$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft File: 7e70a287-ad97-4c1e-9564-9ca069f57b17.mft (raw, json) Hash identifier: Wf+hazkeQmhG+1BBXFXiJiAFJNEYPIxua5yZcb/CfBg= Subject key identifier: 45:59:02:99:93:C3:D6:14:8A:63:C6:AA:16:DE:25:59:B7:3E:91:E6 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F4328584BBF106483BCC9223142CE6480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft Manifest number: 010D0C9F4328584073A84A2792840918C6A14E22 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (hash: T9KDPPzbaJ5praMKQ2NPaZ8OP9As1xjDHZatMiOzRY4=) 2: 7e70a287-ad97-4c1e-9564-9ca069f57b17.crl (hash: 1q6RfkV2u5k8mXhXRrn7AY+hYA2O6/6obEcwlYy6OTI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:64:83:bc:c9:22:31:42:ce:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=a2c801d5-b9de-440d-8a8d-342bf9f8a679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:ef:d0:71:b3:99:98:e9:80:e3:e8:31:5a: 67:d9:19:8e:7e:a9:ab:43:74:b2:04:ac:41:0c:a2: 3b:b0:91:e0:f8:fd:87:53:a6:1e:2a:dd:13:94:fa: 37:c6:f1:31:16:68:29:77:9f:d5:0c:89:02:c7:65: 0e:40:32:11:07:7c:80:d3:dc:59:5a:70:74:e8:7f: ec:7d:0f:81:41:80:c9:f1:1d:4d:4e:3b:35:fe:3f: ef:92:7c:d5:b3:0e:a2:c5:74:9a:6d:1a:f3:c0:82: 31:d3:4d:8c:29:5a:68:d1:76:48:7f:e2:05:1d:d2: 68:ac:1a:ac:13:6e:21:8f:1a:34:9e:76:03:7f:f8: 0e:44:da:e4:9f:b3:18:66:e3:59:9b:3d:e7:42:81: 47:a7:4f:c0:4e:56:7f:e6:61:bd:90:51:22:5e:c7: 5c:a0:bd:19:31:a0:d3:03:87:2d:3b:cd:55:3a:01: cc:75:cf:96:dd:49:d7:aa:f9:d6:02:32:3d:75:2c: b0:89:ed:79:a8:78:52:99:c8:4a:cc:0e:a8:d8:ce: 4c:c0:ec:71:75:6f:29:29:32:7a:38:62:16:63:22: 7c:73:2c:f6:fd:d8:70:29:24:42:e5:3b:de:55:cf: 83:4e:83:81:16:6b:6e:e3:41:f0:0b:99:56:ee:89: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:02:99:93:C3:D6:14:8A:63:C6:AA:16:DE:25:59:B7:3E:91:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0c:75:e9:f4:42:60:20:e6:40:b0:55:8b:4a:16:bf:57:61: 5c:a8:78:48:d0:a6:d4:89:21:3e:11:42:19:1e:36:38:0e:27: 4c:33:d2:2b:c0:c2:eb:1b:34:c8:17:4f:87:80:e5:42:bd:0f: fa:75:bd:79:6b:74:35:89:31:dd:d6:34:0f:3a:c0:f5:1b:3c: a4:18:60:8e:4e:27:63:0c:ea:5b:d5:84:ad:02:90:2e:b0:05: ed:08:5e:d4:f2:97:54:26:bf:e3:d3:c4:84:11:a1:cc:5e:23: 2b:f0:69:15:eb:e9:4c:b6:8f:e4:d9:be:3b:04:d0:c3:86:c7: 4b:43:15:e6:44:15:ea:8e:b0:c1:e6:f7:25:a3:cf:f0:16:b2: 28:50:19:f8:32:b2:74:a5:ed:fe:a7:55:db:76:f6:54:66:6a: fc:c1:56:8e:4c:a0:f3:45:02:f2:70:4c:60:a0:a7:58:38:08: 24:2f:3e:e1:60:a6:9d:61:69:61:95:9a:61:9b:e5:32:ce:31: f1:b0:65:d0:f9:5a:41:f8:77:f0:ea:50:4a:a7:03:b4:96:05: ad:de:82:2d:e4:df:10:74:97:cf:76:f1:f9:48:93:db:1e:66: cb:ac:f2:7e:c4:aa:c9:f9:e1:21:87:d0:f6:15:6e:f6:1b:31: 39:2b:50:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGSDvMkiMULOZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk YTJjODAxZDUtYjlkZS00NDBkLThhOGQtMzQyYmY5ZjhhNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDfv0HGzmZjpgOPoMVpn2RmOfqmrQ3SyBKxB DKI7sJHg+P2HU6YeKt0TlPo3xvExFmgpd5/VDIkCx2UOQDIRB3yA09xZWnB06H/s fQ+BQYDJ8R1NTjs1/j/vknzVsw6ixXSabRrzwIIx002MKVpo0XZIf+IFHdJorBqs E24hjxo0nnYDf/gORNrkn7MYZuNZmz3nQoFHp0/ATlZ/5mG9kFEiXsdcoL0ZMaDT A4ctO81VOgHMdc+W3UnXqvnWAjI9dSywie15qHhSmchKzA6o2M5MwOxxdW8pKTJ6 OGIWYyJ8cyz2/dhwKSRC5TveVc+DToOBFmtu40HwC5lW7on3pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVZApmTw9YUimPGqhbeJVm3PpHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvN2U3MGEyODctYWQ5Ny00 YzFlLTk1NjQtOWNhMDY5ZjU3YjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9DHXp9EJgIOZAsFWLSha/ V2FcqHhI0KbUiSE+EUIZHjY4DidMM9IrwMLrGzTIF0+HgOVCvQ/6db15a3Q1iTHd 1jQPOsD1GzykGGCOTidjDOpb1YStApAusAXtCF7U8pdUJr/j08SEEaHMXiMr8GkV 6+lMto/k2b47BNDDhsdLQxXmRBXqjrDB5vclo8/wFrIoUBn4MrJ0pe3+p1XbdvZU Zmr8wVaOTKDzRQLycExgoKdYOAgkLz7hYKadYWlhlZphm+UyzjHxsGXQ+VpB+Hfw 6lBKpwO0lgWt3oIt5N8QdJfPdvH5SJPbHmbLrPJ+xKrJ+eEhh9D2FW72GzE5K1AQ -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:02 2025 by rpki-client