$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft File: 65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft (raw, json) Hash identifier: aiyh7Rx+cEXT2VFqs0UTbRnHrZZ+MR5dhUjURarI1C8= Subject key identifier: 52:E4:50:EF:E5:D9:59:CF:3F:40:05:43:C6:A7:B0:AA:47:5C:15:63 Authority key identifier: C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87 Certificate issuer: /CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f Certificate serial: 010D0C9F4328584BC075C8EAFF52A5A5F9F42038 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft Manifest number: 010D0C9F43285844F54B65B05CB04CA1726A8D3D Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl (hash: zJaVcFvRFjg/eKCEjtiwVcdC2KMmHYXuiCob4XpDi2w=) 2: a27e26db-c05d-3eea-a6d8-73b657f3d5ab.roa (hash: LlqsZ0f8Bv7K4U5FSb3WVVd+AsIvvCcHD2G/cFkbgrY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:ea:ff:52:a5:a5:f9:f4:20:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=70466d8a-ca21-4176-a462-39b2d4d48dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:74:37:0c:61:f2:b5:dc:c8:3a:97:36:1a: cc:4b:9b:a6:75:db:f5:96:dd:0e:6f:e2:f5:68:eb: 7a:17:56:71:a1:62:11:f1:bb:4e:ca:cd:0e:c5:1b: 75:ff:96:89:e4:dc:3f:36:c9:50:50:92:f0:a5:4d: 0c:37:31:db:c2:07:16:9b:dc:a4:62:af:00:8c:08: 1b:fa:eb:8f:d2:db:59:8e:7f:65:ac:74:29:75:42: 15:4a:bd:05:dc:96:6c:62:39:85:8f:0c:8a:e0:2d: 03:ca:4e:7b:af:fb:4f:86:1e:64:d3:15:57:4d:78: 44:0a:5b:c3:81:8c:05:36:d3:5b:d2:c0:c3:d9:5f: b6:3a:40:8c:21:6c:5a:ca:04:3a:c3:b8:99:75:93: 42:44:85:76:cf:d1:63:17:d2:16:df:59:d3:25:24: 50:17:7b:11:23:26:fa:6a:e7:d0:99:cd:f0:a8:31: ec:44:2c:b9:68:ee:53:38:5d:b4:e6:c6:8b:12:3f: 46:f8:87:cf:b0:be:7c:82:1e:7e:bb:e7:5d:f2:ba: 11:c0:5e:be:69:25:0f:fa:97:87:0c:0f:c9:5f:14: fa:c7:49:6b:b0:ed:1d:c3:8d:b8:5f:20:b5:8b:9a: a1:60:51:45:66:7c:c6:f7:f4:c6:0f:14:8d:42:a2: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:50:EF:E5:D9:59:CF:3F:40:05:43:C6:A7:B0:AA:47:5C:15:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl X509v3 Authority Key Identifier: keyid:C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f4:8a:7a:98:85:09:c1:c4:fd:ec:bb:e5:b6:2f:12:ba:a9: 0c:0d:e2:7e:4d:e2:9c:4f:ef:13:88:2c:f9:b3:b7:a0:be:7e: 32:1b:0f:c0:b8:45:86:3e:33:e5:ee:c3:ac:81:9d:97:ba:44: 2f:39:ea:47:f6:c2:08:9d:00:11:e2:46:9d:d4:03:42:4c:6f: d6:17:85:79:a8:1e:ed:58:68:32:be:da:f6:77:a8:d5:df:6e: 6c:bf:65:73:5a:31:d9:d0:08:85:dc:0b:a1:38:27:07:1a:83: 8a:1a:8c:ce:89:9d:da:6f:90:a4:67:1e:14:3a:ec:e3:59:2f: 57:17:0c:79:f2:5f:01:ab:8c:a9:c3:c6:0f:bd:92:c2:f3:0b: 7c:46:7d:85:52:fb:c8:7e:4a:14:ec:ea:78:40:61:a3:ee:50: 38:30:9e:9b:66:5e:bd:93:b8:cd:31:94:ca:e7:e2:c0:e9:c6: 04:98:3c:4d:b9:6f:95:7f:32:e4:52:10:73:a4:a5:23:5f:df: c1:a0:0b:08:69:50:8d:58:37:e0:6e:ac:4a:b0:aa:6b:60:73: b8:0f:30:87:3c:43:b6:67:ec:70:63:7e:5a:cd:37:cd:cd:ac: 74:5d:cf:9f:1e:13:80:48:5c:d1:74:72:b0:42:2d:fb:e4:1b: d9:c2:58:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcjq/1Klpfn0IDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmNjU5OWUtZjBjYy00NjQxLWI3Y2QtOWUwYTJlYjJi YzlmMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk NzA0NjZkOGEtY2EyMS00MTc2LWE0NjItMzliMmQ0ZDQ4ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxF0Nwxh8rXcyDqXNhrMS5umddv1lt0Ob+L1 aOt6F1ZxoWIR8btOys0OxRt1/5aJ5Nw/NslQUJLwpU0MNzHbwgcWm9ykYq8AjAgb +uuP0ttZjn9lrHQpdUIVSr0F3JZsYjmFjwyK4C0Dyk57r/tPhh5k0xVXTXhEClvD gYwFNtNb0sDD2V+2OkCMIWxaygQ6w7iZdZNCRIV2z9FjF9IW31nTJSRQF3sRIyb6 aufQmc3wqDHsRCy5aO5TOF205saLEj9G+IfPsL58gh5+u+dd8roRwF6+aSUP+peH DA/JXxT6x0lrsO0dw424XyC1i5qhYFFFZnzG9/TGDxSNQqIwzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFLkUO/l2VnPP0AFQ8ansKpHXBVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NWY2 NTk5ZS1mMGNjLTQ2NDEtYjdjZC05ZTBhMmViMmJjOWYvNjVmNjU5OWUtZjBjYy00 NjQxLWI3Y2QtOWUwYTJlYjJiYzlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjVmNjU5OWUtZjBjYy00NjQxLWI3 Y2QtOWUwYTJlYjJiYzlmLzY1ZjY1OTllLWYwY2MtNDY0MS1iN2NkLTllMGEyZWIy YmM5Zi5jcmwwHwYDVR0jBBgwFoAUyZfHIW30wJm7rF2ZVBqesprJSIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NWY2NTk5ZS1mMGNjLTQ2NDEtYjdjZC05ZTBh MmViMmJjOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBI9Ip6mIUJwcT97Lvlti8S uqkMDeJ+TeKcT+8TiCz5s7egvn4yGw/AuEWGPjPl7sOsgZ2XukQvOepH9sIInQAR 4kad1ANCTG/WF4V5qB7tWGgyvtr2d6jV325sv2VzWjHZ0AiF3AuhOCcHGoOKGozO iZ3ab5CkZx4UOuzjWS9XFwx58l8Bq4ypw8YPvZLC8wt8Rn2FUvvIfkoU7Op4QGGj 7lA4MJ6bZl69k7jNMZTK5+LA6cYEmDxNuW+VfzLkUhBzpKUjX9/BoAsIaVCNWDfg bqxKsKprYHO4DzCHPEO2Z+xwY35azTfNzax0Xc+fHhOASFzRdHKwQi375BvZwlhO -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:19 2025 by rpki-client