$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft File: a854a4c3-e5e0-49a9-a110-947d91107e15.mft (raw, json) Hash identifier: ACfBYZUmD4MgATrxk3axWY7f54qTnZRhXqpOr0XqSsw= Subject key identifier: 1E:23:A5:85:03:51:D8:95:3E:3A:2F:6B:AF:3E:4A:71:D1:D8:AB:7C Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 Certificate issuer: /CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Certificate serial: 010D0C9F4328584BDF2B5029853A63A77FEC3980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft Manifest number: 010D0C9F432858428F0B0519A5A2D5FB11136C8B Signing time: Sat 15 Nov 2025 21:00:10 +0000 Manifest this update: Sat 15 Nov 2025 21:00:10 +0000 Manifest next update: Tue 18 Nov 2025 21:00:00 +0000 Files and hashes: 1: 87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (hash: EMXnqajphUEwX3w6mOAV16OiLp5wJXdfB/2zYrGqHi4=) 2: a854a4c3-e5e0-49a9-a110-947d91107e15.crl (hash: 9XWM5ngCTT9IbwgOTUpI/obvTKaj0RUdPrXviSduhog=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:df:2b:50:29:85:3a:63:a7:7f:ec:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Validity Not Before: Nov 15 21:00:10 2025 GMT Not After : Nov 18 21:00:00 2025 GMT Subject: CN=edd873e1-3f9d-4b46-bd50-e2c340e6992e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:f7:c3:46:a4:5f:0f:29:6a:19:e5:e8:7c: 50:2c:7c:3b:d4:78:3d:b4:52:4e:02:80:fa:d7:4c: c1:bc:68:e6:f1:02:bb:a2:63:7c:dd:0e:9a:66:24: 48:82:02:df:fc:be:fb:d4:e2:ff:4e:35:48:f0:cb: e4:11:3d:97:95:17:69:35:78:81:56:71:97:4f:53: ac:2f:60:bc:31:b0:64:a5:46:4b:6b:89:bb:74:f0: c0:e9:ca:05:0f:a9:0f:51:4a:88:69:37:d6:ab:61: 7f:a0:1a:21:e3:8d:7b:d4:99:c3:66:e7:01:07:a0: 38:90:36:d0:86:8d:5c:5b:20:d2:bd:18:43:11:ba: f8:6b:39:b1:59:59:0e:90:01:a0:8d:cd:0a:6d:8a: 6c:aa:5a:6f:95:c9:63:b4:21:a2:d4:1a:3a:eb:20: 62:a7:bf:90:bf:96:67:ed:aa:a4:3b:4f:c0:c5:4a: a1:d1:14:d0:a2:fc:c2:de:0a:dc:99:2c:3b:ed:ea: 5c:9f:a6:27:68:a7:32:91:ce:b4:b6:81:25:42:3d: 2e:ee:c4:f4:8b:a8:32:da:79:41:de:23:89:33:ef: 75:71:aa:04:f1:8c:40:d4:24:de:c7:4d:86:ec:ff: 48:61:80:1d:da:c1:7c:96:89:55:24:3e:bd:e1:4d: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:23:A5:85:03:51:D8:95:3E:3A:2F:6B:AF:3E:4A:71:D1:D8:AB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl X509v3 Authority Key Identifier: keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:99:77:4d:aa:5a:6e:74:0b:7c:e8:6a:e0:25:58:02:d0:b8: 