$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft File: 80a5a637-2442-4c3f-b791-5a2e260822af.mft (raw, json) Hash identifier: k/d0i2pNGfR4ljoLf1bgAFhbtMtara0YD8cNz6kynSA= Subject key identifier: 09:56:9C:12:AE:A7:53:77:47:AC:B9:AA:BE:5D:75:EF:42:38:10:E0 Authority key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3 Certificate issuer: /CN=80a5a637-2442-4c3f-b791-5a2e260822af Certificate serial: 010D0C9F4328584BB780D1CDED22EB2988E65280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft Manifest number: 010D0C9F4328584073A81BFCA8DC0573503CF1C0 Signing time: Sat 01 Nov 2025 16:00:08 +0000 Manifest this update: Sat 01 Nov 2025 16:00:08 +0000 Manifest next update: Mon 03 Nov 2025 16:00:00 +0000 Files and hashes: 1: 80a5a637-2442-4c3f-b791-5a2e260822af.crl (hash: pgpL6aq792rrPdGWcpwfqkmYDt1S3Oq1Q+6plk2d5Fw=) 2: aa1f874e-095d-34c7-82c1-8c864143547d.roa (hash: +LXXmjlXKafCjdmh+nptIgrZB0oLe4PBBnlUZpSM0q0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:80:d1:cd:ed:22:eb:29:88:e6:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a5a637-2442-4c3f-b791-5a2e260822af Validity Not Before: Nov 1 16:00:08 2025 GMT Not After : Nov 3 16:00:00 2025 GMT Subject: CN=f0fcdecc-55c7-40f7-9064-c14c8754d382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:77:a2:13:53:82:f4:4d:a7:65:dc:50:26: 6e:d0:18:cb:60:56:2e:79:71:be:b3:2a:6d:eb:46: 65:1f:5b:19:03:d5:db:df:a4:ff:2e:0b:ad:a5:75: f8:bd:46:b4:ff:51:ca:6a:8c:47:48:97:b0:0e:4b: af:4f:6a:02:6e:72:aa:e6:02:1f:d3:11:bf:c9:d3: 05:01:bf:9f:fc:8f:4a:72:c0:25:af:05:ac:f0:46: 13:4c:40:a2:f1:6b:4b:bf:53:15:92:ce:b1:30:0b: f1:3b:08:8c:f8:31:1f:6a:19:97:d9:59:4d:94:00: 36:e0:90:8b:b1:be:12:82:53:e7:01:73:f4:d7:3f: e2:8a:f2:af:5d:cc:42:fa:db:eb:7f:46:a4:82:ad: 70:09:8f:ec:8d:cb:2a:55:91:6f:87:5e:ec:3b:f8: ae:76:ec:29:4c:34:0e:55:06:b7:57:1c:1e:4b:e1: c6:b1:9f:1c:44:21:2a:7e:4a:2d:21:73:f4:cc:75: 67:9b:b2:b1:b5:2f:e4:7d:ab:c8:5e:bc:ee:73:c4: 42:f7:d8:fb:09:18:14:ac:e8:c6:d0:54:eb:ee:57: fe:01:58:5e:1d:b7:f4:71:da:d2:3e:5c:09:f1:ad: 7e:b2:ee:4c:83:4e:bb:16:81:5c:7c:0b:2f:03:03: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:9C:12:AE:A7:53:77:47:AC:B9:AA:BE:5D:75:EF:42:38:10:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl X509v3 Authority Key Identifier: keyid:8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3a:99:86:bf:ef:11:4f:70:fa:e5:8e:d1:ed:49:a1:a9:48: 