$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.mft File: 7838225a-28c8-4c97-8ba3-272c018c5ee5.mft (raw, json) Hash identifier: IhNAz6a6/Z3R4+Vq3OrQBNgLyeDXYW3JJRSvFPCLwVA= Subject key identifier: B2:3A:BA:D8:9D:D1:20:E5:19:DE:F6:5C:54:6D:40:A2:66:94:27:D0 Authority key identifier: 14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94 Certificate issuer: /CN=7838225a-28c8-4c97-8ba3-272c018c5ee5 Certificate serial: 010D0C9F4328584BBED4DEBC233F75C2DD060D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.mft Manifest number: 010D0C9F4328584073A84624D95515AB2F5AEFB0 Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Thu 06 Nov 2025 07:00:00 +0000 Files and hashes: 1: 44dec906-7ec7-3561-9764-a5793c3efa74.roa (hash: nEujgJw2h3aPSYx54QoiYmdjLBz+AxJFM4AFvbv341w=) 2: 7838225a-28c8-4c97-8ba3-272c018c5ee5.crl (hash: dJE8+8yLUb1E9NIn5/Q3rpJPRQtoFUZ9I4lLgmt2epM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:de:bc:23:3f:75:c2:dd:06:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7838225a-28c8-4c97-8ba3-272c018c5ee5 Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 6 07:00:00 2025 GMT Subject: CN=358d5c08-c5a1-48cb-b17a-2ca068053fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:66:ff:6a:cf:e4:bb:87:66:36:b0:e0:c5: 03:82:e9:bf:85:1a:30:1c:d5:e4:91:71:5e:22:c8: 83:3e:c0:7c:d3:92:a8:5c:14:1b:4d:85:7a:04:24: 7d:43:40:74:66:6e:c7:a8:df:4c:7d:d6:ad:18:07: 87:71:03:a4:bb:54:0f:8b:79:12:0f:ff:00:48:54: bd:71:67:d5:06:4c:7b:b9:61:78:d9:60:6a:1b:7e: 92:9a:53:4d:a1:a9:a0:00:74:d3:20:b0:d1:e3:de: ca:7b:a7:7c:4c:ae:96:2b:ee:f8:3c:da:50:8c:0c: 56:db:34:d1:a9:08:19:bc:b4:83:b5:10:c1:79:7c: 89:c8:ac:bb:35:00:8f:ca:fd:a5:f1:f1:0f:03:e0: f2:77:8a:7f:35:ec:fe:7b:5d:a6:09:dc:bf:5b:1b: 9c:81:c6:dc:ca:4e:97:a7:4c:c6:4c:4a:bb:6a:ac: 95:2e:a5:5e:98:ca:f3:78:e8:54:8c:1c:8c:9e:aa: bc:57:88:db:7e:b0:3a:d3:b1:49:2c:c5:ce:d2:09: be:6e:ef:bd:f8:6b:da:24:3d:be:e1:20:39:f0:0c: 52:cb:3b:71:7b:95:36:3b:98:73:24:d2:e5:36:34: 4a:5b:0a:0d:da:ba:df:37:5b:1d:ef:9a:b9:d2:58: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3A:BA:D8:9D:D1:20:E5:19:DE:F6:5C:54:6D:40:A2:66:94:27:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.crl X509v3 Authority Key Identifier: keyid:14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:88:27:a5:44:a7:98:fb:cd:4d:6a:26:cb:02:a8:4f:41:ad: b3:45:5e:1d:7d:f3:fe:ae:d6:4f:bc:f0:2f:44:8f:f4:07:e5: 