$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft File: 0499e690-23fd-496a-a697-cd290d3127f5.mft (raw, json) Hash identifier: 2iyMFV194Dc5Glt4qVM2hyFXeyLLqCBuuA5myYcYatA= Subject key identifier: A7:15:3E:B2:A9:A3:D5:28:B6:66:2D:63:69:C0:9A:CD:07:25:E9:D2 Authority key identifier: DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C Certificate issuer: /CN=0499e690-23fd-496a-a697-cd290d3127f5 Certificate serial: 010D0C9F4328584BBFE0D78A0D9A9886AAD8C220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft Manifest number: 010D0C9F43285845F2A4FA22127B84E8C06B4FA1 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0499e690-23fd-496a-a697-cd290d3127f5.crl (hash: NNhO/+PkHcQe75H9KuDJdR66nCQb/R2LjNnHj4/U3rw=) 2: 6a7a93a8-1167-3683-ae00-db1af6c93f5b.roa (hash: pcxOZocZQ92SsVQoGC4E4hfYHfsZQ5Ugdkl0Uq+Y+aI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d7:8a:0d:9a:98:86:aa:d8:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0499e690-23fd-496a-a697-cd290d3127f5 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=f7f5e75e-f6fb-44c4-b632-7426b239febb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:e1:e9:f1:ed:bd:6d:05:4d:65:9a:7a:de: 87:1d:c5:e6:ff:e3:3e:6f:92:f7:e6:57:0f:7a:52: c3:73:65:cb:2b:70:71:c2:1f:03:0f:61:11:2f:af: a7:1c:bc:4f:ed:d6:65:64:d7:1b:e2:d4:5e:5d:83: b6:da:ee:d4:4d:ae:cb:c3:f2:a4:b6:c3:5e:0d:b2: 41:32:47:b5:de:92:17:0b:a7:e4:8d:db:b9:d2:1e: ea:1f:b6:61:64:e3:b9:f6:1c:74:ea:19:5f:7a:b2: fc:a3:11:1d:cc:06:3a:81:0c:8b:6e:f8:64:d2:1d: a4:35:4d:10:62:47:f5:67:bb:bd:17:ab:78:a3:1d: 0a:5f:29:37:fa:c6:cb:3f:28:e3:ae:aa:0f:a3:18: 2e:6f:65:b1:c0:8a:17:aa:8c:4e:a9:c0:a7:19:37: c4:c0:06:de:bd:d5:19:8a:fd:8d:13:c0:7b:74:b9: 6d:46:e1:48:45:7f:39:fd:a4:aa:ab:06:7a:ec:ed: 03:11:90:29:b6:1a:b8:02:17:26:54:2a:cb:48:aa: 4c:c1:dd:f6:9a:b4:53:0b:03:f0:88:ef:cb:92:81: 83:67:9c:fb:d9:23:00:95:e8:60:65:2f:9b:04:05: 58:fe:6b:d3:f8:51:a0:69:e2:02:a7:9d:61:95:cf: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:15:3E:B2:A9:A3:D5:28:B6:66:2D:63:69:C0:9A:CD:07:25:E9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl X509v3 Authority Key Identifier: keyid:DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6c:58:2a:3d:d6:3e:7d:ff:4b:24:b0:e0:35:89:0c:4c:87: 4e:cb:78:f9:60:a8:a0:9f:b8:e6:1d:ee:ac:c2:60:c6:3e:ea: 17:f7:84:4e:92:cb:2d:02:ba:69:00:35:0a:98:01:5a:10:20: cf:e7:3b:dd:23:17:d5:ec:fb:b9:b8:c5:11:ad:3a:38:79:b1: 7a:83:75:2e:5a:fa:f1:6b:c0:fd:62:0f:53:87:75:d2:b4:7e: f9:a0:15:09:6b:e3:98:de:58:91:cb:61:1a:86:90:49:4c:45: 7a:69:d7:2d:40:1c:f4:e5:43:b8:e8:15:00:2f:b0:9e:62:54: 1a:ee:bd:a8:1e:01:82:ad:ef:65:5c:44:0b:25:17:ec:8d:08: f8:35:3c:c5:21:bc:d8:90:17:9d:d8:2d:bc:e8:91:12:7a:ea: f7:23:10:78:b5:f6:9a:28:a9:ab:0c:5a:bb:0f:71:84:5c:78: 52:43:39:98:40:d4:8c:31:27:b5:aa:0e:13:54:3e:c8:4d:d1: fc:96:fd:79:df:99:31:31:0f:30:8f:d9:04:fc:0c:a9:64:b2: 24:19:c2:1e:86:ff:7f:fc:1a:03:84:27:98:b7:a8:36:74:db: f3:e7:9c:9b:67:56:f2:ab:21:9c:23:eb:e0:f7:56:dd:47:3c: 52:f8:1f:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NeKDZqYhqrYwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ5OWU2OTAtMjNmZC00OTZhLWE2OTctY2QyOTBkMzEy N2Y1MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ZjdmNWU3NWUtZjZmYi00NGM0LWI2MzItNzQyNmIyMzlmZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljbh6fHtvW0FTWWaet6HHcXm/+M+b5L35lcP elLDc2XLK3Bxwh8DD2ERL6+nHLxP7dZlZNcb4tReXYO22u7UTa7Lw/KktsNeDbJB Mke13pIXC6fkjdu50h7qH7ZhZOO59hx06hlferL8oxEdzAY6gQyLbvhk0h2kNU0Q Ykf1Z7u9F6t4ox0KXyk3+sbLPyjjrqoPoxgub2WxwIoXqoxOqcCnGTfEwAbevdUZ iv2NE8B7dLltRuFIRX85/aSqqwZ67O0DEZApthq4AhcmVCrLSKpMwd32mrRTCwPw iO/LkoGDZ5z72SMAlehgZS+bBAVY/mvT+FGgaeICp51hlc/iXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKcVPrKpo9UotmYtY2nAms0HJenSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5 ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5MGQzMTI3ZjUvMDQ5OWU2OTAtMjNmZC00 OTZhLWE2OTctY2QyOTBkMzEyN2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDQ5OWU2OTAtMjNmZC00OTZhLWE2 OTctY2QyOTBkMzEyN2Y1LzA0OTllNjkwLTIzZmQtNDk2YS1hNjk3LWNkMjkwZDMx MjdmNS5jcmwwHwYDVR0jBBgwFoAU2l8J0mVwJfrYhNuhc0YSUhBV3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5 MGQzMTI3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsbFgqPdY+ff9LJLDgNYkM TIdOy3j5YKign7jmHe6swmDGPuoX94ROksstArppADUKmAFaECDP5zvdIxfV7Pu5 uMURrTo4ebF6g3UuWvrxa8D9Yg9Th3XStH75oBUJa+OY3liRy2EahpBJTEV6adct QBz05UO46BUAL7CeYlQa7r2oHgGCre9lXEQLJRfsjQj4NTzFIbzYkBed2C286JES eur3IxB4tfaaKKmrDFq7D3GEXHhSQzmYQNSMMSe1qg4TVD7ITdH8lv1535kxMQ8w j9kE/AypZLIkGcIehv9//BoDhCeYt6g2dNvz55ybZ1byqyGcI+vg91bdRzxS+B9V -----END CERTIFICATE-----Generated at Wed Nov 5 03:55:23 2025 by rpki-client