$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft File: 41d819be-21e8-4d68-8993-33ab237e51ae.mft (raw, json) Hash identifier: cFzksL6gR0no9ZCzHGbd26ZAgcakEpqO21UGtiaZU4I= Subject key identifier: 56:66:06:B8:8E:85:2F:9B:9D:28:DE:D8:FB:69:F3:7E:0E:78:83:40 Authority key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 Certificate issuer: /CN=41d819be-21e8-4d68-8993-33ab237e51ae Certificate serial: 010D0C9F4328584BBFC31041F73A84313CB23F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft Manifest number: 010D0C9F4328584590E815945FD707B52ABDC345 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 41d819be-21e8-4d68-8993-33ab237e51ae.crl (hash: rE3Afh+hJkcuAYKbaRG//a/vSwUKMg/IG9XH3v7qvP0=) 2: 6757d0ec-3da9-362b-964a-6f6259402d74.roa (hash: xC/9Dmuc0qCHsocrnCZJfXJ1kR9LBZrEfs/V/0kWv8I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:10:41:f7:3a:84:31:3c:b2:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d819be-21e8-4d68-8993-33ab237e51ae Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=9487331d-293c-4e3f-9831-bdb604b5d8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:87:31:86:31:20:d7:14:52:1b:d5:a9:fa: 0a:6a:b4:2d:75:89:8f:0e:a4:11:d9:8d:19:ab:2a: 88:df:18:f7:e0:20:0a:af:28:de:7f:97:77:bc:e7: 5e:14:5c:15:0e:61:42:45:54:d0:e2:5c:6e:a1:f5: 21:a2:94:6a:b9:57:29:d2:59:d0:ee:00:df:51:32: c2:6f:0c:da:3a:1c:39:13:ca:17:3a:47:05:78:72: 88:b4:36:ba:46:ec:46:cd:e7:7f:b7:47:d8:da:60: 4a:b4:ce:fb:6c:4f:8f:b5:44:3d:fb:08:eb:55:23: f1:0e:89:3e:23:00:34:e9:86:03:1a:75:43:52:a4: 6e:b0:2b:a5:fb:e2:40:57:8b:a9:38:ff:4a:b9:10: 88:2d:ea:b4:f6:98:95:77:0e:42:c8:ee:14:b0:e5: d7:19:7d:98:47:9f:b0:07:6b:a0:3b:de:d1:03:a1: 80:96:f4:24:ae:45:ba:4c:38:07:d7:c3:b7:07:6b: c9:89:9b:8e:98:a4:cb:ab:04:61:b3:93:48:f0:26: 7e:49:aa:86:68:9a:31:fe:84:eb:14:75:fd:2e:e4: fc:c6:eb:d5:c9:f5:bb:10:aa:db:f5:e7:ee:f5:d1: 8b:84:04:82:cb:00:03:7f:a3:1e:b8:6f:c2:9f:63: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:66:06:B8:8E:85:2F:9B:9D:28:DE:D8:FB:69:F3:7E:0E:78:83:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl X509v3 Authority Key Identifier: keyid:BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:75:3c:29:b7:98:f0:e9:27:e7:14:ee:bd:b7:9f:91:68:18: 89:ac:bc:df:5a:39:a5:51:12:42:9f:00:31:98:7c:ee:0f:21: 45:85:76:83:64:15:30:4c:77:a2:06:15:52:c7:4f:fd:b8:6b: c2:9a:1b:fc:24:25:91:0d:c8:30:8a:ce:5c:be:d8:be:73:d5: 42:84:bc:f9:76:57:d7:61:74:af:c6:9e:81:23:54:df:48:ea: 76:28:8d:32:e3:d2:80:11:fe:26:64:23:e2:13:6f:28:d4:94: de:03:e4:83:fe:1a:57:e9:59:53:8e:5c:2c:0b:ae:6c:18:12: c1:d4:68:51:bb:39:c4:27:ae:e0:64:22:44:a5:3b:5d:2f:c9: 6a:70:d3:1e:4c:e5:c3:d2:cf:07:7d:ea:0f:c7:40:93:c7:e9: 05:6c:81:de:ea:c0:45:97:60:f2:c6:8b:45:6f:f8:28:47:02: 81:24:47:43:b1:cc:55:1c:a0:f9:70:c3:0b:dc:3f:78:94:d0: 83:04:e4:d9:29:88:6a:f6:0d:04:04:f4:9f:57:e0:fd:71:3d: a6:17:73:79:1d:01:8c:fe:53:29:50:e3:c9:94:0d:18:d3:7d: b7:d2:ad:e1:04:88:62:5b:09:37:c6:65:f0:32:28:3f:97:bf: 33:9b:90:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxBB9zqEMTyyPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkODE5YmUtMjFlOC00ZDY4LTg5OTMtMzNhYjIzN2U1 MWFlMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk OTQ4NzMzMWQtMjkzYy00ZTNmLTk4MzEtYmRiNjA0YjVkOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIOHMYYxINcUUhvVqfoKarQtdYmPDqQR2Y0Z qyqI3xj34CAKryjef5d3vOdeFFwVDmFCRVTQ4lxuofUhopRquVcp0lnQ7gDfUTLC bwzaOhw5E8oXOkcFeHKItDa6RuxGzed/t0fY2mBKtM77bE+PtUQ9+wjrVSPxDok+ IwA06YYDGnVDUqRusCul++JAV4upOP9KuRCILeq09piVdw5CyO4UsOXXGX2YR5+w B2ugO97RA6GAlvQkrkW6TDgH18O3B2vJiZuOmKTLqwRhs5NI8CZ+SaqGaJox/oTr FHX9LuT8xuvVyfW7EKrb9efu9dGLhASCywADf6MeuG/Cn2NtTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFZmBriOhS+bnSje2Ptp834OeINAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MWQ4 MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3ZTUxYWUvNDFkODE5YmUtMjFlOC00 ZDY4LTg5OTMtMzNhYjIzN2U1MWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDFkODE5YmUtMjFlOC00ZDY4LTg5 OTMtMzNhYjIzN2U1MWFlLzQxZDgxOWJlLTIxZTgtNGQ2OC04OTkzLTMzYWIyMzdl NTFhZS5jcmwwHwYDVR0jBBgwFoAUv/c82cpKMsf/C/3z5VQQQjzIl2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2Fi MjM3ZTUxYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpdTwpt5jw6SfnFO69t5+R aBiJrLzfWjmlURJCnwAxmHzuDyFFhXaDZBUwTHeiBhVSx0/9uGvCmhv8JCWRDcgw is5cvti+c9VChLz5dlfXYXSvxp6BI1TfSOp2KI0y49KAEf4mZCPiE28o1JTeA+SD /hpX6VlTjlwsC65sGBLB1GhRuznEJ67gZCJEpTtdL8lqcNMeTOXD0s8HfeoPx0CT x+kFbIHe6sBFl2DyxotFb/goRwKBJEdDscxVHKD5cMML3D94lNCDBOTZKYhq9g0E BPSfV+D9cT2mF3N5HQGM/lMpUOPJlA0Y03230q3hBIhiWwk3xmXwMig/l78zm5Bl -----END CERTIFICATE-----Generated at Wed Nov 5 13:25:27 2025 by rpki-client