$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft File: 5cd0de07-7471-4282-8298-a3a4df46d4ed.mft (raw, json) Hash identifier: 47w3XYQmSSXEwaPC/i2lJniA92SBAwJpjq+xNr/JKGk= Subject key identifier: B2:6D:9D:61:58:F8:2D:2D:25:5B:99:1F:14:FC:40:F1:56:63:02:84 Authority key identifier: 81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D Certificate issuer: /CN=5cd0de07-7471-4282-8298-a3a4df46d4ed Certificate serial: 010D0C9F4328584BC075C616C619A56E00975F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft Manifest number: 010D0C9F4328584A71897A2CA2199250B42A523B Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 5cd0de07-7471-4282-8298-a3a4df46d4ed.crl (hash: 53djQCVaZx9EG8lElQwr8HNWu/fkBbz17YuCc2RRs4E=) 2: c5c8713f-4413-3be5-821b-fadd12f15e99.roa (hash: Fu87pZsO+c9wQLG02yz2FqdSZk8/Ly4lXzetHWA/5cc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c6:16:c6:19:a5:6e:00:97:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd0de07-7471-4282-8298-a3a4df46d4ed Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=5a929e61-57ce-4a34-9686-d3c81d589b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e1:3d:8d:43:dc:73:33:c6:17:92:ea:89:25: 02:cb:7d:44:c4:54:ab:69:12:83:0c:fe:f7:e0:3a: 9d:12:59:ce:b1:0c:da:96:39:8f:76:e8:12:b4:c4: 90:fc:c4:37:4d:a8:da:9e:3e:1f:bf:e7:89:f1:5e: c6:28:8d:51:87:f1:1c:c8:2e:77:6d:99:6d:8b:d8: e8:21:fc:35:f1:3a:a0:ba:7f:27:77:fd:aa:e1:21: 5c:d4:a3:69:8c:22:4a:09:b7:0f:e7:cb:64:a1:58: 5f:a4:54:dd:5d:ca:d7:a1:a5:bc:fb:70:7e:ad:b7: d9:0a:ef:17:c8:db:7a:10:8b:9a:cf:f5:a5:5a:0b: 1e:bb:a3:9a:a4:29:35:28:c8:24:07:d9:e7:3c:8c: b9:59:63:43:d5:03:bb:e9:6c:3c:9d:10:a8:f0:e8: 26:b2:d0:ad:24:b9:ff:62:6f:76:0a:15:ac:52:b6: 80:d4:ed:8d:52:0a:10:2c:8d:33:82:bd:6a:46:e1: 05:95:22:a7:6c:2c:ec:3f:50:ca:57:a6:30:55:2a: 89:d4:ee:3e:6b:fb:6b:01:03:32:ac:ea:02:e5:33: d5:34:4c:6e:72:d7:bb:9e:fd:89:3f:d6:15:40:79: 6f:99:65:70:12:e1:ed:44:8a:36:8c:62:75:c3:13: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:9D:61:58:F8:2D:2D:25:5B:99:1F:14:FC:40:F1:56:63:02:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl X509v3 Authority Key Identifier: keyid:81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:68:63:26:8a:fa:77:9e:c2:e6:dc:bc:c6:b8:32:5c:20:3e: 4f:25:0b:9d:61:ee:63:66:29:03:5d:1c:e9:bf:bf:5e:f8:e1: 84:71:5f:bf:85:ae:13:63:72:14:7c:eb:eb:03:93:f0:9a:ed: 87:7a:3e:3d:19:04:17:83:0d:b2:7e:c9:19:80:57:81:51:c7: 19:81:ac:29:f1:76:9b:9c:03:67:77:65:00:08:b2:bd:35:8d: 91:8d:a5:01:73:fb:97:24:9a:a1:93:b2:88:14:47:cf:07:a2: 28:e6:3a:c1:f4:2c:ac:16:b7:5b:56:c9:84:11:48:12:4b:d2: d5:d6:49:92:3c:b7:4c:cf:c8:04:53:84:59:88:4c:4f:2e:03: 31:93:c9:85:fd:8e:0c:d1:b8:9f:4b:b2:fa:47:8c:0a:ac:c4: 38:03:f3:c1:3d:97:c8:fb:5d:39:65:21:b9:fd:56:29:01:47: 4f:31:04:cd:7a:0f:02:3e:0c:9a:25:a1:72:ad:b9:71:69:d9: 71:d2:a2:3b:81:62:80:59:11:da:d3:2c:82:4b:a4:f6:7d:08: d0:80:6c:56:09:2b:14:a7:7e:82:81:2a:cf:b5:68:55:28:dd: b3:fc:e2:d8:ba:0b:8b:d0:a2:97:5f:31:92:cb:2e:5f:a7:00: 18:af:36:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcYWxhmlbgCXXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkMGRlMDctNzQ3MS00MjgyLTgyOTgtYTNhNGRmNDZk NGVkMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk NWE5MjllNjEtNTdjZS00YTM0LTk2ODYtZDNjODFkNTg5YjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleE9jUPcczPGF5LqiSUCy31ExFSraRKDDP73 4DqdElnOsQzaljmPdugStMSQ/MQ3Tajanj4fv+eJ8V7GKI1Rh/EcyC53bZlti9jo Ifw18Tqgun8nd/2q4SFc1KNpjCJKCbcP58tkoVhfpFTdXcrXoaW8+3B+rbfZCu8X yNt6EIuaz/WlWgseu6OapCk1KMgkB9nnPIy5WWND1QO76Ww8nRCo8OgmstCtJLn/ Ym92ChWsUraA1O2NUgoQLI0zgr1qRuEFlSKnbCzsP1DKV6YwVSqJ1O4+a/trAQMy rOoC5TPVNExucte7nv2JP9YVQHlvmWVwEuHtRIo2jGJ1wxOl4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLJtnWFY+C0tJVuZHxT8QPFWYwKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Qw ZGUwNy03NDcxLTQyODItODI5OC1hM2E0ZGY0NmQ0ZWQvNWNkMGRlMDctNzQ3MS00 MjgyLTgyOTgtYTNhNGRmNDZkNGVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkMGRlMDctNzQ3MS00MjgyLTgy OTgtYTNhNGRmNDZkNGVkLzVjZDBkZTA3LTc0NzEtNDI4Mi04Mjk4LWEzYTRkZjQ2 ZDRlZC5jcmwwHwYDVR0jBBgwFoAUgcpsIxAMLGO+zd83VoxsKAXgdm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2QwZGUwNy03NDcxLTQyODItODI5OC1hM2E0 ZGY0NmQ0ZWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEaGMmivp3nsLm3LzGuDJc ID5PJQudYe5jZikDXRzpv79e+OGEcV+/ha4TY3IUfOvrA5Pwmu2Hej49GQQXgw2y fskZgFeBUccZgawp8XabnANnd2UACLK9NY2RjaUBc/uXJJqhk7KIFEfPB6Io5jrB 9CysFrdbVsmEEUgSS9LV1kmSPLdMz8gEU4RZiExPLgMxk8mF/Y4M0bifS7L6R4wK rMQ4A/PBPZfI+105ZSG5/VYpAUdPMQTNeg8CPgyaJaFyrblxadlx0qI7gWKAWRHa 0yyCS6T2fQjQgGxWCSsUp36CgSrPtWhVKN2z/OLYuguL0KKXXzGSyy5fpwAYrzbd -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:10 2025 by rpki-client