31:11:77:7a:e7:cd:e3:5b:24:7d:39:1c:1c:5f:b1:ad:28:39: 8d:fc:08:45:72:75:85:78:c3:d4:ca:e4:a0:9f:62:c1:53:23: 10:e9:c7:12:74:a8:71:75:c2:9f:0c:6a:e2:e1:e6:e9:e8:a0: 95:12:67:6d:68:ec:81:15:83:8c:9d:69:d2:9a:dd:13:4c:56: d0:01:88:8d:c5:a0:f4:30:b4:c5:01:84:4a:5e:78:3b:df:82: 14:be:7f:92:f3:b9:98:31:65:fd:98:97:2d:e3:cb:11:18:48: cf:1c:51:ca:d5:86:61:18:4a:ba:b5:b4:c0:0d:3e:16:80:54: 4b:d1:80:53:bf:0d:de:13:a7:93:bc:a4:c6:9e:00:b4:d5:d0: db:cf:5d:6c:00:ed:21:94:5e:8e:a0:cc:e3:11:91:f4:e7:88: 46:69:06:c9:fe:2d:87:37:ea:95:7d:5c:da:0a:83:b9:bc:16: bb:0e:89:93:59:d5:00:f9:fc:10:0a:27:f3:db:16:2e:80:44: ae:91:e9:4d:c0:c1:2c:a4:6e:97:f1:cc:52:a3:f0:e9:24:69: 50:cd:15:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1N68Iz91wt0GDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzODIyNWEtMjhjOC00Yzk3LThiYTMtMjcyYzAxOGM1 ZWU1MB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNjA3MDAwMFowLzEtMCsGA1UEAxMk MzU4ZDVjMDgtYzVhMS00OGNiLWIxN2EtMmNhMDY4MDUzZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowRm/2rP5LuHZjaw4MUDgum/hRowHNXkkXFe IsiDPsB805KoXBQbTYV6BCR9Q0B0Zm7HqN9MfdatGAeHcQOku1QPi3kSD/8ASFS9 cWfVBkx7uWF42WBqG36SmlNNoamgAHTTILDR497Ke6d8TK6WK+74PNpQjAxW2zTR qQgZvLSDtRDBeXyJyKy7NQCPyv2l8fEPA+Dyd4p/Nez+e12mCdy/Wxucgcbcyk6X p0zGTEq7aqyVLqVemMrzeOhUjByMnqq8V4jbfrA607FJLMXO0gm+bu+9+GvaJD2+ 4SA58AxSyztxe5U2O5hzJNLlNjRKWwoN2rrfN1sd75q50lhCxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLI6utid0SDlGd72XFRtQKJmlCfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODM4 MjI1YS0yOGM4LTRjOTctOGJhMy0yNzJjMDE4YzVlZTUvNzgzODIyNWEtMjhjOC00 Yzk3LThiYTMtMjcyYzAxOGM1ZWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzgzODIyNWEtMjhjOC00Yzk3LThi YTMtMjcyYzAxOGM1ZWU1Lzc4MzgyMjVhLTI4YzgtNGM5Ny04YmEzLTI3MmMwMThj NWVlNS5jcmwwHwYDVR0jBBgwFoAUFEwr3ReEjVOmbgq8fyHbeLQxA5QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODM4MjI1YS0yOGM4LTRjOTctOGJhMy0yNzJj MDE4YzVlZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChiCelRKeY+81NaibLAqhP Qa2zRV4dffP+rtZPvPAvRI/0B+UxEXd6583jWyR9ORwcX7GtKDmN/AhFcnWFeMPU yuSgn2LBUyMQ6ccSdKhxdcKfDGri4ebp6KCVEmdtaOyBFYOMnWnSmt0TTFbQAYiN xaD0MLTFAYRKXng734IUvn+S87mYMWX9mJct48sRGEjPHFHK1YZhGEq6tbTADT4W gFRL0YBTvw3eE6eTvKTGngC01dDbz11sAO0hlF6OoMzjEZH054hGaQbJ/i2HN+qV fVzaCoO5vBa7DomTWdUA+fwQCifz2xYugESukelNwMEspG6X8cxSo/DpJGlQzRWB -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:36 2025 by rpki-client