$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft File: a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft (raw, json) Hash identifier: mDMqPVU4xlLe099qwD8DV3dxOtvlA5+aUgCTZl+kKxM= Subject key identifier: BC:D2:2C:2A:6F:50:66:E9:47:D6:DD:4F:B1:5C:C6:AC:3C:7F:D2:EF Authority key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Certificate issuer: /CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Certificate serial: 010D0C9F4328584BC2E71F187E66EA135D6202C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft Manifest number: 010D0C9F4328584ACA762691C4D9087D8F0FF39D Signing time: Wed 05 Nov 2025 18:00:08 +0000 Manifest this update: Wed 05 Nov 2025 18:00:08 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl (hash: lzYDTHInQTzcPxsEKqkL0SuAn/Umhff356B3calkFE4=) 2: bc7894b0-13bb-3996-a597-d19d7ca6829d.roa (hash: mmKZ6kl0ZjfYCFW6mbQNztJZ0hAtHvV9cGsdDECx+dU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:e7:1f:18:7e:66:ea:13:5d:62:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Validity Not Before: Nov 5 18:00:08 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=58536c79-6b85-4d34-9391-95ac78e01795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:1f:d4:d6:6d:64:c6:a5:57:e8:64:74:e8: 4f:3b:18:16:b2:22:78:e0:44:dd:7e:b2:9a:db:07: fb:a4:ae:53:39:bd:e2:28:36:64:f7:dd:55:0f:67: 4c:8e:53:ae:24:87:f9:f3:1b:fd:85:6e:9e:f5:4b: 1a:b3:d6:0d:1f:29:64:c4:d8:57:4c:96:38:ad:37: e3:7c:87:22:8f:7d:a0:56:42:75:56:5a:4f:b7:86: 66:0e:6f:12:ab:48:4b:6a:50:9e:93:7f:1f:c2:06: 19:34:94:13:c1:f4:d0:27:b5:3d:0b:44:67:81:ad: c6:ef:e5:57:60:1c:b9:9a:9f:4c:c3:11:90:b4:37: 1a:0e:b4:b9:4b:c4:b5:fb:e7:7a:62:41:e0:04:4d: f2:16:94:96:8a:7e:9b:25:e6:8b:96:22:8b:0d:86: e7:72:56:12:71:db:4a:82:96:a1:3e:a2:0d:2f:90: d9:61:b6:d1:fd:67:12:71:04:30:41:60:22:bb:34: fb:a0:26:2d:3b:c3:12:80:d0:4b:3a:ae:cd:83:78: d2:be:98:c9:7b:5f:58:bf:aa:53:34:a4:f2:76:78: d4:0c:9c:60:b9:90:fb:62:9c:04:34:86:f1:7b:b0: ed:8c:0c:5b:b9:40:df:69:f3:8d:75:f1:5a:ae:2c: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:2C:2A:6F:50:66:E9:47:D6:DD:4F:B1:5C:C6:AC:3C:7F:D2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl X509v3 Authority Key Identifier: keyid:1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f8:39:3c:3f:01:4d:12:93:a1:33:d4:65:c3:a4:4e:a9:62: 83:f9:4b:66:31:19:2e:51:34:64:22:65:6c:e4:ef:d9:f5:05: ed:1a:f0:26:58:92:58:d8:ff:ba:34:1d:72:4f:7a:15:2a:7b: cb:39:e6:11:d9:f5:e6:9d:79:13:b2:82:67:30:ab:a3:f5:a8: 61:12:a4:4b:2b:4f:50:3c:b9:83:53:f7:5e:d8:63:86:03:b5: 1f:c9:6b:e5:e0:96:2e:1c:5a:5b:be:64:22:c2:e1:51:00:96: 7d:06:b8:aa:16:bb:ff:61:ac:82:67:d9:32:42:6d:a9:2a:64: d4:65:c1:7e:3f:f1:e6:88:d9:bf:83:f4:eb:7d:bd:a6:89:0f: 44:a5:c6:8b:87:8f:33:e1:0d:99:0e:68:49:7d:d2:4a:e2:91: 90:ca:b9:9f:05:9e:0c:e9:d1:bd:5e:b5:44:ad:c1:72:2d:1c: 49:39:b6:27:9f:9a:d9:44:e6:9f:0c:c1:90:f0:77:b7:1a:2a: 54:7f:db:7a:7b:14:f9:4f:b1:b2:67:c9:59:3b:c9:74:47:b2: f9:33:cb:4c:c2:c2:95:28:26:cd:85:a1:25:48:aa:b8:fe:67: 6c:8f:50:7b:06:67:3d:24:85:c4:ae:68:af:7f:1a:4f:66:d4: 8f:41:f9:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvC5x8YfmbqE11iAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkN2Y5MDItY2MwMC00MTc1LTk1MWEtZmUzYTUwYzBj ZWFiMB4XDTI1MTEwNTE4MDAwOFoXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk NTg1MzZjNzktNmI4NS00ZDM0LTkzOTEtOTVhYzc4ZTAxNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr90f1NZtZMalV+hkdOhPOxgWsiJ44ETdfrKa 2wf7pK5TOb3iKDZk991VD2dMjlOuJIf58xv9hW6e9Usas9YNHylkxNhXTJY4rTfj fIcij32gVkJ1VlpPt4ZmDm8Sq0hLalCek38fwgYZNJQTwfTQJ7U9C0Rnga3G7+VX YBy5mp9MwxGQtDcaDrS5S8S1++d6YkHgBE3yFpSWin6bJeaLliKLDYbnclYScdtK gpahPqINL5DZYbbR/WcScQQwQWAiuzT7oCYtO8MSgNBLOq7Ng3jSvpjJe19Yv6pT NKTydnjUDJxguZD7YpwENIbxe7DtjAxbuUDfafONdfFariyn4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLzSLCpvUGbpR9bdT7Fcxqw8f9LvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hOWQ3 ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBjMGNlYWIvYTlkN2Y5MDItY2MwMC00 MTc1LTk1MWEtZmUzYTUwYzBjZWFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTlkN2Y5MDItY2MwMC00MTc1LTk1 MWEtZmUzYTUwYzBjZWFiL2E5ZDdmOTAyLWNjMDAtNDE3NS05NTFhLWZlM2E1MGMw Y2VhYi5jcmwwHwYDVR0jBBgwFoAUHXOhNSIE0a4VmTfIxQDKeZGsO10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hOWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNh NTBjMGNlYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU+Dk8PwFNEpOhM9Rlw6RO qWKD+UtmMRkuUTRkImVs5O/Z9QXtGvAmWJJY2P+6NB1yT3oVKnvLOeYR2fXmnXkT soJnMKuj9ahhEqRLK09QPLmDU/de2GOGA7UfyWvl4JYuHFpbvmQiwuFRAJZ9Briq Frv/YayCZ9kyQm2pKmTUZcF+P/HmiNm/g/Trfb2miQ9EpcaLh48z4Q2ZDmhJfdJK 4pGQyrmfBZ4M6dG9XrVErcFyLRxJObYnn5rZROafDMGQ8He3GipUf9t6exT5T7Gy Z8lZO8l0R7L5M8tMwsKVKCbNhaElSKq4/mdsj1B7Bmc9JIXErmivfxpPZtSPQfn1 -----END CERTIFICATE-----Generated at Wed Nov 5 20:42:45 2025 by rpki-client