$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.mft File: 4407b653-04bb-4149-bf8f-aec8d907332c.mft (raw, json) Hash identifier: n4+JXU8J4XL239cNwLBDhjYqA+FZY/TgKVf8JTFXF+Y= Subject key identifier: 5B:79:C5:F6:01:3E:77:A0:F7:EE:80:DC:80:56:60:05:29:D9:03:34 Authority key identifier: EC:80:EF:6D:BE:94:94:A1:89:75:76:D1:65:EE:F4:92:94:36:10:4F Certificate issuer: /CN=4407b653-04bb-4149-bf8f-aec8d907332c Certificate serial: 010D0C9F4328584BBF4BF1C46800A29A748DF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.mft Manifest number: 010D0C9F4328584073A850308CA6926EAB881BA4 Signing time: Tue 04 Nov 2025 11:00:03 +0000 Manifest this update: Tue 04 Nov 2025 11:00:03 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: 4407b653-04bb-4149-bf8f-aec8d907332c.crl (hash: 8rYySIEyyJ17EXBWz0P9jfc5a48PJBG58kZV+1N4GbM=) 2: 47ce1956-0473-3206-9251-67a49ef99b6b.roa (hash: WuTYorzTAq254Rr/p6Csnu6B7VrN3AP/ZyicCbnedNc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:4b:f1:c4:68:00:a2:9a:74:8d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4407b653-04bb-4149-bf8f-aec8d907332c Validity Not Before: Nov 4 11:00:03 2025 GMT Not After : Nov 6 11:00:00 2025 GMT Subject: CN=d8cdc1d5-10de-49c3-9848-69b23ee13f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:08:f4:be:60:7f:44:c0:97:d2:c2:cb:0e: c3:fd:cf:25:1e:9e:5f:4b:42:d5:cf:85:0d:bb:ed: a5:a3:32:3a:f2:8d:ae:c8:ee:9b:d7:ae:90:0b:bc: 2c:96:a9:6f:14:55:71:c3:f7:90:61:60:5f:6f:27: 79:22:20:3f:ca:46:2f:b9:0e:85:42:af:9f:bb:a8: cb:8a:41:70:fb:2a:08:e2:a3:32:8d:7b:71:b7:f7: 54:4c:db:0e:00:84:2e:1f:6f:5f:7e:63:ab:9d:ee: ff:0b:64:d0:5b:97:9c:8b:20:33:d8:e0:10:69:d1: 0f:4a:d7:7f:04:23:73:fb:a6:a5:fa:f3:db:44:62: 5c:fd:a1:44:24:f2:bb:bc:0c:d9:61:c7:8c:76:6c: 25:f4:de:fa:ad:b4:dc:2f:89:0f:f2:46:d8:d0:bd: c4:d8:66:48:c0:9a:c2:3b:e6:1b:cf:bf:47:b8:b3: 34:ea:d9:86:37:e6:66:d7:82:4c:95:c3:44:0d:ad: 70:e5:7c:70:80:32:50:e5:94:e6:0e:f9:ad:80:4c: c1:ac:47:3b:44:7d:07:fd:13:1c:88:84:bf:69:e7: 34:0d:e2:a7:bb:28:6d:1a:d1:bf:80:5d:d4:c4:51: 49:fd:41:ae:b7:82:b8:ff:34:51:f9:db:76:51:39: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:79:C5:F6:01:3E:77:A0:F7:EE:80:DC:80:56:60:05:29:D9:03:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c/4407b653-04bb-4149-bf8f-aec8d907332c.crl X509v3 Authority Key Identifier: keyid:EC:80:EF:6D:BE:94:94:A1:89:75:76:D1:65:EE:F4:92:94:36:10:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4407b653-04bb-4149-bf8f-aec8d907332c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1a:a9:23:79:ac:ca:79:d5:2c:0d:ca:8b:5b:d9:57:4c:16: 