$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft File: 252a0154-0e99-44f2-af82-30c36afe00c0.mft (raw, json) Hash identifier: agPeoapmP4hy8lLg5sRnN9b1f3XuxtsddqpYZN7uUXo= Subject key identifier: A4:45:08:9D:FE:2A:50:C6:23:CC:F1:B2:7C:27:22:22:B8:05:F2:12 Authority key identifier: 2B:2A:F8:B6:B3:D6:B9:25:FE:CC:D8:24:EB:7D:5F:00:F7:DF:DF:95 Certificate issuer: /CN=252a0154-0e99-44f2-af82-30c36afe00c0 Certificate serial: 010D0C9F4328584BC0B147527ED3114BC6F3BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft Manifest number: 010D0C9F4328584073A82E8A9290DE2F7B82DBA5 Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 0cef76c0-a65d-3c1e-b766-8d7d8d975b57.roa (hash: GtCKhG/tzmRFrz28jQQb24b8XRVZq/kUDRLyZjgRt4w=) 2: 252a0154-0e99-44f2-af82-30c36afe00c0.crl (hash: CmjZob4c2hvnW/Lhc2u/QpAR74GScFN/5m4EB0KcnJ4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:47:52:7e:d3:11:4b:c6:f3:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252a0154-0e99-44f2-af82-30c36afe00c0 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=96db5a51-33ed-49ef-92a2-2680461d3580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:0a:a2:95:3a:25:aa:bd:23:a8:07:6d:ee: 70:40:d4:e5:0f:be:c0:84:62:a5:a7:0b:27:bb:b6: f3:01:42:f9:1f:a5:b7:dd:3e:c8:26:42:d2:aa:96: 1a:47:6f:c0:7e:28:5e:2e:3b:92:23:7b:23:7c:7e: d3:97:1a:c9:e9:cc:57:b5:f0:93:47:f2:b5:46:be: 78:ce:ea:6d:f5:2f:46:47:57:0f:dd:1a:ad:06:c2: f8:08:46:9c:7f:46:45:0c:54:44:9f:68:c9:02:c6: 19:9d:8e:78:05:db:d9:46:f1:6f:36:a7:98:d0:3f: 7a:7a:10:50:e7:51:a3:56:92:90:f4:a1:33:b3:c6: 43:31:b3:9c:e8:15:35:0b:58:13:af:dc:5c:e6:16: 85:b2:83:5c:3b:5c:4b:9f:0d:e6:04:0e:44:68:82: bf:44:89:42:3a:f0:bc:83:30:db:ea:90:e2:ac:ed: 60:8a:e1:34:0f:aa:3f:dc:84:23:d5:06:d1:56:12: 83:79:f1:df:fe:63:be:c3:12:2f:e7:63:44:ea:63: 19:76:23:5a:b2:35:9b:2d:e9:6b:07:b6:78:cd:85: 41:90:62:35:3f:44:e3:d0:09:ce:b0:21:bf:da:c4: 14:03:49:21:d8:cc:86:31:9b:aa:30:17:a2:ad:71: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:45:08:9D:FE:2A:50:C6:23:CC:F1:B2:7C:27:22:22:B8:05:F2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.crl X509v3 Authority Key Identifier: keyid:2B:2A:F8:B6:B3:D6:B9:25:FE:CC:D8:24:EB:7D:5F:00:F7:DF:DF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d8:c9:dc:4e:21:be:bb:b6:f9:de:3f:fe:30:82:ae:9c:f5: 19:9d:4f:f1:06:3f:2d:a1:82:da:2f:b0:1c:c3:cb:80:08:70: 