$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: 4wNDUi4/AdUL1u3gF5HJ4i1ezo9eYF+13uUc7LqLMV4= Subject key identifier: 35:09:C2:0A:4F:6F:9C:0B:4B:59:7F:1B:B3:DB:7A:ED:4A:B5:18:05 Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584BBCDA99BC8F3036495423F500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB3B8 Signing time: Mon 03 Nov 2025 14:00:03 +0000 Manifest this update: Mon 03 Nov 2025 14:00:03 +0000 Manifest next update: Wed 05 Nov 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: sgmDsskZpov6Z/Quju8FuHmx/ZRAftzhd/cOcEeeiw0=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: +t5VOtq4ZGc8dV5qfQOneRzg7ismvSRuQeYDNkD8Prk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:99:bc:8f:30:36:49:54:23:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Nov 3 14:00:03 2025 GMT Not After : Nov 5 14:00:00 2025 GMT Subject: CN=c973bc90-d4ea-44c5-ae13-3584875a69d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:a5:43:c4:17:58:a1:55:88:76:4f:cf:a3: cc:ed:64:73:b9:d8:9f:f6:15:d8:25:2a:6a:2f:0b: 6f:27:07:c0:57:ce:77:8e:ec:d3:d1:75:b9:96:85: 8d:ca:24:93:d4:ff:3c:9f:a7:9f:c9:a6:08:54:12: 3f:85:4b:b4:3a:7b:76:79:fd:29:33:42:f2:9b:1e: 43:e3:fa:ae:c5:3f:97:34:94:d3:5f:af:ff:b6:aa: 37:41:ba:19:c8:1c:b2:59:cd:1e:e6:75:29:70:f0: ee:5a:51:3f:74:28:53:51:b0:dc:ba:ab:83:55:44: f7:8b:f1:8a:14:ea:67:2b:63:62:68:4f:e0:c5:52: c3:d3:0e:dc:c6:de:34:93:8d:63:59:e4:32:a5:83: d5:b1:7a:55:ef:53:df:fb:0e:54:32:e4:17:46:1e: a4:ef:86:10:4f:12:2e:40:db:0d:a4:97:45:22:fe: 95:d0:8b:f4:40:b4:d1:d5:3e:55:5c:85:a0:ca:aa: f8:11:bb:bd:5b:70:aa:03:77:ea:4a:13:5d:d8:3b: 73:f9:3c:f2:9d:25:4a:5c:be:17:ac:c6:39:2c:18: fc:22:15:eb:ea:4b:32:e3:a8:24:6a:e3:67:7e:d6: 39:dc:33:22:94:c3:02:6d:4f:6d:af:95:3d:47:21: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:09:C2:0A:4F:6F:9C:0B:4B:59:7F:1B:B3:DB:7A:ED:4A:B5:18:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:18:24:87:8b:d9:7d:31:2f:16:40:15:50:d4:30:12:70:d8: db:83:ba:30:78:9f:f3:37:01:8d:73:d8:d1:4e:e3:03:23:c7: b6:cf:e7:ee:bb:79:6c:2b:1a:37:f4:41:f8:6a:82:f6:57:68: d3:b1:cd:98:0c:66:29:04:26:83:24:7c:a8:aa:d4:46:50:43: ed:21:71:8b:a7:74:24:ec:83:1b:fa:99:aa:69:f8:d4:a2:38: 58:fb:f6:56:68:6f:07:44:c7:b9:1b:71:94:a5:76:66:09:b7: 9e:bc:6f:40:19:7c:35:a1:dc:8d:4a:ea:9b:fe:81:4b:9f:c7: a7:db:e3:e5:9c:d6:45:d2:0d:56:27:4f:ce:83:d4:57:5b:d6: c2:5a:1c:d6:70:48:72:a7:b5:b8:2c:76:4e:de:5c:5a:d3:72: 32:e4:5d:8d:95:dd:77:ef:8e:e9:b4:34:05:e8:72:bd:8c:ea: 68:9e:62:32:56:7f:30:59:81:40:8d:bc:52:27:19:18:97:37: d6:c3:f6:d4:9e:61:dc:cd:e3:11:43:da:5a:a9:20:e8:14:15: 4c:10:d8:38:e7:6c:24:d2:c6:f2:48:0e:7c:02:7d:33:b0:2a: 73:25:f4:b9:9b:79:82:a5:b6:bd:ce:62:7f:75:e6:e2:77:81: 66:64:e2:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu82pm8jzA2SVQj9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MTEwMzE0MDAwM1oXDTI1MTEwNTE0MDAwMFowLzEtMCsGA1UEAxMk Yzk3M2JjOTAtZDRlYS00NGM1LWFlMTMtMzU4NDg3NWE2OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7KlQ8QXWKFViHZPz6PM7WRzudif9hXYJSpq LwtvJwfAV853juzT0XW5loWNyiST1P88n6efyaYIVBI/hUu0Ont2ef0pM0Lymx5D 4/quxT+XNJTTX6//tqo3QboZyByyWc0e5nUpcPDuWlE/dChTUbDcuquDVUT3i/GK FOpnK2NiaE/gxVLD0w7cxt40k41jWeQypYPVsXpV71Pf+w5UMuQXRh6k74YQTxIu QNsNpJdFIv6V0Iv0QLTR1T5VXIWgyqr4Ebu9W3CqA3fqShNd2Dtz+TzynSVKXL4X rMY5LBj8IhXr6ksy46gkauNnftY53DMilMMCbU9tr5U9RyG4aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDUJwgpPb5wLS1l/G7Pbeu1KtRgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDGCSHi9l9MS8WQBVQ1DAS cNjbg7oweJ/zNwGNc9jRTuMDI8e2z+fuu3lsKxo39EH4aoL2V2jTsc2YDGYpBCaD JHyoqtRGUEPtIXGLp3Qk7IMb+pmqafjUojhY+/ZWaG8HRMe5G3GUpXZmCbeevG9A GXw1odyNSuqb/oFLn8en2+PlnNZF0g1WJ0/Og9RXW9bCWhzWcEhyp7W4LHZO3lxa 03Iy5F2Nld13747ptDQF6HK9jOponmIyVn8wWYFAjbxSJxkYlzfWw/bUnmHczeMR Q9paqSDoFBVMENg452wk0sbySA58An0zsCpzJfS5m3mCpba9zmJ/debid4FmZOJw -----END CERTIFICATE-----Generated at Tue Nov 4 09:30:03 2025 by rpki-client