$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft File: d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft (raw, json) Hash identifier: v3IkDdeatFR4kpoxyU5WEK98SYliXKJgEzKghP/5Lww= Subject key identifier: A9:78:5C:E0:BD:F8:53:44:BF:11:49:1F:03:4C:90:B8:1B:99:A8:18 Authority key identifier: 92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 Certificate issuer: /CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Certificate serial: 010D0C9F4328584BBFE0DAF47F983C3E243F9280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft Manifest number: 010D0C9F4328584B7493434C062E08B0F020C91C Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 70158a40-1c67-3cb3-a454-85f651195ef6.roa (hash: arAr0ZTuTTatIQQzXNADshSFgd2twGDm029ILV/DZ7E=) 2: d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl (hash: vvhm3HtPSET8VhB+0ja/YVDGK9wgUjoMbyjvAOG4rUk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:da:f4:7f:98:3c:3e:24:3f:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=8438b444-8e05-4e22-a827-37ee3091b57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:b7:9b:17:38:8e:26:7c:28:b3:17:36:74: 79:3a:c5:eb:a0:66:64:6b:df:90:ee:ee:e6:c7:47: 50:48:58:30:99:82:6d:6b:77:2c:47:f6:de:39:8e: 53:5d:54:40:3f:9f:74:35:6f:78:00:a3:30:66:a2: fe:4a:b8:bb:cc:23:0a:60:e7:df:a8:6d:42:4c:5b: f0:63:30:0c:2e:66:ab:1f:2a:df:41:55:54:12:82: f1:cb:77:29:68:c0:d4:69:a3:58:12:45:14:3b:8e: a4:ca:50:bc:8e:c6:ad:f2:61:be:b4:8b:34:ec:9c: 9b:b0:b7:06:d9:71:9d:18:03:3d:81:a6:dd:88:2a: 92:c5:ae:8e:5a:9e:84:79:a0:93:33:47:fb:3c:91: 7b:d1:eb:1e:ea:18:7e:f3:6b:16:a6:8e:48:9c:ce: cd:bc:84:1b:e3:53:52:0e:ab:61:d5:b4:1b:2d:a3: 58:96:5e:05:e2:5e:5e:e6:aa:cf:3d:7f:d0:74:63: 05:95:88:0b:e0:9e:ec:f8:5d:31:ff:1c:b5:4a:db: 89:8c:64:84:e1:c7:7c:70:bf:03:50:1f:ce:cf:70: 0b:4f:8d:d7:ef:c4:71:df:a0:19:e8:a6:f1:f9:e3: 2b:42:f4:40:45:21:d9:38:c7:13:ab:c1:7b:83:70: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:78:5C:E0:BD:F8:53:44:BF:11:49:1F:03:4C:90:B8:1B:99:A8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl X509v3 Authority Key Identifier: keyid:92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:90:20:17:84:5a:96:f3:69:02:cc:06:74:d5:f4:35:d9:15: 60:20:10:2d:13:99:6a:e7:8a:ef:c9:11:e1:77:21:28:43:25: 5b:0b:6c:f6:7d:93:1d:f8:08:05:af:76:cd:c3:0e:68:be:9f: 8d:29:db:8c:82:99:72:f4:b4:e7:8b:17:5c:bb:b5:c8:9e:33: 2b:e4:c9:fb:b2:c2:a2:e1:65:04:f0:c8:7b:2d:bb:fe:60:4c: 5e:02:68:74:ca:49:8d:a7:7d:a1:4a:6a:5c:88:79:07:51:96: bc:cd:17:57:60:92:56:12:11:f9:41:a5:e1:d1:a9:20:09:64: 22:af:ed:e2:88:83:96:aa:91:67:2f:ff:aa:3d:c6:95:62:20: 45:cd:23:06:c1:b6:88:a9:b3:99:28:a8:bc:8a:09:04:4c:d7: 97:d0:0c:78:62:f7:f8:b5:94:92:de:2e:77:0b:03:6c:47:e6: 67:ad:5f:8d:b2:f8:52:cc:d4:da:81:8b:4c:26:38:cb:f2:8a: db:ad:0f:01:bc:5b:cf:5e:b1:8a:d9:b0:93:01:68:74:81:41: 1c:de:16:34:05:33:41:47:87:0a:99:e0:04:6d:df:22:1b:73: 45:19:cf:29:32:b5:51:8d:4e:8c:09:0b:8e:5d:07:89:bb:8b: 4b:7a:bd:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nr0f5g8PiQ/koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3ZDRhODQtOWYwZS00NDA4LTgyZTctODFjMDliN2M1 OTJkMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk ODQzOGI0NDQtOGUwNS00ZTIyLWE4MjctMzdlZTMwOTFiNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20y3mxc4jiZ8KLMXNnR5OsXroGZka9+Q7u7m x0dQSFgwmYJta3csR/beOY5TXVRAP590NW94AKMwZqL+Sri7zCMKYOffqG1CTFvw YzAMLmarHyrfQVVUEoLxy3cpaMDUaaNYEkUUO46kylC8jsat8mG+tIs07JybsLcG 2XGdGAM9gabdiCqSxa6OWp6EeaCTM0f7PJF70ese6hh+82sWpo5InM7NvIQb41NS Dqth1bQbLaNYll4F4l5e5qrPPX/QdGMFlYgL4J7s+F0x/xy1StuJjGSE4cd8cL8D UB/Oz3ALT43X78Rx36AZ6Kbx+eMrQvRARSHZOMcTq8F7g3CGiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKl4XOC9+FNEvxFJHwNMkLgbmagYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdk NGE4NC05ZjBlLTQ0MDgtODJlNy04MWMwOWI3YzU5MmQvZDY3ZDRhODQtOWYwZS00 NDA4LTgyZTctODFjMDliN2M1OTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDY3ZDRhODQtOWYwZS00NDA4LTgy ZTctODFjMDliN2M1OTJkL2Q2N2Q0YTg0LTlmMGUtNDQwOC04MmU3LTgxYzA5Yjdj NTkyZC5jcmwwHwYDVR0jBBgwFoAUkvPQda9kMHx7T+8z7DqBfVdKjWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdkNGE4NC05ZjBlLTQ0MDgtODJlNy04MWMw OWI3YzU5MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBekCAXhFqW82kCzAZ01fQ1 2RVgIBAtE5lq54rvyRHhdyEoQyVbC2z2fZMd+AgFr3bNww5ovp+NKduMgply9LTn ixdcu7XInjMr5Mn7ssKi4WUE8Mh7Lbv+YExeAmh0ykmNp32hSmpciHkHUZa8zRdX YJJWEhH5QaXh0akgCWQir+3iiIOWqpFnL/+qPcaVYiBFzSMGwbaIqbOZKKi8igkE TNeX0Ax4Yvf4tZSS3i53CwNsR+ZnrV+NsvhSzNTagYtMJjjL8orbrQ8BvFvPXrGK 2bCTAWh0gUEc3hY0BTNBR4cKmeAEbd8iG3NFGc8pMrVRjU6MCQuOXQeJu4tLer3h -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:10 2025 by rpki-client