$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft File: 997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft (raw, json) Hash identifier: VU41XKYU/VVZux5DZqRn9HmZ9Nc2GunNfXqXPVPhszU= Subject key identifier: 9B:B1:B9:70:2A:33:11:68:19:4C:1E:1A:94:F0:75:61:55:DA:2A:F7 Authority key identifier: 9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 Certificate issuer: /CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Certificate serial: 010D0C9F4328584BBF69B82D20BB3CCF14BADED8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft Manifest number: 010D0C9F432858453F9EDDF367D92B63629EA066 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Fri 07 Nov 2025 12:00:00 +0000 Files and hashes: 1: 3a59a8dd-9438-357b-9270-804aa380967c.roa (hash: 0YB9HGlVKiXzgqnIDqzqs16YJfWxeAPWjLSIc6LASUs=) 2: 997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl (hash: SXUwQGJiiRWBDUBzKGXTbFcG/TEA95x/F/F6s6DMcvo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b8:2d:20:bb:3c:cf:14:ba:de:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 7 12:00:00 2025 GMT Subject: CN=4a251e36-e82d-4cbc-8121-ce0258d7a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:4d:7c:24:c3:a6:6f:5d:06:15:e3:27:85: 12:49:63:0c:6d:80:a3:1a:5e:2a:e2:3d:21:7d:45: f3:ec:98:c2:a3:08:ee:45:1f:8e:7a:3b:7d:ac:ca: fe:4a:bb:7d:93:e1:6e:92:50:cf:79:60:a9:32:b7: 0c:ec:a6:56:64:88:20:6c:ea:96:cd:3d:c0:7f:a3: 0c:34:cf:75:29:11:fd:8f:97:7f:fd:a9:fa:00:f5: a5:81:eb:4d:db:1c:b8:63:10:95:28:1c:18:b0:38: 74:05:80:89:f2:f9:68:6f:5f:dc:c7:9d:7a:e7:13: fe:b0:04:3e:8d:e3:31:30:71:f7:3c:7c:65:f7:af: 9e:a9:65:45:bc:ce:12:57:0d:4f:94:d3:c8:d0:1a: cf:f1:77:23:71:a1:6d:54:29:8f:f4:98:b4:25:cc: 60:a5:87:3e:58:84:92:2c:19:d3:81:9d:0f:a8:1d: c5:4f:da:ff:c8:c5:41:62:df:b5:e1:e8:07:4a:44: b3:8d:0e:cd:5b:75:62:03:a5:ea:f1:68:35:05:ed: 4a:6e:75:24:3b:3b:25:87:3d:17:c3:66:44:c8:15: b3:44:94:27:32:0a:9c:9e:81:7b:8e:61:f2:77:f0: ea:ee:04:b6:bc:08:64:71:3f:3f:61:b2:d5:6b:d0: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:B9:70:2A:33:11:68:19:4C:1E:1A:94:F0:75:61:55:DA:2A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl X509v3 Authority Key Identifier: keyid:9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e1:d1:c4:2d:33:e0:06:16:4d:7f:4c:b8:1f:0f:48:b4:96: e1:6b:1a:fc:44:50:8a:7a:10:0e:69:1b:78:79:0c:fb:6c:39: df:8f:cb:b2:9e:d3:26:c5:51:da:01:a9:e1:1f:2a:d4:a0:65: ac:61:d4:38:e3:50:af:f5:23:94:07:1e:db:b6:93:49:33:1f: 09:3c:83:ea:89:bc:ec:a0:be:03:81:bc:fa:59:f2:f1:5a:db: 64:7d:2a:21:de:28:6f:b0:6c:39:79:af:77:14:40:13:c6:10: 18:ce:ab:2b:97:38:2e:f2:2d:24:58:6a:f2:c9:59:a5:e2:8d: 23:4e:82:06:b2:7f:f0:8b:aa:d0:54:e3:77:71:dd:c5:e6:1c: 0a:d4:89:29:d2:29:77:d5:25:74:53:72:00:cd:39:32:a1:17: 7b:2b:a0:a6:2d:16:19:a1:cb:16:47:03:61:2e:58:db:2a:68: 11:e2:af:64:29:40:04:6d:a9:61:4e:b2:48:77:6d:61:cf:c6: 73:a5:36:a2:c1:6c:57:c7:c7:5f:a6:e7:f0:17:b1:89:2b:9e: 68:c4:39:e2:27:6e:35:02:eb:e2:01:cd:9d:28:0b:05:32:92: 7b:2a:00:9a:e1:f5:0f:68:9b:39:cc:e8:f9:4c:a0:b5:8a:20: d3:85:6e:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abgtILs8zxS63tgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZjViMDQtOTk4Yy00ZThhLWJmM2UtZmQ5YWI5NmEy ZDI4MB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNzEyMDAwMFowLzEtMCsGA1UEAxMk NGEyNTFlMzYtZTgyZC00Y2JjLTgxMjEtY2UwMjU4ZDdhN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iVNfCTDpm9dBhXjJ4USSWMMbYCjGl4q4j0h fUXz7JjCowjuRR+Oejt9rMr+Srt9k+FuklDPeWCpMrcM7KZWZIggbOqWzT3Af6MM NM91KRH9j5d//an6APWlgetN2xy4YxCVKBwYsDh0BYCJ8vlob1/cx5165xP+sAQ+ jeMxMHH3PHxl96+eqWVFvM4SVw1PlNPI0BrP8XcjcaFtVCmP9Ji0JcxgpYc+WISS LBnTgZ0PqB3FT9r/yMVBYt+14egHSkSzjQ7NW3ViA6Xq8Wg1Be1KbnUkOzslhz0X w2ZEyBWzRJQnMgqcnoF7jmHyd/Dq7gS2vAhkcT8/YbLVa9CZIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJuxuXAqMxFoGUweGpTwdWFV2ir3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTdm NWIwNC05OThjLTRlOGEtYmYzZS1mZDlhYjk2YTJkMjgvOTk3ZjViMDQtOTk4Yy00 ZThhLWJmM2UtZmQ5YWI5NmEyZDI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk3ZjViMDQtOTk4Yy00ZThhLWJm M2UtZmQ5YWI5NmEyZDI4Lzk5N2Y1YjA0LTk5OGMtNGU4YS1iZjNlLWZkOWFiOTZh MmQyOC5jcmwwHwYDVR0jBBgwFoAUmxMtCHZIK14G6wbEdyIg8AnNPtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTdmNWIwNC05OThjLTRlOGEtYmYzZS1mZDlh Yjk2YTJkMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd4dHELTPgBhZNf0y4Hw9I tJbhaxr8RFCKehAOaRt4eQz7bDnfj8uyntMmxVHaAanhHyrUoGWsYdQ441Cv9SOU Bx7btpNJMx8JPIPqibzsoL4Dgbz6WfLxWttkfSoh3ihvsGw5ea93FEATxhAYzqsr lzgu8i0kWGryyVml4o0jToIGsn/wi6rQVON3cd3F5hwK1Ikp0il31SV0U3IAzTky oRd7K6CmLRYZocsWRwNhLljbKmgR4q9kKUAEbalhTrJId21hz8ZzpTaiwWxXx8df pufwF7GJK55oxDniJ241AuviAc2dKAsFMpJ7KgCa4fUPaJs5zOj5TKC1iiDThW65 -----END CERTIFICATE-----Generated at Wed Nov 5 02:35:40 2025 by rpki-client