$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft File: 25200eb8-bc93-4e8b-afa9-05e635b02746.mft (raw, json) Hash identifier: oCgZyLuNdDHw8g3Pa7SkAHOMQY8bn/+NuiIpPPoW38c= Subject key identifier: 0A:0A:64:DB:93:8E:1F:2C:7A:D9:A8:AC:72:DE:3D:AD:4D:E0:58:5F Authority key identifier: 8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79 Certificate issuer: /CN=25200eb8-bc93-4e8b-afa9-05e635b02746 Certificate serial: 010D0C9F4328584BC2CA59F766BDC351DC023CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft Manifest number: 010D0C9F4328584073A81CBA6F930754F6B8C893 Signing time: Wed 05 Nov 2025 17:02:09 +0000 Manifest this update: Wed 05 Nov 2025 17:02:09 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 25200eb8-bc93-4e8b-afa9-05e635b02746.crl (hash: Mz4Td+29C7HHhNcPfK+BVzwCwALi/SMTuRYi57bz/78=) 2: a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa (hash: woCSt20GAK0MKIhbH+vFP+C/1CbBt8lxJAdD6lbujf4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ca:59:f7:66:bd:c3:51:dc:02:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25200eb8-bc93-4e8b-afa9-05e635b02746 Validity Not Before: Nov 5 17:02:09 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=2402fe61-4378-49a6-872a-d8b77fab9dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:49:2e:c5:b8:83:f1:f4:f5:67:e6:9d:ab: 0e:fd:8d:13:e2:b2:af:60:87:05:ef:2c:47:b4:05: 1b:22:c2:76:d9:32:2c:f6:cc:ee:61:5a:36:01:0c: ec:d2:8e:3f:58:31:cd:29:9b:6c:61:26:02:c2:85: 08:95:51:bc:67:30:e8:7d:48:64:95:e2:83:4c:d6: 3a:c4:0d:2c:5a:fe:cb:de:08:08:28:93:3f:e2:5a: 0d:b2:9a:35:df:36:83:b8:e1:0a:b5:81:f1:90:2b: 3c:1f:14:75:9b:81:b0:89:bb:91:36:69:60:fc:9e: 50:37:a0:be:7e:bb:16:a3:dc:3c:d3:f8:40:3a:e0: 82:04:cf:c8:7b:f8:5c:11:21:c2:29:8f:21:99:e3: 58:6f:9c:8c:e6:32:5c:8d:27:8e:e5:3b:9b:e0:21: a7:e9:2a:cb:f8:38:f0:e5:01:ca:c9:34:32:ee:c8: 2b:bb:e6:dd:bf:d0:21:e8:67:4b:1a:df:28:43:ec: f1:06:2f:64:99:6c:70:85:27:b6:f1:52:55:d6:66: 5f:21:82:7e:25:33:01:f4:cb:0c:a9:38:ab:57:43: e1:6c:6c:f9:42:8f:9c:31:43:a9:f0:a1:70:07:0c: 11:80:15:f4:00:b0:dd:95:2f:54:23:78:3f:23:fd: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0A:64:DB:93:8E:1F:2C:7A:D9:A8:AC:72:DE:3D:AD:4D:E0:58:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl X509v3 Authority Key Identifier: keyid:8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:16:44:c0:48:62:5c:07:d1:5d:75:b7:f6:3f:64:8d:da:42: 75:17:75:cd:e7:38:63:30:4d:c7:9e:32:14:b5:ab:15:4b:a8: