$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.mft File: 257e95d7-c350-4589-9157-c04964a142fb.mft (raw, json) Hash identifier: mNaaBRbTzPNJ1mlgll0yC5oTejjmynogFcoSSC2zkxk= Subject key identifier: D2:D7:C9:64:95:E0:00:C5:EA:10:71:CE:E9:52:6F:1B:0D:3F:FC:5F Authority key identifier: 9B:57:02:C6:90:97:37:10:37:38:C3:8A:BB:EE:45:65:4C:CF:21:6A Certificate issuer: /CN=257e95d7-c350-4589-9157-c04964a142fb Certificate serial: 010D0C9F4328584BC01C63E4E75EF96AF8A6C780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.mft Manifest number: 010D0C9F4328584073A82048943309EFCB212CA2 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 257e95d7-c350-4589-9157-c04964a142fb.crl (hash: ztKT9TBj+gC7y97+R+JddZ3k4fpPtQfDXz8wwKYpQ5M=) 2: 4a5d7c3b-79bc-36e2-9492-26f7f76acd3d.roa (hash: swUnyIRKaReGLnwdD6I9HltO+l+vboCx4dD+8Xeei8c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:e4:e7:5e:f9:6a:f8:a6:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257e95d7-c350-4589-9157-c04964a142fb Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=163abe4e-d210-4a2c-be40-d8e533ddd1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:bd:33:cd:dd:f3:da:fc:d1:00:6c:5e:6b: e7:60:15:71:b0:0e:dc:e7:09:be:5e:61:7e:01:0b: 6b:fb:8b:c3:74:07:a7:21:56:ed:de:57:e7:7c:63: 89:dc:26:bb:2d:80:68:ee:c8:5f:04:37:f6:02:21: 10:df:dd:39:8d:b7:5a:32:73:92:f4:69:cf:c5:75: 5a:3e:78:8f:4e:10:93:1b:1a:21:27:ea:83:dc:79: f5:49:98:97:7a:d6:4f:dd:09:6e:a0:e8:99:01:81: 66:b2:6d:1b:3f:a1:6e:75:09:36:a0:1b:e6:10:33: 72:5a:aa:95:d1:ac:39:55:e9:d1:9a:85:ed:72:5f: 34:90:28:8e:3d:3b:7a:24:14:44:67:fb:e3:0d:d3: 15:9c:45:fd:9d:96:97:b2:0d:7b:5c:a7:66:c8:6b: 3a:91:bf:aa:ec:86:e6:6a:19:fb:45:e6:94:fc:c7: ae:40:8f:99:e6:5d:41:12:10:bb:59:ca:97:44:54: b2:d8:75:ee:5b:41:e5:f9:bf:c8:5f:c6:ff:93:e5: b9:f2:05:2f:6c:22:97:cf:47:f0:30:39:4a:5d:d0: 9e:b5:51:68:fa:19:94:d6:1e:99:c5:b8:5d:53:3b: 65:9a:7e:d8:51:14:a8:84:e7:d4:ae:95:48:0c:0d: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:C9:64:95:E0:00:C5:EA:10:71:CE:E9:52:6F:1B:0D:3F:FC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb/257e95d7-c350-4589-9157-c04964a142fb.crl X509v3 Authority Key Identifier: keyid:9B:57:02:C6:90:97:37:10:37:38:C3:8A:BB:EE:45:65:4C:CF:21:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/257e95d7-c350-4589-9157-c04964a142fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:4d:78:a5:aa:40:4f:a2:6a:33:42:8c:f9:da:86:c0:12:12: 