$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft File: 589a84a2-f62d-414f-915d-810c9265e5de.mft (raw, json) Hash identifier: Y3TbjF/YNh2QHkjYmp53dY/B15ML3AcDTLGHlauZXhA= Subject key identifier: 40:F9:2E:25:73:51:0C:6A:EA:C1:DA:7E:9D:B4:A5:90:38:E1:48:78 Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 Certificate issuer: /CN=589a84a2-f62d-414f-915d-810c9265e5de Certificate serial: 010D0C9F4328584BB7453A6BCEB7E500524B6A28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft Manifest number: 010D0C9F4328584B8AA3359A4801463882BB40D0 Signing time: Sat 01 Nov 2025 14:00:03 +0000 Manifest this update: Sat 01 Nov 2025 14:00:03 +0000 Manifest next update: Tue 04 Nov 2025 14:00:00 +0000 Files and hashes: 1: 589a84a2-f62d-414f-915d-810c9265e5de.crl (hash: coYlHtgN4JaNFOHeXfaQuSSl4u2vdPQePb6af5FQOmM=) 2: b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (hash: vlXU4eT2faLIk39wmxUQEO8QYtaWHpRL1+t9yH/Y0vI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:45:3a:6b:ce:b7:e5:00:52:4b:6a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de Validity Not Before: Nov 1 14:00:03 2025 GMT Not After : Nov 4 14:00:00 2025 GMT Subject: CN=1ace2cb2-35df-4abb-9299-f890b2d287fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:0e:00:92:f1:6f:2d:fc:3e:7c:4d:9f:07: bd:f7:ad:63:9b:ec:07:41:50:aa:5f:29:1c:2d:70: 8b:62:75:42:b7:fc:01:40:f2:63:cd:0f:ae:9d:13: 12:55:39:c6:45:ea:d0:33:54:f3:38:9c:4d:35:46: 96:ce:8a:1e:d7:cb:fb:b9:42:fb:3e:88:2d:6a:0d: fb:27:3d:be:a6:af:d3:17:5d:92:ec:ef:7b:03:63: e3:15:12:4c:d3:d9:dd:90:af:7e:9b:d3:5f:a3:33: 2f:0e:d4:13:ae:83:20:17:48:61:e1:af:c2:f1:a8: 3a:d3:c8:77:19:d0:73:5b:57:ee:7e:c3:ae:d8:1d: 13:f4:10:7b:c9:14:f1:b2:95:28:e9:17:ef:7c:27: 41:36:11:04:7a:74:40:2b:ae:82:07:38:f2:68:4d: 61:21:a8:84:fd:17:30:49:6d:50:5a:fb:66:da:b3: aa:65:4a:e7:d8:27:c7:2c:84:87:df:3c:6e:c7:1e: 14:cf:ae:29:af:a4:2f:45:c8:04:fa:ea:3c:dc:77: ca:f4:7e:af:84:84:d2:07:0c:1d:06:8d:3a:41:9b: d6:c1:62:a8:46:7d:97:0b:a1:ea:60:14:de:61:7d: 41:e4:12:31:07:37:3c:75:7a:3e:cf:b7:08:f0:d3: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F9:2E:25:73:51:0C:6A:EA:C1:DA:7E:9D:B4:A5:90:38:E1:48:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl X509v3 Authority Key Identifier: keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:43:da:91:25:7f:63:fc:c0:1b:76:e8:f4:43:b1:ed:3d:1f: 24:30:83:cf:2d:8e:67:00:35:a7:c2:ea:33:06:12:7c:f5:f0: