$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: vrb8+fY2+kgFls3M7JWEBAnXCVyUJRP3frd2tfn5kog= Subject key identifier: 61:F3:CB:36:20:2B:08:27:62:90:82:AA:2A:EA:EC:A5:A0:15:39:D4 Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F4328584BC128705872E4A3D85AD7A8E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924B24 Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: tAPZ5HBHsx1AF2LrupybvJsREpYfXaXwaBBY5T0UEzo=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: GTw4+wFjL7lL1ITVDm64LzFcaJ5juaUL9T2TRasvJlU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:70:58:72:e4:a3:d8:5a:d7:a8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=ca465ab3-0903-48e1-aa70-bbaf6c7075c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:95:ef:05:3f:4f:b5:a9:8a:79:53:2a:e8: 12:d6:9a:8c:51:bd:23:d4:a1:56:22:e5:d5:8f:ab: f9:fe:a9:c7:fd:db:46:f8:ba:67:f0:89:73:f2:a7: 57:95:4a:ef:4d:b5:a8:34:4e:b3:23:1b:f1:42:fd: 86:8c:c4:1d:68:d0:d3:db:fe:23:58:5b:7f:be:b1: 5b:24:13:41:19:b2:05:e7:81:73:2e:6d:4b:96:23: 86:79:8f:f3:0e:bf:18:df:65:1f:cb:1a:40:68:6d: 56:af:a0:a4:05:33:35:64:f0:76:e5:df:39:32:b0: dc:47:b7:7d:73:38:d2:14:ec:d6:b8:7b:6d:91:c5: f4:d7:ec:a8:1a:d5:c5:f9:82:05:0b:74:f6:82:1f: de:6d:76:be:83:9f:a8:ff:a7:60:0a:71:c2:58:22: 30:61:5d:d9:8c:11:d2:a9:d6:36:93:f4:e2:37:c4: d6:ee:89:61:2a:37:17:75:90:35:49:67:db:98:82: bb:14:9e:d8:5d:ba:50:4f:83:27:82:ab:c4:55:e0: 02:97:5b:da:b8:33:c4:5c:d3:11:96:47:93:74:c1: 5b:41:80:94:47:4b:89:b8:eb:d2:2b:a9:76:0a:e9: 02:7b:6a:70:f9:50:51:56:fe:62:51:26:a2:64:a5: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:CB:36:20:2B:08:27:62:90:82:AA:2A:EA:EC:A5:A0:15:39:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:19:71:22:32:61:53:8f:1b:7e:66:df:1f:11:67:f3:a7:0e: fc:ee:5e:4b:ff:0f:92:6f:c2:71:2f:fc:71:79:9d:5b:40:b5: 70:29:22:42:cd:17:97:76:4c:65:9e:b8:e8:2d:06:c0:f1:66: 96:78:62:40:02:12:0f:ff:ce:30:18:a1:f4:19:60:1d:b4:3a: e7:8d:17:07:e7:1b:97:3f:fe:71:23:7e:11:55:d9:e7:ac:b3: 35:c7:80:bf:33:71:2a:bf:65:5d:d0:b9:e5:60:ed:9b:1c:08: f8:b5:74:e9:7e:9b:d5:ce:a4:89:a9:59:63:af:6b:9a:d6:0a: 40:a7:9a:2d:fa:e9:4e:5c:9f:2c:ba:2a:6f:60:58:e0:a3:ac: f6:43:2a:4a:f3:fc:7c:e9:8a:12:6b:50:e9:dd:58:da:47:fc: b8:5a:31:66:8b:e3:c5:45:40:2a:9c:7b:9a:02:c3:9b:76:5b: 23:5c:b6:8a:4f:2e:4d:16:5e:f4:63:f7:85:d9:d7:69:b8:2d: 39:6c:e5:17:d9:e9:9a:8c:01:a0:0e:79:63:81:57:d5:f1:17: 7c:ec:a2:ea:c9:91:7d:25:3a:d3:dc:3d:63:a1:00:2c:9b:33: bf:f7:2d:73:e9:fb:16:31:65:22:fb:25:a0:a2:95:da:da:e0: 89:77:ac:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKHBYcuSj2FrXqOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk Y2E0NjVhYjMtMDkwMy00OGUxLWFhNzAtYmJhZjZjNzA3NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5OV7wU/T7WpinlTKugS1pqMUb0j1KFWIuXV j6v5/qnH/dtG+Lpn8Ilz8qdXlUrvTbWoNE6zIxvxQv2GjMQdaNDT2/4jWFt/vrFb JBNBGbIF54FzLm1LliOGeY/zDr8Y32UfyxpAaG1Wr6CkBTM1ZPB25d85MrDcR7d9 czjSFOzWuHttkcX01+yoGtXF+YIFC3T2gh/ebXa+g5+o/6dgCnHCWCIwYV3ZjBHS qdY2k/TiN8TW7olhKjcXdZA1SWfbmIK7FJ7YXbpQT4MngqvEVeACl1vauDPEXNMR lkeTdMFbQYCUR0uJuOvSK6l2CukCe2pw+VBRVv5iUSaiZKXyaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGHzyzYgKwgnYpCCqirq7KWgFTnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaGXEiMmFTjxt+Zt8fEWfz pw787l5L/w+Sb8JxL/xxeZ1bQLVwKSJCzReXdkxlnrjoLQbA8WaWeGJAAhIP/84w GKH0GWAdtDrnjRcH5xuXP/5xI34RVdnnrLM1x4C/M3Eqv2Vd0LnlYO2bHAj4tXTp fpvVzqSJqVljr2ua1gpAp5ot+ulOXJ8suipvYFjgo6z2QypK8/x86YoSa1Dp3Vja R/y4WjFmi+PFRUAqnHuaAsObdlsjXLaKTy5NFl70Y/eF2ddpuC05bOUX2emajAGg DnljgVfV8Rd87KLqyZF9JTrT3D1joQAsmzO/9y1z6fsWMWUi+yWgopXa2uCJd6xG -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:56 2025 by rpki-client