$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft File: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft (raw, json) Hash identifier: PEbcjiH+Lg8VsPl9g2WPiAgKED5HWi2ogRRSJNXqBvo= Subject key identifier: B8:DC:5C:AF:F3:BC:4A:6F:BD:3B:AE:2D:7D:E7:25:0A:00:11:31:75 Authority key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Certificate issuer: /CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Certificate serial: 010D0C9F4328584BBD8D4F91EBEFB4275087C300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft Manifest number: 010D0C9F43285843B9909726536085C0C7BE7CF1 Signing time: Mon 03 Nov 2025 20:00:08 +0000 Manifest this update: Mon 03 Nov 2025 20:00:08 +0000 Manifest next update: Wed 05 Nov 2025 20:00:00 +0000 Files and hashes: 1: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl (hash: HXzWskQP3crhE0oxg9qmyLosPxyUdKlQgOpWKC1y150=) 2: 5f5f8d1d-4d32-3755-9cad-d9dafec7207c.roa (hash: xwpw/HVrQ/S+Pym8r920Iz6uPy3+IlH9dFoWkVSgu1A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:8d:4f:91:eb:ef:b4:27:50:87:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Validity Not Before: Nov 3 20:00:08 2025 GMT Not After : Nov 5 20:00:00 2025 GMT Subject: CN=4d12c70d-9192-4f5e-a05e-81e0211ca894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:fe:5b:33:7b:3d:be:59:a6:98:28:38:46: 95:a2:1f:2e:cf:f0:df:87:ac:2b:73:b0:b3:f3:58: 5f:98:df:53:90:17:34:4b:11:ac:d0:d2:b8:8a:d3: 23:b4:42:99:26:43:93:47:c9:e4:6b:e4:0d:e6:74: 2e:2a:2d:12:f5:cd:aa:b5:70:7d:a5:0b:e4:f9:9f: 4a:ad:ca:d5:98:91:56:10:8e:7c:ff:1c:36:5d:a4: 13:d2:33:40:b6:21:c4:cc:20:bb:45:c2:7d:43:79: a4:5f:d7:7c:ee:2d:7e:1c:9c:55:d3:db:d7:a1:2e: 02:ae:2d:fc:23:5f:69:d1:1c:0d:95:93:15:1b:fa: 63:b9:57:3e:09:f4:7f:ef:2e:a2:8b:af:8d:8d:d5: 08:ef:41:fc:fc:14:c3:fe:ad:0c:19:9b:e6:98:a2: c8:38:82:c4:b9:7d:82:83:2e:c7:54:cc:db:fb:55: c4:65:bd:68:ae:23:de:6c:5e:3a:76:84:00:f4:ab: 64:c4:15:32:5b:4b:e9:bd:bc:7b:06:0d:6a:c6:35: 2f:3e:7c:69:9a:29:c6:90:02:c7:2d:eb:31:7c:26: c0:e3:04:fc:d7:ed:41:11:87:38:5a:b7:f9:71:2f: 43:4c:ca:f5:39:0b:7f:ba:ff:ea:b8:62:c5:92:c4: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DC:5C:AF:F3:BC:4A:6F:BD:3B:AE:2D:7D:E7:25:0A:00:11:31:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.crl X509v3 Authority Key Identifier: keyid:04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:70:0f:c0:52:37:a6:37:60:22:91:a3:8a:c9:83:82:cb:5b: 80:26:e1:d7:40:51:a5:0e:ba:e9:5c:51:b5:0d:c4:fc:b2:7f: 02:1d:fb:fc:3f:7c:c5:fb:ba:02:9e:a5:61:6a:62:1a:68:fe: dd:1f:00:76:34:2a:a3:6f:e9:7c:87:41:ca:9e:81:b7:2d:d2: d7:41:45:90:d1:57:58:04:db:78:9e:b8:7e:e9:97:18:6f:e0: 4c:21:7f:b2:af:90:1e:d0:01:2f:fc:2f:39:b3:6a:22:25:be: 53:af:77:a2:df:49:3f:84:45:e5:b8:eb:f1:73:33:c3:4d:ba: 02:7a:59:f1:d9:a4:81:4c:21:d8:50:80:f5:0f:25:2e:2b:a7: af:77:94:1c:d3:2a:ed:6d:5d:9e:ec:e5:42:9e:3d:79:0b:c2: 2d:2d:9a:8b:04:8d:25:1d:ea:78:34:55:9e:08:01:22:a9:a5: 89:5b:f7:dd:de:99:d4:a0:7a:00:e3:35:90:75:9b:3b:2b:35: a4:99:22:93:a8:2b:2f:49:65:a8:bb:82:b0:de:d4:e9:f7:07: ca:50:41:e6:cb:31:fb:60:69:c3:d9:61:59:a9:9c:7d:d6:dd: 18:c8:0a:f9:c3:a6:c4:ad:2a:c4:f1:33:c2:9b:33:1c:ed:fd: a0:4b:b1:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9jU+R6++0J1CHwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNlZmZmOTktNWRiMS00ZDA5LWIwZGMtZjdmMmYwZmVk NGZkMB4XDTI1MTEwMzIwMDAwOFoXDTI1MTEwNTIwMDAwMFowLzEtMCsGA1UEAxMk NGQxMmM3MGQtOTE5Mi00ZjVlLWEwNWUtODFlMDIxMWNhODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7/+WzN7Pb5ZppgoOEaVoh8uz/Dfh6wrc7Cz 81hfmN9TkBc0SxGs0NK4itMjtEKZJkOTR8nka+QN5nQuKi0S9c2qtXB9pQvk+Z9K rcrVmJFWEI58/xw2XaQT0jNAtiHEzCC7RcJ9Q3mkX9d87i1+HJxV09vXoS4Cri38 I19p0RwNlZMVG/pjuVc+CfR/7y6ii6+NjdUI70H8/BTD/q0MGZvmmKLIOILEuX2C gy7HVMzb+1XEZb1oriPebF46doQA9KtkxBUyW0vpvbx7Bg1qxjUvPnxpminGkALH LesxfCbA4wT81+1BEYc4Wrf5cS9DTMr1OQt/uv/quGLFksRBFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLjcXK/zvEpvvTuuLX3nJQoAETF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Vm ZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBmZWQ0ZmQvMjNlZmZmOTktNWRiMS00 ZDA5LWIwZGMtZjdmMmYwZmVkNGZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNlZmZmOTktNWRiMS00ZDA5LWIw ZGMtZjdmMmYwZmVkNGZkLzIzZWZmZjk5LTVkYjEtNGQwOS1iMGRjLWY3ZjJmMGZl ZDRmZC5jcmwwHwYDVR0jBBgwFoAUBDngqWaGeSdHLJ5j8YlI34hR55IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2Yy ZjBmZWQ0ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbcA/AUjemN2AikaOKyYOC y1uAJuHXQFGlDrrpXFG1DcT8sn8CHfv8P3zF+7oCnqVhamIaaP7dHwB2NCqjb+l8 h0HKnoG3LdLXQUWQ0VdYBNt4nrh+6ZcYb+BMIX+yr5Ae0AEv/C85s2oiJb5Tr3ei 30k/hEXluOvxczPDTboCelnx2aSBTCHYUID1DyUuK6evd5Qc0yrtbV2e7OVCnj15 C8ItLZqLBI0lHep4NFWeCAEiqaWJW/fd3pnUoHoA4zWQdZs7KzWkmSKTqCsvSWWo u4Kw3tTp9wfKUEHmyzH7YGnD2WFZqZx91t0YyAr5w6bErSrE8TPCmzMc7f2gS7GI -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:12 2025 by rpki-client