$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft File: 9d18a72d-9615-46c9-abe8-3d815ac0b112.mft (raw, json) Hash identifier: 6K9KHCX1wz1a4Q2HESdgrUP8fdB7O3dTBrFqM/8fVps= Subject key identifier: 62:3F:37:1B:21:D9:F1:DB:FE:EE:43:8F:9C:39:48:B2:86:58:03:81 Authority key identifier: 77:E1:F6:19:48:6D:F8:3D:E9:41:04:51:00:9F:09:72:5A:5A:2E:59 Certificate issuer: /CN=9d18a72d-9615-46c9-abe8-3d815ac0b112 Certificate serial: 010D0C9F4328584BC2AB90EC8C787151C70F4F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft Manifest number: 010D0C9F4328584B6F04DC4715A4EAE0B965CFA7 Signing time: Wed 05 Nov 2025 16:00:08 +0000 Manifest this update: Wed 05 Nov 2025 16:00:08 +0000 Manifest next update: Sat 08 Nov 2025 16:00:00 +0000 Files and hashes: 1: 9d18a72d-9615-46c9-abe8-3d815ac0b112.crl (hash: 8qTP/lSL3+SL3e8r/GfWAceG4XPyJqISTNEErenwU/c=) 2: e8fd7445-d866-3417-b7f9-c164b90ef934.roa (hash: au3TnRSD+jjVvFsMhxXbJUJ6PjO5wyTIw8Ckkgi7jEs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ab:90:ec:8c:78:71:51:c7:0f:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d18a72d-9615-46c9-abe8-3d815ac0b112 Validity Not Before: Nov 5 16:00:08 2025 GMT Not After : Nov 8 16:00:00 2025 GMT Subject: CN=99cfaf8a-e64c-489e-8ca2-216a2baf2098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:4f:3d:3c:81:18:db:a8:22:44:8f:03:3f: 4f:60:fe:30:cf:a5:ad:dd:e2:d3:47:27:07:ba:c9: dd:e9:8d:3b:3e:73:7f:c2:fa:71:55:d9:97:c1:92: 28:e5:82:27:84:bb:05:3d:d7:ec:19:06:76:86:da: 8e:3b:73:66:4e:25:58:0f:1d:7d:a6:9c:cf:2d:e0: a3:35:b2:d7:69:32:a4:c8:a0:20:ad:4b:b2:72:94: 6e:92:0e:3b:f4:15:93:9f:76:c0:ff:d7:a8:8e:95: 5b:a8:ca:b3:3f:0e:a9:61:c5:cc:89:1b:ba:a4:f1: b9:62:6f:2e:ea:31:3e:58:c7:eb:9d:60:61:e7:98: 0e:9b:21:6e:22:a1:d7:2a:11:4e:78:c6:c0:3e:b0: ea:86:9b:00:30:82:7c:e8:65:3e:01:0e:d6:a6:aa: a4:64:13:32:9e:d4:31:6d:77:32:15:c7:9d:cb:36: 13:ac:59:5d:20:94:df:18:7a:b5:4a:5e:b7:9d:bb: 63:26:18:9a:54:28:8e:33:50:b2:f3:93:66:6e:fd: 91:7d:9e:8e:e2:c8:0f:4a:26:c6:b8:e5:4a:8e:d3: 74:5b:47:e1:69:80:3f:1d:dc:aa:91:00:03:65:46: 85:ab:0a:5c:74:98:71:1d:b4:67:23:a9:d1:fb:b0: df:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:37:1B:21:D9:F1:DB:FE:EE:43:8F:9C:39:48:B2:86:58:03:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.crl X509v3 Authority Key Identifier: keyid:77:E1:F6:19:48:6D:F8:3D:E9:41:04:51:00:9F:09:72:5A:5A:2E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:2a:d0:e1:13:82:78:7e:8b:7f:f0:7d:ad:86:9b:ac:bc: