$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft File: 70379220-49c0-45f2-94d3-098a72b1db54.mft (raw, json) Hash identifier: i+dWztpIEJ7uQg9CLhUmEcHp8e95KIQ3EBJAcmZhYqg= Subject key identifier: DF:EA:1B:42:F5:47:32:C1:06:43:8E:EC:E5:AC:A5:59:0F:21:E3:C6 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584BBEF29BBB42185D2D6062C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft Manifest number: 010D0C9F4328584073A8486C280EC1A7EB0C048C Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (hash: 75qkTcBZ9fnuy8oUHUdOiV38t0/RU+na4k5w9gPiegM=) 2: 70379220-49c0-45f2-94d3-098a72b1db54.crl (hash: vXpTJSHdHWPg9gGG5OGgk8V9jWnQu5vivNpi3d+Gb5Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9b:bb:42:18:5d:2d:60:62:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=d67139f2-4f7b-4b14-b321-f7c280da9da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:59:bc:38:6d:19:10:4f:e8:7a:60:12:62: 60:a2:65:50:9a:6f:48:51:a2:37:80:f4:5f:c5:e2: c6:95:f7:8b:19:9d:5e:e7:5f:47:a9:29:cd:0d:e7: a2:fc:5a:bc:d7:f1:e1:7b:85:d1:2d:ff:c3:68:48: 03:85:c5:09:62:84:8a:3d:74:59:5e:2f:64:2b:1a: 15:e3:f3:94:07:7f:4c:29:69:53:e9:55:de:de:4d: 77:75:52:2e:d4:c5:76:28:b3:e0:b2:d7:54:69:ab: cf:32:b4:59:2a:b6:eb:9b:8d:8d:d5:f3:a7:78:1d: 32:b5:db:e1:a4:cd:77:03:3a:6e:be:64:1e:c4:f7: d0:ee:14:f9:5c:de:7d:2c:84:d4:48:d1:9c:70:c7: f1:0a:e9:6a:72:17:2e:33:4b:8f:30:c9:58:6e:e5: 68:ad:ce:5d:7d:70:c4:48:54:b1:72:43:80:06:29: d8:ba:eb:e9:c8:05:f4:2f:a3:2b:05:eb:46:f1:fb: 20:61:aa:73:6f:72:bf:e3:7f:3b:d1:7b:cc:16:bf: fa:6e:c8:fd:38:95:0d:17:f3:98:f3:cc:0f:e4:7f: ad:de:03:a2:3e:72:0b:9d:9f:ec:19:5d:f9:cd:ed: 71:2a:d1:e7:2b:ed:4e:ae:0b:0b:83:03:54:c4:90: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EA:1B:42:F5:47:32:C1:06:43:8E:EC:E5:AC:A5:59:0F:21:E3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:41:bd:ad:1b:2d:4c:26:ee:dd:c3:c0:5c:9f:51:85:45:a2: 6c:31:b2:ca:0f:6b:eb:09:c4:59:ea:67:8d:54:c2:6c:9d:ec: 5a:08:eb:10:1d:e5:9b:f6:7c:07:b4:42:50:1a:d2:45:8c:92: 14:27:c8:7f:2a:84:49:61:69:53:3c:08:d2:f2:23:f1:99:dd: e2:d3:45:08:21:59:90:a2:a9:bc:b8:4d:cd:a2:60:33:81:b6: 5d:94:1c:da:49:61:60:e6:0d:c3:ba:49:de:38:4e:61:0e:44: 7d:8e:3f:15:bb:c2:a5:db:f6:bf:d3:f6:3d:0d:12:92:00:65: 4f:49:93:5b:96:42:13:12:5a:55:f4:80:b7:fc:89:0e:cd:81: fe:f4:2b:28:87:cb:25:a2:55:fd:77:66:2c:3d:4a:1c:f9:9b: e3:27:7e:46:07:89:5b:f3:cc:2b:7e:13:ec:da:fb:8f:41:96: 44:31:2c:e6:4f:7b:6b:e6:55:b2:d1:34:47:82:90:55:9c:7b: 82:38:4d:37:c4:fe:f1:6a:65:25:d1:4d:74:45:3d:60:8d:9c: 25:0a:cc:0a:82:4c:28:e1:ed:7d:f5:d7:44:2e:ea:3e:d7:58: 4e:2d:ed:60:a3:75:55:a3:88:1b:21:e1:13:0a:7f:aa:ce:f5: 6b:8f:cb:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8pu7QhhdLWBixoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk ZDY3MTM5ZjItNGY3Yi00YjE0LWIzMjEtZjdjMjgwZGE5ZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XdZvDhtGRBP6HpgEmJgomVQmm9IUaI3gPRf xeLGlfeLGZ1e519HqSnNDeei/Fq81/Hhe4XRLf/DaEgDhcUJYoSKPXRZXi9kKxoV 4/OUB39MKWlT6VXe3k13dVIu1MV2KLPgstdUaavPMrRZKrbrm42N1fOneB0ytdvh pM13AzpuvmQexPfQ7hT5XN59LITUSNGccMfxCulqchcuM0uPMMlYbuVorc5dfXDE SFSxckOABinYuuvpyAX0L6MrBetG8fsgYapzb3K/43870XvMFr/6bsj9OJUNF/OY 88wP5H+t3gOiPnILnZ/sGV35ze1xKtHnK+1OrgsLgwNUxJD1iwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN/qG0L1RzLBBkOO7OWspVkPIePGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvNzAzNzkyMjAtNDljMC00 NWYyLTk0ZDMtMDk4YTcyYjFkYjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuQb2tGy1MJu7dw8Bcn1GF RaJsMbLKD2vrCcRZ6meNVMJsnexaCOsQHeWb9nwHtEJQGtJFjJIUJ8h/KoRJYWlT PAjS8iPxmd3i00UIIVmQoqm8uE3NomAzgbZdlBzaSWFg5g3DukneOE5hDkR9jj8V u8Kl2/a/0/Y9DRKSAGVPSZNblkITElpV9IC3/IkOzYH+9Csoh8slolX9d2YsPUoc +ZvjJ35GB4lb88wrfhPs2vuPQZZEMSzmT3tr5lWy0TRHgpBVnHuCOE03xP7xamUl 0U10RT1gjZwlCswKgkwo4e199ddELuo+11hOLe1go3VVo4gbIeETCn+qzvVrj8up -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:56 2025 by rpki-client