$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: yDWj7jRZ/wDDIFNqXXmVl9RyPQa9A5M1NpYf3ZAJ3+U= Subject key identifier: 11:D8:B7:C1:DC:CB:8E:34:A1:10:10:13:E4:2A:6E:77:02:C2:4B:DA Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584BBF887E0F3034CDA882D60A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11BE3 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: 2We7IJCneOXj5JL9p8TCYLUbFpiXjNTcoP/GU1j1W/Y=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: YD5/Ui2o6hAJTY/6SrJqOPZR7CPY+hVM3s3xzEX8JtI=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: QPdNWr3FiAhyNmcaU87JL/8SnojxpmKL3ltTU+tJmoI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7e:0f:30:34:cd:a8:82:d6:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=867dc42e-eae6-4360-b0cd-93be691728ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:7b:6f:73:ae:01:23:b4:ff:12:f4:7c:ed: 42:0b:67:44:79:bf:c6:d3:2b:94:5b:bb:0c:30:02: c7:48:58:39:59:78:c8:aa:34:f2:33:35:a7:34:15: e1:05:36:f2:d2:e8:46:1a:47:fe:e3:87:46:a1:6f: 55:dd:2f:5c:86:9d:3d:4b:2e:32:41:f6:d5:55:f8: 8f:fb:ab:9e:c0:d4:4e:db:57:d9:44:60:55:95:63: fa:83:fa:3d:78:8b:8b:cb:41:81:e8:ea:ff:1a:71: a6:46:87:e9:70:86:9a:dc:ca:09:e6:87:9c:81:f7: 79:6f:a5:f0:38:e8:d8:47:f3:49:2b:fc:7d:2c:c4: 0f:c4:03:8f:d8:d8:dc:75:ab:79:38:28:c0:35:10: 97:dc:bc:5c:eb:13:57:36:36:36:f0:8e:4d:ab:ff: d1:b6:72:9e:c9:d5:2b:e6:6d:d5:7a:85:50:b8:87: 95:05:be:78:33:3b:51:36:98:6b:77:3a:d6:a8:f5: 14:8e:f7:00:63:5a:d4:c1:c3:0d:f7:ab:7a:98:6e: df:67:52:20:66:62:41:db:e8:f7:99:3f:2d:4c:83: 27:cb:43:55:05:73:93:0d:da:5d:94:53:2b:51:a0: 8d:ee:5d:85:6a:20:a0:12:ca:97:68:f4:80:3b:42: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D8:B7:C1:DC:CB:8E:34:A1:10:10:13:E4:2A:6E:77:02:C2:4B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c5:2d:1e:e2:7f:f4:55:af:e0:50:a3:78:ec:5b:0b:5b:85: fd:dc:ee:46:b7:62:3c:d0:8b:52:a0:34:a6:c6:aa:e5:3b:ef: a3:18:38:d7:02:5a:48:c0:2a:a5:a3:9e:c5:03:3f:13:73:ca: c3:32:3e:b5:9e:67:9a:09:e5:37:d7:7d:07:0e:1b:5b:74:e8: 03:d6:1f:34:91:ba:4b:18:10:45:14:8f:26:4f:e1:9e:81:de: 68:70:e6:5a:d8:0f:27:2b:24:08:d9:22:0c:3c:04:be:a3:ff: a7:91:fe:75:c7:6f:2f:cf:12:47:d6:df:62:6a:e0:c4:76:cc: 9e:df:b7:5a:28:f2:42:0b:17:32:81:d5:c9:99:f5:ab:fe:7c: 32:13:67:fe:1b:68:76:5d:36:97:ab:e7:7c:ed:09:62:86:ae: 1f:28:a8:03:53:0f:b6:86:ac:37:f3:c5:81:6a:fb:e8:9e:03: 60:7e:20:92:45:d7:a4:03:a7:fb:fb:e8:b0:40:86:5e:69:a0: 43:2f:b7:23:2e:9b:ff:dc:2f:f7:f0:e7:af:7e:b4:77:8d:11: 54:79:c8:66:d9:65:fc:e2:4b:c1:6f:fe:ee:af:b7:60:42:7d: d8:8f:e2:30:3e:41:44:d3:18:10:dc:b3:6e:5e:63:fa:a1:ab: af:6d:07:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH4PMDTNqILWCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk ODY3ZGM0MmUtZWFlNi00MzYwLWIwY2QtOTNiZTY5MTcyOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+F7b3OuASO0/xL0fO1CC2dEeb/G0yuUW7sM MALHSFg5WXjIqjTyMzWnNBXhBTby0uhGGkf+44dGoW9V3S9chp09Sy4yQfbVVfiP +6uewNRO21fZRGBVlWP6g/o9eIuLy0GB6Or/GnGmRofpcIaa3MoJ5oecgfd5b6Xw OOjYR/NJK/x9LMQPxAOP2Njcdat5OCjANRCX3Lxc6xNXNjY28I5Nq//RtnKeydUr 5m3VeoVQuIeVBb54MztRNphrdzrWqPUUjvcAY1rUwcMN96t6mG7fZ1IgZmJB2+j3 mT8tTIMny0NVBXOTDdpdlFMrUaCN7l2FaiCgEsqXaPSAO0LXnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBHYt8Hcy440oRAQE+QqbncCwkvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMxS0e4n/0Va/gUKN47FsL W4X93O5Gt2I80ItSoDSmxqrlO++jGDjXAlpIwCqlo57FAz8Tc8rDMj61nmeaCeU3 130HDhtbdOgD1h80kbpLGBBFFI8mT+Gegd5ocOZa2A8nKyQI2SIMPAS+o/+nkf51 x28vzxJH1t9iauDEdsye37daKPJCCxcygdXJmfWr/nwyE2f+G2h2XTaXq+d87Qli hq4fKKgDUw+2hqw388WBavvongNgfiCSRdekA6f7++iwQIZeaaBDL7cjLpv/3C/3 8OevfrR3jRFUechm2WX84kvBb/7ur7dgQn3Yj+IwPkFE0xgQ3LNuXmP6oauvbQeK -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:56 2025 by rpki-client