$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: KCJecZp/Bxq8naNoyk0qlDmWG5LD+1syL6Xa7Tp+DXg= Subject key identifier: 85:32:89:B8:10:00:3A:2A:BA:AA:20:32:CC:0D:C3:9A:F1:91:1C:A3 Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584BD065609FCB29E69F124C6080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A06CC Signing time: Mon 10 Nov 2025 14:00:03 +0000 Manifest this update: Mon 10 Nov 2025 14:00:03 +0000 Manifest next update: Wed 12 Nov 2025 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: k5yN3RuWBrPPpohuRX3RNKagTKASYRrHgVq10Ta7Cb8=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: 2wNvfEyKzHfrlv9IpiSF3spWC+Hmwk29A6KZXe7O2p0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:60:9f:cb:29:e6:9f:12:4c:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Nov 10 14:00:03 2025 GMT Not After : Nov 12 14:00:00 2025 GMT Subject: CN=3ca37325-fcb9-4de7-874c-bccd9c3fad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:9f:cb:a7:1b:c9:a9:7c:11:8d:8c:df:c0: 80:e6:56:e1:19:db:71:7b:4b:54:00:f0:db:48:29: 11:bf:27:6b:f4:74:00:ef:65:35:38:6d:f7:ee:8b: 44:26:60:03:24:ef:61:13:93:ed:44:05:6a:d6:b3: 51:f0:34:eb:32:1b:a6:1c:03:4d:ad:6b:e2:02:93: 57:3a:8e:dd:05:92:0a:8f:d8:27:96:87:7d:d0:35: ce:6c:5c:c9:7d:03:a9:86:2c:fe:d1:5f:70:fb:6c: bd:ae:1e:72:4b:d2:25:e2:a2:c8:13:eb:bd:0b:94: 93:57:0f:47:14:ac:95:55:d0:d6:12:cd:8d:7b:43: 52:8c:91:18:6b:c6:e7:3d:e2:0b:23:09:fa:56:d3: f2:95:b4:ed:73:77:7b:6f:67:5f:6a:fb:5f:7c:20: 08:88:7f:a0:82:7b:9f:0c:f3:34:2e:7d:e9:b2:78: 6d:78:d3:a5:b2:b6:a3:5c:1c:32:4e:d2:57:25:48: 59:7e:50:a7:d9:4d:f7:80:6c:df:2d:3f:b8:e6:7c: f1:18:ca:23:cc:05:96:81:59:cb:c2:e7:72:e0:f8: f6:d7:a4:f4:43:d7:29:9e:f7:76:3e:92:9b:99:63: c8:2b:96:c3:f7:fe:96:c5:04:76:80:a2:28:33:b5: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:32:89:B8:10:00:3A:2A:BA:AA:20:32:CC:0D:C3:9A:F1:91:1C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:ea:d9:3b:2a:7d:df:52:d5:32:9c:cf:e3:27:24:cd:a1: 1c:7a:9c:3f:c2:60:b4:f2:15:54:45:a3:5e:3c:5b:d6:25:be: 33:1b:76:db:14:f5:8b:7b:71:d2:6b:8a:57:ec:3c:78:c0:4e: d8:dd:e4:b7:36:68:44:b7:fa:fe:ff:72:56:52:92:6e:6f:41: e1:8a:68:71:65:3f:ea:f2:4d:6e:d6:df:d8:ee:14:84:34:dc: 8f:70:be:4c:b9:a1:48:db:b1:6b:49:fb:07:2a:12:3a:fc:ef: 46:bd:fd:7f:90:f5:9c:59:85:2d:0d:e0:3e:64:1a:42:e2:cc: 50:45:5d:d8:fb:e0:1e:c0:6d:63:b1:0c:b1:ea:1b:14:eb:24: 5b:07:c4:14:e2:f9:d6:2f:61:fd:23:8b:cf:89:f6:58:a5:29: fe:1d:58:96:e7:03:aa:8f:9c:fc:52:8f:36:51:32:39:61:38: 3f:d2:fb:34:52:0f:22:68:2a:a4:d1:3a:2d:5b:ba:9e:d0:36: 09:4b:2c:00:eb:d1:95:a5:d9:85:e3:6d:7d:04:68:d2:b3:52: 06:fe:88:6f:1c:12:d8:70:46:09:8a:7a:0c:dc:d2:7d:a2:59: 9a:01:c6:85:ed:66:0d:04:6b:d3:96:e5:4a:cf:b2:a4:d2:42: ef:18:df:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvQZWCfyynmnxJMYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MTExMDE0MDAwM1oXDTI1MTExMjE0MDAwMFowLzEtMCsGA1UEAxMk M2NhMzczMjUtZmNiOS00ZGU3LTg3NGMtYmNjZDljM2ZhZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Sfy6cbyal8EY2M38CA5lbhGdtxe0tUAPDb SCkRvydr9HQA72U1OG337otEJmADJO9hE5PtRAVq1rNR8DTrMhumHANNrWviApNX Oo7dBZIKj9gnlod90DXObFzJfQOphiz+0V9w+2y9rh5yS9Il4qLIE+u9C5STVw9H FKyVVdDWEs2Ne0NSjJEYa8bnPeILIwn6VtPylbTtc3d7b2dfavtffCAIiH+ggnuf DPM0Ln3psnhteNOlsrajXBwyTtJXJUhZflCn2U33gGzfLT+45nzxGMojzAWWgVnL wudy4Pj216T0Q9cpnvd2PpKbmWPIK5bD9/6WxQR2gKIoM7WrdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIUyibgQADoquqogMswNw5rxkRyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlJ+rZOyp931LVMpzP4yck zaEcepw/wmC08hVURaNePFvWJb4zG3bbFPWLe3HSa4pX7Dx4wE7Y3eS3NmhEt/r+ /3JWUpJub0HhimhxZT/q8k1u1t/Y7hSENNyPcL5MuaFI27FrSfsHKhI6/O9Gvf1/ kPWcWYUtDeA+ZBpC4sxQRV3Y++AewG1jsQyx6hsU6yRbB8QU4vnWL2H9I4vPifZY pSn+HViW5wOqj5z8Uo82UTI5YTg/0vs0Ug8iaCqk0TotW7qe0DYJSywA69GVpdmF 4219BGjSs1IG/ohvHBLYcEYJinoM3NJ9olmaAcaF7WYNBGvTluVKz7Kk0kLvGN9W -----END CERTIFICATE-----Generated at Tue Nov 11 00:30:17 2025 by rpki-client