c1:39:f6:8b:ad:64:10:e6:13:8a:7e:63:da:ad:4e:79:e8:15: 98:17:df:35:ec:e9:79:46:c4:c4:2f:8b:18:6e:39:31:19:3a: 8b:95:10:8f:42:dc:50:1a:cc:3a:da:6a:f8:4d:22:93:37:9c: 9e:3f:d5:1d:c4:84:db:68:74:77:53:02:c1:91:eb:42:83:36: b7:80:58:af:f6:b4:5d:4e:f5:b5:bd:bb:0d:7f:17:ee:df:d4: 5c:02:e0:1c:b5:c8:a4:80:d5:61:a2:65:41:f9:7d:2d:39:00: e2:ef:62:86:a5:10:21:ad:f1:c6:79:a5:bd:1b:ff:c9:b3:a5: 3a:6f:9f:8c:2a:4e:f0:b4:ea:cd:a7:4f:c5:84:8b:e5:52:69: 3d:7f:13:30:b0:69:6a:f9:b2:05:c7:00:ff:d8:f9:06:d4:a4: f1:e2:36:2d:31:6b:0e:02:d0:51:8b:1a:a0:91:e4:63:7e:42: d1:06:54:a5:c8:79:3e:97:7f:09:d9:d9:81:eb:e3:37:78:ae: 04:ef:ff:24:2f:9f:bb:18:d5:29:5a:1a:9b:61:5e:62:01:9c: 9a:58:c7:e3:b2:02:88:bd:7e:ce:9c:94:6c:83:8f:8f:54:26: f0:a7:a5:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCq5DsjHhxUccPTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQxOGE3MmQtOTYxNS00NmM5LWFiZTgtM2Q4MTVhYzBi MTEyMB4XDTI1MTEwNTE2MDAwOFoXDTI1MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk OTljZmFmOGEtZTY0Yy00ODllLThjYTItMjE2YTJiYWYyMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUtPPTyBGNuoIkSPAz9PYP4wz6Wt3eLTRycH usnd6Y07PnN/wvpxVdmXwZIo5YInhLsFPdfsGQZ2htqOO3NmTiVYDx19ppzPLeCj NbLXaTKkyKAgrUuycpRukg479BWTn3bA/9eojpVbqMqzPw6pYcXMiRu6pPG5Ym8u 6jE+WMfrnWBh55gOmyFuIqHXKhFOeMbAPrDqhpsAMIJ86GU+AQ7WpqqkZBMyntQx bXcyFcedyzYTrFldIJTfGHq1Sl63nbtjJhiaVCiOM1Cy85Nmbv2RfZ6O4sgPSibG uOVKjtN0W0fhaYA/HdyqkQADZUaFqwpcdJhxHbRnI6nR+7DfrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGI/Nxsh2fHb/u5Dj5w5SLKGWAOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZDE4 YTcyZC05NjE1LTQ2YzktYWJlOC0zZDgxNWFjMGIxMTIvOWQxOGE3MmQtOTYxNS00 NmM5LWFiZTgtM2Q4MTVhYzBiMTEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWQxOGE3MmQtOTYxNS00NmM5LWFi ZTgtM2Q4MTVhYzBiMTEyLzlkMThhNzJkLTk2MTUtNDZjOS1hYmU4LTNkODE1YWMw YjExMi5jcmwwHwYDVR0jBBgwFoAUd+H2GUht+D3pQQRRAJ8JclpaLlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZDE4YTcyZC05NjE1LTQ2YzktYWJlOC0zZDgx NWFjMGIxMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBRyrQ4ROCeH6Lf/B9rYab rLzBOfaLrWQQ5hOKfmParU556BWYF9817Ol5RsTEL4sYbjkxGTqLlRCPQtxQGsw6 2mr4TSKTN5yeP9UdxITbaHR3UwLBketCgza3gFiv9rRdTvW1vbsNfxfu39RcAuAc tcikgNVhomVB+X0tOQDi72KGpRAhrfHGeaW9G//Js6U6b5+MKk7wtOrNp0/FhIvl Umk9fxMwsGlq+bIFxwD/2PkG1KTx4jYtMWsOAtBRixqgkeRjfkLRBlSlyHk+l38J 2dmB6+M3eK4E7/8kL5+7GNUpWhqbYV5iAZyaWMfjsgKIvX7OnJRsg4+PVCbwp6UL -----END CERTIFICATE-----Generated at Wed Nov 5 18:12:18 2025 by rpki-client