$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft File: 25c105b2-b3c3-4913-b15d-64cbbad1f227.mft (raw, json) Hash identifier: vVz5tmRUNGYix5c4BjMH6is+ZyYvyuWU3jrfZQo7zts= Subject key identifier: D8:F6:67:2B:E2:2D:50:6E:FD:39:55:3D:8C:BF:06:73:5B:23:B3:45 Authority key identifier: 8E:60:53:3C:4D:49:4E:C6:BB:A7:D4:5D:A2:53:4F:46:4D:F6:AD:1C Certificate issuer: /CN=25c105b2-b3c3-4913-b15d-64cbbad1f227 Certificate serial: 010D0C9F4328584FA2AAD0DBE1A4B59A22A92380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft Manifest number: 010D0C9F4328584BDA0310BFD260BC9D7C1444C7 Signing time: Tue 27 Oct 2026 00:00:24 +0000 Manifest this update: Tue 27 Oct 2026 00:00:24 +0000 Manifest next update: Thu 29 Oct 2026 00:00:00 +0000 Files and hashes: 1: 25c105b2-b3c3-4913-b15d-64cbbad1f227.crl (hash: jVm4/rszCbbyaVYwaoqrdoUt4Boyjy47z9EtzOgbv9M=) 2: d8524c93-eeea-3bbb-8d8c-4aa1ab072bdc.roa (hash: Y/MHOrCXptG9WRZCkWBD0v0EOeQLTwR/ZzUofhKRFJY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:aa:d0:db:e1:a4:b5:9a:22:a9:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c105b2-b3c3-4913-b15d-64cbbad1f227 Validity Not Before: Oct 27 00:00:24 2026 GMT Not After : Oct 29 00:00:00 2026 GMT Subject: CN=3bd13001-b341-4042-aea0-c4e9344157bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:4e:8a:49:84:40:e2:88:4e:45:39:91:ba: 3d:82:25:96:4a:6e:33:b2:6f:5f:9e:b1:dd:ab:9d: e5:34:78:39:2a:e1:27:ad:36:64:d2:48:37:55:b6: 05:4f:df:e9:54:8e:8a:8e:56:0d:c5:46:05:6b:63: 6c:a4:bc:8c:4b:15:d0:ff:6a:a0:cf:9c:21:18:87: d9:4d:57:55:a1:a8:e5:cd:8c:b9:1d:5a:60:2a:25: e6:f2:b7:2d:25:76:c3:07:5e:c6:2e:f1:29:01:cb: 38:bd:6f:ec:fc:8a:3e:44:8e:6f:78:b1:a1:59:44: 4f:cf:43:07:03:b0:97:67:17:db:6b:02:01:df:48: ab:92:79:69:da:f3:4a:2a:69:ed:76:73:9b:e7:34: 63:04:ab:59:76:f8:5a:c6:8d:68:1b:44:a0:48:b2: b1:66:ad:7a:df:35:ec:d6:03:f7:f0:72:3a:6b:ee: de:82:aa:6a:81:bd:70:28:67:8d:ab:14:78:9d:84: 21:85:78:0c:ef:e0:c9:a4:9d:58:5b:65:43:6a:d5: 8c:86:5f:55:08:07:7b:92:61:5e:7a:86:b7:59:56: 5c:c5:ac:9e:3d:2c:96:da:4a:77:94:ab:55:c7:f4: 84:6f:a6:3c:c6:ee:4d:0d:88:3b:95:88:91:2b:92: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F6:67:2B:E2:2D:50:6E:FD:39:55:3D:8C:BF:06:73:5B:23:B3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.crl X509v3 Authority Key Identifier: keyid:8E:60:53:3C:4D:49:4E:C6:BB:A7:D4:5D:A2:53:4F:46:4D:F6:AD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:89:0a:7b:4d:f4:9f:9c:43:a6:3b:fe:09:7c:0d:87:d1:28: 