17:cc:3c:b2:0b:34:02:89:21:d6:64:9c:e0:fd:bc:82:d5:26: c1:a2:de:eb:a7:b2:7d:3a:2d:13:c6:0c:e1:f4:fa:bc:c4:1e: 61:ea:44:65:f7:68:e1:dc:c8:75:52:92:cf:67:7a:d9:f7:c0: f0:32:11:c3:7e:74:4e:24:14:74:2b:a1:af:1d:10:77:d1:27: 99:e5:2c:e6:c8:78:33:be:a2:6a:a7:a0:40:07:d6:5e:c3:05: 40:5e:15:15:39:7f:ed:1d:c9:5d:43:ac:92:8a:b9:7d:10:5b: 1d:c9:2d:a5:de:21:db:0f:70:c2:a7:f2:37:b1:49:59:fa:76: da:ad:b5:bc:5f:2a:09:a2:3a:56:ea:ef:84:27:6c:d1:fd:0e: fe:c0:72:c9:47:7d:f0:01:1e:6f:12:bd:ab:9b:16:af:0e:5c: b4:64:71:e8:5e:bc:cb:5a:3d:74:b6:d0:2e:b6:cf:50:5e:02: 0f:1f:82:98:e5:a2:6f:5b:53:47:2e:3d:6f:33:38:c9:95:24: dc:19:61:17:d3:3d:d6:a7:c5:98:20:17:49:92:e3:c9:df:30: 34:21:a4:3f:22:e0:6e:f9:7a:6e:ff:91:f0:c6:e0:5f:a4:2a: 22:45:12:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu3gNHN7SLrKYjmUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODBhNWE2MzctMjQ0Mi00YzNmLWI3OTEtNWEyZTI2MDgy MmFmMB4XDTI1MTEwMTE2MDAwOFoXDTI1MTEwMzE2MDAwMFowLzEtMCsGA1UEAxMk ZjBmY2RlY2MtNTVjNy00MGY3LTkwNjQtYzE0Yzg3NTRkMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8V3ohNTgvRNp2XcUCZu0BjLYFYueXG+sypt 60ZlH1sZA9Xb36T/LgutpXX4vUa0/1HKaoxHSJewDkuvT2oCbnKq5gIf0xG/ydMF Ab+f/I9KcsAlrwWs8EYTTECi8WtLv1MVks6xMAvxOwiM+DEfahmX2VlNlAA24JCL sb4SglPnAXP01z/iivKvXcxC+tvrf0akgq1wCY/sjcsqVZFvh17sO/iuduwpTDQO VQa3VxweS+HGsZ8cRCEqfkotIXP0zHVnm7KxtS/kfavIXrzuc8RC99j7CRgUrOjG 0FTr7lf+AVheHbf0cdrSPlwJ8a1+su5Mg067FoFcfAsvAwMZcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAlWnBKup1N3R6y5qr5dde9COBDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MGE1 YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYwODIyYWYvODBhNWE2MzctMjQ0Mi00 YzNmLWI3OTEtNWEyZTI2MDgyMmFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODBhNWE2MzctMjQ0Mi00YzNmLWI3 OTEtNWEyZTI2MDgyMmFmLzgwYTVhNjM3LTI0NDItNGMzZi1iNzkxLTVhMmUyNjA4 MjJhZi5jcmwwHwYDVR0jBBgwFoAUijmQsWmY72Tw3wZVmoEU9eN5cvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJl MjYwODIyYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVOpmGv+8RT3D65Y7R7Umh qUgXzDyyCzQCiSHWZJzg/byC1SbBot7rp7J9Oi0Txgzh9Pq8xB5h6kRl92jh3Mh1 UpLPZ3rZ98DwMhHDfnROJBR0K6GvHRB30SeZ5SzmyHgzvqJqp6BAB9ZewwVAXhUV OX/tHcldQ6ySirl9EFsdyS2l3iHbD3DCp/I3sUlZ+nbarbW8XyoJojpW6u+EJ2zR /Q7+wHLJR33wAR5vEr2rmxavDly0ZHHoXrzLWj10ttAuts9QXgIPH4KY5aJvW1NH Lj1vMzjJlSTcGWEX0z3Wp8WYIBdJkuPJ3zA0IaQ/IuBu+Xpu/5HwxuBfpCoiRRIP -----END CERTIFICATE-----Generated at Sun Nov 2 16:39:17 2025 by rpki-client