$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft File: 804e20e1-66d3-4b19-8356-82071ce2a249.mft (raw, json) Hash identifier: /n0PvYqBOyyc2/spODTsHg6myd40d+a9MdZN2WAhrnk= Subject key identifier: B1:DE:4B:D1:AC:27:31:C6:B6:52:C0:C3:9C:1B:86:FB:3D:D4:7E:14 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584BC0938002C6E11CEA68B6FBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft Manifest number: 010D0C9F4328584073A82BE94AF06297D1D97C25 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 804e20e1-66d3-4b19-8356-82071ce2a249.crl (hash: +g4TTTJvtJkiOCXrEYsphuHh2AvCtFOvWFUetmFKZu8=) 2: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (hash: tZ9vlT457blT0ZMgFHams1l9B8OzOAhMLAAESCIt0sU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:80:02:c6:e1:1c:ea:68:b6:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=915a4b91-fdd7-4dcf-a449-7611382dfc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:e3:db:4f:60:45:62:91:15:49:86:cd:b7: cb:ed:ab:f7:a7:fa:99:e8:3e:91:1a:38:79:b8:75: 10:9d:be:ee:c8:e4:b8:ff:36:ff:7d:8f:e5:0e:ab: 99:34:34:68:e5:36:76:33:64:38:b6:f9:f2:f7:7b: b6:7e:59:e3:a7:51:a3:d1:f5:5d:f5:d9:dd:1f:78: 76:33:eb:87:d4:bf:27:56:8e:59:fd:61:a1:3d:31: f9:2e:03:6a:16:5a:58:92:03:47:ed:13:41:47:4d: 40:4f:ae:aa:0e:8a:74:0e:28:f3:2b:38:df:a0:cc: 19:9b:17:44:36:e7:3b:ce:4d:3a:2d:48:73:fc:78: 37:f4:ff:b3:c9:6f:3a:d9:26:80:d3:fd:7a:f1:74: 0c:29:51:9c:4a:9c:17:06:7f:86:cd:f0:e9:0c:6d: 26:d0:f0:9b:fa:ea:a7:48:02:47:b5:2a:b2:5e:4c: c8:0e:03:1d:1a:e6:10:9d:48:3a:17:2a:79:ba:44: 9b:df:67:01:38:9b:44:c5:6d:67:e1:1b:08:37:6c: 54:4b:a9:02:60:aa:cc:a4:69:f4:c9:e0:2e:fb:69: b4:55:6e:28:18:a3:05:14:78:c6:26:bd:45:3e:42: 2b:1b:66:64:d5:e3:c4:e3:dd:09:79:db:4f:08:28: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:4B:D1:AC:27:31:C6:B6:52:C0:C3:9C:1B:86:FB:3D:D4:7E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:77:49:f8:9f:b7:58:10:95:21:20:83:e2:53:9b:c9:4a:ab: 59:c3:f1:df:f5:ad:3e:c2:ae:69:1a:42:d0:45:1b:99:9d:df: b0:5d:9b:b1:9e:b2:a3:d8:fe:ca:a3:db:36:89:3a:cf:37:f8: 8f:a1:bd:95:f9:80:94:db:25:c6:5b:bd:49:9d:e8:0a:99:6f: a7:1c:59:ef:14:ad:27:fb:18:2a:c4:67:a0:cb:69:06:93:d0: dd:a8:f4:15:76:4a:ab:ff:e9:41:40:ac:dc:cc:7a:e9:5d:2a: 4f:10:09:16:62:6e:89:64:ff:4c:a3:ac:7e:49:08:a6:00:25: 85:60:31:4f:ab:fd:7c:36:8e:02:b9:58:d4:4a:0f:18:83:b1: b4:47:6d:90:7b:90:f8:8d:e7:70:03:50:64:2d:b0:41:9b:31: 02:08:9f:9d:37:2e:d4:09:e5:02:7d:b9:ad:57:7d:a5:a0:45: 75:06:7f:5a:4f:e8:66:9e:b9:c0:8f:40:87:f5:86:6b:22:53: 71:13:81:27:89:0b:b3:84:1a:dd:17:79:d6:50:0e:7e:de:8b: 6b:0e:34:fd:8e:08:04:85:5b:88:5e:7b:1a:21:ea:94:a9:ac: 28:45:89:3c:95:13:b1:b7:56:86:ee:74:11:96:35:50:ef:f6: ef:0b:71:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4ACxuEc6mi2+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk OTE1YTRiOTEtZmRkNy00ZGNmLWE0NDktNzYxMTM4MmRmYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nnj209gRWKRFUmGzbfL7av3p/qZ6D6RGjh5 uHUQnb7uyOS4/zb/fY/lDquZNDRo5TZ2M2Q4tvny93u2flnjp1Gj0fVd9dndH3h2 M+uH1L8nVo5Z/WGhPTH5LgNqFlpYkgNH7RNBR01AT66qDop0DijzKzjfoMwZmxdE Nuc7zk06LUhz/Hg39P+zyW862SaA0/168XQMKVGcSpwXBn+GzfDpDG0m0PCb+uqn SAJHtSqyXkzIDgMdGuYQnUg6Fyp5ukSb32cBOJtExW1n4RsIN2xUS6kCYKrMpGn0 yeAu+2m0VW4oGKMFFHjGJr1FPkIrG2Zk1ePE490JedtPCCgdTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHeS9GsJzHGtlLAw5wbhvs91H4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvODA0ZTIwZTEtNjZkMy00 YjE5LTgzNTYtODIwNzFjZTJhMjQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmd0n4n7dYEJUhIIPiU5vJ SqtZw/Hf9a0+wq5pGkLQRRuZnd+wXZuxnrKj2P7Ko9s2iTrPN/iPob2V+YCU2yXG W71JnegKmW+nHFnvFK0n+xgqxGegy2kGk9DdqPQVdkqr/+lBQKzczHrpXSpPEAkW Ym6JZP9Mo6x+SQimACWFYDFPq/18No4CuVjUSg8Yg7G0R22Qe5D4jedwA1BkLbBB mzECCJ+dNy7UCeUCfbmtV32loEV1Bn9aT+hmnrnAj0CH9YZrIlNxE4EniQuzhBrd F3nWUA5+3otrDjT9jggEhVuIXnsaIeqUqawoRYk8lROxt1aG7nQRljVQ7/bvC3G8 -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:42 2025 by rpki-client