$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft File: 79af2149-f711-4230-b22d-36786f0219ac.mft (raw, json) Hash identifier: c+NNo9PpoBcm19+CJYLnSxSGlD8SReA7FupjzYrKv0k= Subject key identifier: 77:7B:B9:7A:1C:0C:9E:6B:F6:E1:E4:C4:AD:96:26:CB:E3:0A:85:57 Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A Certificate issuer: /CN=79af2149-f711-4230-b22d-36786f0219ac Certificate serial: 010D0C9F4328584BC03A2F597D44CD47B152D140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft Manifest number: 010D0C9F4328584073A8233769D691F3649987A4 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (hash: NJqfA5QAxNFtLlbDfDVL5SvcnjadPCAKXxiweIhUnvU=) 2: 79af2149-f711-4230-b22d-36786f0219ac.crl (hash: Od50Ip2UA6x6N08zHUOrh5Ui5KXkqAwpMgMEyBpW7WM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2f:59:7d:44:cd:47:b1:52:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=f1caa4ed-1194-41b0-9173-dc40406f3895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:a2:68:9f:27:f4:58:3f:23:3f:04:fc:56: 5f:02:d7:0f:4d:41:cc:57:a5:2c:e3:e3:60:c3:b7: 62:c0:57:9f:21:58:70:fa:e7:3a:fa:9f:c1:78:fc: b1:34:d4:de:52:b6:e3:9d:f2:98:ab:b0:19:6b:ff: 90:f3:39:18:1f:ca:b8:a1:05:77:2b:bc:bd:bd:02: 08:e9:fc:0e:a7:64:6d:19:e7:fe:87:b5:f4:71:b2: 1b:f8:3a:d7:cd:14:ca:c0:af:d8:74:bd:0a:27:f4: 81:93:86:8a:93:a0:a7:db:93:13:6e:da:c3:68:3c: c3:84:92:7d:b7:60:d2:02:f1:be:23:9f:32:7f:2d: ea:b9:ef:9b:de:c3:2a:8c:ed:fc:cf:42:0a:5e:3e: 54:49:6c:17:0c:6a:1b:6c:6f:75:56:a6:a1:89:26: 63:ad:0e:48:f9:c9:0e:29:73:46:85:25:04:90:e1: 44:97:ff:31:40:4e:b0:a3:ba:f1:a9:e4:fa:32:02: d9:06:70:f0:93:01:ed:e1:b6:33:6b:84:10:31:15: 4e:fa:8c:46:9f:22:50:0d:a6:55:fc:4a:fd:55:5e: 68:9d:2e:0b:3e:cb:77:0d:7a:47:43:ca:71:be:dc: 24:5f:0e:2f:b2:88:f8:39:82:5d:11:f5:28:5d:c8: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7B:B9:7A:1C:0C:9E:6B:F6:E1:E4:C4:AD:96:26:CB:E3:0A:85:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl X509v3 Authority Key Identifier: keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:41:78:54:cb:85:58:fb:2b:7b:82:a5:3b:4d:be:b0:38:9f: c8:aa:80:56:c9:be:24:fa:7a:a4:1f:e8:07:b4:d5:aa:db:4b: ec:a8:e1:99:55:84:61:1f:fc:13:88:bd:a0:d3:25:af:10:bc: e1:c1:86:a0:43:28:43:7c:a2:56:0a:6b:c9:45:f0:0f:2b:6a: 43:99:a7:70:bd:fe:ff:22:dc:e2:d2:c7:4e:70:14:88:51:76: 0d:df:48:c1:b3:ac:18:46:70:b1:c2:b8:f7:c2:63:c7:c1:36: dd:aa:ad:e4:81:48:3a:55:28:50:0a:76:67:0b:98:ad:3f:0e: b7:d0:eb:ab:3b:12:33:40:ae:4a:b0:dd:84:57:c1:23:51:c6: ea:ef:bc:70:48:59:51:d8:bd:27:f2:5c:85:8f:78:7c:89:ee: ca:c9:d5:cb:a5:3c:4a:55:b4:86:fe:d5:2a:15:5b:57:7f:7c: d5:2e:7b:35:0e:8a:3e:fa:bf:70:ed:60:5b:ab:21:45:5f:71: df:f3:fe:fc:8d:ef:0a:d0:99:f6:d0:c0:c0:30:97:1f:eb:b0: 14:4c:af:e8:1c:3b:01:33:18:aa:1c:2f:1e:a9:7f:f8:2f:9c: fd:58:56:c0:01:2f:14:6f:7e:5c:e7:30:db:4a:1b:1b:9e:1a: 67:8e:86:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi9ZfUTNR7FS0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzlhZjIxNDktZjcxMS00MjMwLWIyMmQtMzY3ODZmMDIx OWFjMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZjFjYWE0ZWQtMTE5NC00MWIwLTkxNzMtZGM0MDQwNmYzODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFiiaJ8n9Fg/Iz8E/FZfAtcPTUHMV6Us4+Ng w7diwFefIVhw+uc6+p/BePyxNNTeUrbjnfKYq7AZa/+Q8zkYH8q4oQV3K7y9vQII 6fwOp2RtGef+h7X0cbIb+DrXzRTKwK/YdL0KJ/SBk4aKk6Cn25MTbtrDaDzDhJJ9 t2DSAvG+I58yfy3que+b3sMqjO38z0IKXj5USWwXDGobbG91VqahiSZjrQ5I+ckO KXNGhSUEkOFEl/8xQE6wo7rxqeT6MgLZBnDwkwHt4bYza4QQMRVO+oxGnyJQDaZV /Er9VV5onS4LPst3DXpHQ8pxvtwkXw4vsoj4OYJdEfUoXcj8BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHd7uXocDJ5r9uHkxK2WJsvjCoVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OWFm MjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4NmYwMjE5YWMvNzlhZjIxNDktZjcxMS00 MjMwLWIyMmQtMzY3ODZmMDIxOWFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzlhZjIxNDktZjcxMS00MjMwLWIy MmQtMzY3ODZmMDIxOWFjLzc5YWYyMTQ5LWY3MTEtNDIzMC1iMjJkLTM2Nzg2ZjAy MTlhYy5jcmwwHwYDVR0jBBgwFoAUV4uAqhRzWbejGq79NBP1W9oqD0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OWFmMjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4 NmYwMjE5YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIQXhUy4VY+yt7gqU7Tb6w OJ/IqoBWyb4k+nqkH+gHtNWq20vsqOGZVYRhH/wTiL2g0yWvELzhwYagQyhDfKJW CmvJRfAPK2pDmadwvf7/Itzi0sdOcBSIUXYN30jBs6wYRnCxwrj3wmPHwTbdqq3k gUg6VShQCnZnC5itPw630OurOxIzQK5KsN2EV8EjUcbq77xwSFlR2L0n8lyFj3h8 ie7KydXLpTxKVbSG/tUqFVtXf3zVLns1Doo++r9w7WBbqyFFX3Hf8/78je8K0Jn2 0MDAMJcf67AUTK/oHDsBMxiqHC8eqX/4L5z9WFbAAS8Ub35c5zDbShsbnhpnjoY8 -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:46 2025 by rpki-client