$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft File: 4b2ad884-5960-46cd-bf60-910c222c8cfc.mft (raw, json) Hash identifier: FcWFw6cqo4Fo3B2ho/JpNouBIX8ckm9PyfUsV8vpnzY= Subject key identifier: BD:10:25:24:D9:A9:37:28:51:7D:C4:C2:D0:7D:0D:77:33:31:BF:55 Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Certificate serial: 010D0C9F4328584BC01C64EE89B8268B24CBB080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft Manifest number: 010D0C9F43285843229417832873A3606DB2BF09 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 4b2ad884-5960-46cd-bf60-910c222c8cfc.crl (hash: fqBIVA1UWfkwGMgCK0vfJhFMr1i3Nhxxc6pX3y/nTCs=) 2: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (hash: A6tWyS+UzeEpoLNgovejERZeakktahvzDv6DdowdiQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:ee:89:b8:26:8b:24:cb:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=d7cdfc28-6bd3-4416-9e01-be31727f675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cf:ae:0f:ae:1c:69:53:d9:80:21:d8:4b:84: 31:a7:d7:0b:45:48:e9:0d:ea:ec:85:2f:84:66:1a: 8b:b0:1f:e5:9c:96:f3:88:ce:f2:34:b4:1f:26:fd: b7:3d:3f:b2:bc:70:3a:2c:b0:80:b4:a7:f9:95:65: 04:72:7f:c9:16:08:a4:7f:bd:f8:d0:a5:c9:e7:bf: 9b:dd:e1:ba:94:c6:61:2f:46:4c:65:9c:b1:27:6b: da:bc:b9:bb:78:b4:23:f2:df:f0:a9:7c:3d:f2:a1: e9:b1:1b:b5:a6:1c:c1:0b:7c:68:a0:ab:1a:69:e3: 5e:5c:19:c1:ea:36:b9:d5:84:e1:d7:be:8f:02:be: 6b:47:ac:12:b3:b1:53:ab:18:99:2d:b8:5d:42:a8: 1c:f1:10:85:f9:d6:7e:1a:c2:4f:a0:cc:58:e8:18: 30:13:f9:df:0e:18:19:30:a7:77:36:ea:63:76:09: 79:1b:ac:51:61:47:3a:a3:98:fc:45:8e:59:26:49: 00:e5:ab:7f:a6:7b:5a:db:03:f8:57:75:19:1b:e7: 60:a7:12:55:c6:1e:58:71:c1:08:52:66:75:ae:c2: 28:e4:bc:9c:91:d3:8d:eb:9e:8c:57:86:b7:14:53: 46:59:85:f8:9a:f8:61:88:85:7c:ad:d6:51:16:16: c7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:10:25:24:D9:A9:37:28:51:7D:C4:C2:D0:7D:0D:77:33:31:BF:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl X509v3 Authority Key Identifier: keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:26:53:92:4e:2d:b4:c7:74:a5:31:7d:43:5d:53:26:93:fa: ac:c0:44:67:a1:26:77:9b:f5:54:d1:f3:11:4f:44:31:9d:42: a3:7d:6e:e2:c5:3f:2f:3e:f2:74:d3:b7:9d:f7:95:70:ec:eb: aa:68:73:49:cb:2a:de:7f:69:e6:df:26:2b:7c:fb:18:5e:ac: 5d:7d:6e:5f:1b:88:25:48:34:dd:82:41:da:f2:62:8b:f3:01: d0:3e:2f:ba:c2:5d:b3:a9:d9:04:42:02:0e:93:69:3f:1e:d8: f8:fd:9e:ff:73:42:e2:fc:7a:db:49:99:42:8e:01:26:29:64: 66:ad:85:e0:51:ea:6f:5c:bc:7b:cf:69:49:52:d7:9f:b4:c3: 8b:d4:48:81:5e:a5:b5:78:1a:03:48:14:2d:45:75:fa:2d:3b: ea:96:51:53:33:d1:0b:9b:80:04:d0:ad:11:8c:78:29:87:22: 48:d6:81:db:b5:bb:40:58:2e:7c:58:1b:a8:80:f6:29:bc:cd: 6d:61:51:1d:00:a1:70:4a:5c:9e:38:ef:72:f9:17:7e:23:bc: eb:ba:6f:3b:af:71:db:e6:1b:07:b0:e1:ca:6a:f8:e1:cb:52: 7e:a6:c6:8d:6a:56:dc:58:9c:24:ff:65:d5:3d:55:5a:e5:4d: 65:43:52:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGTuibgmiyTLsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4 Y2ZjMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZDdjZGZjMjgtNmJkMy00NDE2LTllMDEtYmUzMTcyN2Y2NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs+uD64caVPZgCHYS4Qxp9cLRUjpDershS+E ZhqLsB/lnJbziM7yNLQfJv23PT+yvHA6LLCAtKf5lWUEcn/JFgikf7340KXJ57+b 3eG6lMZhL0ZMZZyxJ2vavLm7eLQj8t/wqXw98qHpsRu1phzBC3xooKsaaeNeXBnB 6ja51YTh176PAr5rR6wSs7FTqxiZLbhdQqgc8RCF+dZ+GsJPoMxY6BgwE/nfDhgZ MKd3Nupjdgl5G6xRYUc6o5j8RY5ZJkkA5at/pnta2wP4V3UZG+dgpxJVxh5YccEI UmZ1rsIo5LyckdON656MV4a3FFNGWYX4mvhhiIV8rdZRFhbHbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL0QJSTZqTcoUX3EwtB9DXczMb9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvNGIyYWQ4ODQtNTk2MC00 NmNkLWJmNjAtOTEwYzIyMmM4Y2ZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj MjIyYzhjZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnJlOSTi20x3SlMX1DXVMm k/qswERnoSZ3m/VU0fMRT0QxnUKjfW7ixT8vPvJ007ed95Vw7OuqaHNJyyref2nm 3yYrfPsYXqxdfW5fG4glSDTdgkHa8mKL8wHQPi+6wl2zqdkEQgIOk2k/Htj4/Z7/ c0Li/HrbSZlCjgEmKWRmrYXgUepvXLx7z2lJUteftMOL1EiBXqW1eBoDSBQtRXX6 LTvqllFTM9ELm4AE0K0RjHgphyJI1oHbtbtAWC58WBuogPYpvM1tYVEdAKFwSlye OO9y+Rd+I7zrum87r3Hb5hsHsOHKavjhy1J+psaNalbcWJwk/2XVPVVa5U1lQ1Lc -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:26 2025 by rpki-client