$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft File: b65380d4-1db9-4ed1-a660-7ee094b9800a.mft (raw, json) Hash identifier: hCUO3FoW0W9oUtGmYP0BKZp+sPugBHmlRY3XpDI+eTU= Subject key identifier: 72:82:3D:0E:AB:90:CC:E2:2C:93:51:32:9B:64:AC:B4:1A:A2:6B:19 Authority key identifier: 41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46 Certificate issuer: /CN=b65380d4-1db9-4ed1-a660-7ee094b9800a Certificate serial: 010D0C9F4328584BBFC31093451D982975915740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft Manifest number: 010D0C9F43285841235B88DC44921301B94A9A66 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 885a81eb-a2d9-31e9-9eed-27d6c0cc8deb.roa (hash: Q21GA+ODy1Vmlgfc4KmBOjv2kS+56OG5nVyvoupDO34=) 2: b65380d4-1db9-4ed1-a660-7ee094b9800a.crl (hash: vifOOlJkQd8E0/RdcNTWk0DEZ01W0lo2a9ZCqwrqlgI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:10:93:45:1d:98:29:75:91:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b65380d4-1db9-4ed1-a660-7ee094b9800a Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=0d244eac-56f9-49b8-af1a-489641605189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:23:33:5e:91:a8:53:2e:3b:e3:c1:07:35: 0b:15:58:8a:ed:72:4e:f3:06:71:d5:fe:08:53:1a: 3e:c9:68:a5:e9:f2:ae:bc:25:de:cd:90:3a:4d:9a: 54:9c:a1:16:3d:63:72:73:16:c4:c6:e6:7a:11:8d: 84:c7:d5:71:55:57:99:95:c1:22:25:23:46:ab:22: 49:9a:1f:61:26:46:97:db:b9:9d:23:7b:92:0b:1f: 9e:c4:22:e0:0e:31:b3:d3:ca:f3:ba:fa:75:23:9a: bd:52:89:f1:e7:70:a9:9c:bb:44:a4:1c:25:de:03: 25:78:3b:2a:a9:76:15:a9:3f:71:1e:86:4f:d1:65: d7:0b:70:89:69:85:71:fe:3d:15:10:ff:f2:9c:43: 39:bb:e6:57:ad:b7:52:5c:58:d1:5f:23:8b:3c:52: 0f:a6:8b:8b:23:42:77:d3:21:89:82:b2:73:b1:ea: e5:f5:dd:87:fa:0e:b9:39:92:f1:2c:ed:87:6f:5e: 04:73:76:d3:36:50:53:aa:2b:6c:6c:5b:2f:c1:06: f0:c1:6c:49:6c:bd:75:82:0a:ea:26:0c:70:e8:37: 2a:56:73:43:65:dc:aa:64:96:5d:b9:d7:9e:10:92: 2e:e5:5a:62:27:89:40:f1:e9:13:d1:fc:9d:f2:f2: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:82:3D:0E:AB:90:CC:E2:2C:93:51:32:9B:64:AC:B4:1A:A2:6B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.crl X509v3 Authority Key Identifier: keyid:41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:94:99:19:de:91:01:48:82:86:f9:7a:f0:f5:75:62:f2:0a: e5:e0:a0:db:f7:67:24:c2:a4:01:04:05:80:82:ef:dc:d4:08: a6:85:82:56:96:f5:4f:c0:7e:71:4d:ad:0f:e5:8b:49:09:1d: 45:2d:e9:d5:ac:5f:05:10:5c:59:b5:4d:2d:af:d3:04:ad:74: 7b:5c:72:2a:86:d1:13:1e:71:37:a3:fc:0d:63:5a:4d:eb:05: a5:76:a4:ee:b9:4d:4e:da:8d:cf:6d:92:7d:91:e3:94:16:f3: 1e:6e:93:af:39:45:54:93:66:98:7a:52:d6:56:23:54:f9:d4: 87:aa:f6:b3:8b:04:75:86:fb:e4:52:d7:d6:62:ed:43:aa:ee: 07:6b:56:6d:9b:06:f0:84:4d:c0:88:c5:ce:a7:ec:25:6c:9c: e2:82:ca:fa:58:6d:9c:42:0e:c1:f0:a4:4d:ab:5f:a0:a1:91: c5:72:83:14:2f:17:83:6a:a9:f9:34:44:09:e0:6a:4e:85:a9: a6:cd:11:57:82:21:68:61:91:61:68:f8:9b:3e:72:22:29:4d: 19:59:c3:00:66:bb:b9:3d:f5:57:e2:c7:b8:18:cd:bb:ac:bf: 11:79:54:a3:97:60:17:13:66:ed:70:9c:54:98:69:e4:b9:1b: b5:93:56:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxCTRR2YKXWRV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1MzgwZDQtMWRiOS00ZWQxLWE2NjAtN2VlMDk0Yjk4 MDBhMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk MGQyNDRlYWMtNTZmOS00OWI4LWFmMWEtNDg5NjQxNjA1MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuycjM16RqFMuO+PBBzULFViK7XJO8wZx1f4I Uxo+yWil6fKuvCXezZA6TZpUnKEWPWNycxbExuZ6EY2Ex9VxVVeZlcEiJSNGqyJJ mh9hJkaX27mdI3uSCx+exCLgDjGz08rzuvp1I5q9Uonx53CpnLtEpBwl3gMleDsq qXYVqT9xHoZP0WXXC3CJaYVx/j0VEP/ynEM5u+ZXrbdSXFjRXyOLPFIPpouLI0J3 0yGJgrJzserl9d2H+g65OZLxLO2Hb14Ec3bTNlBTqitsbFsvwQbwwWxJbL11ggrq Jgxw6DcqVnNDZdyqZJZdudeeEJIu5VpiJ4lA8ekT0fyd8vL9LQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHKCPQ6rkMziLJNRMptkrLQaomsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNjUz ODBkNC0xZGI5LTRlZDEtYTY2MC03ZWUwOTRiOTgwMGEvYjY1MzgwZDQtMWRiOS00 ZWQxLWE2NjAtN2VlMDk0Yjk4MDBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjY1MzgwZDQtMWRiOS00ZWQxLWE2 NjAtN2VlMDk0Yjk4MDBhL2I2NTM4MGQ0LTFkYjktNGVkMS1hNjYwLTdlZTA5NGI5 ODAwYS5jcmwwHwYDVR0jBBgwFoAUQYWSGihKWF4x2KUQIzRiZiCASUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNjUzODBkNC0xZGI5LTRlZDEtYTY2MC03ZWUw OTRiOTgwMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVlJkZ3pEBSIKG+Xrw9XVi 8grl4KDb92ckwqQBBAWAgu/c1AimhYJWlvVPwH5xTa0P5YtJCR1FLenVrF8FEFxZ tU0tr9MErXR7XHIqhtETHnE3o/wNY1pN6wWldqTuuU1O2o3PbZJ9keOUFvMebpOv OUVUk2aYelLWViNU+dSHqvaziwR1hvvkUtfWYu1Dqu4Ha1ZtmwbwhE3AiMXOp+wl bJzigsr6WG2cQg7B8KRNq1+goZHFcoMULxeDaqn5NEQJ4GpOhammzRFXgiFoYZFh aPibPnIiKU0ZWcMAZru5PfVX4se4GM27rL8ReVSjl2AXE2btcJxUmGnkuRu1k1YC -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:22 2025 by rpki-client