$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: A2KqklbDodZA55I9NJeEAYTfg5IxL2CaxmXJgJ9LWAY= Subject key identifier: B4:41:C7:33:62:1E:EB:E0:B3:78:D3:72:AB:7D:2B:69:D3:B8:0D:39 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584BBF106258958E169F4A95F4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E1440362 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: nzGUDPrc/oAUhQEvOkMf7DIsg9674b13Kgps+lkQcjI=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: ffGr4uxp8vkCiGpi9+hqxsLsQDU63DeqGcWpnRiMg1g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:62:58:95:8e:16:9f:4a:95:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=b74e6ac4-7aeb-4c35-b736-69bf19ebc7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:38:e9:31:28:7c:26:ce:57:dc:68:cf:d6: e5:d9:9c:55:18:bf:d5:fe:e9:9c:08:cd:50:58:ef: a5:a0:f9:f8:4c:c3:d0:f1:f5:f2:be:e1:14:16:5f: 24:1b:33:28:6d:bb:b5:e2:ac:05:b8:ba:68:c5:01: 5e:ea:7b:9b:9a:20:bf:d8:d8:3e:a4:55:f7:98:86: ab:97:e7:6c:08:6c:44:77:3e:78:62:20:72:c7:ab: 27:08:75:b6:94:b0:c9:e0:14:32:ee:60:db:45:32: 23:00:1b:01:2f:7c:f8:ff:3c:8d:f2:60:9a:fc:cd: c7:13:73:f4:b8:c9:10:2e:33:4b:35:3a:ff:7e:bd: 8a:7f:46:ce:08:fb:a9:4a:d7:27:98:06:79:04:73: 5d:92:3f:9c:24:ce:e8:09:be:b1:ed:4d:a2:b0:ab: 55:03:1b:62:bd:74:70:c6:b4:e6:66:83:1a:27:18: 59:25:9b:e3:cb:d2:7d:87:ce:4c:43:07:b7:80:c0: d9:73:3b:00:44:03:81:8d:bc:0e:76:d2:d1:ec:99: 30:b3:e8:2b:25:0a:ce:de:30:79:58:eb:e6:44:b0: d1:ec:0d:aa:f2:22:88:5c:bd:ff:d7:68:50:bb:07: b2:a7:80:1b:ac:c8:10:d7:f7:1a:60:84:37:6e:d4: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:C7:33:62:1E:EB:E0:B3:78:D3:72:AB:7D:2B:69:D3:B8:0D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:12:82:9d:14:6e:46:9f:5f:88:19:26:07:c7:d7:62:49:2c: 89:8d:c8:cc:43:ce:df:22:b5:1e:f8:86:26:fd:2f:34:de:9b: a2:72:96:a9:2d:d8:57:74:15:b7:4e:81:b5:72:be:29:89:1f: 45:c8:16:f7:f6:3e:94:fa:94:ae:af:27:9f:21:5f:eb:4b:45: ac:03:52:03:02:20:d6:ad:41:cb:b2:b5:32:be:b1:2b:ac:9f: 5a:ca:8f:28:b2:44:51:15:2c:5e:dc:e9:17:55:6d:bd:97:bf: 14:7b:af:48:ce:5f:51:89:5b:f0:14:d4:b9:af:54:26:a6:16: 0e:35:3e:ed:b5:bb:94:94:c8:f5:4a:45:05:3a:c9:96:30:1f: 22:ef:24:27:e8:52:53:97:bb:61:8f:db:71:9a:5c:dc:8e:63: c0:7d:0e:f3:25:75:67:37:4b:d6:55:ee:0b:61:bd:49:2e:95: b4:ef:36:29:28:e6:e4:30:52:a4:da:33:0b:35:70:f3:6d:b5: 23:8d:9a:0a:dd:9d:85:6d:62:a1:46:52:ff:a1:8b:a3:f9:e1: 73:e8:9f:00:41:4b:71:3e:86:4c:f2:33:18:c2:6f:99:88:d8: 55:e5:c8:96:67:59:89:9d:69:ba:8e:86:3e:eb:b4:b1:c4:2b: fa:f6:a1:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGJYlY4Wn0qV9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk Yjc0ZTZhYzQtN2FlYi00YzM1LWI3MzYtNjliZjE5ZWJjN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD446TEofCbOV9xoz9bl2ZxVGL/V/umcCM1Q WO+loPn4TMPQ8fXyvuEUFl8kGzMobbu14qwFuLpoxQFe6nubmiC/2Ng+pFX3mIar l+dsCGxEdz54YiByx6snCHW2lLDJ4BQy7mDbRTIjABsBL3z4/zyN8mCa/M3HE3P0 uMkQLjNLNTr/fr2Kf0bOCPupStcnmAZ5BHNdkj+cJM7oCb6x7U2isKtVAxtivXRw xrTmZoMaJxhZJZvjy9J9h85MQwe3gMDZczsARAOBjbwOdtLR7Jkws+grJQrO3jB5 WOvmRLDR7A2q8iKIXL3/12hQuweyp4AbrMgQ1/caYIQ3btTX9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLRBxzNiHuvgs3jTcqt9K2nTuA05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaEoKdFG5Gn1+IGSYHx9di SSyJjcjMQ87fIrUe+IYm/S803puicpapLdhXdBW3ToG1cr4piR9FyBb39j6U+pSu ryefIV/rS0WsA1IDAiDWrUHLsrUyvrErrJ9ayo8oskRRFSxe3OkXVW29l78Ue69I zl9RiVvwFNS5r1QmphYONT7ttbuUlMj1SkUFOsmWMB8i7yQn6FJTl7thj9txmlzc jmPAfQ7zJXVnN0vWVe4LYb1JLpW07zYpKObkMFKk2jMLNXDzbbUjjZoK3Z2FbWKh RlL/oYuj+eFz6J8AQUtxPoZM8jMYwm+ZiNhV5ciWZ1mJnWm6joY+67SxxCv69qE2 -----END CERTIFICATE-----Generated at Wed Nov 5 02:31:21 2025 by rpki-client