$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft File: be8c0be8-820f-49cc-b759-a1cd0b68028b.mft (raw, json) Hash identifier: 0ErFugxC3wO22UXVXqtZUGH+cu62dzVAQCwky7i1DdM= Subject key identifier: D8:A9:A0:BF:97:CF:07:E2:4C:E7:E3:60:69:2B:16:4B:65:35:94:9D Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 Certificate issuer: /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Certificate serial: 010D0C9F4328584BBD51B843E0AFEBD8E8BF9F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft Manifest number: 010D0C9F43285843F9AB868D8ED2EC70F8C5E5D8 Signing time: Mon 03 Nov 2025 18:00:03 +0000 Manifest this update: Mon 03 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: be8c0be8-820f-49cc-b759-a1cd0b68028b.crl (hash: SN9vtokYz252sdVWcPHREkfDXmw+tZUT2GQ54aULeP4=) 2: ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (hash: wE4VapD7myKIn8I24pHpWmBJ53TdS94thE4PpymGFrE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:51:b8:43:e0:af:eb:d8:e8:bf:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Validity Not Before: Nov 3 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=145a1b41-58f4-4f35-b7e3-c8c207106c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:93:44:cc:97:92:61:e2:ee:b3:c2:9e:13: 74:bb:26:6c:8b:f4:58:71:9d:a9:90:bd:63:f0:54: 95:d7:a3:1c:dd:d7:4d:0b:14:0e:d4:4f:2d:a4:62: c6:c4:b7:da:f0:4d:d9:b5:2a:22:40:4a:11:7b:19: 98:bf:ea:a9:03:93:d7:b2:26:70:3f:7f:b0:88:6b: 13:69:bd:bf:57:65:57:4e:af:45:36:14:04:4b:7b: d6:da:74:ab:f8:00:3e:e2:98:42:8c:18:dc:c3:d1: 2f:06:81:68:1b:13:a9:70:09:12:a1:26:ca:85:ce: e0:77:31:e9:fd:10:e1:d4:9f:86:fe:65:9d:f0:8e: 9b:48:d9:d2:0e:4b:94:b6:18:94:b3:5c:47:84:df: c0:95:24:03:fc:2a:09:27:ff:fc:3d:02:36:66:88: 8f:4a:bf:db:fe:78:a8:cf:66:e4:e0:d5:46:ab:fe: be:0d:40:4f:61:bc:35:95:d3:c7:1a:9d:fc:23:65: 8b:dc:72:c2:30:be:1a:e2:a0:05:31:a1:4b:b6:c2: 85:d4:d3:91:c5:9a:06:2e:3d:2f:7e:76:5f:80:5b: aa:84:7c:24:8d:4f:d4:07:5b:eb:95:c1:d4:3e:a9: 91:02:a2:ac:60:55:b3:c4:ca:e6:f6:9c:60:a9:e2: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A9:A0:BF:97:CF:07:E2:4C:E7:E3:60:69:2B:16:4B:65:35:94:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl X509v3 Authority Key Identifier: keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:44:b5:e9:96:29:ee:5c:bd:04:8c:3c:b2:37:b2:e7:6c:75: d0:e8:a9:fe:42:02:b1:36:a0:27:77:5b:7e:09:16:57:2e:81: df:1b:39:67:66:b2:f0:f5:27:44:04:20:46:c0:86:e5:c0:4c: 41:ad:21:2d:1d:d8:c8:77:98:78:52:23:c5:60:0d:11:17:ef: 26:76:43:f6:57:63:05:f2:a6:73:f2:49:41:90:31:10:cb:9e: 70:f5:54:25:d8:d0:a1:bc:1b:35:88:bf:58:5e:fb:1f:e0:dc: 7a:32:dd:4b:e7:a1:d7:e0:d6:09:8c:96:36:ae:5a:b6:bd:db: a6:bb:b8:6d:81:4d:b5:35:f5:5b:ed:39:c5:76:7b:99:4b:1f: 38:73:fb:74:fb:f8:27:82:f6:dc:88:d0:4b:7a:1f:82:79:d9: a8:58:30:ca:33:ae:5b:61:ed:e4:52:7d:a5:79:b3:03:e8:22: 93:33:66:9c:34:73:5b:34:d2:2a:bc:12:70:3f:39:ba:fa:f2: c0:b9:ee:b5:8e:ad:ad:0f:6e:2e:a3:e1:b2:cd:7a:4f:db:d4: 33:d6:b4:01:b8:b9:c8:7e:ed:e6:bd:dc:0e:ad:5f:0f:c7:3d: 9d:86:78:ff:27:c4:41:9c:14:65:55:50:af:f7:c5:fa:3d:a8: 8b:91:12:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9UbhD4K/r2Oi/nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU4YzBiZTgtODIwZi00OWNjLWI3NTktYTFjZDBiNjgw MjhiMB4XDTI1MTEwMzE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk MTQ1YTFiNDEtNThmNC00ZjM1LWI3ZTMtYzhjMjA3MTA2YzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7aTRMyXkmHi7rPCnhN0uyZsi/RYcZ2pkL1j 8FSV16Mc3ddNCxQO1E8tpGLGxLfa8E3ZtSoiQEoRexmYv+qpA5PXsiZwP3+wiGsT ab2/V2VXTq9FNhQES3vW2nSr+AA+4phCjBjcw9EvBoFoGxOpcAkSoSbKhc7gdzHp /RDh1J+G/mWd8I6bSNnSDkuUthiUs1xHhN/AlSQD/CoJJ//8PQI2ZoiPSr/b/nio z2bk4NVGq/6+DUBPYbw1ldPHGp38I2WL3HLCML4a4qAFMaFLtsKF1NORxZoGLj0v fnZfgFuqhHwkjU/UB1vrlcHUPqmRAqKsYFWzxMrm9pxgqeJpvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNipoL+XzwfiTOfjYGkrFktlNZSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThj MGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNkMGI2ODAyOGIvYmU4YzBiZTgtODIwZi00 OWNjLWI3NTktYTFjZDBiNjgwMjhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU4YzBiZTgtODIwZi00OWNjLWI3 NTktYTFjZDBiNjgwMjhiL2JlOGMwYmU4LTgyMGYtNDljYy1iNzU5LWExY2QwYjY4 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUIfqVdHsML5CwxNcFkg/RWmP2cQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThjMGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNk MGI2ODAyOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/RLXplinuXL0EjDyyN7Ln bHXQ6Kn+QgKxNqAnd1t+CRZXLoHfGzlnZrLw9SdEBCBGwIblwExBrSEtHdjId5h4 UiPFYA0RF+8mdkP2V2MF8qZz8klBkDEQy55w9VQl2NChvBs1iL9YXvsf4Nx6Mt1L 56HX4NYJjJY2rlq2vdumu7htgU21NfVb7TnFdnuZSx84c/t0+/gngvbciNBLeh+C edmoWDDKM65bYe3kUn2lebMD6CKTM2acNHNbNNIqvBJwPzm6+vLAue61jq2tD24u o+GyzXpP29Qz1rQBuLnIfu3mvdwOrV8Pxz2dhnj/J8RBnBRlVVCv98X6PaiLkRKp -----END CERTIFICATE-----Generated at Tue Nov 4 09:27:27 2025 by rpki-client