$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft File: cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft (raw, json) Hash identifier: 7tchZqPqLwJ4TaJZDctqahAVUvjQp7VXsvvPJrP4OFU= Subject key identifier: C7:F4:95:9F:D3:B3:3F:F3:F9:C4:75:A0:28:AE:AB:0F:25:CD:F2:9B Authority key identifier: 35:91:0B:76:8A:16:69:8D:7B:10:D1:53:36:28:AD:2A:A8:17:AB:5F Certificate issuer: /CN=cd96b38e-1bc5-467e-872d-f7b20d4ff723 Certificate serial: 010D0C9F4328584BC3F3279069BD25E728E47B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft Manifest number: 010D0C9F4328584073A838A7A7723BC482DFDCA6 Signing time: Thu 06 Nov 2025 03:00:11 +0000 Manifest this update: Thu 06 Nov 2025 03:00:11 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa (hash: 1lEP0h6XV3U17Zjbeq1t6Pa2AU8hScc4gisD3QKWiIk=) 2: cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl (hash: +mvSqcy6w2MVKfFdlYpRYsB27ZMaX5Yk/P+BqxvBnz0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:f3:27:90:69:bd:25:e7:28:e4:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd96b38e-1bc5-467e-872d-f7b20d4ff723 Validity Not Before: Nov 6 03:00:11 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=3c39c3e4-e315-4bf8-88e0-3b021fe4196a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:8d:98:1a:3d:4a:f7:c9:63:53:9c:ac:fc: 76:1f:53:1d:90:40:f3:27:15:dc:c0:b1:23:80:32: f3:8a:bd:69:c9:8f:48:3a:9f:c5:de:44:46:a9:40: a2:61:7f:d7:fe:d3:ef:a3:56:f9:b5:25:54:35:ea: 80:78:9a:73:31:8c:11:4c:f0:f0:b9:29:9d:56:db: 07:a1:1b:28:b3:88:e5:16:50:80:21:0d:ae:6e:f6: 2d:2d:65:ba:13:2c:8d:fb:73:d5:c4:a6:50:0c:70: 5d:c5:68:a2:07:43:8b:95:fe:0d:5b:49:5a:68:ae: 1b:cd:01:ef:73:a8:24:fd:81:13:9d:5d:64:c5:96: 1e:b2:07:ed:24:f3:62:2c:f0:08:8d:1f:bb:d9:4a: e4:a6:b2:cf:ba:51:0a:25:dc:4f:5c:6f:7c:8e:e5: 6a:6c:07:17:77:df:d9:a8:26:b6:cb:30:1e:e3:ad: 66:d1:d8:c7:8e:e2:dd:5d:a8:d5:03:7b:bc:58:5e: 6a:a3:3d:f7:2c:13:1c:67:d8:46:ae:45:4e:56:70: 11:1d:14:7e:f7:5c:7f:14:f5:e1:0f:fc:99:96:3a: 32:f0:bf:a3:db:7d:a0:fc:6f:7f:57:7a:ac:4a:3a: 0a:52:56:81:a5:10:57:b2:f3:ab:ac:65:33:1d:5b: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:95:9F:D3:B3:3F:F3:F9:C4:75:A0:28:AE:AB:0F:25:CD:F2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl X509v3 Authority Key Identifier: keyid:35:91:0B:76:8A:16:69:8D:7B:10:D1:53:36:28:AD:2A:A8:17:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5c:1f:8a:07:d0:31:64:68:65:64:9f:b9:86:af:56:ab:35: 