$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft File: 4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft (raw, json) Hash identifier: 2ZOYVhfP7a226JvvwtVvuj0P4XuHsdZ98mN5zp71EDQ= Subject key identifier: 58:4A:60:2C:40:D3:01:5A:46:81:6E:C7:BF:35:39:D0:F6:72:21:8B Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70 Certificate issuer: /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b Certificate serial: 010D0C9F4328584BBFC30DB31E2C8CA681B3C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft Manifest number: 010D0C9F43285844D5E62D76A52C54F368580688 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl (hash: fCJQZIkuVDNYZ7Z57T4aoQGietjsVp6ns7JhzL8qne4=) 2: 9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (hash: 419FoXKjynnRTpwqRkyXG+Ey4nDYGvrJod9e7fZl/5Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0d:b3:1e:2c:8c:a6:81:b3:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=8f058ad7-cf06-4b7c-ab04-f279cbc2b938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:8b:5f:2c:79:ef:a0:21:6d:c6:bd:45:5c: 70:8b:ca:3c:df:ea:a5:22:1e:2f:83:53:da:2e:8f: 94:6e:99:59:e0:25:c7:dd:f8:97:7a:fa:d8:12:47: 86:e1:0b:53:ac:80:61:80:e4:ff:47:a5:29:cc:71: d2:f4:1c:dc:f3:dc:3b:3b:cf:32:97:2b:42:da:fb: 8c:eb:bf:5d:a1:cf:e9:6f:d4:1f:78:cb:a8:27:ec: 51:24:1f:96:9e:0e:d5:75:5d:f0:c8:8b:3e:52:eb: 6e:1c:4c:2f:d9:99:c7:34:57:a9:cd:8a:a8:a1:fc: 5b:40:71:e0:cd:25:ea:43:0d:09:4b:66:a3:42:3e: c2:2d:2d:e9:51:64:a4:75:69:ac:b2:64:0f:4a:f3: a8:b1:22:cf:bc:84:8f:28:28:a9:ac:9c:61:03:39: a9:46:4f:22:ff:a4:98:8a:c6:50:41:0f:e4:d6:f7: 30:7a:2c:c1:0a:de:ce:95:97:05:66:ef:83:f9:18: e0:70:26:68:71:bf:14:da:36:c7:25:58:1e:29:d1: 2b:36:f3:1f:d1:77:20:3f:25:07:1a:80:a0:21:66: 58:87:8e:0d:62:74:47:f8:b8:de:ca:8d:1a:e4:ed: fc:21:f2:5a:48:07:84:26:99:c1:fa:50:3b:df:e1: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4A:60:2C:40:D3:01:5A:46:81:6E:C7:BF:35:39:D0:F6:72:21:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl X509v3 Authority Key Identifier: keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0c:ea:2f:5b:8b:c6:21:65:9a:0e:67:71:0e:04:b1:4b:fb: df:d3:49:6e:2d:de:ec:6e:59:bd:cc:39:01:41:79:92:18:df: 7b:32:87:fd:42:b6:a4:47:a8:b3:00:6f:ab:27:96:a0:db:6a: b8:be:c7:4b:2f:2d:06:cf:dc:c9:d2:40:20:36:8a:a0:2b:84: 95:ab:c4:43:c3:1c:a0:18:2a:12:a4:96:4a:97:1f:7d:05:05: 5a:22:7a:2c:3c:fb:f2:96:09:8d:c2:2b:70:d9:33:db:3a:d7: 5f:45:35:84:84:80:7c:dd:22:dd:34:00:43:10:7d:64:28:c0: 74:ec:0d:53:5f:e0:f5:c8:d1:2e:69:d2:a1:06:33:d5:f3:ec: 2c:1d:70:6c:1a:9b:3b:91:37:39:08:e6:95:38:42:eb:0e:d1: 63:21:90:f8:dd:d1:a0:99:86:6c:9a:bc:57:8a:f6:12:18:b8: c9:ff:78:46:ac:ad:35:22:91:3a:c2:16:24:d6:6f:5e:d8:a9: d5:c8:ef:5b:48:25:e4:ab:5e:a5:dc:2e:36:54:60:29:ae:8c: 95:e8:b0:56:c3:ce:6a:ee:c0:e1:da:ac:d2:18:7a:f2:0e:78: f2:fa:44:f4:61:44:bf:9e:72:fc:c1:b4:5b:b6:db:aa:e2:ee: b6:76:f3:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww2zHiyMpoGzwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZmYzZDMtMmYxOS00M2E0LWEzNmQtZWNlMWVlMDUw NTViMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk OGYwNThhZDctY2YwNi00YjdjLWFiMDQtZjI3OWNiYzJiOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZaLXyx576Ahbca9RVxwi8o83+qlIh4vg1Pa Lo+UbplZ4CXH3fiXevrYEkeG4QtTrIBhgOT/R6UpzHHS9Bzc89w7O88ylytC2vuM 679doc/pb9QfeMuoJ+xRJB+Wng7VdV3wyIs+UutuHEwv2ZnHNFepzYqoofxbQHHg zSXqQw0JS2ajQj7CLS3pUWSkdWmssmQPSvOosSLPvISPKCiprJxhAzmpRk8i/6SY isZQQQ/k1vcweizBCt7OlZcFZu+D+RjgcCZocb8U2jbHJVgeKdErNvMf0XcgPyUH GoCgIWZYh44NYnRH+Ljeyo0a5O38IfJaSAeEJpnB+lA73+FQpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFhKYCxA0wFaRoFux781OdD2ciGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm ZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2UxZWUwNTA1NWIvNGE3ZmYzZDMtMmYxOS00 M2E0LWEzNmQtZWNlMWVlMDUwNTViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZmYzZDMtMmYxOS00M2E0LWEz NmQtZWNlMWVlMDUwNTViLzRhN2ZmM2QzLTJmMTktNDNhNC1hMzZkLWVjZTFlZTA1 MDU1Yi5jcmwwHwYDVR0jBBgwFoAU56FueZOtHDWx7mQtJb5nXQKd7XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2Ux ZWUwNTA1NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlDOovW4vGIWWaDmdxDgSx S/vf00luLd7sblm9zDkBQXmSGN97Mof9QrakR6izAG+rJ5ag22q4vsdLLy0Gz9zJ 0kAgNoqgK4SVq8RDwxygGCoSpJZKlx99BQVaInosPPvylgmNwitw2TPbOtdfRTWE hIB83SLdNABDEH1kKMB07A1TX+D1yNEuadKhBjPV8+wsHXBsGps7kTc5COaVOELr DtFjIZD43dGgmYZsmrxXivYSGLjJ/3hGrK01IpE6whYk1m9e2KnVyO9bSCXkq16l 3C42VGAproyV6LBWw85q7sDh2qzSGHryDnjy+kT0YUS/nnL8wbRbttuq4u62dvPS -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:02 2025 by rpki-client