e7:65:eb:1b:89:36:9b:2a:5a:b1:8c:87:28:f3:ea:8e:8e:05: 89:35:58:ad:2b:a5:46:c6:59:8e:99:4e:40:9f:c5:97:ab:37: 42:48:f6:be:bc:ff:d0:e0:3f:9d:e2:ea:c0:3b:05:59:29:7c: d9:67:20:62:11:66:a3:9d:c2:11:66:96:a3:0a:82:b0:cf:8d: fa:cf:54:a5:54:0b:e6:2d:11:98:b0:f2:dc:71:77:0c:d3:97: 5a:af:1f:69:e5:49:1e:c5:47:ab:3d:bb:e7:cb:c8:58:57:c5: 26:12:d9:43:b0:40:3a:07:3a:16:3e:d7:5e:32:f3:88:dd:8a: 85:25:5f:29:7c:b2:97:c5:78:84:55:d4:c1:8f:1e:75:80:d5: 54:19:4b:fd:94:b7:32:ea:04:1b:ba:90:69:ee:1c:67:34:a5: 41:c5:9e:4f:a5:11:09:b7:c4:b4:58:ad:99:c9:b2:44:75:9b: 94:63:6c:ea:85:b0:49:b8:63:32:52:03:32:b2:78:9c:6c:a2: 12:11:12:0e:4a:5b:bd:47:10:76:14:f4:ca:11:3b:9c:25:de: d5:75:f0:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCyln3Zr3DUdwCPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMDBlYjgtYmM5My00ZThiLWFmYTktMDVlNjM1YjAy NzQ2MB4XDTI1MTEwNTE3MDIwOVoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MjQwMmZlNjEtNDM3OC00OWE2LTg3MmEtZDhiNzdmYWI5ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFhJLsW4g/H09WfmnasO/Y0T4rKvYIcF7yxH tAUbIsJ22TIs9szuYVo2AQzs0o4/WDHNKZtsYSYCwoUIlVG8ZzDofUhkleKDTNY6 xA0sWv7L3ggIKJM/4loNspo13zaDuOEKtYHxkCs8HxR1m4GwibuRNmlg/J5QN6C+ frsWo9w80/hAOuCCBM/Ie/hcESHCKY8hmeNYb5yM5jJcjSeO5Tub4CGn6SrL+Djw 5QHKyTQy7sgru+bdv9Ah6GdLGt8oQ+zxBi9kmWxwhSe28VJV1mZfIYJ+JTMB9MsM qTirV0PhbGz5Qo+cMUOp8KFwBwwRgBX0ALDdlS9UI3g/I/02NwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAoKZNuTjh8setmorHLePa1N4FhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNTIw MGViOC1iYzkzLTRlOGItYWZhOS0wNWU2MzViMDI3NDYvMjUyMDBlYjgtYmM5My00 ZThiLWFmYTktMDVlNjM1YjAyNzQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjUyMDBlYjgtYmM5My00ZThiLWFm YTktMDVlNjM1YjAyNzQ2LzI1MjAwZWI4LWJjOTMtNGU4Yi1hZmE5LTA1ZTYzNWIw Mjc0Ni5jcmwwHwYDVR0jBBgwFoAUjG/h29oHkwGh8VVZGhKz7Pm+HXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNTIwMGViOC1iYzkzLTRlOGItYWZhOS0wNWU2 MzViMDI3NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQFkTASGJcB9Fddbf2P2SN 2kJ1F3XN5zhjME3HnjIUtasVS6jnZesbiTabKlqxjIco8+qOjgWJNVitK6VGxlmO mU5An8WXqzdCSPa+vP/Q4D+d4urAOwVZKXzZZyBiEWajncIRZpajCoKwz436z1Sl VAvmLRGYsPLccXcM05darx9p5UkexUerPbvny8hYV8UmEtlDsEA6BzoWPtdeMvOI 3YqFJV8pfLKXxXiEVdTBjx51gNVUGUv9lLcy6gQbupBp7hxnNKVBxZ5PpREJt8S0 WK2ZybJEdZuUY2zqhbBJuGMyUgMysnicbKISERIOSlu9RxB2FPTKETucJd7VdfAu -----END CERTIFICATE-----Generated at Thu Nov 6 06:09:52 2025 by rpki-client