$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft File: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft (raw, json) Hash identifier: Lw06kqVy/k3+34N2j8wqLNxxe4DbjkSuFyni6aWdU54= Subject key identifier: 02:F3:AD:FB:DB:72:F7:97:52:1E:CE:BA:28:5D:35:BF:F2:4A:58:E8 Authority key identifier: 3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED Certificate issuer: /CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Certificate serial: 010D0C9F4328584BBC638887039BFCBA6B96A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft Manifest number: 010D0C9F432858496F552DCD0894BBF5A9254C36 Signing time: Mon 03 Nov 2025 10:00:09 +0000 Manifest this update: Mon 03 Nov 2025 10:00:09 +0000 Manifest next update: Wed 05 Nov 2025 10:00:00 +0000 Files and hashes: 1: 2670296f-b353-309c-ad96-a0e12b7068a5.roa (hash: Ky2v/PribbMJ7IAPu33jVkB2IPtOynZAsJJuPbhq+uw=) 2: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl (hash: vp76i0lJMmbSANnPH5uLjuYYL0KyZybQqSGBwWprU8g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:63:88:87:03:9b:fc:ba:6b:96:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Validity Not Before: Nov 3 10:00:09 2025 GMT Not After : Nov 5 10:00:00 2025 GMT Subject: CN=840bccaf-3ad6-428b-aaec-689ece9b1613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:63:2a:ff:65:1b:7f:03:10:53:6a:fa:d8: 81:2d:e5:05:f1:e9:de:21:8b:df:a9:01:5e:23:14: 93:ec:aa:f9:24:9a:03:b9:50:d9:ca:eb:bf:83:d5: ca:2f:50:2c:d8:84:81:65:e7:fc:8c:b2:ea:6d:83: be:2e:8b:2e:e5:a3:3d:7d:c3:59:30:ba:25:2e:9c: 41:b6:fc:28:6f:bb:58:56:13:26:da:50:0a:f1:7b: eb:a7:1c:b1:2f:8b:55:48:11:b6:24:84:1d:65:a6: b5:7e:52:87:3b:c6:0c:06:0e:9d:ba:17:20:39:88: a0:ac:28:44:33:33:43:2f:23:5e:82:ea:e4:be:13: 15:2d:b3:c5:59:55:06:12:07:59:67:15:43:88:a2: 2c:9d:d0:51:d1:ef:fc:fb:69:f5:70:fe:0e:2c:cb: 03:8a:32:86:e6:be:7c:cf:42:72:86:0e:60:4c:40: 83:71:44:67:cb:22:08:0e:01:c7:e0:2f:62:48:06: a2:24:80:b4:93:e7:20:30:15:32:fd:08:59:81:16: 49:6b:e6:0d:9f:72:43:8f:97:89:36:c5:46:5c:8a: 14:ea:c5:fa:d3:a9:e9:5c:a9:71:90:f6:8c:31:3f: 00:7c:78:63:e5:6b:c1:66:df:fc:34:1b:e2:71:0d: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F3:AD:FB:DB:72:F7:97:52:1E:CE:BA:28:5D:35:BF:F2:4A:58:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl X509v3 Authority Key Identifier: keyid:3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9e:c8:6f:b3:29:e2:a1:c4:63:8b:67:06:99:62:a3:1f:33: 0c:3e:91:50:84:97:75:96:df:0a:f9:73:55:b4:49:c2:d6:e9: 85:19:1d:ba:88:b1:59:e2:92:2c:a7:81:bf:48:8a:02:b3:0b: 97:f4:0f:ab:f0:33:dd:9e:64:90:d3:85:e3:6a:b4:c8:e0:3a: d7:bb:2b:d7:db:09:26:3c:88:2f:0f:41:66:99:37:6c:75:33: 70:2b:a1:85:b4:86:b4:27:53:90:2d:3a:20:15:9c:c0:82:70: 33:af:3c:2c:de:b9:32:3b:50:03:31:84:88:99:c6:a8:c8:a9: 64:fc:19:29:ac:ed:5d:c7:fe:4d:a7:e6:77:92:cd:06:72:b6: 6c:00:a6:e1:9e:5f:8e:c0:6f:70:ba:29:d8:91:d5:09:77:7d: a3:46:60:69:f3:89:9e:db:08:09:24:3f:e9:77:7d:92:4d:6d: a6:4f:f6:9a:ce:48:fc:bf:3d:f4:5f:a6:aa:b9:81:cf:39:68: f7:2f:87:b8:b1:54:4d:91:a7:fb:28:18:eb:d5:ce:20:93:1d: f1:c3:45:5d:6b:e0:e8:6e:d8:e8:59:f0:9f:2d:0a:12:a2:53: 70:9c:81:85:65:fc:19:24:03:fd:18:d7:9d:5d:66:2a:d1:46: 3f:aa:ea:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu8Y4iHA5v8umuWoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZhYWY2ZTUtZjhhNy00N2Y1LWEzZmYtMWUxNGVlOTdj OTJjMB4XDTI1MTEwMzEwMDAwOVoXDTI1MTEwNTEwMDAwMFowLzEtMCsGA1UEAxMk ODQwYmNjYWYtM2FkNi00MjhiLWFhZWMtNjg5ZWNlOWIxNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijNjKv9lG38DEFNq+tiBLeUF8eneIYvfqQFe IxST7Kr5JJoDuVDZyuu/g9XKL1As2ISBZef8jLLqbYO+Losu5aM9fcNZMLolLpxB tvwob7tYVhMm2lAK8XvrpxyxL4tVSBG2JIQdZaa1flKHO8YMBg6duhcgOYigrChE MzNDLyNegurkvhMVLbPFWVUGEgdZZxVDiKIsndBR0e/8+2n1cP4OLMsDijKG5r58 z0Jyhg5gTECDcURnyyIIDgHH4C9iSAaiJIC0k+cgMBUy/QhZgRZJa+YNn3JDj5eJ NsVGXIoU6sX606npXKlxkPaMMT8AfHhj5WvBZt/8NBvicQ1fcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFALzrfvbcveXUh7OuihdNb/ySljoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NmFh ZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0ZWU5N2M5MmMvODZhYWY2ZTUtZjhhNy00 N2Y1LWEzZmYtMWUxNGVlOTdjOTJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODZhYWY2ZTUtZjhhNy00N2Y1LWEz ZmYtMWUxNGVlOTdjOTJjLzg2YWFmNmU1LWY4YTctNDdmNS1hM2ZmLTFlMTRlZTk3 YzkyYy5jcmwwHwYDVR0jBBgwFoAUPKtKGGCvkdPmP8nl8/qKBoIlw+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NmFhZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0 ZWU5N2M5MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1nshvsyniocRji2cGmWKj HzMMPpFQhJd1lt8K+XNVtEnC1umFGR26iLFZ4pIsp4G/SIoCswuX9A+r8DPdnmSQ 04XjarTI4DrXuyvX2wkmPIgvD0FmmTdsdTNwK6GFtIa0J1OQLTogFZzAgnAzrzws 3rkyO1ADMYSImcaoyKlk/BkprO1dx/5Np+Z3ks0GcrZsAKbhnl+OwG9wuinYkdUJ d32jRmBp84me2wgJJD/pd32STW2mT/aazkj8vz30X6aquYHPOWj3L4e4sVRNkaf7 KBjr1c4gkx3xw0Vda+DobtjoWfCfLQoSolNwnIGFZfwZJAP9GNedXWYq0UY/quo7 -----END CERTIFICATE-----Generated at Tue Nov 4 09:18:29 2025 by rpki-client