$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft (raw, json) Hash identifier: 7FK+4ocAMF4+bT8n0YUwatXr2f0olkqYuVqldmumwIE= Subject key identifier: BD:F9:92:F9:10:7C:F6:E2:A8:FB:1F:44:54:96:1E:A5:F9:3F:8E:A6 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584BB9D45BED679DC1E549202180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft Manifest number: 010D0C9F43285848DE6E17CAE5012D9C33EA3E78 Signing time: Sun 02 Nov 2025 12:00:04 +0000 Manifest this update: Sun 02 Nov 2025 12:00:04 +0000 Manifest next update: Wed 05 Nov 2025 12:00:00 +0000 Files and hashes: 1: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (hash: 5lWZKS+9bqFCSid2vVWjKQa9taVv/qBRBwyIA8gnhLA=) 2: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl (hash: MDUnIscyM8FumjTCA1E5mFQqku6cyJD3MBn1CasTOkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:d4:5b:ed:67:9d:c1:e5:49:20:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Nov 2 12:00:04 2025 GMT Not After : Nov 5 12:00:00 2025 GMT Subject: CN=7b47db00-5de7-40c1-9980-8828cbf1924e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:c2:2a:de:5d:c3:e3:2f:23:8e:38:ed:49: 71:67:a7:9e:b7:11:05:1d:1b:27:c6:19:c8:ea:2f: 6e:ee:91:d6:86:c9:48:e6:35:22:f2:44:43:3f:09: 91:c4:63:90:75:0f:40:fb:49:cd:da:01:ea:7e:07: 00:9e:f7:7e:49:9d:00:99:a3:4c:e0:2c:dc:08:6b: 2d:ac:10:28:0b:f8:32:15:59:7a:ea:8f:42:51:29: d2:ac:ce:b9:0a:dd:79:e6:c9:90:fb:bd:d1:7f:4e: c5:a5:43:08:b9:86:08:21:fe:5c:5d:3b:e4:d8:b2: 1b:b9:73:27:0b:3a:85:ef:0b:28:a2:b5:85:2b:dc: 51:23:cf:f4:7c:c6:f8:92:62:82:08:7b:0d:f8:6c: 56:d4:a1:ba:8e:2f:26:d1:9e:4a:e2:86:a2:1a:6d: 96:46:c5:37:ac:d4:ac:4b:03:44:93:72:72:df:12: 86:d2:1c:53:9b:4f:25:8f:59:26:35:dd:ec:15:c8: 8c:25:8c:80:70:bd:48:1e:70:32:b6:7d:b7:30:c4: c1:a0:26:23:74:4d:95:40:bb:80:b5:c5:48:26:be: 06:d3:79:2b:af:74:a0:6f:19:86:7a:2b:a3:82:e8: e6:f0:b1:8b:72:e6:d2:6f:05:5e:c7:77:0b:85:d1: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:92:F9:10:7C:F6:E2:A8:FB:1F:44:54:96:1E:A5:F9:3F:8E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:60:cc:88:4b:02:c5:e4:b6:6f:fb:71:07:e2:2c:00:c7:b9: 58:ce:68:47:00:b7:36:52:50:6e:9a:85:5d:52:07:e9:b3:1f: 63:7e:a5:c2:1c:f8:b5:77:13:4f:af:ad:85:5e:df:bd:2f:55: 0d:d2:56:1f:a5:01:af:de:98:1b:8d:31:c4:92:a6:5c:26:d4: 23:2c:69:c0:f6:1c:25:4c:00:84:c5:ad:c2:ec:8b:67:8a:03: 14:e1:fb:65:de:e3:71:a2:bc:92:38:34:93:12:b8:ff:f1:45: 4b:aa:49:2b:51:e9:e4:c6:15:3f:af:cc:53:1b:41:b6:80:f7: d9:00:ab:48:ac:11:b6:b9:6f:6f:2c:71:38:18:ef:b9:2e:f2: ec:92:1e:00:2f:f8:4e:20:16:2b:78:1f:f2:1a:9b:b1:9d:99: 01:14:53:ea:85:4f:8f:95:f0:f5:1a:d0:b6:0b:22:34:1d:0b: e5:7a:d8:f1:2a:cd:11:4a:80:23:f5:05:e7:e8:9a:bd:71:a2: 27:1e:92:ab:ad:66:5e:79:4d:86:64:91:c4:52:d3:72:da:d0: 6d:7b:a3:74:a6:5c:2f:43:64:58:d2:73:b2:c9:f1:78:27:61: ba:38:10:1a:16:e6:a7:19:e3:54:95:dc:8c:ae:db:7c:b6:95: 78:15:bd:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu51FvtZ53B5UkgIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MTEwMjEyMDAwNFoXDTI1MTEwNTEyMDAwMFowLzEtMCsGA1UEAxMk N2I0N2RiMDAtNWRlNy00MGMxLTk5ODAtODgyOGNiZjE5MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0evCKt5dw+MvI4447UlxZ6eetxEFHRsnxhnI 6i9u7pHWhslI5jUi8kRDPwmRxGOQdQ9A+0nN2gHqfgcAnvd+SZ0AmaNM4CzcCGst rBAoC/gyFVl66o9CUSnSrM65Ct155smQ+73Rf07FpUMIuYYIIf5cXTvk2LIbuXMn CzqF7wsoorWFK9xRI8/0fMb4kmKCCHsN+GxW1KG6ji8m0Z5K4oaiGm2WRsU3rNSs SwNEk3Jy3xKG0hxTm08lj1kmNd3sFciMJYyAcL1IHnAytn23MMTBoCYjdE2VQLuA tcVIJr4G03krr3SgbxmGeiujgujm8LGLcubSbwVex3cLhdGoWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL35kvkQfPbiqPsfRFSWHqX5P46mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvNWYzZmJhZTAtYWQ2Zi00 ZDI3LWJhYmMtZDJjNmFlMTFhMmNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQYMyISwLF5LZv+3EH4iwA x7lYzmhHALc2UlBumoVdUgfpsx9jfqXCHPi1dxNPr62FXt+9L1UN0lYfpQGv3pgb jTHEkqZcJtQjLGnA9hwlTACExa3C7ItnigMU4ftl3uNxorySODSTErj/8UVLqkkr UenkxhU/r8xTG0G2gPfZAKtIrBG2uW9vLHE4GO+5LvLskh4AL/hOIBYreB/yGpux nZkBFFPqhU+PlfD1GtC2CyI0HQvletjxKs0RSoAj9QXn6Jq9caInHpKrrWZeeU2G ZJHEUtNy2tBte6N0plwvQ2RY0nOyyfF4J2G6OBAaFuanGeNUldyMrtt8tpV4Fb1H -----END CERTIFICATE-----Generated at Sun Nov 2 16:36:41 2025 by rpki-client