$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft File: 25b8413b-5254-4959-a9f1-d00f0fc1b819.mft (raw, json) Hash identifier: FGH3CEko3Z8OeUlAW11ktkaYp0jdCggaP68dcJgPGQs= Subject key identifier: 49:67:17:4E:5F:9F:4C:5C:8F:28:AA:76:86:A3:1F:07:E0:9D:18:98 Authority key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Certificate issuer: /CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Certificate serial: 010D0C9F4328584BC1462F9CB412082F161317E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft Manifest number: 010D0C9F432858451D2581D3B48CABDB22FE8DB0 Signing time: Wed 05 Nov 2025 04:00:03 +0000 Manifest this update: Wed 05 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: 25b8413b-5254-4959-a9f1-d00f0fc1b819.crl (hash: 36C/jFqq2VqCTFlc6p0v+yOmpA9nUfmNjPxLa+ImjxU=) 2: 81b30814-d14d-3119-b7df-c279bfdf03c6.roa (hash: 6j1wShWDddmXUM6q1RlqckbbUj+I3N9vyPWngueoyf4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:46:2f:9c:b4:12:08:2f:16:13:17:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Validity Not Before: Nov 5 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=84b0543d-a8a0-450f-aafd-a14999d7efe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:64:bf:b3:60:bc:fb:5c:5a:ef:f5:f5:3f: dc:cc:27:fb:0f:27:91:b1:43:0b:01:54:33:e3:5e: 75:a7:b5:37:6c:25:db:4d:59:07:2b:43:20:1d:28: 41:1d:52:e4:40:3e:28:2c:c1:5b:b3:15:7a:e2:2a: cc:56:12:4a:bd:9d:df:e2:ec:4c:78:95:2d:c6:46: 43:38:be:ee:c2:63:7d:7c:c5:a4:57:91:da:cf:3b: 53:18:ad:55:08:37:8d:5b:a8:aa:05:cf:a5:11:24: 83:ee:24:b3:63:ea:44:e9:20:0f:b9:1e:52:ee:20: c9:d4:e1:f4:98:06:98:2b:da:4f:a4:ba:0a:2f:43: e8:5e:d9:d1:35:4d:12:eb:64:64:e8:d0:96:8e:1a: 50:b1:89:29:65:cc:66:6a:90:9f:2d:a3:de:30:4e: 23:b0:78:8a:ee:55:db:f0:a8:d1:b0:d2:03:30:46: 1c:d0:5f:4c:9b:9c:e2:13:f8:68:f0:3b:4d:c9:d6: 56:03:34:bd:02:16:21:e8:4b:23:86:92:36:ef:04: 14:32:6a:aa:b7:b5:01:a8:6a:81:5c:14:98:fc:32: 0d:bc:8a:ca:cc:db:3c:1e:b8:b9:c3:fd:b0:82:bc: 71:2f:6e:c3:e5:fe:88:c6:b0:69:4a:ab:76:21:54: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:67:17:4E:5F:9F:4C:5C:8F:28:AA:76:86:A3:1F:07:E0:9D:18:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl X509v3 Authority Key Identifier: keyid:9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e7:0f:91:55:28:33:f4:e3:ca:a8:7b:2f:b9:87:ce:fa:6a: b8:9c:9e:9e:bc:7c:1c:7e:01:30:d6:47:0a:8a:a9:89:88:9f: 9e:dc:1a:d0:e4:84:1f:e9:85:ba:2c:80:ae:aa:4c:85:62:b1: 8d:7e:c4:6d:bf:52:3f:78:94:57:bb:59:83:5c:81:80:98:33: 03:eb:e1:96:0d:c6:46:ed:29:c4:09:84:4a:8c:2d:b3:b8:f9: 47:cb:c4:4c:3b:cf:89:9f:0a:f2:d5:c4:4b:0b:fe:a6:94:2c: 21:7b:c3:48:37:68:f0:97:67:e1:a5:87:1f:d2:85:9f:ae:a7: f4:84:67:93:c5:82:f2:98:17:52:be:ad:85:b6:f2:b1:eb:01: 25:81:93:eb:e0:e0:41:65:96:1d:0a:7d:8a:37:08:0e:a9:22: 26:b7:12:fc:14:e1:51:fc:9a:fe:44:6a:09:47:59:f4:be:69: 04:73:52:04:58:4a:49:35:2e:dc:1e:f8:dc:f4:a5:90:50:71: 73:e3:fb:63:bf:58:29:82:b5:ab:42:6f:df:da:e0:45:db:bc: 8f:52:4b:43:95:19:75:f5:7a:e2:6f:07:f1:19:63:e4:03:04: f4:a6:92:f1:51:6d:ff:30:24:42:46:01:a1:d0:af:cf:5f:d8: 06:6a:bb:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBRi+ctBIILxYTF+cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViODQxM2ItNTI1NC00OTU5LWE5ZjEtZDAwZjBmYzFi ODE5MB4XDTI1MTEwNTA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk ODRiMDU0M2QtYThhMC00NTBmLWFhZmQtYTE0OTk5ZDdlZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfNkv7NgvPtcWu/19T/czCf7DyeRsUMLAVQz 4151p7U3bCXbTVkHK0MgHShBHVLkQD4oLMFbsxV64irMVhJKvZ3f4uxMeJUtxkZD OL7uwmN9fMWkV5HazztTGK1VCDeNW6iqBc+lESSD7iSzY+pE6SAPuR5S7iDJ1OH0 mAaYK9pPpLoKL0PoXtnRNU0S62Rk6NCWjhpQsYkpZcxmapCfLaPeME4jsHiK7lXb 8KjRsNIDMEYc0F9Mm5ziE/ho8DtNydZWAzS9AhYh6EsjhpI27wQUMmqqt7UBqGqB XBSY/DINvIrKzNs8Hri5w/2wgrxxL27D5f6IxrBpSqt2IVR42wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFElnF05fn0xcjyiqdoajHwfgnRiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI4 NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZjMWI4MTkvMjViODQxM2ItNTI1NC00 OTU5LWE5ZjEtZDAwZjBmYzFiODE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViODQxM2ItNTI1NC00OTU5LWE5 ZjEtZDAwZjBmYzFiODE5LzI1Yjg0MTNiLTUyNTQtNDk1OS1hOWYxLWQwMGYwZmMx YjgxOS5jcmwwHwYDVR0jBBgwFoAUm8HV8p8M9XZ5Z99wJUpri2W5HlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBm MGZjMWI4MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk5w+RVSgz9OPKqHsvuYfO +mq4nJ6evHwcfgEw1kcKiqmJiJ+e3BrQ5IQf6YW6LICuqkyFYrGNfsRtv1I/eJRX u1mDXIGAmDMD6+GWDcZG7SnECYRKjC2zuPlHy8RMO8+Jnwry1cRLC/6mlCwhe8NI N2jwl2fhpYcf0oWfrqf0hGeTxYLymBdSvq2FtvKx6wElgZPr4OBBZZYdCn2KNwgO qSImtxL8FOFR/Jr+RGoJR1n0vmkEc1IEWEpJNS7cHvjc9KWQUHFz4/tjv1gpgrWr Qm/f2uBF27yPUktDlRl19XribwfxGWPkAwT0ppLxUW3/MCRCRgGh0K/PX9gGarus -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:13 2025 by rpki-client