$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft File: 530ba529-ac94-44aa-8a24-334da5fccb1e.mft (raw, json) Hash identifier: eXePSMsKgzgZrFi8U4FIL0IkjnKjaNXTufEA8RmtOcE= Subject key identifier: 1D:99:74:52:3D:4E:C7:84:F2:EA:C4:4B:6B:C9:65:90:A2:CF:36:0E Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e Certificate serial: 010D0C9F4328584BC093820F030C918382116200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft Manifest number: 010D0C9F4328584073A82BC8BDDAA84A87B136EB Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (hash: cBJGJztFHPBK75L6FgAe3ke2P3ZUi73r2dT8CZdlka0=) 2: 530ba529-ac94-44aa-8a24-334da5fccb1e.crl (hash: wG8Dh0PspBH025RIYc+7zQkWRaAGYHbscSkXURSABUA=) 3: 632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa (hash: XAHtTrP1EBVSb1ZJeoiW7OP9wNABrqsHr0NQFLHvWhA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:82:0f:03:0c:91:83:82:11:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=2a1385e9-8f10-42bb-8893-82a20b9a0aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:7b:50:73:1e:b9:4c:19:f3:a1:06:91:e0: 3d:dd:7b:3b:f8:f9:81:53:9a:36:18:e8:54:0b:29: cb:e9:bb:96:f1:1e:4a:7c:00:32:b2:71:34:5b:0e: 6c:a4:a0:b0:a1:c5:f7:b9:90:8a:53:7d:03:07:7c: e2:3d:43:13:45:a2:36:4f:a5:0a:a9:78:6a:ea:42: fc:8b:30:49:67:8a:c6:bb:fb:e2:cd:fb:75:92:fc: 4c:9b:47:e4:e1:23:d4:ad:e0:c7:4c:87:86:b1:af: 61:b5:2c:29:0c:f7:81:9d:71:89:67:38:4f:93:26: 4c:2c:f3:52:c0:52:08:5e:6b:59:a1:ee:80:25:ca: 88:b9:18:53:d3:d3:64:3d:fa:1d:7e:eb:82:86:9b: 84:a9:a7:c6:67:78:5f:7f:e5:79:12:fd:e1:da:fd: 25:c8:1c:2d:22:34:6f:a3:4c:10:fe:9e:8e:d5:9c: 32:53:29:40:70:45:25:00:0b:01:98:ec:34:97:b8: fb:00:1c:80:dc:97:a7:56:c1:b7:b0:23:76:46:c4: 3c:f7:89:db:a9:72:bd:f8:c6:4d:03:fc:ff:dd:9f: 90:78:38:2c:39:6e:8b:33:32:20:69:a2:ec:15:47: 88:97:8c:0c:72:6b:33:ba:72:b3:90:b8:17:7f:8e: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:99:74:52:3D:4E:C7:84:F2:EA:C4:4B:6B:C9:65:90:A2:CF:36:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl X509v3 Authority Key Identifier: keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a2:64:59:a1:cd:17:6e:f6:a6:64:75:af:82:0f:9e:ce:c5: 89:d2:70:38:52:b4:1d:f0:1d:7a:80:ef:93:f4:27:41:89:e7: 70:f1:17:36:b9:83:28:f3:2a:1e:a4:fc:96:e0:46:c1:da:02: 7e:d8:30:e9:78:73:5d:59:cc:41:2d:dc:27:58:81:65:fc:04: 76:82:7a:5d:70:f0:88:4e:0b:8a:e7:19:75:5d:eb:af:bf:df: da:13:4c:eb:0b:4d:9a:c1:40:04:1a:48:06:b2:47:ae:53:0b: 47:fa:bd:6a:16:8f:64:6b:ef:10:24:01:e8:6b:a4:51:7d:4c: a4:1d:3f:58:8c:07:4d:af:22:6c:a2:ed:27:28:8c:2a:d8:40: 8c:18:70:eb:40:3b:fb:14:43:0f:81:a9:bd:1f:5c:b7:cc:fa: 46:ad:85:13:37:a8:c5:ff:0b:f6:53:18:50:21:75:30:b9:12: 28:18:38:de:12:c4:ee:0f:74:fb:e0:b4:57:4b:ad:6c:9a:af: 74:f5:6e:ca:af:c9:1c:a8:13:9f:6c:b0:55:fa:78:9e:39:3d: 32:d1:c8:28:91:88:61:0f:3e:fe:fe:9c:98:e1:f5:f6:fa:21: 19:7c:c4:12:bb:b5:ea:29:a5:91:45:8a:54:8c:db:da:30:9f: 41:de:ba:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4IPAwyRg4IRYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj YjFlMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk MmExMzg1ZTktOGYxMC00MmJiLTg4OTMtODJhMjBiOWEwYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ57UHMeuUwZ86EGkeA93Xs7+PmBU5o2GOhU CynL6buW8R5KfAAysnE0Ww5spKCwocX3uZCKU30DB3ziPUMTRaI2T6UKqXhq6kL8 izBJZ4rGu/vizft1kvxMm0fk4SPUreDHTIeGsa9htSwpDPeBnXGJZzhPkyZMLPNS wFIIXmtZoe6AJcqIuRhT09NkPfodfuuChpuEqafGZ3hff+V5Ev3h2v0lyBwtIjRv o0wQ/p6O1ZwyUylAcEUlAAsBmOw0l7j7AByA3JenVsG3sCN2RsQ894nbqXK9+MZN A/z/3Z+QeDgsOW6LMzIgaaLsFUeIl4wMcmszunKzkLgXf47vQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB2ZdFI9TseE8urES2vJZZCizzYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvNTMwYmE1MjktYWM5NC00 NGFhLThhMjQtMzM0ZGE1ZmNjYjFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk YTVmY2NiMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgomRZoc0XbvamZHWvgg+e zsWJ0nA4UrQd8B16gO+T9CdBiedw8Rc2uYMo8yoepPyW4EbB2gJ+2DDpeHNdWcxB LdwnWIFl/AR2gnpdcPCITguK5xl1Xeuvv9/aE0zrC02awUAEGkgGskeuUwtH+r1q Fo9ka+8QJAHoa6RRfUykHT9YjAdNryJsou0nKIwq2ECMGHDrQDv7FEMPgam9H1y3 zPpGrYUTN6jF/wv2UxhQIXUwuRIoGDjeEsTuD3T74LRXS61smq909W7Kr8kcqBOf bLBV+nieOT0y0cgokYhhDz7+/pyY4fX2+iEZfMQSu7XqKaWRRYpUjNvaMJ9B3roA -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:41 2025 by rpki-client