00Nzk1LTlhNTUtZDRlNGRiMzg1N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwqgWc3jo3XX6tJtrnwmoXkM2cG/mhEbawKg HREyEC2+Q3jkOym+Q6CFD7U3jG6L34scw37ty2yy1djeGNDpUYDMHDXXkOBQcJ/c CvahzqFwx2u5pJd5MAjd/4EklcbFrkmt+AHZByxjCfOJmc/rNJmDzF0J8rmUTLk2 52rxjLwssd5bfENHKLfCg72Z4vx6syNVhypxjJLKafipYB+4jQmMUXbKnUkrUhfs eEo0hcCke24kSSfC8/JffiLewsiGVma0fJOlkO00VAK6/O7F709N9whkQCkcxHGK wMssOrLRKhGSjyxzUoGV8e61sfztLSxJGas0LGfGUp7tEgkjCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLqrzRknUDd6E2YE7uAPT5vOHookMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NzEz MjIyMC1kNjljLTRlMWMtOTY4OS1lOWVjYjVhMWQ4NDcvODcxMzIyMjAtZDY5Yy00 ZTFjLTk2ODktZTllY2I1YTFkODQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODcxMzIyMjAtZDY5Yy00ZTFjLTk2 ODktZTllY2I1YTFkODQ3Lzg3MTMyMjIwLWQ2OWMtNGUxYy05Njg5LWU5ZWNiNWEx ZDg0Ny5jcmwwHwYDVR0jBBgwFoAUEuaTfkZjw9k6TdPbaCv2iccV+CIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NzEzMjIyMC1kNjljLTRlMWMtOTY4OS1lOWVj YjVhMWQ4NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQbtOF07a2sCHPANetAPfc MlRK8XhtfyvRKL/F6bos1tT8G57SLryIXEB/NIv3sKDyLkeTJuXxI0iY2LsMyUpt NLs7119QoQkEHoImhrHtWMkWEnJDayBQBVWlitYs+ICEGbxkcOHGfkPz+XY+7tDz vLyX9I3pnjhdmZaCSThsoyZwBwUuScjL+ClPOvJDIWMHYMCSc9CeWhYM1XxJcaFa lt4kpEu6MgAtn/rSX+oZiBzN0cjq56BYqit0gLRBQkT9xRQKgLqOkr+8I9IqP753 Cc2wPkpLo746RG4hDu2EFSh7go2q3GwtODXZGzbNmPCL0gbWPSzBaP3fIHvyzuOt -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:13 2025 by rpki-client