$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft File: 2522458f-db94-4ba6-8127-005675e4eea9.mft (raw, json) Hash identifier: YIfF+nhaT1N9ZZmQPVadCEB9a1tq2+9jUyfcdhshNuE= Subject key identifier: EA:EB:0B:BE:10:7F:C6:1A:F4:C6:43:4D:22:7F:0C:3C:1A:D0:89:D7 Authority key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Certificate issuer: /CN=2522458f-db94-4ba6-8127-005675e4eea9 Certificate serial: 010D0C9F4328584BC093848D0D037716C8073080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft Manifest number: 010D0C9F43285844E1D27932CB1C753288C13785 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 2522458f-db94-4ba6-8127-005675e4eea9.crl (hash: +A+iH4HiDZDt2fCxQeN1X9K0GyxBHlGV60iE42ke5zI=) 2: eb861998-933b-39d8-b4de-a7fcd97f739e.roa (hash: xSYethH7RhuK7wGeFFrfcKb94eBM2VV2AE7ASA3Jz/Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:84:8d:0d:03:77:16:c8:07:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2522458f-db94-4ba6-8127-005675e4eea9 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=19fd3025-5464-4a36-8cc1-faa20e02f01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:d3:db:21:82:09:bd:56:1f:25:5c:51:34: 62:52:01:c7:56:4b:97:e4:2b:32:59:ab:a9:9d:40: 39:30:8e:44:44:e3:3f:5c:a9:90:a0:16:ef:92:e2: 23:b9:0a:0f:e3:24:30:d5:d6:dd:2f:a5:30:f5:48: 7f:46:03:ec:1c:97:90:b1:31:02:8c:aa:66:a6:7f: 70:ca:42:7f:01:87:ff:9d:bb:a8:c7:af:3d:39:da: fd:0f:28:ab:8f:83:6d:f5:c0:1d:a8:f8:a9:77:7f: fb:2e:72:ff:dd:fa:83:d1:00:e6:5e:84:b2:3a:70: 9e:53:30:64:70:39:3a:a6:2d:78:74:c6:06:ae:76: aa:d7:b5:57:58:c6:94:a8:bd:30:fd:37:6d:a2:3f: 3f:f4:5a:7b:4e:bf:c5:53:f1:c8:b2:0d:cd:9b:c5: 69:45:1c:09:91:35:78:8c:c5:94:95:a0:4f:17:35: 4f:c4:71:9a:dd:d6:e2:f9:df:1b:b0:85:8b:17:51: 7d:0c:56:64:2b:fc:52:46:df:51:ec:23:77:f0:6f: 02:3e:e0:0d:61:5c:d4:6e:e4:6f:34:5b:4c:45:b1: 85:5b:58:11:c1:b4:b8:a6:1f:0a:e3:6f:68:10:bc: b3:c2:52:b3:4c:04:d1:27:24:6e:d6:76:6e:47:ae: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EB:0B:BE:10:7F:C6:1A:F4:C6:43:4D:22:7F:0C:3C:1A:D0:89:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl X509v3 Authority Key Identifier: keyid:59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c3:d3:75:79:8d:0a:30:e6:c9:8d:7a:53:ad:df:14:64:04: 36:f6:f9:98:79:f2:5c:24:d5:1d:1e:25:2b:69:35:e2:9c:67: 1d:26:f7:f2:1b:4f:55:fa:3a:6d:dd:31:12:da:84:5a:0a:96: b3:1c:64:93:ae:23:03:ff:51:58:5e:41:55:4d:b4:20:b9:bb: f6:b5:b2:7c:3f:39:fa:fa:12:49:2c:f6:74:1a:1e:c7:62:66: d6:e3:68:59:da:08:06:ad:fe:8c:2f:08:d0:91:97:df:f3:b1: a6:41:24:bf:36:c8:0d:c8:04:ed:fe:9f:76:2c:82:ae:fb:ed: 06:67:9d:79:56:0a:bd:63:06:91:88:89:43:37:17:1a:17:5f: c1:cf:00:cc:7f:19:da:ef:62:a3:9e:c7:df:9c:da:23:fc:00: b5:14:09:af:d5:5d:a4:fd:ab:8d:8b:b0:78:c3:76:fa:b2:a1: 54:ee:01:a6:1b:77:07:be:ac:57:bc:37:da:30:e8:3b:fa:12: 46:5d:1b:83:5d:8e:ac:80:28:d0:67:26:42:2c:84:bf:f5:05: 70:52:df:73:e1:75:02:23:70:2e:ec:fa:b1:b7:b3:e4:53:ce: e6:03:1a:a0:90:6d:84:70:00:88:06:a6:72:c6:be:4d:18:12: 07:34:71:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4SNDQN3FsgHMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMjQ1OGYtZGI5NC00YmE2LTgxMjctMDA1Njc1ZTRl ZWE5MB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk MTlmZDMwMjUtNTQ2NC00YTM2LThjYzEtZmFhMjBlMDJmMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLHT2yGCCb1WHyVcUTRiUgHHVkuX5CsyWaup nUA5MI5EROM/XKmQoBbvkuIjuQoP4yQw1dbdL6Uw9Uh/RgPsHJeQsTECjKpmpn9w ykJ/AYf/nbuox689Odr9Dyirj4Nt9cAdqPipd3/7LnL/3fqD0QDmXoSyOnCeUzBk cDk6pi14dMYGrnaq17VXWMaUqL0w/Tdtoj8/9Fp7Tr/FU/HIsg3Nm8VpRRwJkTV4 jMWUlaBPFzVPxHGa3dbi+d8bsIWLF1F9DFZkK/xSRt9R7CN38G8CPuANYVzUbuRv NFtMRbGFW1gRwbS4ph8K429oELyzwlKzTATRJyRu1nZuR64xOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOrrC74Qf8Ya9MZDTSJ/DDwa0InXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTIy NDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVlNGVlYTkvMjUyMjQ1OGYtZGI5NC00 YmE2LTgxMjctMDA1Njc1ZTRlZWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUyMjQ1OGYtZGI5NC00YmE2LTgx MjctMDA1Njc1ZTRlZWE5LzI1MjI0NThmLWRiOTQtNGJhNi04MTI3LTAwNTY3NWU0 ZWVhOS5jcmwwHwYDVR0jBBgwFoAUWcHcK14el6JVyj5DREmZI+gm5QEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2 NzVlNGVlYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbw9N1eY0KMObJjXpTrd8U ZAQ29vmYefJcJNUdHiUraTXinGcdJvfyG09V+jpt3TES2oRaCpazHGSTriMD/1FY XkFVTbQgubv2tbJ8Pzn6+hJJLPZ0Gh7HYmbW42hZ2ggGrf6MLwjQkZff87GmQSS/ NsgNyATt/p92LIKu++0GZ515Vgq9YwaRiIlDNxcaF1/BzwDMfxna72KjnsffnNoj /AC1FAmv1V2k/auNi7B4w3b6sqFU7gGmG3cHvqxXvDfaMOg7+hJGXRuDXY6sgCjQ ZyZCLIS/9QVwUt9z4XUCI3Au7Pqxt7PkU87mAxqgkG2EcACIBqZyxr5NGBIHNHHe -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:45 2025 by rpki-client