$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.mft File: b08cd570-7f65-4173-91cf-6ec61555844f.mft (raw, json) Hash identifier: GMv+aSGZC+ORu6ypUJxDC6H5t8TLHvvBDsCUNZxxBxY= Subject key identifier: 05:B6:09:89:E0:5E:ED:02:8C:07:28:9E:85:3E:4F:00:DC:56:8A:17 Authority key identifier: F0:23:5E:2D:83:D4:AC:94:94:89:9F:1D:8A:7F:D7:DA:7A:92:4E:3E Certificate issuer: /CN=b08cd570-7f65-4173-91cf-6ec61555844f Certificate serial: 010D0C9F4328584BC075C8A7CCA66B82BAB25B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.mft Manifest number: 010D0C9F4328584AEC5F9F5A1A60C8AF420CDE79 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 7c4c658a-5f7e-3fb0-a587-a880ec495a83.roa (hash: dOVMsuAlfRSw1dJYgttJ+wNx73Jp9hw9It7+uGXmkbs=) 2: b08cd570-7f65-4173-91cf-6ec61555844f.crl (hash: g7KTGzjqMnTljyH7mo2KB9J6y/O7LJZyinhWgq6MDEk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:a7:cc:a6:6b:82:ba:b2:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b08cd570-7f65-4173-91cf-6ec61555844f Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=8665f7fb-493b-474a-b4c4-05e1d8a26e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:fa:4b:bc:85:0b:99:8a:9f:dd:be:f9:4b: fc:60:56:b3:f6:3c:1d:0b:2a:35:9b:22:83:64:12: 1a:45:65:a0:4a:59:41:80:9c:d8:e0:91:e2:ce:bc: 33:4e:bc:be:a0:28:06:88:16:3b:c6:2c:4c:f1:c4: cf:58:9c:5a:eb:bf:80:a2:e5:8d:66:df:8e:9e:4a: da:13:1d:7c:80:f8:15:46:59:db:94:1d:92:14:f4: 94:c4:a0:8d:94:eb:5d:83:f5:a9:e2:72:79:52:1a: 58:a7:84:be:d8:a9:d9:b0:d8:1c:3c:92:e2:5c:36: 91:e0:e8:6b:d5:99:b7:7b:c9:ad:35:af:78:fd:c8: fd:78:2a:72:ef:2f:73:6e:55:a9:da:01:ae:36:7b: 76:54:58:ae:fb:9e:58:a4:aa:ec:23:5a:77:d2:f4: f5:f5:7e:bf:08:8f:8a:fb:9f:b3:c7:80:f8:7b:7f: 75:1d:ab:74:53:82:39:eb:82:48:14:7f:7e:d8:e2: 39:7b:7c:67:12:48:0d:c1:96:20:8d:64:7a:52:e7: b2:bd:bd:4e:56:00:16:97:87:4a:7d:06:3d:bc:bb: 93:93:2d:c8:93:32:76:c6:36:ff:d7:5e:f7:dc:05: 31:08:c4:3a:36:77:ae:6e:0e:8d:5a:3b:8e:a9:08: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:09:89:E0:5E:ED:02:8C:07:28:9E:85:3E:4F:00:DC:56:8A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.crl X509v3 Authority Key Identifier: keyid:F0:23:5E:2D:83:D4:AC:94:94:89:9F:1D:8A:7F:D7:DA:7A:92:4E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b0:c1:1f:99:f8:ef:e8:53:7e:55:e8:57:ae:3a:a3:d0:fe: b2:9b:f0:75:de:a1:14:cb:ef:df:fb:3d:ce:92:87:5d:f4:e0: b9:56:db:21:e0:12:5a:42:19:ee:24:0a:41:81:5b:04:34:d5: f0:d2:49:71:7d:1a:99:c1:80:72:7f:4c:5c:82:11:49:94:79: 51:2e:06:0b:ac:2a:13:f1:6c:51:23:7a:d3:3d:d7:22:29:32: d5:e7:cc:25:c5:35:de:e0:e6:97:e9:90:71:32:53:fa:22:98: 7c:b1:16:db:25:16:59:51:03:cc:b3:4e:2a:e4:f6:b2:09:ec: 47:13:a8:19:f0:42:22:ba:aa:75:0f:08:ad:a9:69:a4:96:2d: f5:62:97:0b:0b:75:e9:ec:91:94:9b:61:5e:db:a5:39:15:43: fb:14:15:32:ed:20:e9:46:b7:b9:9c:89:60:b1:52:0c:73:68: b8:d4:59:f1:19:f4:12:c8:48:51:af:51:87:e8:59:27:25:16: 87:83:e8:9f:f9:3f:ac:40:08:f2:a1:58:16:24:34:1e:8d:b3: ab:42:10:76:de:87:85:19:fb:c7:8b:3a:27:01:5d:b2:b4:e3: 06:ed:54:50:c3:57:31:89:de:13:f8:0b:3c:b7:2b:82:ac:a7: b4:ca:66:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcinzKZrgrqyW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA4Y2Q1NzAtN2Y2NS00MTczLTkxY2YtNmVjNjE1NTU4 NDRmMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk ODY2NWY3ZmItNDkzYi00NzRhLWI0YzQtMDVlMWQ4YTI2ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL76S7yFC5mKn92++Uv8YFaz9jwdCyo1myKD ZBIaRWWgSllBgJzY4JHizrwzTry+oCgGiBY7xixM8cTPWJxa67+AouWNZt+Onkra Ex18gPgVRlnblB2SFPSUxKCNlOtdg/Wp4nJ5UhpYp4S+2KnZsNgcPJLiXDaR4Ohr 1Zm3e8mtNa94/cj9eCpy7y9zblWp2gGuNnt2VFiu+55YpKrsI1p30vT19X6/CI+K +5+zx4D4e391Hat0U4I564JIFH9+2OI5e3xnEkgNwZYgjWR6Uueyvb1OVgAWl4dK fQY9vLuTky3IkzJ2xjb/11733AUxCMQ6Nneubg6NWjuOqQgwQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAW2CYngXu0CjAconoU+TwDcVooXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhj ZDU3MC03ZjY1LTQxNzMtOTFjZi02ZWM2MTU1NTg0NGYvYjA4Y2Q1NzAtN2Y2NS00 MTczLTkxY2YtNmVjNjE1NTU4NDRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA4Y2Q1NzAtN2Y2NS00MTczLTkx Y2YtNmVjNjE1NTU4NDRmL2IwOGNkNTcwLTdmNjUtNDE3My05MWNmLTZlYzYxNTU1 ODQ0Zi5jcmwwHwYDVR0jBBgwFoAU8CNeLYPUrJSUiZ8din/X2nqSTj4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhjZDU3MC03ZjY1LTQxNzMtOTFjZi02ZWM2 MTU1NTg0NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3sMEfmfjv6FN+VehXrjqj 0P6ym/B13qEUy+/f+z3Okodd9OC5Vtsh4BJaQhnuJApBgVsENNXw0klxfRqZwYBy f0xcghFJlHlRLgYLrCoT8WxRI3rTPdciKTLV58wlxTXe4OaX6ZBxMlP6Iph8sRbb JRZZUQPMs04q5PayCexHE6gZ8EIiuqp1DwitqWmkli31YpcLC3Xp7JGUm2Fe26U5 FUP7FBUy7SDpRre5nIlgsVIMc2i41FnxGfQSyEhRr1GH6FknJRaHg+if+T+sQAjy oVgWJDQejbOrQhB23oeFGfvHizonAV2ytOMG7VRQw1cxid4T+As8tyuCrKe0ymbp -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:02 2025 by rpki-client