$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft File: 5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft (raw, json) Hash identifier: Sl6RfDSvUQOh06eKDoKoiPCDXTXkfI3aRmnZQ0Vf4pM= Subject key identifier: 2D:90:D1:17:2B:46:81:5C:3A:E9:6B:94:4F:E3:D4:6A:9B:65:D0:D9 Authority key identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 Certificate issuer: /CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9 Certificate serial: 010D0C9F4328584BE17EE50FC2987E1132312980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft Manifest number: 010D0C9F432858430F025B3AD95C34CBC23732BC Signing time: Sun 16 Nov 2025 17:00:10 +0000 Manifest this update: Sun 16 Nov 2025 17:00:10 +0000 Manifest next update: Tue 18 Nov 2025 17:00:00 +0000 Files and hashes: 1: 5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl (hash: m7Q4/M7nl7qrQVrJl2SkcXVpitzDBbucJwhn0W/rLsM=) 2: c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa (hash: u5JAQjBcz2WyNMrswIvaDe/Pd95Zlt9GzgYJisw2WYQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:7e:e5:0f:c2:98:7e:11:32:31:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9 Validity Not Before: Nov 16 17:00:10 2025 GMT Not After : Nov 18 17:00:00 2025 GMT Subject: CN=ac9ee49b-e121-4da5-90e3-887449cec82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:bc:ff:54:7e:bb:21:f6:d6:ae:ae:b2:9a: ce:44:59:d4:6f:69:a6:69:b8:06:8f:66:ac:bb:50: ef:bb:aa:95:86:2f:2c:b1:6e:f6:71:1e:53:28:ce: f4:c0:81:81:8e:f7:b3:d0:f9:73:77:23:c7:3c:a5: 09:96:f3:41:2a:38:b9:88:9f:2f:5d:d8:04:aa:bd: 35:bf:d4:da:dc:81:f8:a6:cf:8e:71:d2:82:36:e9: 3e:2b:1a:18:65:1e:2f:bd:b1:7e:2a:53:7e:2b:ea: 04:8e:3d:57:62:57:f4:f5:fe:ed:ac:a1:83:8d:e0: 5b:b0:0c:ed:79:b9:d1:08:fa:7f:c8:a0:0d:8e:66: 01:da:58:99:ec:38:49:97:75:90:1f:06:af:a2:d5: ec:a5:ec:7c:85:3d:f2:59:3b:f8:e4:70:8f:8b:19: 77:1a:44:48:c4:b9:e9:ae:44:17:74:2d:47:ac:50: b6:40:60:80:15:50:fc:95:64:fb:73:19:94:a3:e9: 48:87:73:e9:48:e8:4e:70:9c:86:75:99:78:56:63: 57:80:57:55:e3:57:99:89:f3:0b:6b:a5:ac:2b:7c: c5:63:3d:42:11:a8:4f:41:3e:79:be:56:2a:46:f6: 6e:8d:cd:66:c6:61:fb:39:84:80:1d:58:c8:81:fc: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:D1:17:2B:46:81:5C:3A:E9:6B:94:4F:E3:D4:6A:9B:65:D0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl X509v3 Authority Key Identifier: keyid:73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:33:a5:13:08:c9:29:ba:3b:e8:29:e8:cf:b9:a2:e3:83:a3: 8b:bf:7a:61:63:00:ce:5c:f4:92:73:2d:75:0e:b3:09:31:2e: de:54:b2:dd:7f:aa:ec:a2:78:db:0e:c0:d3:62:bd:b0:9f:6b: 04:e0:e9:04:76:d4:21:e4:51:8e:d2:5c:ec:18:c5:0a:97:5f: f5:38:d9:d0:1e:ac:bd:45:73:76:49:4d:36:ce:27:8e:60:b3: 45:45:6f:45:53:be:22:7b:11:ec:1e:82:38:61:04:b2:b6:5f: 3f:7d:28:68:d8:ff:b1:92:58:17:aa:f1:ad:3f:2d:99:3f:b2: 8f:61:c6:9b:7a:e1:71:ca:a2:01:dc:ee:f8:e9:0a:61:00:65: 52:57:e1:91:22:d0:40:92:f6:bc:84:64:78:65:0b:28:4c:f3: 9e:f4:81:2a:c5:49:90:29:ca:5c:50:c0:1a:b1:f0:53:7f:12: da:33:eb:56:c7:dc:6a:16:44:8e:9b:60:a1:96:21:18:a5:03: 63:b5:8f:5c:57:ef:94:9d:3f:0b:c3:5f:f4:9d:ca:aa:98:53: ab:5b:f8:cc:e3:82:93:ba:1e:24:c6:b0:5d:5c:44:32:9d:67: 52:dd:3c:2f:7b:34:b1:6e:aa:e4:72:24:54:7e:a2:d5:b4:aa: 2a:ef:40:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvhfuUPwph+ETIxKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYyYTkxODktYzEyNS00ZTAwLTljOGEtMzQzODA1ZmY2 ZmI5MB4XDTI1MTExNjE3MDAxMFoXDTI1MTExODE3MDAwMFowLzEtMCsGA1UEAxMk YWM5ZWU0OWItZTEyMS00ZGE1LTkwZTMtODg3NDQ5Y2VjODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnna8/1R+uyH21q6usprORFnUb2mmabgGj2as u1Dvu6qVhi8ssW72cR5TKM70wIGBjvez0PlzdyPHPKUJlvNBKji5iJ8vXdgEqr01 v9Ta3IH4ps+OcdKCNuk+KxoYZR4vvbF+KlN+K+oEjj1XYlf09f7trKGDjeBbsAzt ebnRCPp/yKANjmYB2liZ7DhJl3WQHwavotXspex8hT3yWTv45HCPixl3GkRIxLnp rkQXdC1HrFC2QGCAFVD8lWT7cxmUo+lIh3PpSOhOcJyGdZl4VmNXgFdV41eZifML a6WsK3zFYz1CEahPQT55vlYqRvZujc1mxmH7OYSAHVjIgfy6NwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC2Q0RcrRoFcOulrlE/j1GqbZdDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjJh OTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVmZjZmYjkvNWYyYTkxODktYzEyNS00 ZTAwLTljOGEtMzQzODA1ZmY2ZmI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWYyYTkxODktYzEyNS00ZTAwLTlj OGEtMzQzODA1ZmY2ZmI5LzVmMmE5MTg5LWMxMjUtNGUwMC05YzhhLTM0MzgwNWZm NmZiOS5jcmwwHwYDVR0jBBgwFoAUc4v7GOvUMjGCHKPXMhjfIfFEHRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4 MDVmZjZmYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvM6UTCMkpujvoKejPuaLj g6OLv3phYwDOXPSScy11DrMJMS7eVLLdf6rsonjbDsDTYr2wn2sE4OkEdtQh5FGO 0lzsGMUKl1/1ONnQHqy9RXN2SU02zieOYLNFRW9FU74iexHsHoI4YQSytl8/fSho 2P+xklgXqvGtPy2ZP7KPYcabeuFxyqIB3O746QphAGVSV+GRItBAkva8hGR4ZQso TPOe9IEqxUmQKcpcUMAasfBTfxLaM+tWx9xqFkSOm2ChliEYpQNjtY9cV++UnT8L w1/0ncqqmFOrW/jM44KTuh4kxrBdXEQynWdS3TwvezSxbqrkciRUfqLVtKoq70As -----END CERTIFICATE-----Generated at Sun Nov 16 19:51:13 2025 by rpki-client