$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft File: 66cf51f2-af3c-4c05-a781-3b923f753475.mft (raw, json) Hash identifier: +L5XPoXjRr15M8mabSQpSupL4hPldovrnc6jP9LxTb0= Subject key identifier: D6:C0:25:B1:F5:1B:85:52:19:9E:AD:BF:99:6C:37:A2:82:B0:8F:97 Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F4328584BBFFEABC2722AC7BF09AF2D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft Manifest number: 010D0C9F4328584073A81AB5C49D6BF3C2F658BE Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 66cf51f2-af3c-4c05-a781-3b923f753475.crl (hash: 1d8V3A6kE05ds38Yq7FG4JQFbGai7LwSa3lcsnlDRM8=) 2: d2e9a628-bb73-378c-9508-2db3fb689656.roa (hash: /Lk03TOSVwS+K3isnsb7x3yvK5fwiN5g0lTdzrfIiM4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:ab:c2:72:2a:c7:bf:09:af:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=15e9bd90-310e-49fd-b845-4707243ab5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:2a:65:20:d3:d9:1d:89:f3:04:e0:a4:30: 5c:f2:a3:84:f2:30:0a:a8:30:47:e8:c4:e1:3a:65: 22:25:59:f6:2c:23:91:d6:28:c8:7d:4e:4f:f2:72: 79:f6:fe:96:cc:c7:e9:24:49:13:c9:e5:32:8b:72: 86:9e:1a:69:ed:c4:23:0c:c2:0c:7c:13:52:43:72: a2:c1:78:c3:c7:3e:a0:4b:e3:3e:cf:46:86:b5:80: 69:1b:e8:40:ac:21:93:78:3b:cd:0b:b3:f5:ee:0b: 52:c2:56:b5:11:4b:a7:28:02:17:87:77:4e:58:dd: 67:37:29:fb:93:58:18:c8:bb:9f:c0:ce:42:92:a1: 42:f5:22:4d:70:e0:f5:80:41:31:08:3b:49:30:b2: 3a:a3:59:d5:7d:b0:39:45:ab:58:a0:71:20:cd:76: ca:a4:39:72:60:8d:21:2b:99:05:b4:5e:1f:bb:eb: ea:e2:25:80:23:bc:ef:e5:75:9e:94:5c:0d:1c:fb: 2f:32:d8:c4:e4:44:06:2a:47:4b:4e:c1:d2:35:7b: 92:e6:56:cb:a1:96:6a:58:11:17:0c:41:b6:81:8c: f3:ee:96:b8:e3:47:f6:54:1c:7d:16:25:6f:a6:0f: 7d:ed:59:84:9e:88:70:81:43:d4:79:1a:28:27:7d: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:25:B1:F5:1B:85:52:19:9E:AD:BF:99:6C:37:A2:82:B0:8F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2e:53:17:44:34:c2:0a:2a:d3:5a:7c:ad:8d:f4:3f:fb:f9: a4:8e:be:e3:bd:e7:1a:c5:95:2a:a0:89:b1:1b:fe:ba:5e:a8: 00:c9:c0:ca:06:0f:3c:7a:a7:28:a5:29:29:e7:0c:99:42:13: 9d:42:65:81:6c:27:0b:82:e0:60:e1:8f:7e:80:32:03:e8:63: 69:d8:ac:53:24:e7:4f:90:6d:f4:b9:bb:11:8f:19:89:ca:32: 00:7b:63:9a:6d:a3:10:e6:4b:4c:10:7b:4c:d8:18:ec:d1:3c: 8d:f0:c9:72:af:30:25:06:31:0e:9a:f1:f6:81:88:26:f0:51: f2:c1:d0:a5:7d:41:22:87:d3:aa:9c:aa:88:5f:21:03:31:f6: 5a:fc:3e:3e:64:8f:90:b4:04:9c:26:73:0f:c4:04:91:1b:e5: 0e:1b:4c:69:e5:7a:ae:8a:54:d8:69:05:cc:aa:58:5b:06:00: 27:3e:07:77:cd:b4:ae:a7:ac:18:83:9e:fd:10:8b:fd:31:f2: f0:99:44:7e:bd:bf:c1:bf:72:26:bf:7e:55:27:2e:da:80:f9: 3d:7d:5b:2a:03:9b:bd:52:60:aa:c0:48:01:09:9a:02:25:6c: 19:67:5b:01:ca:2f:02:05:bb:2c:ff:ab:a1:fe:2f:19:87:7f: 2e:09:5e:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qvCcirHvwmvLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk MTVlOWJkOTAtMzEwZS00OWZkLWI4NDUtNDcwNzI0M2FiNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYAqZSDT2R2J8wTgpDBc8qOE8jAKqDBH6MTh OmUiJVn2LCOR1ijIfU5P8nJ59v6WzMfpJEkTyeUyi3KGnhpp7cQjDMIMfBNSQ3Ki wXjDxz6gS+M+z0aGtYBpG+hArCGTeDvNC7P17gtSwla1EUunKAIXh3dOWN1nNyn7 k1gYyLufwM5CkqFC9SJNcOD1gEExCDtJMLI6o1nVfbA5RatYoHEgzXbKpDlyYI0h K5kFtF4fu+vq4iWAI7zv5XWelFwNHPsvMtjE5EQGKkdLTsHSNXuS5lbLoZZqWBEX DEG2gYzz7pa440f2VBx9FiVvpg997VmEnohwgUPUeRooJ324HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNbAJbH1G4VSGZ6tv5lsN6KCsI+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvNjZjZjUxZjItYWYzYy00 YzA1LWE3ODEtM2I5MjNmNzUzNDc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKLlMXRDTCCirTWnytjfQ/ +/mkjr7jvecaxZUqoImxG/66XqgAycDKBg88eqcopSkp5wyZQhOdQmWBbCcLguBg 4Y9+gDID6GNp2KxTJOdPkG30ubsRjxmJyjIAe2OabaMQ5ktMEHtM2Bjs0TyN8Mly rzAlBjEOmvH2gYgm8FHywdClfUEih9OqnKqIXyEDMfZa/D4+ZI+QtAScJnMPxASR G+UOG0xp5XquilTYaQXMqlhbBgAnPgd3zbSup6wYg579EIv9MfLwmUR+vb/Bv3Im v35VJy7agPk9fVsqA5u9UmCqwEgBCZoCJWwZZ1sByi8CBbss/6uh/i8Zh38uCV5b -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:47 2025 by rpki-client