$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft (raw, json) Hash identifier: rfxRBHdi4qKIBbIkIr1iqkQeQJm2X7S6IsJS+LRUj8c= Subject key identifier: 28:EA:B8:25:10:0D:6A:CE:EA:37:67:F6:87:3F:A0:CC:B2:35:D0:01 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584BC03A2AAC042D2F0D28559C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft Manifest number: 010D0C9F43285846F97A84043EAD2BBBC382CB20 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 14a619d0-4751-3dd0-8357-da775049c7ff.roa (hash: 2EO/iiaMqNbBSRv6Huu5RS9UxTTwroYawZhr+Aaly+M=) 2: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl (hash: fjL7qOrcu2oZTWjgsL/s3cfcPYrdd8bq7kw3gFxOR6Y=) 3: 4a2880a2-399c-391a-b0ff-17a565b54dce.roa (hash: rvJi7XQ1sP3oCLeQeuCune9CxGSH9u2kJqjhx6SMjBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2a:ac:04:2d:2f:0d:28:55:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=21988460-f134-4602-9a00-14c7d9c62ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:78:75:b8:d3:e0:a2:0f:04:3b:cc:fe:4f: 29:5b:2f:13:46:ff:cf:36:76:7c:6a:54:48:11:7d: 37:33:4d:07:55:05:c1:63:87:a6:bf:33:15:7a:ba: c2:55:ec:88:47:ad:68:7a:dd:a6:3b:50:26:de:ce: 36:f8:5e:5e:b2:28:3a:91:85:93:a8:ba:88:5a:8b: ff:f8:25:0a:0b:b1:ad:ab:e2:9f:b5:80:46:d4:f4: f1:d0:02:96:92:78:01:80:c4:ce:55:33:98:d2:5b: 9f:c2:94:8c:b8:70:07:41:ef:2e:2b:46:5b:f8:d8: 97:bf:a2:35:c4:9b:8b:b3:d5:ba:0b:28:e5:44:c4: 64:8f:a8:15:0e:36:35:10:78:19:3c:3b:37:ff:24: db:6d:60:d4:84:bd:33:e1:f9:70:6c:02:6e:f5:7f: 4e:ad:c5:dd:a1:82:6e:07:4b:98:6d:d1:22:21:67: 19:dc:eb:71:10:da:73:d4:f2:91:09:39:93:f6:ea: 56:ed:d9:be:ff:43:07:75:23:24:a1:e6:81:63:4b: e6:88:2c:96:ad:e1:3e:24:b9:19:40:2b:54:52:a3: 5b:7c:f4:79:5c:a8:e2:23:1d:79:22:92:af:24:f2: 78:ea:e8:55:d4:ef:8d:a6:77:07:8d:7e:c7:d6:40: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:B8:25:10:0D:6A:CE:EA:37:67:F6:87:3F:A0:CC:B2:35:D0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:cb:22:73:15:ba:cf:36:79:20:d9:ad:d4:a4:13:b9:9d:20: c4:e5:b0:a8:09:8c:2d:42:cf:8b:05:4a:44:20:38:64:3f:b5: 92:db:b0:5c:48:6a:b3:37:02:46:91:74:dd:b1:64:65:32:c6: 5a:a4:24:3b:a5:77:b4:83:b5:3f:70:aa:18:f8:f5:d5:8e:8a: 7f:2f:c2:61:fd:d9:aa:e7:dc:42:e5:60:0d:5d:7f:dc:7a:63: ca:7e:d9:66:ac:74:5e:69:aa:6b:b6:15:ad:df:61:16:8d:9f: 1f:95:85:20:96:2f:eb:2b:8b:ba:5b:b3:df:6a:89:b4:12:3f: dc:d4:c5:fc:2e:1b:85:3f:8e:ec:c4:b8:d8:a4:3c:03:68:aa: fc:0b:23:97:a1:c1:45:ef:0a:3a:6b:22:f5:62:5c:65:fa:b4: 2b:05:2d:64:22:d2:bb:19:c4:46:e6:6e:6d:90:a7:c3:45:f2: 80:6a:b0:c8:ab:da:ca:69:df:5e:1d:06:80:13:d3:35:0a:85: f7:00:ea:2f:f6:ce:8f:0f:83:c5:4d:c7:76:d8:79:81:52:18: f3:df:77:cf:43:87:cc:88:38:a5:2c:46:68:26:96:64:05:b8: 22:ef:f3:07:bb:b0:76:ae:69:36:3e:ed:65:81:51:c7:af:13: 02:bb:43:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOiqsBC0vDShVnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk MjE5ODg0NjAtZjEzNC00NjAyLTlhMDAtMTRjN2Q5YzYyYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmux4dbjT4KIPBDvM/k8pWy8TRv/PNnZ8alRI EX03M00HVQXBY4emvzMVerrCVeyIR61oet2mO1Am3s42+F5esig6kYWTqLqIWov/ +CUKC7Gtq+KftYBG1PTx0AKWkngBgMTOVTOY0lufwpSMuHAHQe8uK0Zb+NiXv6I1 xJuLs9W6CyjlRMRkj6gVDjY1EHgZPDs3/yTbbWDUhL0z4flwbAJu9X9OrcXdoYJu B0uYbdEiIWcZ3OtxENpz1PKRCTmT9upW7dm+/0MHdSMkoeaBY0vmiCyWreE+JLkZ QCtUUqNbfPR5XKjiIx15IpKvJPJ46uhV1O+NpncHjX7H1kDyBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCjquCUQDWrO6jdn9oc/oMyyNdABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvNDFlMzhkYTUtZGU0Zi00 MDBkLTgzYWItNjVlZTJlMmMyZDI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8yyJzFbrPNnkg2a3UpBO5 nSDE5bCoCYwtQs+LBUpEIDhkP7WS27BcSGqzNwJGkXTdsWRlMsZapCQ7pXe0g7U/ cKoY+PXVjop/L8Jh/dmq59xC5WANXX/cemPKftlmrHReaaprthWt32EWjZ8flYUg li/rK4u6W7Pfaom0Ej/c1MX8LhuFP47sxLjYpDwDaKr8CyOXocFF7wo6ayL1Ylxl +rQrBS1kItK7GcRG5m5tkKfDRfKAarDIq9rKad9eHQaAE9M1CoX3AOov9s6PD4PF Tcd22HmBUhjz33fPQ4fMiDilLEZoJpZkBbgi7/MHu7B2rmk2Pu1lgVHHrxMCu0N+ -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:45 2025 by rpki-client