ec:c6:20:11:5e:03:9b:a2:b5:b4:73:2b:8b:35:3b:8e:62:ea: 63:b5:f3:be:f2:55:ab:a2:c1:aa:fc:81:69:e9:be:af:30:a2: ff:2d:69:7d:dd:50:57:fc:2a:64:f1:89:83:01:ac:8c:75:df: 84:b2:e6:f5:37:d6:0f:b4:5e:e8:13:0e:2f:9f:84:3d:3c:b2: 47:40:2d:dd:3c:e5:44:db:86:b0:4a:a6:65:3e:33:3e:73:1d: 17:cc:a2:a2:1a:f3:d3:f5:e4:8d:24:18:d4:15:dd:66:aa:62: 07:25:3b:42:7b:d3:1c:a5:71:b7:e7:a7:c2:4a:da:f2:e9:68: d1:5e:20:0d:91:dc:38:96:15:b7:b5:65:e5:31:3a:66:d8:31: 30:b8:6b:93:a1:39:98:24:55:67:70:28:c8:3e:a0:b9:fa:be: 36:d0:0d:27:ed:8f:b7:44:a5:e5:57:0e:dd:25:08:6a:76:60: 6b:fa:4e:a4:fc:7d:f2:5f:c2:3a:b3:f6:fe:47:8a:72:10:29: b8:10:08:fd:2d:c9:7d:52:2c:09:15:93:c0:9e:67:1d:3a:c6: 81:e0:af:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu3RTprzrflAFJLaigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTg0YTItZjYyZC00MTRmLTkxNWQtODEwYzkyNjVl NWRlMB4XDTI1MTEwMTE0MDAwM1oXDTI1MTEwNDE0MDAwMFowLzEtMCsGA1UEAxMk MWFjZTJjYjItMzVkZi00YWJiLTkyOTktZjg5MGIyZDI4N2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1IOAJLxby38PnxNnwe9961jm+wHQVCqXykc LXCLYnVCt/wBQPJjzQ+unRMSVTnGRerQM1TzOJxNNUaWzooe18v7uUL7Pogtag37 Jz2+pq/TF12S7O97A2PjFRJM09ndkK9+m9NfozMvDtQTroMgF0hh4a/C8ag608h3 GdBzW1fufsOu2B0T9BB7yRTxspUo6RfvfCdBNhEEenRAK66CBzjyaE1hIaiE/Rcw SW1QWvtm2rOqZUrn2CfHLISH3zxuxx4Uz64pr6QvRcgE+uo83HfK9H6vhITSBwwd Bo06QZvWwWKoRn2XC6HqYBTeYX1B5BIxBzc8dXo+z7cI8NNHdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFED5LiVzUQxq6sHafp20pZA44Uh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlh ODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBjOTI2NWU1ZGUvNTg5YTg0YTItZjYyZC00 MTRmLTkxNWQtODEwYzkyNjVlNWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5YTg0YTItZjYyZC00MTRmLTkx NWQtODEwYzkyNjVlNWRlLzU4OWE4NGEyLWY2MmQtNDE0Zi05MTVkLTgxMGM5MjY1 ZTVkZS5jcmwwHwYDVR0jBBgwFoAUOWNzekScrv/UWgulI7hgQzXGX1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlhODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBj OTI2NWU1ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIQ9qRJX9j/MAbduj0Q7Ht PR8kMIPPLY5nADWnwuozBhJ89fDsxiARXgOborW0cyuLNTuOYupjtfO+8lWrosGq /IFp6b6vMKL/LWl93VBX/Cpk8YmDAayMdd+Esub1N9YPtF7oEw4vn4Q9PLJHQC3d POVE24awSqZlPjM+cx0XzKKiGvPT9eSNJBjUFd1mqmIHJTtCe9McpXG356fCStry 6WjRXiANkdw4lhW3tWXlMTpm2DEwuGuToTmYJFVncCjIPqC5+r420A0n7Y+3RKXl Vw7dJQhqdmBr+k6k/H3yX8I6s/b+R4pyECm4EAj9Lcl9UiwJFZPAnmcdOsaB4K9G -----END CERTIFICATE-----Generated at Sun Nov 2 08:26:16 2025 by rpki-client