$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft File: 4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft (raw, json) Hash identifier: O1RV54pUXIqWnWyxz/XYPzTOQUbanaqLUnzmeaYayRQ= Subject key identifier: 1E:CF:7D:58:43:53:16:82:B0:19:F3:F7:1F:08:1D:83:BA:A3:9D:C4 Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Certificate serial: 010D0C9F4328584BC01C6462ABBE5B77DBD68C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft Manifest number: 010D0C9F4328584073A820B7BA7FD11DDCD1E826 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl (hash: K+omyFds+UCotk+ZvYrfUQc+qSZBAjPb9WG5XSllorA=) 2: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (hash: aQ7ZAC5ixQWnMARYpG5rWIU04VvvhxO4h59NQ+CPvpU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:62:ab:be:5b:77:db:d6:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=5767ac5a-9cb3-4bb4-b3b2-358c45be4c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:5f:e0:0d:07:31:5a:10:d0:ec:89:f2:1c: d0:50:b7:d9:28:32:10:f5:50:fb:bf:7e:18:fa:32: 08:3b:98:90:49:f4:28:26:c6:b9:82:ad:38:18:3b: 08:e2:32:8a:56:26:19:36:4e:72:c8:9d:4e:1a:b7: fb:06:6e:c1:c3:fb:99:1f:3c:40:ac:13:ea:2d:8c: 6e:6c:7e:b2:db:e9:5c:da:32:89:67:6a:10:8a:50: 14:b8:dd:fa:43:5c:38:24:2d:92:bb:d1:e7:2a:25: 18:8d:3f:db:53:29:32:b9:35:f0:d2:4a:08:5c:49: 9d:69:50:7d:4b:5d:63:6e:9e:43:54:ef:2c:06:1a: 62:34:5e:fe:3c:df:e3:a7:d6:db:1e:aa:e8:ed:83: 8a:9e:02:f2:a2:ba:be:09:71:b9:18:5f:a0:42:d5: 41:82:01:3f:90:40:a9:ea:83:ff:0b:e0:c6:cc:7d: f4:2a:13:1e:e0:74:69:de:71:d0:54:6a:2d:df:de: 66:2a:53:2d:1b:60:f4:b4:a7:dc:e1:81:57:50:03: 6a:7e:a5:db:47:ac:3d:23:93:1b:0c:26:c2:da:16: e3:7e:b1:19:5f:6a:a7:7f:3e:f6:25:b6:97:2f:5d: 9b:9c:55:08:cc:2e:35:62:99:b0:02:73:b0:4e:4e: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CF:7D:58:43:53:16:82:B0:19:F3:F7:1F:08:1D:83:BA:A3:9D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl X509v3 Authority Key Identifier: keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:21:72:24:40:63:4e:40:cb:8a:dd:d7:79:af:d1:5c:79:4f: b4:7a:eb:2a:8e:0d:49:88:29:da:4d:5c:59:17:7b:2b:17:1c: 75:6e:03:66:ab:ed:03:82:c6:7a:4d:5d:37:2f:5b:19:82:e4: 07:b8:f1:d8:19:bb:c7:ea:82:88:1f:bc:85:a9:9a:b1:e4:b6: a9:72:67:16:fd:f0:01:5e:68:27:a4:7d:ba:bc:7c:ae:34:57: 64:f1:a2:7c:65:3f:6f:2a:0a:37:c8:d7:97:b3:6c:35:96:22: 23:c6:6a:74:b5:73:2d:2f:8a:45:b8:e3:01:d5:17:9f:c3:c8: c3:de:62:54:73:a2:39:e7:b1:2c:d0:bd:4a:5d:50:1c:03:91: 6d:88:ca:95:09:e3:ed:df:33:de:22:5d:22:ec:1d:db:1a:c7: 39:1d:5f:b5:38:73:05:79:f1:44:a0:a6:88:98:75:f2:65:c9: 4c:61:1c:3b:d6:ef:d4:ff:e2:cf:9a:59:ec:1c:48:37:18:c2: c0:8f:48:23:45:aa:8e:40:ac:85:f3:52:fd:31:38:39:de:47: ac:58:48:82:41:55:ff:78:f4:af:53:2b:4c:b8:f3:fe:12:84: ec:3a:af:df:bd:93:14:45:c8:81:5e:88:6a:a5:8f:8e:96:fd: ba:51:25:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGRiq75bd9vWjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzZjY3MTctMjA0OC00NGMxLWFlNzctNTBlNWNlNmU5 ZGVhMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk NTc2N2FjNWEtOWNiMy00YmI0LWIzYjItMzU4YzQ1YmU0YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wpf4A0HMVoQ0OyJ8hzQULfZKDIQ9VD7v34Y +jIIO5iQSfQoJsa5gq04GDsI4jKKViYZNk5yyJ1OGrf7Bm7Bw/uZHzxArBPqLYxu bH6y2+lc2jKJZ2oQilAUuN36Q1w4JC2Su9HnKiUYjT/bUykyuTXw0koIXEmdaVB9 S11jbp5DVO8sBhpiNF7+PN/jp9bbHqro7YOKngLyorq+CXG5GF+gQtVBggE/kECp 6oP/C+DGzH30KhMe4HRp3nHQVGot395mKlMtG2D0tKfc4YFXUANqfqXbR6w9I5Mb DCbC2hbjfrEZX2qnfz72JbaXL12bnFUIzC41YpmwAnOwTk5+jQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB7PfVhDUxaCsBnz9x8IHYO6o53EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNm NjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1Y2U2ZTlkZWEvNGMzZjY3MTctMjA0OC00 NGMxLWFlNzctNTBlNWNlNmU5ZGVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGMzZjY3MTctMjA0OC00NGMxLWFl NzctNTBlNWNlNmU5ZGVhLzRjM2Y2NzE3LTIwNDgtNDRjMS1hZTc3LTUwZTVjZTZl OWRlYS5jcmwwHwYDVR0jBBgwFoAUGznG6Jb5p5VqOxqjxSoENpY+TaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNmNjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1 Y2U2ZTlkZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxIXIkQGNOQMuK3dd5r9Fc eU+0eusqjg1JiCnaTVxZF3srFxx1bgNmq+0DgsZ6TV03L1sZguQHuPHYGbvH6oKI H7yFqZqx5LapcmcW/fABXmgnpH26vHyuNFdk8aJ8ZT9vKgo3yNeXs2w1liIjxmp0 tXMtL4pFuOMB1Refw8jD3mJUc6I557Es0L1KXVAcA5FtiMqVCePt3zPeIl0i7B3b Gsc5HV+1OHMFefFEoKaImHXyZclMYRw71u/U/+LPmlnsHEg3GMLAj0gjRaqOQKyF 81L9MTg53kesWEiCQVX/ePSvUytMuPP+EoTsOq/fvZMURciBXohqpY+Olv26USVl -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:25 2025 by rpki-client