$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft File: e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft (raw, json) Hash identifier: lBXRIRU/fNGZZntSuul25ChPvp5vDRm05LfbwbqqXzM= Subject key identifier: C8:77:8F:CF:5E:F3:BD:AF:E5:EA:CA:AD:83:48:86:0A:5D:54:26:AE Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F Certificate issuer: /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Certificate serial: 010D0C9F4328584BC057FD8F5B9553FB3EB91D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft Manifest number: 010D0C9F4328584073A824D3F74F467FC6821124 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa (hash: nxEaUyfTAFtx27n+Vsn61Au519AdSGgN6smW7FSJvTA=) 2: e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl (hash: /iADOXdz5rgykjCOOT+l1vejP9Ci0TUiaA6YHgbepgQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fd:8f:5b:95:53:fb:3e:b9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=854e8c04-a094-45e1-a46a-62d3a0b3d30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:3c:5b:1f:49:eb:3f:c8:ea:9b:e6:f2:38: 12:a9:d9:6b:6a:29:69:6a:91:54:98:a8:ee:bf:5b: 39:62:5f:db:76:d0:66:b0:c6:76:13:b3:50:33:c5: f6:96:7c:d8:89:db:d2:9f:cc:2c:47:80:eb:d9:21: c0:4f:39:bc:4d:3f:cf:a9:f9:96:b5:5f:8f:2e:24: 94:9b:15:fe:04:a9:ef:08:62:69:14:74:fc:e3:77: 1c:af:3a:d8:77:48:a8:94:ed:88:0b:04:b8:f8:df: 8d:b7:6f:fc:90:b4:1b:aa:02:3c:4e:5f:25:98:b0: 94:d3:3d:32:25:85:25:66:d0:24:27:79:1d:16:9d: f9:ca:d0:da:c2:4b:50:d5:65:0d:6b:48:c2:7c:0b: 0c:73:d2:09:6e:bd:ef:65:1c:38:15:38:a7:18:92: a6:26:1f:16:b1:05:50:36:3d:13:84:fd:d4:83:5e: e5:f1:67:16:b4:34:b1:34:2f:ea:db:b7:b1:85:48: e8:93:ee:06:3f:2e:6c:65:89:2c:64:62:12:86:11: 78:52:be:94:70:0c:4c:a0:65:9d:88:a4:ff:d4:a6: e6:dc:3e:4d:a4:d0:5b:02:a8:f3:1f:a4:23:55:28: 30:8f:0f:1e:00:9e:c1:fb:f8:f5:49:be:e2:1f:0c: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:8F:CF:5E:F3:BD:AF:E5:EA:CA:AD:83:48:86:0A:5D:54:26:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl X509v3 Authority Key Identifier: keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e5:a9:11:25:74:da:fb:2d:6b:8e:55:df:59:00:a6:5f:6a: 04:1a:4b:58:99:54:73:4f:ac:ef:72:dd:e3:b4:45:28:66:2b: 0d:c3:4e:2f:50:64:33:78:05:2a:6b:df:7e:c7:f2:5f:7a:33: 4e:55:d9:53:26:88:9d:e6:df:52:38:0b:78:5b:8b:40:62:13: 2e:11:07:70:6d:d6:27:77:c6:82:f7:f2:22:dd:e1:a4:2c:9e: 51:3d:6e:23:72:35:73:2a:24:31:8b:2c:b1:e6:87:49:09:c3: 5f:b7:6e:98:25:ff:09:a2:a4:63:9c:1c:21:84:f5:41:f3:a3: 9f:03:d6:f6:ae:2f:f7:c6:cd:29:e1:68:67:0b:06:1a:64:38: 86:fb:72:c3:ee:e5:a5:bb:72:a8:a5:91:3b:80:a0:25:26:20: 28:ed:a4:39:3d:96:3a:90:ff:17:62:8e:8f:86:c5:58:c4:84: 45:8e:e2:fa:4d:23:13:d4:b6:b4:a1:56:0a:91:41:41:1f:6c: 44:38:ed:4e:ce:47:9e:b5:37:94:3b:b7:2d:fc:da:c7:57:0c: a7:23:8e:7f:85:c7:97:77:cb:15:94:c4:16:19:f5:df:ce:6c: 16:e0:c8:92:1f:f9:77:cd:bf:6a:34:dc:99:24:2d:9f:d2:9c: 05:3d:7f:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/2PW5VT+z65HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc4ZDllM2ItN2FlZC00ZjY1LTg1YjQtMTIwZWMwYTll ZGUzMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk ODU0ZThjMDQtYTA5NC00NWUxLWE0NmEtNjJkM2EwYjNkMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbI8Wx9J6z/I6pvm8jgSqdlrailpapFUmKju v1s5Yl/bdtBmsMZ2E7NQM8X2lnzYidvSn8wsR4Dr2SHATzm8TT/PqfmWtV+PLiSU mxX+BKnvCGJpFHT843ccrzrYd0iolO2ICwS4+N+Nt2/8kLQbqgI8Tl8lmLCU0z0y JYUlZtAkJ3kdFp35ytDawktQ1WUNa0jCfAsMc9IJbr3vZRw4FTinGJKmJh8WsQVQ Nj0ThP3Ug17l8WcWtDSxNC/q27exhUjok+4GPy5sZYksZGIShhF4Ur6UcAxMoGWd iKT/1Kbm3D5NpNBbAqjzH6QjVSgwjw8eAJ7B+/j1Sb7iHwzjZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMh3j89e872v5erKrYNIhgpdVCauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhk OWUzYi03YWVkLTRmNjUtODViNC0xMjBlYzBhOWVkZTMvZTc4ZDllM2ItN2FlZC00 ZjY1LTg1YjQtMTIwZWMwYTllZGUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTc4ZDllM2ItN2FlZC00ZjY1LTg1 YjQtMTIwZWMwYTllZGUzL2U3OGQ5ZTNiLTdhZWQtNGY2NS04NWI0LTEyMGVjMGE5 ZWRlMy5jcmwwHwYDVR0jBBgwFoAUyzEye2dCPLDELWYimzOh7Hf6nB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhkOWUzYi03YWVkLTRmNjUtODViNC0xMjBl YzBhOWVkZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJ5akRJXTa+y1rjlXfWQCm X2oEGktYmVRzT6zvct3jtEUoZisNw04vUGQzeAUqa99+x/JfejNOVdlTJoid5t9S OAt4W4tAYhMuEQdwbdYnd8aC9/Ii3eGkLJ5RPW4jcjVzKiQxiyyx5odJCcNft26Y Jf8JoqRjnBwhhPVB86OfA9b2ri/3xs0p4WhnCwYaZDiG+3LD7uWlu3KopZE7gKAl JiAo7aQ5PZY6kP8XYo6PhsVYxIRFjuL6TSMT1La0oVYKkUFBH2xEOO1OzkeetTeU O7ct/NrHVwynI45/hceXd8sVlMQWGfXfzmwW4MiSH/l3zb9qNNyZJC2f0pwFPX8K -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:06 2025 by rpki-client