$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft File: de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft (raw, json) Hash identifier: sw5VuEy4HHjcOUIWLtMFhSm6EqYglhilJ0opIm8dF/Y= Subject key identifier: DE:87:B0:2B:69:A7:38:85:B6:2B:C3:87:3D:6C:B3:86:B1:84:06:C7 Authority key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Certificate issuer: /CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Certificate serial: 010D0C9F4328584BBCF8695C06D425A6EC1F9C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft Manifest number: 010D0C9F43285848B4FA0FEA2B359536FF72A7E8 Signing time: Mon 03 Nov 2025 15:00:08 +0000 Manifest this update: Mon 03 Nov 2025 15:00:08 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 9d9939e1-e7c3-3ea6-a720-303f759b790e.roa (hash: RYFW6sX72+wJuvOxyqCkLYFqeADuy3FJ2Ig+5Up65AU=) 2: de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl (hash: /lD8wXUtdByKTn2XhzkIa2Ye+4jq+aukNp/lvAAOo2k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:f8:69:5c:06:d4:25:a6:ec:1f:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Validity Not Before: Nov 3 15:00:08 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=9ec339cc-b587-4dd5-a7ac-046df2fbb003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:49:09:36:4a:8b:0a:f2:66:73:f7:5d:40: 18:b3:d3:92:e6:85:09:94:33:0c:9a:3a:35:26:f9: 5c:ca:7d:cf:8c:95:09:f3:85:85:8c:c0:f7:c8:7f: e9:02:cc:96:7d:0f:85:4a:e7:11:f8:2e:2d:44:81: cd:e1:53:9a:65:87:61:2c:3d:e4:80:16:ef:01:d1: 99:b8:04:c2:40:04:14:13:f0:f3:8e:ec:ea:8b:46: 46:5d:00:7a:3c:40:d1:9b:e0:f4:c6:a0:2f:ca:8c: 87:70:f4:fe:95:a6:ec:2e:51:32:b0:59:1a:67:1e: 80:b0:fe:61:82:5a:d2:3b:fe:33:35:fd:64:5e:2e: 85:0f:30:bf:92:82:6e:8d:18:63:b6:a4:fb:4a:bb: 80:b8:6f:41:bf:9b:38:18:75:88:eb:fa:0b:3e:ca: 9b:25:ba:9b:e0:de:ec:dd:87:3c:4a:24:56:50:ce: df:59:4c:15:f1:f4:ec:ad:ed:d5:70:2b:73:a0:9e: 32:69:16:3b:d5:46:8a:04:a4:9f:c2:b9:88:36:19: a2:9c:90:86:7c:d4:55:c8:b9:a2:df:cc:68:30:74: 1d:17:89:5e:48:0b:27:f6:4e:80:15:72:e1:67:51: 4f:cb:7b:5a:92:60:49:dc:00:3c:65:32:49:70:3c: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:B0:2B:69:A7:38:85:B6:2B:C3:87:3D:6C:B3:86:B1:84:06:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl X509v3 Authority Key Identifier: keyid:7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5d:3b:cc:e5:5e:1b:a2:c3:5c:0d:cc:9e:5c:31:a9:bd:12: 8d:94:bb:e6:d3:c9:54:8a:68:45:8e:24:79:2e:c2:82:64:26: a1:10:62:3e:bd:66:ed:72:03:e9:bf:ea:8b:cc:a7:a3:ae:16: e1:a0:f0:95:ac:60:36:fe:e0:fe:6a:b6:1c:6d:55:2e:78:dd: dd:6b:66:a1:f8:b7:da:8a:5c:a9:f2:f4:d4:4b:d6:06:9a:74: 78:5c:c7:68:30:f5:32:b2:2e:e9:fa:89:46:2d:f0:11:31:3c: 61:72:56:4c:75:b0:ef:d2:88:a7:76:9d:37:4d:5c:ed:f0:8f: 02:9f:aa:fa:aa:d7:81:3c:03:9c:dd:22:c9:59:bc:d9:dd:fa: ca:ae:ce:5a:f1:d9:34:0f:f9:95:73:e5:da:b0:d3:ee:f5:c3: f6:f9:95:07:ff:d6:5e:bb:c0:f1:60:82:d2:29:a2:b5:ed:03: 2c:bb:e3:53:34:4c:c2:37:12:02:38:ef:52:79:58:56:46:05: 48:0b:59:e7:5d:9a:5e:95:c6:b1:6b:96:ea:81:ce:d9:23:fa: e7:9c:d1:f0:1f:0d:82:c5:e3:42:64:1a:fb:c5:32:1f:6e:72: f2:7b:8b:6b:05:fc:3e:ee:8d:ab:1c:e3:a0:97:e9:d4:3c:9a: b5:69:80:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu8+GlcBtQlpuwfnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4MzQtNTc0ZTliYjJl ODJkMB4XDTI1MTEwMzE1MDAwOFoXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk OWVjMzM5Y2MtYjU4Ny00ZGQ1LWE3YWMtMDQ2ZGYyZmJiMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxJCTZKiwryZnP3XUAYs9OS5oUJlDMMmjo1 Jvlcyn3PjJUJ84WFjMD3yH/pAsyWfQ+FSucR+C4tRIHN4VOaZYdhLD3kgBbvAdGZ uATCQAQUE/Dzjuzqi0ZGXQB6PEDRm+D0xqAvyoyHcPT+labsLlEysFkaZx6AsP5h glrSO/4zNf1kXi6FDzC/koJujRhjtqT7SruAuG9Bv5s4GHWI6/oLPsqbJbqb4N7s 3Yc8SiRWUM7fWUwV8fTsre3VcCtzoJ4yaRY71UaKBKSfwrmINhminJCGfNRVyLmi 38xoMHQdF4leSAsn9k6AFXLhZ1FPy3takmBJ3AA8ZTJJcDzlPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN6HsCtppziFtivDhz1ss4axhAbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZTFi YzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJiMmU4MmQvZGUxYmM4MGYtNWQ1Ny00 Yjk2LTg4MzQtNTc0ZTliYjJlODJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4 MzQtNTc0ZTliYjJlODJkL2RlMWJjODBmLTVkNTctNGI5Ni04ODM0LTU3NGU5YmIy ZTgyZC5jcmwwHwYDVR0jBBgwFoAUe28mCpExx7ylAoEKwNq9qG9EUbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRl OWJiMmU4MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWXTvM5V4bosNcDcyeXDGp vRKNlLvm08lUimhFjiR5LsKCZCahEGI+vWbtcgPpv+qLzKejrhbhoPCVrGA2/uD+ arYcbVUueN3da2ah+Lfailyp8vTUS9YGmnR4XMdoMPUysi7p+olGLfARMTxhclZM dbDv0oindp03TVzt8I8Cn6r6qteBPAOc3SLJWbzZ3frKrs5a8dk0D/mVc+XasNPu 9cP2+ZUH/9Zeu8DxYILSKaK17QMsu+NTNEzCNxICOO9SeVhWRgVIC1nnXZpelcax a5bqgc7ZI/rnnNHwHw2CxeNCZBr7xTIfbnLye4trBfw+7o2rHOOgl+nUPJq1aYDp -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:03 2025 by rpki-client