1d:bc:14:8d:66:1e:52:8b:04:71:e1:c9:6d:fd:d9:b5:9a:b8: ee:96:e3:88:9a:1e:82:10:c9:9a:d2:87:bd:4e:bd:4c:ab:60: f6:4f:26:9e:ef:4e:aa:b7:e9:2f:25:80:8f:14:0c:e5:bf:c9: 74:b6:42:fb:f4:96:77:3f:c2:13:aa:00:26:7a:ac:92:f7:a1: a4:cb:82:6a:67:a7:b5:e9:2c:71:6c:5c:f0:df:8b:8c:2a:e0: 08:b1:34:87:b8:b1:f3:10:aa:e5:af:09:f3:1f:79:b5:8f:c7: 79:08:29:b1:f3:59:7a:72:2c:57:68:47:f2:41:5d:39:28:6b: 63:e6:ce:68:ec:86:7b:80:3a:9d:10:bb:4a:dd:cc:e3:a2:c5: ec:4b:f6:df:57:a3:76:11:12:e1:52:fe:1e:bc:c3:3b:e1:63: e1:55:fc:6d:89:d6:45:23:4f:3b:db:d9:2e:27:3a:88:c7:97: 7f:70:cc:9a:41:29:b9:7f:6b:b4:f0:68:4f:ff:98:4e:03:29: 72:5e:f3:b2:ca:e7:3c:35:0e:7b:6e:c1:ea:86:ba:d8:d7:8c: 29:1d:66:25:f1:b3:ae:ee:54:2f:5d:eb:c7:06:78:44:b0:f3: 36:77:9f:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvD8yeQab0l5yjke4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5NmIzOGUtMWJjNS00NjdlLTg3MmQtZjdiMjBkNGZm NzIzMB4XDTI1MTEwNjAzMDAxMVoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk M2MzOWMzZTQtZTMxNS00YmY4LTg4ZTAtM2IwMjFmZTQxOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAWNmBo9SvfJY1OcrPx2H1MdkEDzJxXcwLEj gDLzir1pyY9IOp/F3kRGqUCiYX/X/tPvo1b5tSVUNeqAeJpzMYwRTPDwuSmdVtsH oRsos4jlFlCAIQ2ubvYtLWW6EyyN+3PVxKZQDHBdxWiiB0OLlf4NW0laaK4bzQHv c6gk/YETnV1kxZYesgftJPNiLPAIjR+72UrkprLPulEKJdxPXG98juVqbAcXd9/Z qCa2yzAe461m0djHjuLdXajVA3u8WF5qoz33LBMcZ9hGrkVOVnARHRR+91x/FPXh D/yZljoy8L+j232g/G9/V3qsSjoKUlaBpRBXsvOrrGUzHVtK7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMf0lZ/Tsz/z+cR1oCiuqw8lzfKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZDk2 YjM4ZS0xYmM1LTQ2N2UtODcyZC1mN2IyMGQ0ZmY3MjMvY2Q5NmIzOGUtMWJjNS00 NjdlLTg3MmQtZjdiMjBkNGZmNzIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2Q5NmIzOGUtMWJjNS00NjdlLTg3 MmQtZjdiMjBkNGZmNzIzL2NkOTZiMzhlLTFiYzUtNDY3ZS04NzJkLWY3YjIwZDRm ZjcyMy5jcmwwHwYDVR0jBBgwFoAUNZELdooWaY17ENFTNiitKqgXq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZDk2YjM4ZS0xYmM1LTQ2N2UtODcyZC1mN2Iy MGQ0ZmY3MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4XB+KB9AxZGhlZJ+5hq9W qzUdvBSNZh5SiwRx4clt/dm1mrjuluOImh6CEMma0oe9Tr1Mq2D2Tyae706qt+kv JYCPFAzlv8l0tkL79JZ3P8ITqgAmeqyS96Gky4JqZ6e16SxxbFzw34uMKuAIsTSH uLHzEKrlrwnzH3m1j8d5CCmx81l6cixXaEfyQV05KGtj5s5o7IZ7gDqdELtK3czj osXsS/bfV6N2ERLhUv4evMM74WPhVfxtidZFI08729kuJzqIx5d/cMyaQSm5f2u0 8GhP/5hOAylyXvOyyuc8NQ57bsHqhrrY14wpHWYl8bOu7lQvXevHBnhEsPM2d58O -----END CERTIFICATE-----Generated at Thu Nov 6 13:47:16 2025 by rpki-client