$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft File: a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft (raw, json) Hash identifier: LUzm1OCQOsyvjB30LjBRJ3rrrZOHhWTz+VlGpIcK6d0= Subject key identifier: 2D:69:B8:29:9A:0E:A6:D9:D7:F0:6C:97:14:49:96:85:F8:E9:4E:7C Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 Certificate issuer: /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Certificate serial: 010D0C9F4328584BBF887FBD9B4F536CCD5DD400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft Manifest number: 010D0C9F4328584073A85532A545317F91B9A124 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa (hash: STLc8fBYb3Za3xGc8rNiW84fQyPEXJWCAtEgDpuKruw=) 2: a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl (hash: 8L6t55fkiO01mmpDSHlfWEesX2RVVRDeDnzX/ej4Mhc=) 3: c7f56a69-0c3c-37e5-80e1-32c30e788993.roa (hash: BJ1fildAYh/znAZtCoTWH8iG2wOecsJIAb5aNUkh478=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7f:bd:9b:4f:53:6c:cd:5d:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=218ec4a1-90dd-4c9a-b5b1-aa09f662dd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:1b:27:74:0e:1b:bf:b7:40:5e:b8:0b:30: aa:6c:61:5d:3f:20:86:d1:9b:a0:85:05:8d:f5:d1: d5:e6:2c:66:47:f5:ce:a8:58:ec:5c:81:62:b2:ea: b9:2c:ba:ad:36:2a:93:71:5f:38:ac:38:41:26:d9: bb:e4:26:84:a8:00:f4:06:49:a7:fe:78:db:19:d3: 12:20:37:97:5e:c4:f3:49:28:06:e1:b3:4c:e3:36: d0:a8:db:05:48:03:8d:74:c0:19:f9:e0:39:9e:e0: 3c:e0:63:18:a9:b5:1a:37:82:5f:61:a3:ff:76:54: ca:65:d6:4c:c6:d7:1e:ef:f8:12:68:e6:ad:7e:5e: 9d:79:93:5a:33:71:cd:5f:37:e7:46:bf:97:95:cd: 0d:42:b8:4a:4f:a7:ed:2a:dd:0f:f8:ad:ee:6f:fd: fc:ad:70:a0:02:fe:f5:c7:e0:77:a8:3e:ab:95:30: 5f:9d:52:42:ce:6e:e7:f2:ac:75:54:ec:3b:a6:60: 8e:42:fc:59:aa:97:57:9f:c9:a3:bb:0f:a9:f9:49: 6c:64:2d:a3:b1:fa:7d:ca:4b:17:79:e7:cd:3c:18: 03:71:dc:f2:cf:cb:7b:a3:83:e9:30:47:41:8d:0b: 41:88:16:73:95:ad:9c:d4:73:30:b8:da:83:8f:87: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:B8:29:9A:0E:A6:D9:D7:F0:6C:97:14:49:96:85:F8:E9:4E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl X509v3 Authority Key Identifier: keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:84:b9:15:3e:32:69:33:ea:c3:da:f5:73:37:1d:f0:08:c8: 89:29:1a:b4:7b:a9:12:aa:dd:69:a8:fc:32:72:65:9c:21:58: 45:94:ab:5f:c0:4d:74:20:0f:b5:14:4f:0b:cd:5c:d5:a7:a1: a4:96:fe:07:bf:a3:9c:44:23:74:b1:bb:17:91:53:a4:54:d8: 0d:cf:1b:fc:d4:ab:eb:bc:14:ab:3e:29:72:f2:d2:51:4b:5f: 9b:ae:b1:e7:8d:d8:78:b4:a6:2b:3a:97:1e:db:93:97:5b:34: 47:9a:d7:36:3c:98:6f:ef:56:98:7b:c7:25:35:1a:ba:b8:45: ad:c4:8c:c5:40:b7:85:7d:09:00:ef:24:41:d6:30:51:71:b5: f5:5a:fd:cc:5b:56:11:1c:28:94:ac:2d:76:bf:12:56:41:74: 80:f9:32:27:c7:46:93:8c:3e:e4:fb:34:6f:c7:f0:c7:cb:79: 74:80:61:a4:e5:4f:9b:0e:ac:bc:bb:1d:d2:28:65:c2:5a:14: 38:ea:79:8a:dd:b0:56:d5:6f:3e:42:7a:9c:44:bc:0c:9e:af: cf:24:2e:2c:74:32:7c:f7:8a:91:5c:15:da:51:08:b9:4a:f3: 97:16:0c:14:62:2e:ce:31:d2:5b:f0:40:7e:c2:7f:8a:16:bb: 07:e4:e9:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH+9m09TbM1d1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx ZjNmMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk MjE4ZWM0YTEtOTBkZC00YzlhLWI1YjEtYWEwOWY2NjJkZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRkbJ3QOG7+3QF64CzCqbGFdPyCG0ZughQWN 9dHV5ixmR/XOqFjsXIFisuq5LLqtNiqTcV84rDhBJtm75CaEqAD0Bkmn/njbGdMS IDeXXsTzSSgG4bNM4zbQqNsFSAONdMAZ+eA5nuA84GMYqbUaN4JfYaP/dlTKZdZM xtce7/gSaOatfl6deZNaM3HNXzfnRr+Xlc0NQrhKT6ftKt0P+K3ub/38rXCgAv71 x+B3qD6rlTBfnVJCzm7n8qx1VOw7pmCOQvxZqpdXn8mjuw+p+UlsZC2jsfp9yksX eefNPBgDcdzyz8t7o4PpMEdBjQtBiBZzla2c1HMwuNqDj4dxCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC1puCmaDqbZ1/BslxRJloX46U58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvYTdlYWZlNjUtY2MxNi00 OGE3LWIyMjEtYjAwYmZjMTgxZjNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4 MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi ZmMxODFmM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBahLkVPjJpM+rD2vVzNx3w CMiJKRq0e6kSqt1pqPwycmWcIVhFlKtfwE10IA+1FE8LzVzVp6Gklv4Hv6OcRCN0 sbsXkVOkVNgNzxv81KvrvBSrPily8tJRS1+brrHnjdh4tKYrOpce25OXWzRHmtc2 PJhv71aYe8clNRq6uEWtxIzFQLeFfQkA7yRB1jBRcbX1Wv3MW1YRHCiUrC12vxJW QXSA+TInx0aTjD7k+zRvx/DHy3l0gGGk5U+bDqy8ux3SKGXCWhQ46nmK3bBW1W8+ QnqcRLwMnq/PJC4sdDJ894qRXBXaUQi5SvOXFgwUYi7OMdJb8EB+wn+KFrsH5Okq -----END CERTIFICATE-----Generated at Tue Nov 4 18:48:13 2025 by rpki-client