1a:5e:27:d4:b6:8a:de:b9:8e:8c:9d:b9:ef:57:be:85:0a:7c: 90:3c:99:3f:9d:88:cb:68:0a:c8:63:c1:88:de:2c:82:0b:7c: ed:8c:6b:87:ef:bd:ae:64:a5:e2:23:de:c3:96:e6:9e:1f:e2: 0e:1c:a7:64:40:64:1b:5f:14:99:0d:5b:f6:23:f8:8f:58:07: 22:1c:6a:3d:3d:90:c6:e8:8d:26:c3:10:48:af:a5:a0:15:15: 1a:42:d1:67:9e:70:43:49:43:4b:82:25:57:b0:d1:b5:f0:3c: 67:68:6b:f7:5b:29:14:0f:76:34:a9:da:53:d3:49:dd:3b:4a: 4e:8a:77:04:c9:12:40:43:2b:a9:4b:e3:17:7a:b1:aa:e6:65: 1c:a9:da:da:b3:ac:57:ad:b0:0a:2e:9c:7d:c8:17:ec:2f:45: ff:5f:d1:a0:42:98:54:25:1f:7b:be:45:cb:7c:0a:5c:c8:75: a2:3c:4d:8f:9b:14:0f:6a:e9:ce:05:5e:3d:13:bd:02:1c:4d: df:e0:06:fe:41:96:ca:7c:9a:76:d3:27:c5:2f:27:e2:79:61: e6:52:57:8c:e4:2b:57:44:b2:bc:33:a1:e2:0b:20:85:25:45: 22:17:c5:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+iqtDb4aS1miKpI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVjMTA1YjItYjNjMy00OTEzLWIxNWQtNjRjYmJhZDFm MjI3MB4XDTI2MTAyNzAwMDAyNFoXDTI2MTAyOTAwMDAwMFowLzEtMCsGA1UEAxMk M2JkMTMwMDEtYjM0MS00MDQyLWFlYTAtYzRlOTM0NDE1N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MVOikmEQOKITkU5kbo9giWWSm4zsm9fnrHd q53lNHg5KuEnrTZk0kg3VbYFT9/pVI6KjlYNxUYFa2NspLyMSxXQ/2qgz5whGIfZ TVdVoajlzYy5HVpgKiXm8rctJXbDB17GLvEpAcs4vW/s/Io+RI5veLGhWURPz0MH A7CXZxfbawIB30irknlp2vNKKmntdnOb5zRjBKtZdvhaxo1oG0SgSLKxZq163zXs 1gP38HI6a+7egqpqgb1wKGeNqxR4nYQhhXgM7+DJpJ1YW2VDatWMhl9VCAd7kmFe eoa3WVZcxayePSyW2kp3lKtVx/SEb6Y8xu5NDYg7lYiRK5JbtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNj2ZyviLVBu/TlVPYy/BnNbI7NFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNWMx MDViMi1iM2MzLTQ5MTMtYjE1ZC02NGNiYmFkMWYyMjcvMjVjMTA1YjItYjNjMy00 OTEzLWIxNWQtNjRjYmJhZDFmMjI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjVjMTA1YjItYjNjMy00OTEzLWIx NWQtNjRjYmJhZDFmMjI3LzI1YzEwNWIyLWIzYzMtNDkxMy1iMTVkLTY0Y2JiYWQx ZjIyNy5jcmwwHwYDVR0jBBgwFoAUjmBTPE1JTsa7p9RdolNPRk32rRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNWMxMDViMi1iM2MzLTQ5MTMtYjE1ZC02NGNi YmFkMWYyMjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOiQp7TfSfnEOmO/4JfA2H 0SgaXifUtoreuY6MnbnvV76FCnyQPJk/nYjLaArIY8GI3iyCC3ztjGuH772uZKXi I97DluaeH+IOHKdkQGQbXxSZDVv2I/iPWAciHGo9PZDG6I0mwxBIr6WgFRUaQtFn nnBDSUNLgiVXsNG18DxnaGv3WykUD3Y0qdpT00ndO0pOincEyRJAQyupS+MXerGq 5mUcqdras6xXrbAKLpx9yBfsL0X/X9GgQphUJR97vkXLfApcyHWiPE2PmxQPaunO BV49E70CHE3f4Ab+QZbKfJp20yfFLyfieWHmUleM5CtXRLK8M6HiCyCFJUUiF8WR -----END CERTIFICATE-----Generated at Tue Oct 27 15:42:14 2026 by rpki-client