$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft File: 57da1f4a-da7b-44cf-8427-a74615d9a53e.mft (raw, json) Hash identifier: LMxgXeaKEpFVBWqWgEODcsrGd4Hyr3XAAW8iR0A76To= Subject key identifier: F5:F6:8A:13:B7:1C:64:13:5C:2E:2A:03:E0:22:26:4A:0D:27:11:F1 Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Certificate serial: 010D0C9F4328584BBF887DD8F304B6D00C14A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft Manifest number: 010D0C9F4328584394910AAE776369E15CAEBA80 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 57da1f4a-da7b-44cf-8427-a74615d9a53e.crl (hash: mhLyM8JF8z7eGJEQrZuPyxI7lDodLI6GvONoT9Pq1PI=) 2: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (hash: +8VLzaa8bhwmOPhmSm8aeu09Xc86xSGvfuhX6woazMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7d:d8:f3:04:b6:d0:0c:14:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=c397e425-3906-485c-ae73-a5d2344e0228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:75:76:2d:63:ad:2a:04:1a:f8:3f:a5:dc: 16:17:e6:5f:87:03:fb:4d:d5:8a:c8:be:45:66:63: 0c:6c:96:84:bf:72:69:32:4c:8d:b9:9e:61:e3:43: 12:54:c4:f3:0f:9b:d1:4a:f1:20:95:b7:40:3a:c2: 40:4a:97:c1:05:0a:cf:82:16:59:92:e0:74:7d:db: a3:30:8a:68:fa:44:d6:be:a7:09:84:d2:0a:eb:f5: f5:13:b1:07:92:20:bd:0b:82:23:aa:ef:ea:1f:64: 20:db:69:ff:4c:1b:77:09:7d:ad:01:a7:f8:ad:5f: d1:44:c7:3c:db:71:c9:08:6b:8a:7e:21:1b:1e:9a: bd:8e:b7:26:0e:ac:2d:32:12:7c:bc:f7:96:19:eb: fb:db:16:5a:b8:13:37:27:1f:d5:86:42:5e:c4:f6: d6:36:67:a7:47:4b:94:fd:2d:8c:1b:2c:95:36:e8: b5:83:b3:36:bd:31:26:06:d4:ec:53:1f:01:74:27: 74:97:b1:3e:4e:f1:0c:24:f0:75:1f:20:05:87:ec: 5b:cc:a7:45:10:fb:7b:cb:cd:2b:23:e9:65:3f:97: 41:b0:78:20:21:65:fb:ee:bd:41:ba:ee:00:6a:bc: 57:3e:29:75:cb:91:0f:58:02:55:cd:58:62:e7:23: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F6:8A:13:B7:1C:64:13:5C:2E:2A:03:E0:22:26:4A:0D:27:11:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl X509v3 Authority Key Identifier: keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c3:75:ab:ff:d1:60:b0:47:bf:7a:67:9c:f9:16:ff:26:53: 94:ff:09:24:dc:54:31:69:18:79:f1:f4:8e:81:29:cc:e5:73: c9:c7:70:34:34:cf:d6:27:fd:3c:03:b8:00:d2:ea:62:91:3c: 93:52:b9:73:96:a6:72:e9:b9:00:16:33:f9:b6:9e:c2:04:f2: da:23:0e:a8:3c:ed:3e:14:0e:e3:b2:ee:d7:6a:f8:17:78:b6: 6e:15:4f:fb:6c:9a:cf:1f:cb:3d:9e:93:e2:ba:7b:23:3b:6a: 1f:4d:dd:27:8a:59:60:ca:5f:36:73:ca:47:16:73:36:74:32: 73:a7:7d:3c:6d:e7:5c:0b:de:75:f4:83:05:99:83:13:cf:b8: 54:ef:67:48:97:0d:83:5d:9d:60:62:4d:8b:76:7f:0a:08:79: 14:56:ea:6f:c1:1f:f7:09:98:3d:e5:b7:aa:6f:07:70:70:cb: 79:df:e0:ee:a1:e5:d4:d3:6e:47:19:81:bb:3b:f3:a5:bc:8c: ce:90:74:6e:67:a1:b0:87:ad:ee:b1:b9:9c:d6:d9:76:b5:cd: 12:34:30:92:5d:38:58:0b:ab:07:58:61:29:a7:52:65:72:6f: a7:21:ce:cf:69:7b:d5:83:91:a0:29:f4:ed:ed:ea:ae:61:38: de:e8:34:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH3Y8wS20AwUpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdkYTFmNGEtZGE3Yi00NGNmLTg0MjctYTc0NjE1ZDlh NTNlMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk YzM5N2U0MjUtMzkwNi00ODVjLWFlNzMtYTVkMjM0NGUwMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDp1di1jrSoEGvg/pdwWF+ZfhwP7TdWKyL5F ZmMMbJaEv3JpMkyNuZ5h40MSVMTzD5vRSvEglbdAOsJASpfBBQrPghZZkuB0fduj MIpo+kTWvqcJhNIK6/X1E7EHkiC9C4Ijqu/qH2Qg22n/TBt3CX2tAaf4rV/RRMc8 23HJCGuKfiEbHpq9jrcmDqwtMhJ8vPeWGev72xZauBM3Jx/VhkJexPbWNmenR0uU /S2MGyyVNui1g7M2vTEmBtTsUx8BdCd0l7E+TvEMJPB1HyAFh+xbzKdFEPt7y80r I+llP5dBsHggIWX77r1Buu4AarxXPil1y5EPWAJVzVhi5yNEFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPX2ihO3HGQTXC4qA+AiJkoNJxHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Rh MWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2MTVkOWE1M2UvNTdkYTFmNGEtZGE3Yi00 NGNmLTg0MjctYTc0NjE1ZDlhNTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdkYTFmNGEtZGE3Yi00NGNmLTg0 MjctYTc0NjE1ZDlhNTNlLzU3ZGExZjRhLWRhN2ItNDRjZi04NDI3LWE3NDYxNWQ5 YTUzZS5jcmwwHwYDVR0jBBgwFoAU3FkuqnL/ai5aXRbcKWR980gMKgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2RhMWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2 MTVkOWE1M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBw3Wr/9FgsEe/emec+Rb/ JlOU/wkk3FQxaRh58fSOgSnM5XPJx3A0NM/WJ/08A7gA0upikTyTUrlzlqZy6bkA FjP5tp7CBPLaIw6oPO0+FA7jsu7XavgXeLZuFU/7bJrPH8s9npPiunsjO2ofTd0n illgyl82c8pHFnM2dDJzp308bedcC9519IMFmYMTz7hU72dIlw2DXZ1gYk2Ldn8K CHkUVupvwR/3CZg95beqbwdwcMt53+DuoeXU025HGYG7O/OlvIzOkHRuZ6Gwh63u sbmc1tl2tc0SNDCSXThYC6sHWGEpp1Jlcm+nIc7PaXvVg5GgKfTt7equYTje6DQQ -----END CERTIFICATE-----Generated at Tue Nov 4 20:07:01 2025 by rpki-client