6d:7b:f2:b1:cf:5a:bb:de:17:c1:2e:7d:5a:82:5e:0f:3b:6c: c4:01:2a:56:30:c2:32:82:c7:2a:75:e6:fe:d3:4f:33:51:5b: 58:09:07:28:28:c2:2f:f6:34:13:8f:3d:91:35:98:13:d7:11: 7c:b6:dd:38:a2:87:f5:c1:9f:8c:bb:55:3e:3c:99:1b:d2:b0: 9d:9b:79:5e:e9:27:c0:7b:3d:56:47:bf:be:18:6a:ef:f5:55: 55:b7:3b:b8:6c:cf:6d:02:49:95:03:44:b6:38:42:23:72:89: bf:3d:3a:6b:45:7c:c0:6f:65:b8:4d:8c:ba:3b:2a:f7:42:c5: 1d:ae:c7:4e:1d:d0:4b:8c:f8:da:97:d2:1d:70:68:c2:be:8c: d7:1b:a5:75:b1:ea:3d:ee:f8:26:39:1d:fe:45:de:6b:03:35: 18:8b:0a:b2:6c:c7:de:8f:d8:85:b8:3d:e0:21:22:5e:35:3b: 32:f4:2b:d6:db:fe:cf:98:6f:2e:41:9b:b6:46:aa:07:a8:50: 99:cb:c2:6e:21:ac:f3:51:6e:95:d3:c4:f7:2c:3e:9d:b3:1c: 0a:f8:59:0a:6b:28:0d:d3:d0:ed:b4:da:ec:54:84:71:ca:4f: 38:f4:60:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGPk5175avimx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU3ZTk1ZDctYzM1MC00NTg5LTkxNTctYzA0OTY0YTE0 MmZiMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk MTYzYWJlNGUtZDIxMC00YTJjLWJlNDAtZDhlNTMzZGRkMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHa9M83d89r80QBsXmvnYBVxsA7c5wm+XmF+ AQtr+4vDdAenIVbt3lfnfGOJ3Ca7LYBo7shfBDf2AiEQ3905jbdaMnOS9GnPxXVa PniPThCTGxohJ+qD3Hn1SZiXetZP3QluoOiZAYFmsm0bP6FudQk2oBvmEDNyWqqV 0aw5VenRmoXtcl80kCiOPTt6JBREZ/vjDdMVnEX9nZaXsg17XKdmyGs6kb+q7Ibm ahn7ReaU/MeuQI+Z5l1BEhC7WcqXRFSy2HXuW0Hl+b/IX8b/k+W58gUvbCKXz0fw MDlKXdCetVFo+hmU1h6ZxbhdUztlmn7YURSohOfUrpVIDA1s2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLXyWSV4ADF6hBxzulSbxsNP/xfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTdl OTVkNy1jMzUwLTQ1ODktOTE1Ny1jMDQ5NjRhMTQyZmIvMjU3ZTk1ZDctYzM1MC00 NTg5LTkxNTctYzA0OTY0YTE0MmZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjU3ZTk1ZDctYzM1MC00NTg5LTkx NTctYzA0OTY0YTE0MmZiLzI1N2U5NWQ3LWMzNTAtNDU4OS05MTU3LWMwNDk2NGEx NDJmYi5jcmwwHwYDVR0jBBgwFoAUm1cCxpCXNxA3OMOKu+5FZUzPIWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTdlOTVkNy1jMzUwLTQ1ODktOTE1Ny1jMDQ5 NjRhMTQyZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDeTXilqkBPomozQoz52obA EhJte/Kxz1q73hfBLn1agl4PO2zEASpWMMIygscqdeb+008zUVtYCQcoKMIv9jQT jz2RNZgT1xF8tt04oof1wZ+Mu1U+PJkb0rCdm3le6SfAez1WR7++GGrv9VVVtzu4 bM9tAkmVA0S2OEIjcom/PTprRXzAb2W4TYy6Oyr3QsUdrsdOHdBLjPjal9IdcGjC vozXG6V1seo97vgmOR3+Rd5rAzUYiwqybMfej9iFuD3gISJeNTsy9CvW2/7PmG8u QZu2RqoHqFCZy8JuIazzUW6V08T3LD6dsxwK+FkKaygN09DttNrsVIRxyk849GDC -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:08 2025 by rpki-client