$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft File: 4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft (raw, json) Hash identifier: TPbUsBF8SrGk8YyjG9JSm6cdqsiXYD/4P1ZxhrnJHwk= Subject key identifier: B0:79:53:75:23:68:F7:0D:20:81:74:7F:BC:A6:0E:E5:C8:AA:59:62 Authority key identifier: 2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43 Certificate issuer: /CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0 Certificate serial: 010D0C9F4328584BC19F850F2F645B53563BBE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft Manifest number: 010D0C9F4328584073A84665E75831AFDE712AA5 Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Sat 08 Nov 2025 07:00:00 +0000 Files and hashes: 1: 4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl (hash: icKSdegDnnU7DcqxluxRJ+QL8hbgbUgH6ViPAf16m90=) 2: 63c2453d-e496-3e86-beae-99fc3a6cf57e.roa (hash: iXfWn0nkP+/KGAGDYU9MikpcjtQhTZ//0xcj4w+2suU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:85:0f:2f:64:5b:53:56:3b:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0 Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 8 07:00:00 2025 GMT Subject: CN=a8206704-daa3-4d4c-b1f9-8c241c8bdcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:9f:df:56:57:9e:e3:fc:11:b9:e2:3f:bf: f1:75:10:b6:2a:a7:85:60:0a:6d:f4:ab:a3:3d:40: 45:19:32:b3:75:f4:09:0a:93:7e:5d:5c:f7:a5:89: 70:f5:19:e3:5c:ff:99:2c:4c:0c:22:ed:a6:02:6f: 62:7c:30:57:69:19:ee:05:8a:4d:20:bf:e7:be:2d: 4a:6f:77:6b:66:5b:ea:bd:4c:d7:c5:43:ec:3c:a6: e1:82:ad:f0:39:10:3f:a6:79:a2:cf:2a:e3:b5:45: 58:bf:62:98:ee:af:ff:38:bb:22:cb:a0:ae:81:5f: 09:c6:eb:29:53:2c:e4:03:c2:84:09:f1:20:b7:d6: 48:69:89:13:94:17:bd:fe:4c:f1:45:e9:7c:47:ae: 96:65:c8:ca:65:c1:b5:12:9d:65:95:ea:cd:f2:2a: 32:c4:71:1d:59:ec:25:90:1d:df:04:42:43:af:1b: 39:22:9e:7b:bc:36:7a:c4:f0:e0:60:cc:4c:53:d4: 78:6d:39:2c:72:fe:87:a9:a1:0c:fa:4e:07:24:7e: eb:71:1a:f5:67:2f:97:f4:ad:95:3f:37:76:e0:5b: 6f:aa:0e:0e:84:52:26:0f:79:2c:cb:ee:32:1a:c6: 21:fb:ad:93:0c:db:7f:5f:e7:15:38:81:65:90:fd: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:79:53:75:23:68:F7:0D:20:81:74:7F:BC:A6:0E:E5:C8:AA:59:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl X509v3 Authority Key Identifier: keyid:2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0a:08:32:25:31:15:1f:01:79:e3:9f:de:c2:99:40:fb:6f: cd:e8:9d:84:4f:1b:40:0d:72:ab:11:dc:d8:d5:3f:67:15:4a: 9a:89:b5:03:9b:65:7d:4c:7c:2d:5f:8f:0d:d8:4e:e2:31:d5: 78:87:a0:03:2e:13:16:2c:83:6e:8b:a1:6f:e7:6f:c3:f6:a1: d9:89:d8:09:01:e3:cb:40:76:a8:a7:eb:8c:18:05:e6:4d:db: 54:6f:c6:2c:40:87:95:44:39:cc:b4:6a:0d:02:cd:4b:cd:a5: 73:4d:6b:6d:b5:b1:50:e8:ea:2c:ef:c2:41:57:05:ee:55:89: 39:0f:f1:66:d3:4a:d9:8d:85:95:b8:00:4f:a2:db:6d:5e:4f: 4d:2d:66:41:b4:71:32:51:ff:c0:43:11:7b:b7:ec:f2:db:8b: 29:b0:94:92:96:fc:9e:c8:a8:7e:e1:37:83:b6:98:d4:31:4d: 0b:1d:e4:56:79:ed:97:b5:7b:7f:dc:1a:31:a6:d5:ca:98:4e: e1:3a:2a:25:7a:af:b7:2b:89:eb:1b:54:d3:15:51:51:f3:4d: 56:23:43:e5:e8:11:81:44:e9:8b:64:c2:af:32:35:8e:a0:a8: 78:d7:c5:62:be:62:d8:c4:f8:ca:a7:0e:25:f9:21:ed:af:bf: db:b2:54:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4UPL2RbU1Y7vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM0NWNiMWMtZTc3Yi00NWY3LTgyY2ItZjc3NTcwY2Rh OGQwMB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwODA3MDAwMFowLzEtMCsGA1UEAxMk YTgyMDY3MDQtZGFhMy00ZDRjLWIxZjktOGMyNDFjOGJkY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbOf31ZXnuP8EbniP7/xdRC2KqeFYApt9Kuj PUBFGTKzdfQJCpN+XVz3pYlw9RnjXP+ZLEwMIu2mAm9ifDBXaRnuBYpNIL/nvi1K b3drZlvqvUzXxUPsPKbhgq3wORA/pnmizyrjtUVYv2KY7q//OLsiy6CugV8Jxusp UyzkA8KECfEgt9ZIaYkTlBe9/kzxRel8R66WZcjKZcG1Ep1llerN8ioyxHEdWewl kB3fBEJDrxs5Ip57vDZ6xPDgYMxMU9R4bTkscv6HqaEM+k4HJH7rcRr1Zy+X9K2V Pzd24Ftvqg4OhFImD3ksy+4yGsYh+62TDNt/X+cVOIFlkP3FFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLB5U3UjaPcNIIF0f7ymDuXIqlliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YzQ1 Y2IxYy1lNzdiLTQ1ZjctODJjYi1mNzc1NzBjZGE4ZDAvNGM0NWNiMWMtZTc3Yi00 NWY3LTgyY2ItZjc3NTcwY2RhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM0NWNiMWMtZTc3Yi00NWY3LTgy Y2ItZjc3NTcwY2RhOGQwLzRjNDVjYjFjLWU3N2ItNDVmNy04MmNiLWY3NzU3MGNk YThkMC5jcmwwHwYDVR0jBBgwFoAULA+64UEVfyvag9ir6SgMy1rW5UMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzQ1Y2IxYy1lNzdiLTQ1ZjctODJjYi1mNzc1 NzBjZGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcCggyJTEVHwF545/ewplA +2/N6J2ETxtADXKrEdzY1T9nFUqaibUDm2V9THwtX48N2E7iMdV4h6ADLhMWLINu i6Fv52/D9qHZidgJAePLQHaop+uMGAXmTdtUb8YsQIeVRDnMtGoNAs1LzaVzTWtt tbFQ6Oos78JBVwXuVYk5D/Fm00rZjYWVuABPotttXk9NLWZBtHEyUf/AQxF7t+zy 24spsJSSlvyeyKh+4TeDtpjUMU0LHeRWee2XtXt/3BoxptXKmE7hOioleq+3K4nr G1TTFVFR801WI0Pl6BGBROmLZMKvMjWOoKh418VivmLYxPjKpw4l+SHtr7/bslTw -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:16 2025 by rpki-client