53:fa:19:9c:39:4a:42:29:a0:84:e9:65:54:07:30:92:b5:7e: 8f:c9:ab:5d:c5:5e:06:a1:82:ac:de:d7:d6:f7:ed:da:09:70: 30:15:9d:43:a8:ff:42:77:36:3b:50:08:8f:55:ab:b0:a2:21: 7c:40:30:da:0f:fe:74:40:e1:1f:2d:a3:7e:5d:d4:d5:a0:e3: 1c:c0:4c:d2:f5:66:41:d0:b4:82:0f:a7:07:c3:e3:d6:a5:e4: 2d:9c:d2:ea:4e:54:64:2f:65:1f:7d:92:73:d9:f3:ec:43:46: 58:c7:4d:2c:d4:ac:2a:cc:7e:2d:7e:dc:f2:e4:a4:c4:b7:db: 7a:66:06:e1:09:13:c1:79:b4:8f:bf:ab:09:e6:43:82:5f:5b: 0d:16:7b:52:82:7c:e1:97:79:25:a7:82:54:ec:67:05:34:3c: 25:c8:3c:6c:b8:40:34:f6:4c:cc:2b:e1:56:79:5b:05:5f:34: 8f:58:78:0e:a7:03:de:a0:90:35:8f:e4:7a:a5:11:6d:ee:f5: 3e:1c:77:e1:7f:e9:30:cb:c4:bc:55:46:01:fa:13:20:6d:f4: ec:9f:3a:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUdSftMRS8bzvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYTAxNTQtMGU5OS00NGYyLWFmODItMzBjMzZhZmUw MGMwMB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk OTZkYjVhNTEtMzNlZC00OWVmLTkyYTItMjY4MDQ2MWQzNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZIKopU6Jaq9I6gHbe5wQNTlD77AhGKlpwsn u7bzAUL5H6W33T7IJkLSqpYaR2/AfiheLjuSI3sjfH7TlxrJ6cxXtfCTR/K1Rr54 zupt9S9GR1cP3RqtBsL4CEacf0ZFDFREn2jJAsYZnY54BdvZRvFvNqeY0D96ehBQ 51GjVpKQ9KEzs8ZDMbOc6BU1C1gTr9xc5haFsoNcO1xLnw3mBA5EaIK/RIlCOvC8 gzDb6pDirO1giuE0D6o/3IQj1QbRVhKDefHf/mO+wxIv52NE6mMZdiNasjWbLelr B7Z4zYVBkGI1P0Tj0AnOsCG/2sQUA0kh2MyGMZuqMBeirXHIWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKRFCJ3+KlDGI8zxsnwnIiK4BfISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTJh MDE1NC0wZTk5LTQ0ZjItYWY4Mi0zMGMzNmFmZTAwYzAvMjUyYTAxNTQtMGU5OS00 NGYyLWFmODItMzBjMzZhZmUwMGMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUyYTAxNTQtMGU5OS00NGYyLWFm ODItMzBjMzZhZmUwMGMwLzI1MmEwMTU0LTBlOTktNDRmMi1hZjgyLTMwYzM2YWZl MDBjMC5jcmwwHwYDVR0jBBgwFoAUKyr4trPWuSX+zNgk631fAPff35UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTJhMDE1NC0wZTk5LTQ0ZjItYWY4Mi0zMGMz NmFmZTAwYzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCi2MncTiG+u7b53j/+MIKu nPUZnU/xBj8toYLaL7Acw8uACHBT+hmcOUpCKaCE6WVUBzCStX6PyatdxV4GoYKs 3tfW9+3aCXAwFZ1DqP9CdzY7UAiPVauwoiF8QDDaD/50QOEfLaN+XdTVoOMcwEzS 9WZB0LSCD6cHw+PWpeQtnNLqTlRkL2UffZJz2fPsQ0ZYx00s1KwqzH4tftzy5KTE t9t6ZgbhCRPBebSPv6sJ5kOCX1sNFntSgnzhl3klp4JU7GcFNDwlyDxsuEA09kzM K+FWeVsFXzSPWHgOpwPeoJA1j+R6pRFt7vU+HHfhf+kwy8S8VUYB+hMgbfTsnzqB -----END CERTIFICATE-----Generated at Wed Nov 5 19:19:08 2025 by rpki-client