5a:20:d9:46:01:4d:28:d4:4f:c0:f8:7b:50:bf:da:70:fe:3a: 3c:2a:17:ae:88:a0:54:26:77:29:14:d5:18:3f:2a:95:12:a1: 0f:29:dc:82:a2:a9:26:b4:05:05:e7:bb:57:d7:4a:61:06:0e: 81:8a:f2:67:fa:12:3f:fd:c9:2a:9b:d1:38:ef:07:88:64:b6: c9:e7:76:0c:f0:fe:de:88:8b:95:01:9d:b2:85:7a:8a:e0:23: a9:b4:b2:f5:25:49:af:cc:f2:4c:1b:f3:91:fc:e4:82:6c:f7: 5a:53:7c:91:94:a8:76:d6:cd:3e:60:e6:af:26:6c:69:01:16: 8a:c3:e8:d7:7d:ba:e8:f4:7f:ec:17:06:50:8d:69:ca:b2:5c: c8:d1:8a:1f:ec:f1:a9:7c:46:5a:12:4d:24:d3:6a:00:94:95: 0f:5c:07:f1:f4:8d:1e:5b:79:4d:db:56:7c:b7:8b:4d:2f:ce: 57:3a:bd:06:63:1b:6e:9a:06:b8:2b:10:47:b6:24:56:a3:e2: d1:d9:da:98:86:57:c5:84:0e:ad:23:e0:ab:7e:29:50:cf:28: 12:05:1b:a8:b6:50:49:4d:ae:04:c2:3c:25:5e:40:51:5b:f4: 02:a1:90:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/S/HEaACimnSN9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQwN2I2NTMtMDRiYi00MTQ5LWJmOGYtYWVjOGQ5MDcz MzJjMB4XDTI1MTEwNDExMDAwM1oXDTI1MTEwNjExMDAwMFowLzEtMCsGA1UEAxMk ZDhjZGMxZDUtMTBkZS00OWMzLTk4NDgtNjliMjNlZTEzZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO8I9L5gf0TAl9LCyw7D/c8lHp5fS0LVz4UN u+2lozI68o2uyO6b166QC7wslqlvFFVxw/eQYWBfbyd5IiA/ykYvuQ6FQq+fu6jL ikFw+yoI4qMyjXtxt/dUTNsOAIQuH29ffmOrne7/C2TQW5eciyAz2OAQadEPStd/ BCNz+6al+vPbRGJc/aFEJPK7vAzZYceMdmwl9N76rbTcL4kP8kbY0L3E2GZIwJrC O+Ybz79HuLM06tmGN+Zm14JMlcNEDa1w5XxwgDJQ5ZTmDvmtgEzBrEc7RH0H/RMc iIS/aec0DeKnuyhtGtG/gF3UxFFJ/UGut4K4/zRR+dt2UTlhEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFt5xfYBPneg9+6A3IBWYAUp2QM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDA3 YjY1My0wNGJiLTQxNDktYmY4Zi1hZWM4ZDkwNzMzMmMvNDQwN2I2NTMtMDRiYi00 MTQ5LWJmOGYtYWVjOGQ5MDczMzJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQwN2I2NTMtMDRiYi00MTQ5LWJm OGYtYWVjOGQ5MDczMzJjLzQ0MDdiNjUzLTA0YmItNDE0OS1iZjhmLWFlYzhkOTA3 MzMyYy5jcmwwHwYDVR0jBBgwFoAU7IDvbb6UlKGJdXbRZe70kpQ2EE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDA3YjY1My0wNGJiLTQxNDktYmY4Zi1hZWM4 ZDkwNzMzMmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATGqkjeazKedUsDcqLW9lX TBZaINlGAU0o1E/A+HtQv9pw/jo8KheuiKBUJncpFNUYPyqVEqEPKdyCoqkmtAUF 57tX10phBg6BivJn+hI//ckqm9E47weIZLbJ53YM8P7eiIuVAZ2yhXqK4COptLL1 JUmvzPJMG/OR/OSCbPdaU3yRlKh21s0+YOavJmxpARaKw+jXfbro9H/sFwZQjWnK slzI0Yof7PGpfEZaEk0k02oAlJUPXAfx9I0eW3lN21Z8t4tNL85XOr0GYxtumga4 KxBHtiRWo+LR2dqYhlfFhA6tI+CrfilQzygSBRuotlBJTa4EwjwlXkBRW/QCoZAI -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:00 2025 by rpki-client