$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft File: 4c7bb7c9-9462-45de-9a96-5887b6042f79.mft (raw, json) Hash identifier: w+wVRcWrypDaKzAot8di2t9L0ZKW6kWqKrtaWsacMwA= Subject key identifier: 12:01:09:47:CF:DE:08:B8:75:F9:6A:AB:72:88:1D:94:50:5E:BE:F9 Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 Certificate issuer: /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Certificate serial: 010D0C9F4328584BBF887E22B52D753E0AB59980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft Manifest number: 010D0C9F4328584073A8552C1E7F02A5CF81D6E4 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 4c7bb7c9-9462-45de-9a96-5887b6042f79.crl (hash: oTa0ZZMvQCMSyjD1fGFlqzf/YyAMMZt5jTJyxvlHy1c=) 2: dc37949b-fd68-31d3-8530-d51a972e599a.roa (hash: lYUxwiUWbVG8BwG4iJuLtzZ496/W+DC6m/pwZiS4cVk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7e:22:b5:2d:75:3e:0a:b5:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=83bc5781-9bef-4ff2-8f8a-aa6081f4553d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:45:ab:fd:dd:93:46:35:03:8d:a3:8b:2b:2b: 07:d1:a0:58:4e:e3:d0:81:53:72:23:a0:e3:e3:60: a4:a7:46:2b:87:69:e1:3f:7d:ed:21:6b:1f:19:86: 43:bb:3d:95:eb:ad:de:3b:20:f0:28:6d:9c:8b:e0: 5d:86:31:73:6e:2b:60:d3:28:ed:c7:e9:73:fc:de: 63:db:ef:e1:4a:ce:6a:0a:f9:d7:72:0a:6b:c6:0a: 8b:ec:b4:8f:5c:82:b2:2f:2f:05:e8:3c:1f:b4:ea: a7:6b:14:00:54:f9:d3:5e:13:ff:e0:92:d8:2a:ac: 93:2b:d8:5a:20:aa:5e:31:bb:35:1f:54:6f:a3:ee: 5b:17:c4:b1:c1:3b:52:f0:0e:a1:4e:14:f0:b1:da: 16:38:8c:fc:72:fe:01:6c:bc:b5:15:52:37:23:ec: 4e:cc:0e:93:5e:26:ce:49:b2:13:4a:d3:b3:47:fc: fe:f5:17:e7:0a:7e:a5:58:32:54:b4:af:5f:89:cc: 8d:ef:8f:1e:8e:4b:3f:6c:6c:c8:74:17:9e:e7:0b: 8a:6c:00:4f:ad:cb:d2:56:72:dc:f0:d1:39:07:66: 5e:bb:46:3e:6c:60:9b:76:eb:e7:44:1c:26:96:08: 7c:d6:57:34:4e:07:7c:59:b7:e8:30:c0:e8:a2:d9: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:09:47:CF:DE:08:B8:75:F9:6A:AB:72:88:1D:94:50:5E:BE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl X509v3 Authority Key Identifier: keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2a:27:57:4f:bf:4c:ea:99:53:a0:5d:f9:eb:ef:71:db:55: 6b:4f:50:49:0d:8d:d9:8b:d7:9c:46:72:2e:70:b8:4b:8f:da: 16:ed:52:99:06:6a:d2:4a:c4:77:02:f0:f4:a6:17:82:c8:08: 7b:40:6f:79:1b:e4:bf:3d:12:28:2c:d6:56:c8:94:7c:08:b1: d2:dc:ac:03:87:59:11:dd:6f:fb:90:43:b3:be:3d:51:ae:d3: ad:d9:1e:c5:65:00:26:90:95:94:d4:71:74:9a:0a:5d:98:10: 8f:3a:35:ca:6d:ae:83:27:ae:d1:91:32:d4:7b:60:00:fa:d5: d0:0a:87:2c:b6:ff:ff:61:7e:8b:69:06:f2:93:75:51:39:c6: ba:8b:21:87:d7:ec:87:19:e9:8b:67:3b:37:1e:0e:27:ec:e6: 03:d6:ea:6b:f6:63:fc:c1:9a:e1:ea:07:23:45:37:fe:58:5b: b4:19:78:c3:02:6a:92:15:5c:fd:8a:30:17:1c:b2:a7:13:94: f0:e9:93:0b:2f:11:a6:f2:55:56:ed:42:62:17:f0:48:c5:fb: 69:77:79:96:a1:7b:ac:2b:4f:2e:df:4c:64:59:d3:15:3c:69: ce:59:61:19:db:a1:49:a2:14:13:3c:30:14:56:2d:56:7f:d5: 32:5c:7d:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH4itS11Pgq1mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YmI3YzktOTQ2Mi00NWRlLTlhOTYtNTg4N2I2MDQy Zjc5MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk ODNiYzU3ODEtOWJlZi00ZmYyLThmOGEtYWE2MDgxZjQ1NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikWr/d2TRjUDjaOLKysH0aBYTuPQgVNyI6Dj 42Ckp0Yrh2nhP33tIWsfGYZDuz2V663eOyDwKG2ci+BdhjFzbitg0yjtx+lz/N5j 2+/hSs5qCvnXcgprxgqL7LSPXIKyLy8F6DwftOqnaxQAVPnTXhP/4JLYKqyTK9ha IKpeMbs1H1Rvo+5bF8SxwTtS8A6hThTwsdoWOIz8cv4BbLy1FVI3I+xOzA6TXibO SbITStOzR/z+9RfnCn6lWDJUtK9ficyN748ejks/bGzIdBee5wuKbABPrcvSVnLc 8NE5B2Zeu0Y+bGCbduvnRBwmlgh81lc0Tgd8WbfoMMDootlVvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBIBCUfP3gi4dflqq3KIHZRQXr75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Yzdi YjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3YjYwNDJmNzkvNGM3YmI3YzktOTQ2Mi00 NWRlLTlhOTYtNTg4N2I2MDQyZjc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM3YmI3YzktOTQ2Mi00NWRlLTlh OTYtNTg4N2I2MDQyZjc5LzRjN2JiN2M5LTk0NjItNDVkZS05YTk2LTU4ODdiNjA0 MmY3OS5jcmwwHwYDVR0jBBgwFoAU2t23pTaJ1kBUpmtBcQSh9ASegwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzdiYjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3 YjYwNDJmNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAKidXT79M6plToF356+9x 21VrT1BJDY3Zi9ecRnIucLhLj9oW7VKZBmrSSsR3AvD0pheCyAh7QG95G+S/PRIo LNZWyJR8CLHS3KwDh1kR3W/7kEOzvj1RrtOt2R7FZQAmkJWU1HF0mgpdmBCPOjXK ba6DJ67RkTLUe2AA+tXQCocstv//YX6LaQbyk3VROca6iyGH1+yHGemLZzs3Hg4n 7OYD1upr9mP8wZrh6gcjRTf+WFu0GXjDAmqSFVz9ijAXHLKnE5Tw6ZMLLxGm8lVW 7UJiF/BIxftpd3mWoXusK08u30xkWdMVPGnOWWEZ26FJohQTPDAUVi1Wf9UyXH0r -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:31 2025 by rpki-client