$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: A3QnJWx7Pf07x3c3ejlGiJpiOPjX6tK0cral/MlaHAs= Subject key identifier: D8:79:03:C2:6B:57:C9:95:C6:58:83:C0:8C:B2:43:2B:18:27:97:43 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584BBA870A4C658A365D3B287640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD92B Signing time: Sun 02 Nov 2025 18:00:03 +0000 Manifest this update: Sun 02 Nov 2025 18:00:03 +0000 Manifest next update: Wed 05 Nov 2025 18:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: 2iN58G3AZvVlOrxEKyf5r6DukcCF7lIPW8iPw4fx9YA=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: VoGqRYxIOt1R5BzC6GonGgM95Zu0LnznbG3F5IhPFd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:87:0a:4c:65:8a:36:5d:3b:28:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Nov 2 18:00:03 2025 GMT Not After : Nov 5 18:00:00 2025 GMT Subject: CN=a41de6a8-0e34-48a3-96fd-f19e2c3510d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:cc:49:1e:ba:a7:12:70:57:27:f8:b8:7b: e1:99:48:3c:8d:b5:0e:58:5a:80:a8:e2:ad:b2:04: 71:a4:77:4f:2f:91:5c:ea:4f:fb:d4:c9:05:13:7b: 32:49:68:65:68:d3:9a:6e:23:36:a4:ad:9f:ab:1e: 68:04:8a:7a:7f:ec:ec:24:57:d3:73:50:df:4d:48: 74:ae:f8:42:2c:4c:35:55:59:7b:35:bb:5a:4e:8b: d5:d6:a8:16:a0:40:07:ef:29:22:86:d3:2e:30:23: f8:63:14:9d:70:ac:6b:ac:f4:2c:ba:79:1f:ed:44: 2b:a4:3e:f2:53:d7:1c:10:cf:73:a6:b9:a5:cf:18: fa:b1:b8:0d:35:ac:6b:8c:8a:7a:5b:4c:0e:30:63: 68:1b:c5:9c:ab:e0:fa:ff:e6:52:2e:23:40:d2:ef: d4:86:be:7e:a7:e1:4d:0b:8c:b4:b5:a3:f7:8c:81: f1:7e:56:b1:61:4f:a1:f2:52:d3:11:ef:78:eb:e2: a6:43:2b:3d:4d:de:be:41:52:8b:84:23:5f:3d:1f: 5c:87:e4:41:95:db:3d:eb:45:31:56:0a:a3:4a:0f: 40:1a:e8:dc:34:0e:07:eb:4a:85:1f:e9:77:f8:89: 04:79:57:0b:c9:91:c9:e2:1a:87:e4:c5:d2:a3:ae: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:79:03:C2:6B:57:C9:95:C6:58:83:C0:8C:B2:43:2B:18:27:97:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4c:e0:f5:31:95:74:75:07:27:e3:96:14:0d:2d:60:3e:8f: 4a:ae:a4:84:17:90:ca:96:d7:17:e3:86:87:b2:df:0c:89:a1: 51:41:c0:6a:78:48:6f:a5:d9:94:4d:7c:5e:f7:e1:d9:ff:1f: b4:3a:eb:36:6f:fc:0e:e1:61:ce:52:6b:0a:e1:36:36:48:8b: 87:4f:4c:a0:5e:80:e6:31:b9:39:53:8d:6f:41:fb:81:5c:f7: cb:94:ac:2f:8a:94:3e:d8:f1:51:29:73:26:95:e3:a7:3c:fd: a2:dd:ad:23:ab:b4:c1:52:a7:30:6d:c1:48:8c:3e:0e:24:f9: 05:82:54:a3:9e:31:fe:f3:63:d8:ff:2b:5c:c5:d6:ad:46:ca: ec:3d:35:67:0d:fa:4b:3c:83:e8:52:1f:89:55:96:ff:4e:c1: 6c:d3:5e:72:14:61:e3:dd:0c:fc:eb:f7:ee:2b:1b:78:8b:1c: c7:dd:2b:47:30:b1:4e:79:89:0e:f8:9e:41:1f:53:71:d4:70: c9:8f:7a:6b:95:6f:ba:d8:25:67:bf:52:53:f7:f0:06:02:87: ab:2d:e8:77:bf:3e:2a:0f:f8:44:3f:c8:cc:86:5d:69:7b:4a: 6f:fe:01:a5:57:15:d7:83:50:c0:9b:23:57:3c:b8:69:b3:46: 27:b1:a7:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6hwpMZYo2XTsodkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MTEwMjE4MDAwM1oXDTI1MTEwNTE4MDAwMFowLzEtMCsGA1UEAxMk YTQxZGU2YTgtMGUzNC00OGEzLTk2ZmQtZjE5ZTJjMzUxMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBrMSR66pxJwVyf4uHvhmUg8jbUOWFqAqOKt sgRxpHdPL5Fc6k/71MkFE3sySWhlaNOabiM2pK2fqx5oBIp6f+zsJFfTc1DfTUh0 rvhCLEw1VVl7NbtaTovV1qgWoEAH7ykihtMuMCP4YxSdcKxrrPQsunkf7UQrpD7y U9ccEM9zprmlzxj6sbgNNaxrjIp6W0wOMGNoG8Wcq+D6/+ZSLiNA0u/Uhr5+p+FN C4y0taP3jIHxflaxYU+h8lLTEe946+KmQys9Td6+QVKLhCNfPR9ch+RBlds960Ux VgqjSg9AGujcNA4H60qFH+l3+IkEeVcLyZHJ4hqH5MXSo67uvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNh5A8JrV8mVxliDwIyyQysYJ5dDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqTOD1MZV0dQcn45YUDS1g Po9KrqSEF5DKltcX44aHst8MiaFRQcBqeEhvpdmUTXxe9+HZ/x+0Ous2b/wO4WHO UmsK4TY2SIuHT0ygXoDmMbk5U41vQfuBXPfLlKwvipQ+2PFRKXMmleOnPP2i3a0j q7TBUqcwbcFIjD4OJPkFglSjnjH+82PY/ytcxdatRsrsPTVnDfpLPIPoUh+JVZb/ TsFs015yFGHj3Qz86/fuKxt4ixzH3StHMLFOeYkO+J5BH1Nx1HDJj3prlW+62CVn v1JT9/AGAoerLeh3vz4qD/hEP8jMhl1pe0pv/gGlVxXXg1DAmyNXPLhps0YnsaeC -----END CERTIFICATE-----Generated at Mon Nov 3 02:02:56 2025 by rpki-client