12:c8:07:5a:2d:86:14:e9:16:68:08:a7:fc:b4:b0:8b:d8:e0: 64:86:23:e3:a5:16:70:c9:74:1e:bc:c6:95:fc:a6:aa:05:e9: 25:74:62:9d:8d:1e:d6:1f:cb:ef:7f:71:ae:f1:8f:8f:b8:11: 6f:5c:23:90:4d:20:54:40:07:19:55:9c:ce:38:78:55:12:a5: c8:d7:f3:0d:2c:d4:0b:b3:e0:76:18:2a:e7:99:a8:32:6e:d2: bf:0a:e8:56:fc:86:b3:bd:4a:fc:3b:2e:0b:09:68:cb:03:d6: a9:7a:9a:9f:37:55:c8:8e:f7:9b:9a:ee:d9:99:b7:e5:2f:a2: 43:3d:e1:33:e5:e6:f2:cb:5f:de:30:fd:6f:0b:cc:2d:24:55: f0:42:ad:f7:45:57:44:9e:fa:6d:81:67:ce:5f:77:0f:20:c3: 4f:52:af:56:d9:e4:5b:94:b3:90:33:36:e5:03:08:b7:20:b8: df:bc:02:89:3e:3a:b5:f9:82:81:8c:ba:36:41:1a:71:e4:c3: d6:d7:91:26:1d:e0:20:20:1b:c9:47:50:7b:d6:1f:ac:fa:1e: 0a:ab:06:59:15:37:cb:90:7e:ba:04:aa:7a:55:b5:2f:0a:a1: bf:e3:36:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvfK1AphTpjp3/sOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NGE0YzMtZTVlMC00OWE5LWExMTAtOTQ3ZDkxMTA3 ZTE1MB4XDTI1MTExNTIxMDAxMFoXDTI1MTExODIxMDAwMFowLzEtMCsGA1UEAxMk ZWRkODczZTEtM2Y5ZC00YjQ2LWJkNTAtZTJjMzQwZTY5OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIz3w0akXw8pahnl6HxQLHw71Hg9tFJOAoD6 10zBvGjm8QK7omN83Q6aZiRIggLf/L771OL/TjVI8MvkET2XlRdpNXiBVnGXT1Os L2C8MbBkpUZLa4m7dPDA6coFD6kPUUqIaTfWq2F/oBoh44171JnDZucBB6A4kDbQ ho1cWyDSvRhDEbr4azmxWVkOkAGgjc0KbYpsqlpvlcljtCGi1Bo66yBip7+Qv5Zn 7aqkO0/AxUqh0RTQovzC3grcmSw77epcn6YnaKcykc60toElQj0u7sT0i6gy2nlB 3iOJM+91caoE8YxA1CTex02G7P9IYYAd2sF8lolVJD694U10lwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB4jpYUDUdiVPjova68+SnHR2Kt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0 YTRjMy1lNWUwLTQ5YTktYTExMC05NDdkOTExMDdlMTUvYTg1NGE0YzMtZTVlMC00 OWE5LWExMTAtOTQ3ZDkxMTA3ZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTg1NGE0YzMtZTVlMC00OWE5LWEx MTAtOTQ3ZDkxMTA3ZTE1L2E4NTRhNGMzLWU1ZTAtNDlhOS1hMTEwLTk0N2Q5MTEw N2UxNS5jcmwwHwYDVR0jBBgwFoAUcan10a1vSExftH0+L57JtwDdpxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0YTRjMy1lNWUwLTQ5YTktYTExMC05NDdk OTExMDdlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVmXdNqlpudAt86GrgJVgC 0LgSyAdaLYYU6RZoCKf8tLCL2OBkhiPjpRZwyXQevMaV/KaqBekldGKdjR7WH8vv f3Gu8Y+PuBFvXCOQTSBUQAcZVZzOOHhVEqXI1/MNLNQLs+B2GCrnmagybtK/CuhW /IazvUr8Oy4LCWjLA9apepqfN1XIjvebmu7ZmbflL6JDPeEz5ebyy1/eMP1vC8wt JFXwQq33RVdEnvptgWfOX3cPIMNPUq9W2eRblLOQMzblAwi3ILjfvAKJPjq1+YKB jLo2QRpx5MPW15EmHeAgIBvJR1B71h+s+h4KqwZZFTfLkH66BKp6VbUvCqG/4zYX -----END CERTIFICATE-----Generated at Sun Nov 16 19:47:21 2025 by rpki-client