$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft File: 74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft (raw, json) Hash identifier: D0uUwWk/73u+A7nM3nAo5i+fDaYdMFToraMEMmGYv+4= Subject key identifier: CD:65:00:44:A6:82:6B:14:4D:E0:1D:2F:FF:34:66:7F:88:AC:53:74 Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Certificate serial: 010D0C9F4328584BBF887FCEF11A9BE372FFFD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft Manifest number: 010D0C9F4328584073A855CFDCC6A3738B774828 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 4518b5d1-f6e1-3fca-a714-fb9d86c2e663.roa (hash: 3mO3DjBfc4b8GGn4AFm5bWKCb/SrEnmTMVkjwmeN3s0=) 2: 74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl (hash: T/YjjBwOb8LG2P+NYSi5Gd2bn6kBnCBBCRNBBwTEnNQ=) 3: ca7435da-c073-32a7-95f4-50726ece35b1.roa (hash: UdAtRnnEVMOylEzdtyaYNXPL5ZfDaXmb/seM968XTK8=) 4: f2ad8f20-9ab4-345e-97a6-3f6b3192f8d2.roa (hash: g5PTACB+4M0rgliUP4MIGV7/X24rG3D+SEV6OLlafzA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7f:ce:f1:1a:9b:e3:72:ff:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=409b66e8-75ef-4e7b-a470-dbefaf8f0e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:28:83:d2:ca:52:11:2f:a5:e8:35:07:26: 4d:85:e0:e1:3d:d2:e5:ef:a6:7a:4e:6a:78:11:bc: 66:47:0f:6f:b2:0d:56:88:67:dc:71:cf:dc:90:61: 92:72:70:c4:68:a0:a0:1a:42:59:3e:93:78:b9:37: 16:82:6c:4b:29:83:ee:d4:b8:95:b9:38:09:02:6d: 85:4a:b0:70:83:ca:e2:f6:3b:c7:51:23:ee:36:c4: 7c:3a:95:3a:46:ce:0e:7f:23:05:d2:d8:5b:fb:0f: 48:fc:8c:2b:40:18:4f:ef:2d:8c:d5:bc:f8:7f:a6: ad:cb:bd:06:23:24:ea:e1:0b:e4:5a:17:90:b8:f8: 4a:88:b0:2f:1e:cb:b7:47:a7:62:96:ee:f4:0f:26: 33:08:d6:e6:5c:6f:64:b9:2f:0d:60:7e:9a:89:77: 13:11:d3:7b:9d:b0:85:6c:9b:e9:c4:b2:d7:d5:99: c0:0a:92:1a:e6:50:62:8a:27:de:89:02:c8:77:f0: da:72:a2:76:85:22:34:c0:a3:e7:82:4f:f0:f0:e2: 0d:ad:84:c8:b2:6a:9e:06:65:66:97:34:17:a0:fe: 08:c3:75:6e:24:7e:ce:7f:6e:86:69:2c:0c:21:1a: 99:2d:88:9e:cf:b7:38:cf:1f:8a:2e:95:0a:3b:24: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:00:44:A6:82:6B:14:4D:E0:1D:2F:FF:34:66:7F:88:AC:53:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl X509v3 Authority Key Identifier: keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:87:d4:a1:94:5a:4f:d5:e6:c5:58:06:5a:13:87:b8:76:0f: 89:17:1a:07:4a:df:e0:be:13:77:4e:71:97:27:d8:3e:37:a9: aa:26:bc:27:94:81:bf:6c:2d:67:66:21:e9:29:69:bc:6b:c3: b8:32:e7:b3:56:5a:e9:ee:42:b4:8b:e8:b3:fa:c0:2f:55:b7: 14:e4:42:f3:f0:cd:e0:6f:dd:9f:f9:61:52:5b:5d:c5:5c:87: ed:62:8c:a7:01:38:1e:68:7e:b4:d0:0d:6d:fd:67:c9:c6:d6: 58:4e:34:68:5a:18:76:a2:77:8f:39:fd:70:57:9f:76:4a:ac: 43:15:31:5a:60:86:f7:46:01:9f:cd:7f:8c:09:8e:39:05:53: c5:86:a2:71:cd:e2:1a:54:9b:0f:f0:ca:e9:de:61:e0:55:87: c4:19:f7:97:13:61:26:bd:28:14:bc:8d:84:30:04:98:9d:88: 90:74:84:1c:8c:fa:df:75:9a:8f:5d:c0:56:bb:5f:d7:61:2b: ed:08:26:bd:0c:5c:d7:b4:1f:86:c1:56:ab:71:86:d8:bc:5a: ec:17:c4:e6:2f:4a:51:85:33:e3:1b:c0:17:30:4d:34:65:07: 76:94:56:18:7a:26:c4:2b:ef:fe:94:1b:8a:57:e9:ed:48:df: cc:1f:79:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH/O8Rqb43L//YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRmZTcyZDMtYzdmNy00YzkzLWE5ZjAtYTU3MzQxYjI1 OTBiMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk NDA5YjY2ZTgtNzVlZi00ZTdiLWE0NzAtZGJlZmFmOGYwZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkooog9LKUhEvpeg1ByZNheDhPdLl76Z6Tmp4 EbxmRw9vsg1WiGfccc/ckGGScnDEaKCgGkJZPpN4uTcWgmxLKYPu1LiVuTgJAm2F SrBwg8ri9jvHUSPuNsR8OpU6Rs4OfyMF0thb+w9I/IwrQBhP7y2M1bz4f6aty70G IyTq4QvkWheQuPhKiLAvHsu3R6dilu70DyYzCNbmXG9kuS8NYH6aiXcTEdN7nbCF bJvpxLLX1ZnACpIa5lBiiifeiQLId/DacqJ2hSI0wKPngk/w8OINrYTIsmqeBmVm lzQXoP4Iw3VuJH7Of26GaSwMIRqZLYiez7c4zx+KLpUKOyQ+GwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM1lAESmgmsUTeAdL/80Zn+IrFN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZl NzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFiMjU5MGIvNzRmZTcyZDMtYzdmNy00 YzkzLWE5ZjAtYTU3MzQxYjI1OTBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRmZTcyZDMtYzdmNy00YzkzLWE5 ZjAtYTU3MzQxYjI1OTBiLzc0ZmU3MmQzLWM3ZjctNGM5My1hOWYwLWE1NzM0MWIy NTkwYi5jcmwwHwYDVR0jBBgwFoAUvpvwQ+HnqqEBnAX000Kk3J9+yFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTcz NDFiMjU5MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmh9ShlFpP1ebFWAZaE4e4 dg+JFxoHSt/gvhN3TnGXJ9g+N6mqJrwnlIG/bC1nZiHpKWm8a8O4MuezVlrp7kK0 i+iz+sAvVbcU5ELz8M3gb92f+WFSW13FXIftYoynATgeaH600A1t/WfJxtZYTjRo Whh2onePOf1wV592SqxDFTFaYIb3RgGfzX+MCY45BVPFhqJxzeIaVJsP8Mrp3mHg VYfEGfeXE2EmvSgUvI2EMASYnYiQdIQcjPrfdZqPXcBWu1/XYSvtCCa9DFzXtB+G wVarcYbYvFrsF8TmL0pRhTPjG8AXME00ZQd2lFYYeibEK+/+lBuKV+ntSN/MH3mP -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:41 2025 by rpki-client