$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.mft File: 5f350da0-4db1-4f5b-9169-6795ba566bd1.mft (raw, json) Hash identifier: BK6p/SBO2wmGvXR+41jNr4G7ybZB9wHO6jNU1jyPYnc= Subject key identifier: AF:28:DB:B7:13:47:A3:37:42:C0:A0:62:3E:5C:AD:44:72:D0:63:43 Authority key identifier: C9:73:31:6A:79:E3:68:18:8A:7B:E9:8E:A9:1E:D9:BF:0F:53:12:3A Certificate issuer: /CN=5f350da0-4db1-4f5b-9169-6795ba566bd1 Certificate serial: 010D0C9F4328584BC075C7431F223A895B473800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.mft Manifest number: 010D0C9F4328584A74484AD109DC00B86181B039 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 5f350da0-4db1-4f5b-9169-6795ba566bd1.crl (hash: 4VBhEYG2aZZ2DDXadiQrfWbbPbLlNnfTOIKqlrlLvwA=) 2: 8d3f8e31-e0e0-3eb4-84fd-6c92a8027c7e.roa (hash: o/K0NSH/snEP66f61uW6BKNpK0I52oWeInto7cCi4kY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c7:43:1f:22:3a:89:5b:47:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f350da0-4db1-4f5b-9169-6795ba566bd1 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=7a32e609-d9b9-4e7e-9e38-998f83b09e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:ae:73:ad:0a:c0:4a:18:89:dd:eb:ec:52: c2:57:54:cd:4f:9a:d7:54:d1:c3:66:d2:a6:1f:00: 1e:95:1a:14:68:1d:39:39:46:5a:1d:ae:af:0d:e0: 78:03:49:d1:75:0c:c8:31:9a:9f:a5:5a:a7:70:df: 85:da:e6:93:6b:a2:e2:21:ed:4a:1f:d3:e2:66:41: 88:07:6b:85:18:c1:4f:7c:8d:7b:20:e3:8a:f8:2c: 67:dc:e4:3e:60:ac:fd:20:f0:5d:6f:d9:d1:1c:28: b8:5b:b6:46:3c:6d:fa:51:a1:63:18:1b:4e:64:c7: 78:ab:35:00:03:f0:cd:db:96:ae:6d:f8:13:8d:ca: f1:cb:8d:b5:c3:9e:c0:e7:a1:8d:90:a0:26:ce:af: 29:ea:7a:98:06:25:74:02:7d:a9:bc:d3:25:45:5d: 86:72:9d:8a:18:61:ff:5f:6e:98:2e:42:aa:d5:63: 67:82:78:82:e9:e5:e6:84:14:1d:e3:05:6e:b6:88: e5:52:02:12:97:52:a8:f0:f0:9b:4e:5a:68:b1:93: 04:d9:20:53:5c:c6:50:5c:e6:d7:97:32:82:9b:8e: 33:93:eb:c7:91:4b:13:d6:9b:52:f6:72:45:40:6e: 4f:fb:36:e5:3f:4e:c4:74:e8:27:2e:5d:57:20:88: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:28:DB:B7:13:47:A3:37:42:C0:A0:62:3E:5C:AD:44:72:D0:63:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1/5f350da0-4db1-4f5b-9169-6795ba566bd1.crl X509v3 Authority Key Identifier: keyid:C9:73:31:6A:79:E3:68:18:8A:7B:E9:8E:A9:1E:D9:BF:0F:53:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f350da0-4db1-4f5b-9169-6795ba566bd1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2e:64:1b:74:32:0f:f3:84:7a:de:c2:e0:a3:87:e9:d6:3c: 