$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft File: 5d74f046-ba55-4b61-bccd-7e10e81264d1.mft (raw, json) Hash identifier: WkXP7A+/550+3Gzr/xJ+05s0wg8QRORLTm8q3DA+GZ8= Subject key identifier: EE:FB:41:14:29:30:D1:D6:FE:66:73:75:70:B5:07:14:61:C4:09:D5 Authority key identifier: F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60 Certificate issuer: /CN=5d74f046-ba55-4b61-bccd-7e10e81264d1 Certificate serial: 010D0C9F4328584BC28DC9DC463BFAE2F26591F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft Manifest number: 010D0C9F43285840FF12A11CD56F233FF4DD2634 Signing time: Wed 05 Nov 2025 15:00:08 +0000 Manifest this update: Wed 05 Nov 2025 15:00:08 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 5d74f046-ba55-4b61-bccd-7e10e81264d1.crl (hash: j4geyJZk3ar7Flid1BcrsXli8VeRD6i0XLg2Du0WLhI=) 2: a41580dd-b7f0-3cec-be2d-a4e9623d6497.roa (hash: CICgjs0NMe8XzXj5TXANRODoAXEmW2kVe1mUWjux+FM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:8d:c9:dc:46:3b:fa:e2:f2:65:91:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d74f046-ba55-4b61-bccd-7e10e81264d1 Validity Not Before: Nov 5 15:00:08 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=d14bf7a1-0259-4114-95a2-5890efb6bd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:54:7b:cf:cb:5e:b4:e2:15:c5:b8:ee:34: 91:84:e9:81:f4:c5:15:c2:38:b0:a1:cd:ff:e3:bc: 6c:07:e6:78:af:20:10:79:fd:59:c2:6f:84:b0:65: 87:6f:d7:94:45:ff:22:d1:7a:61:9e:0a:e3:1b:0a: 31:be:60:9b:5d:2a:73:28:58:1f:df:9f:42:87:c3: 79:4b:14:f0:1d:69:a8:b8:9f:ad:06:44:56:f9:3b: 7d:7e:75:90:bd:9c:c3:f5:f9:b0:b1:ed:36:a2:81: cd:70:7e:df:49:ba:c0:e7:5e:90:ef:2e:37:84:f6: 31:52:fc:45:90:a9:e5:82:0b:fd:0f:b6:c6:c2:cb: 2d:61:52:a9:3d:e8:e7:1f:db:9a:ba:c8:d4:f0:52: d2:43:cc:39:78:ca:1f:80:dc:21:54:b2:6e:f2:a7: a9:d4:43:73:af:11:1e:b3:c2:77:68:4c:07:5c:84: 9e:bb:20:b3:0c:d3:76:be:d9:3a:17:31:c0:ae:52: ce:d7:5e:d3:0c:6e:ef:6f:57:be:6d:72:b8:ea:17: 36:38:96:46:99:b0:6d:21:8a:dd:53:af:65:62:18: f9:71:68:d2:85:7b:7e:e0:cc:82:0c:c4:79:b0:df: 3d:0e:83:cf:6f:a5:e9:7b:cd:15:88:93:c1:37:5d: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:41:14:29:30:D1:D6:FE:66:73:75:70:B5:07:14:61:C4:09:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl X509v3 Authority Key Identifier: keyid:F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6a:cd:ea:8e:fe:01:3d:01:c9:4c:a9:51:4d:a2:a1:96:e9: 56:c8:55:ee:f7:5c:1b:c1:41:a5:35:43:3d:99:68:ac:97:d0: 64:ca:de:77:1b:e9:ea:c6:97:15:20:54:9a:53:f3:9b:f0:8f: 72:61:01:f6:e7:a3:4c:38:72:cf:b6:05:59:ec:ae:bf:6f:af: ea:48:6e:ec:eb:ac:99:54:f6:06:9e:02:d4:d1:66:41:67:cd: db:bb:ee:03:73:b7:0f:96:ce:38:6c:08:a1:b5:6a:51:6b:8f: f0:7a:6b:45:2f:a4:3c:4d:ae:f2:32:0c:80:10:39:6c:34:07: 8b:0b:14:0d:ad:4c:90:be:f5:4b:89:b3:2e:44:ba:82:63:72: 4c:ae:17:c9:9c:62:4c:a5:a2:11:d8:f2:89:69:f3:2e:17:51: 42:5a:dc:4b:ec:3b:40:f8:d0:0a:0e:2f:7b:fb:47:57:b9:66: 54:b8:d9:5d:a6:17:f2:fd:ed:dc:f5:0f:32:91:c9:9e:38:6a: 21:1e:42:09:ff:36:77:12:0e:a0:8c:07:18:a0:e3:20:47:ee: 6b:e2:50:4e:03:dd:a6:fa:24:c9:9e:91:3f:a6:a0:ea:01:5c: 51:02:90:95:18:00:85:5f:48:b5:e8:b1:03:56:32:b9:3f:e3: f9:97:90:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCjcncRjv64vJlkfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3NGYwNDYtYmE1NS00YjYxLWJjY2QtN2UxMGU4MTI2 NGQxMB4XDTI1MTEwNTE1MDAwOFoXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk ZDE0YmY3YTEtMDI1OS00MTE0LTk1YTItNTg5MGVmYjZiZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAtUe8/LXrTiFcW47jSRhOmB9MUVwjiwoc3/ 47xsB+Z4ryAQef1Zwm+EsGWHb9eURf8i0XphngrjGwoxvmCbXSpzKFgf359Ch8N5 SxTwHWmouJ+tBkRW+Tt9fnWQvZzD9fmwse02ooHNcH7fSbrA516Q7y43hPYxUvxF kKnlggv9D7bGwsstYVKpPejnH9uausjU8FLSQ8w5eMofgNwhVLJu8qep1ENzrxEe s8J3aEwHXISeuyCzDNN2vtk6FzHArlLO117TDG7vb1e+bXK46hc2OJZGmbBtIYrd U69lYhj5cWjShXt+4MyCDMR5sN89DoPPb6Xpe80ViJPBN13piwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO77QRQpMNHW/mZzdXC1BxRhxAnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0 ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEwZTgxMjY0ZDEvNWQ3NGYwNDYtYmE1NS00 YjYxLWJjY2QtN2UxMGU4MTI2NGQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWQ3NGYwNDYtYmE1NS00YjYxLWJj Y2QtN2UxMGU4MTI2NGQxLzVkNzRmMDQ2LWJhNTUtNGI2MS1iY2NkLTdlMTBlODEy NjRkMS5jcmwwHwYDVR0jBBgwFoAU9atyFhgAJGyBd19faOUhKnCXn2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEw ZTgxMjY0ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLas3qjv4BPQHJTKlRTaKh lulWyFXu91wbwUGlNUM9mWisl9Bkyt53G+nqxpcVIFSaU/Ob8I9yYQH256NMOHLP tgVZ7K6/b6/qSG7s66yZVPYGngLU0WZBZ83bu+4Dc7cPls44bAihtWpRa4/wemtF L6Q8Ta7yMgyAEDlsNAeLCxQNrUyQvvVLibMuRLqCY3JMrhfJnGJMpaIR2PKJafMu F1FCWtxL7DtA+NAKDi97+0dXuWZUuNldphfy/e3c9Q8ykcmeOGohHkIJ/zZ3Eg6g jAcYoOMgR+5r4lBOA92m+iTJnpE/pqDqAVxRApCVGACFX0i16LEDVjK5P+P5l5DJ -----END CERTIFICATE-----Generated at Thu Nov 6 01:51:35 2025 by rpki-client