$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft File: f5f37851-5580-4893-8a07-8693f2521f18.mft (raw, json) Hash identifier: NyiAoTa+c0pmgAPS2PtwfrlGGs6Zoim1Iua458C6w34= Subject key identifier: 91:15:33:5A:A9:CD:FE:5B:29:D2:59:C6:06:A4:C4:6C:DA:2D:A9:8B Authority key identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Certificate issuer: /CN=f5f37851-5580-4893-8a07-8693f2521f18 Certificate serial: 010D0C9F4328584BBFC30C9BEE1049F71473A080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft Manifest number: 010D0C9F4328584AB6901491A26F3425393D58E5 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: af2c879e-4022-317d-9513-1841b13159c0.roa (hash: N2ZiZaENYUrgK/rKU7Y6UeeyN589HeNmBOV0KhEQ14Y=) 2: d34dc38a-07ce-3e37-9cd0-a31173f32136.roa (hash: BlaW410DUASb3AGO9UXZytvg99E1MGCnWVR/6bZPmJc=) 3: f5f37851-5580-4893-8a07-8693f2521f18.crl (hash: nXKy5EqWkGZPX5R8NeE5GNnbJOR0OlazrchZlJRaxBU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0c:9b:ee:10:49:f7:14:73:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f37851-5580-4893-8a07-8693f2521f18 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=3a76f947-951b-4272-af0a-ccb43c941a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:04:3f:91:94:f6:3a:38:56:76:14:6f:8a: df:3c:34:4c:68:81:7f:92:23:ad:f8:fd:a0:2e:be: 6f:94:32:77:3b:0a:39:42:93:7f:9f:59:58:a1:d2: 2c:4b:e8:54:7b:31:76:a1:f4:cc:d4:c8:62:69:b8: 0a:8b:8a:13:46:c9:6a:d3:d4:1e:ba:0f:a5:7a:74: 5d:02:f1:8b:5e:68:3d:c7:d0:2d:18:38:9f:fd:07: 20:01:d1:23:6b:dc:e9:7d:f2:f4:e0:d6:8e:7b:a7: fa:eb:a8:cd:4a:85:be:8d:f7:43:3f:a6:4f:99:be: 61:de:c7:c2:d6:34:db:09:20:70:c7:fb:ae:ed:49: ab:3e:cd:8b:4d:80:4f:8f:8a:ee:70:c8:4a:71:30: 72:25:4b:96:5b:e8:80:86:4c:12:de:6a:ed:11:bd: d0:c2:a6:26:e8:f6:a8:27:55:1f:d5:fd:e0:57:83: e7:d1:c2:fb:a5:cb:ac:bb:10:c2:da:b3:9d:34:6e: 7b:e1:5b:e0:a9:f5:39:6d:f4:85:23:98:67:dd:ba: bf:d6:d9:9b:d2:e5:cf:ed:28:0e:77:da:74:ed:46: 4d:cb:63:7e:59:ef:5f:9a:40:ce:19:f4:4b:f1:fb: 16:02:6f:39:c4:d3:d1:cd:89:f1:b6:12:86:f4:b6: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:15:33:5A:A9:CD:FE:5B:29:D2:59:C6:06:A4:C4:6C:DA:2D:A9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl X509v3 Authority Key Identifier: keyid:67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:44:f2:f3:31:88:f1:18:6b:6b:20:23:1b:99:e9:8c:34:79: f5:c8:29:48:f6:fd:03:b3:eb:aa:00:85:9d:a6:52:0b:19:c5: 7d:12:4c:43:dd:e2:c7:5b:ae:08:0d:eb:df:35:a4:f4:fb:1e: f2:6a:66:b5:2c:d9:05:05:2e:72:c6:9d:03:fd:7d:98:70:a8: ef:af:2e:06:1e:17:7b:f3:37:49:5d:da:d8:66:1e:ce:43:55: fd:ed:8d:b3:7f:11:4d:33:50:a8:2f:b7:e6:12:5d:28:32:c7: e0:80:f4:50:cf:1b:3e:f5:81:c8:f9:87:6c:63:f3:05:7b:dd: d8:0b:fb:ff:cf:c7:f8:53:fa:7c:93:42:b8:81:6e:93:31:7c: d5:60:40:e0:16:92:9e:ff:2f:e1:27:13:b9:d9:1d:62:99:89: ce:72:94:2e:b3:71:42:3a:da:62:01:91:a2:7f:35:9a:9c:3f: 1f:7b:42:d0:a4:80:8d:98:1e:fe:3e:a1:10:db:e8:0c:d0:18: c2:d4:8b:93:e0:8c:f3:44:7e:77:95:e5:36:b0:0c:c6:b2:39: 5e:88:b3:ef:74:38:4c:97:e3:f8:b0:4e:25:04:68:17:51:a5: 7e:24:ad:f5:49:cd:25:7a:cf:e8:9d:a7:cc:c0:9f:5e:3c:7f: 5a:ad:c9:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wwyb7hBJ9xRzoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMzc4NTEtNTU4MC00ODkzLThhMDctODY5M2YyNTIx ZjE4MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk M2E3NmY5NDctOTUxYi00MjcyLWFmMGEtY2NiNDNjOTQxYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIkEP5GU9jo4VnYUb4rfPDRMaIF/kiOt+P2g Lr5vlDJ3Owo5QpN/n1lYodIsS+hUezF2ofTM1MhiabgKi4oTRslq09Qeug+lenRd AvGLXmg9x9AtGDif/QcgAdEja9zpffL04NaOe6f666jNSoW+jfdDP6ZPmb5h3sfC 1jTbCSBwx/uu7UmrPs2LTYBPj4rucMhKcTByJUuWW+iAhkwS3mrtEb3QwqYm6Pao J1Uf1f3gV4Pn0cL7pcusuxDC2rOdNG574VvgqfU5bfSFI5hn3bq/1tmb0uXP7SgO d9p07UZNy2N+We9fmkDOGfRL8fsWAm85xNPRzYnxthKG9LYmwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJEVM1qpzf5bKdJZxgakxGzaLamLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYz Nzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1MjFmMTgvZjVmMzc4NTEtNTU4MC00 ODkzLThhMDctODY5M2YyNTIxZjE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjVmMzc4NTEtNTU4MC00ODkzLThh MDctODY5M2YyNTIxZjE4L2Y1ZjM3ODUxLTU1ODAtNDg5My04YTA3LTg2OTNmMjUy MWYxOC5jcmwwHwYDVR0jBBgwFoAUZx+MpTUZQVaS9pbf+jE3qIwL2zgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04Njkz ZjI1MjFmMTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtRPLzMYjxGGtrICMbmemM NHn1yClI9v0Ds+uqAIWdplILGcV9EkxD3eLHW64IDevfNaT0+x7yama1LNkFBS5y xp0D/X2YcKjvry4GHhd78zdJXdrYZh7OQ1X97Y2zfxFNM1CoL7fmEl0oMsfggPRQ zxs+9YHI+YdsY/MFe93YC/v/z8f4U/p8k0K4gW6TMXzVYEDgFpKe/y/hJxO52R1i mYnOcpQus3FCOtpiAZGifzWanD8fe0LQpICNmB7+PqEQ2+gM0BjC1IuT4IzzRH53 leU2sAzGsjleiLPvdDhMl+P4sE4lBGgXUaV+JK31Sc0les/onafMwJ9ePH9arcmX -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:17 2025 by rpki-client