37:1d:74:8c:f6:ce:59:7e:6d:f4:c9:6b:74:10:bc:6c:d2:82: 07:9b:f3:1f:04:59:b4:a5:03:f1:19:86:ab:8e:dc:d9:37:40: 74:d1:f3:25:25:f4:0e:e6:8d:4d:01:a3:de:d8:87:12:6a:b9: 7f:c0:00:cf:30:50:fe:fd:d0:50:79:00:cb:86:08:ec:ef:d7: 6c:65:63:f6:e3:c3:0b:00:35:cd:fc:83:89:f5:a6:51:2e:d1: 99:04:3b:a2:24:15:51:d2:d3:44:1f:4b:20:25:eb:3b:96:25: fe:9d:fd:d9:c1:38:a2:c2:af:a8:80:4e:a3:b0:35:0d:fc:43: 5d:0c:b1:70:42:52:06:57:6b:bc:fd:b8:7c:f2:30:29:01:a3: 68:7c:f0:fc:0a:fd:c4:bb:e4:bb:17:07:a7:96:19:c3:41:53: 76:c5:7c:24:b4:fe:85:55:80:ab:02:dd:c2:7d:40:56:21:e0: 58:14:7b:ed:46:ff:43:31:f8:28:ac:73:29:2a:6b:71:7f:b3: fc:c5:38:f1:5d:3d:77:79:5e:01:56:4f:8b:52:6a:fc:f1:89: 73:93:2a:03:52:3f:a6:db:6c:f4:9a:ea:94:44:01:f0:30:7e: a0:5c:86:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcdDHyI6iVtHOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzNTBkYTAtNGRiMS00ZjViLTkxNjktNjc5NWJhNTY2 YmQxMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk N2EzMmU2MDktZDliOS00ZTdlLTllMzgtOTk4ZjgzYjA5ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2iuc60KwEoYid3r7FLCV1TNT5rXVNHDZtKm HwAelRoUaB05OUZaHa6vDeB4A0nRdQzIMZqfpVqncN+F2uaTa6LiIe1KH9PiZkGI B2uFGMFPfI17IOOK+Cxn3OQ+YKz9IPBdb9nRHCi4W7ZGPG36UaFjGBtOZMd4qzUA A/DN25aubfgTjcrxy421w57A56GNkKAmzq8p6nqYBiV0An2pvNMlRV2Gcp2KGGH/ X26YLkKq1WNngniC6eXmhBQd4wVutojlUgISl1Ko8PCbTlposZME2SBTXMZQXObX lzKCm44zk+vHkUsT1ptS9nJFQG5P+zblP07EdOgnLl1XIIjUjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK8o27cTR6M3QsCgYj5crURy0GNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZjM1 MGRhMC00ZGIxLTRmNWItOTE2OS02Nzk1YmE1NjZiZDEvNWYzNTBkYTAtNGRiMS00 ZjViLTkxNjktNjc5NWJhNTY2YmQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWYzNTBkYTAtNGRiMS00ZjViLTkx NjktNjc5NWJhNTY2YmQxLzVmMzUwZGEwLTRkYjEtNGY1Yi05MTY5LTY3OTViYTU2 NmJkMS5jcmwwHwYDVR0jBBgwFoAUyXMxannjaBiKe+mOqR7Zvw9TEjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZjM1MGRhMC00ZGIxLTRmNWItOTE2OS02Nzk1 YmE1NjZiZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgLmQbdDIP84R63sLgo4fp 1jw3HXSM9s5Zfm30yWt0ELxs0oIHm/MfBFm0pQPxGYarjtzZN0B00fMlJfQO5o1N AaPe2IcSarl/wADPMFD+/dBQeQDLhgjs79dsZWP248MLADXN/IOJ9aZRLtGZBDui JBVR0tNEH0sgJes7liX+nf3ZwTiiwq+ogE6jsDUN/ENdDLFwQlIGV2u8/bh88jAp AaNofPD8Cv3Eu+S7FwenlhnDQVN2xXwktP6FVYCrAt3CfUBWIeBYFHvtRv9DMfgo rHMpKmtxf7P8xTjxXT13eV4BVk+LUmr88YlzkyoDUj+m22z0muqURAHwMH6gXIa2 -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:54 2025 by rpki-client