$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft File: a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft (raw, json) Hash identifier: zlROMCwQa9NNwnEGYQnBMNwFU1OqFR4NfNrRhhxXVR8= Subject key identifier: 09:DB:3C:DD:85:19:20:4A:BF:4E:69:91:40:BC:C1:99:64:11:61:11 Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 Certificate issuer: /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Certificate serial: 010D0C9F4328584BC03A2DCD309697764FA3F16C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft Manifest number: 010D0C9F4328584073A824D2523E0DBF021CA924 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl (hash: r6MV23cgE8sagnztktpd8FJMdtiKWAbRjpNgvUXr16Q=) 2: af253897-34b0-302d-99ea-bc80edc69de5.roa (hash: 7CzghyFmnm/6GXDiqUmbxuhmj6MUWRnghe2TeZ2DWO0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:cd:30:96:97:76:4f:a3:f1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=4fe66d47-62ac-4731-ad23-f1167ade1534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:5c:25:90:2f:36:e0:1f:96:03:65:58:0c: 6a:5f:44:be:ac:20:05:30:53:d0:dc:59:4d:17:97: 1e:c0:e2:17:7f:00:ce:9f:81:7d:8e:e4:5a:0a:4d: e1:3d:b6:cf:9c:ea:40:14:d4:83:80:61:dc:e3:0a: a2:06:85:c9:d3:79:5b:c4:0e:e6:7b:c6:27:c0:2e: e0:ed:1b:50:28:8e:03:0b:18:4c:4e:d2:f4:ab:90: 1e:35:b0:eb:ae:3c:a9:4e:22:8e:8e:b0:f4:a7:97: 21:55:0f:30:89:84:37:36:09:33:49:3f:ef:78:8f: f3:7f:e2:f4:3f:66:91:d2:e9:99:17:73:08:37:17: 0f:58:89:e2:7a:c2:8e:c1:14:fe:b6:3e:84:16:df: 1c:a9:8a:fe:cf:a7:aa:af:fe:24:8d:07:a2:7e:cd: 5e:ca:62:1c:49:3b:c0:b9:e8:6a:ce:f2:6a:50:cc: b2:0f:4d:a1:68:49:0c:34:4c:6b:ea:43:ef:3e:54: 6d:dd:0d:71:4b:06:17:51:b8:20:ee:6f:b8:26:be: ee:53:7d:6a:0e:21:b7:32:72:20:77:14:be:f0:9d: b2:b5:3d:37:03:d9:0a:b4:7d:5d:b4:6c:3f:88:85: 32:36:fb:1c:29:ef:58:5d:5f:bb:f9:42:a5:4d:8b: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:3C:DD:85:19:20:4A:BF:4E:69:91:40:BC:C1:99:64:11:61:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl X509v3 Authority Key Identifier: keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bd:50:ae:39:9f:4f:b2:8a:83:18:f1:91:25:35:08:58:6c: b1:5a:82:1f:c3:b0:bf:10:24:c8:76:94:60:fa:20:bf:f4:3e: c4:48:f7:c9:17:1e:64:8f:3a:02:cb:62:9e:18:ce:94:b3:17: d3:ed:33:8d:06:b3:ca:00:30:fb:2d:32:08:fe:89:18:3a:9e: 66:c9:6d:11:31:f3:a0:69:0d:98:a8:fb:0b:2b:c2:c5:6d:46: 9d:0c:29:84:a6:fd:ef:25:22:98:25:4d:aa:36:6d:f4:cc:41: 0e:27:73:11:a6:14:e0:f1:85:5d:3d:0d:fc:3e:b7:44:7b:43: 81:e1:d1:51:9d:78:1e:a3:28:3b:fb:75:3f:10:30:d8:64:15: 8d:92:b8:a5:b1:18:72:87:37:42:77:14:7e:ed:1d:ec:58:d5: 1e:0e:77:c0:8e:5a:a9:61:60:95:ba:a8:a5:d1:cd:21:8a:20: 22:f1:15:bd:08:34:2c:da:67:27:d6:d9:1b:a2:4c:e2:cf:7c: 00:f3:52:b3:02:79:0a:dd:84:95:6b:5c:31:c2:b7:aa:9a:2b: 15:8a:29:39:0e:be:12:27:13:00:bc:e1:ff:3f:49:99:e2:81: 22:ca:c2:a3:f1:3a:bc:81:f4:8a:f5:59:c4:83:01:69:04:5e: 5b:58:8e:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi3NMJaXdk+j8WwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAyYTE3NzUtZTNlZi00ZDVlLWE5MzQtMWQ0MjA0ZTFj YTE4MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NGZlNjZkNDctNjJhYy00NzMxLWFkMjMtZjExNjdhZGUxNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouFcJZAvNuAflgNlWAxqX0S+rCAFMFPQ3FlN F5cewOIXfwDOn4F9juRaCk3hPbbPnOpAFNSDgGHc4wqiBoXJ03lbxA7me8YnwC7g 7RtQKI4DCxhMTtL0q5AeNbDrrjypTiKOjrD0p5chVQ8wiYQ3NgkzST/veI/zf+L0 P2aR0umZF3MINxcPWIniesKOwRT+tj6EFt8cqYr+z6eqr/4kjQeifs1eymIcSTvA uehqzvJqUMyyD02haEkMNExr6kPvPlRt3Q1xSwYXUbgg7m+4Jr7uU31qDiG3MnIg dxS+8J2ytT03A9kKtH1dtGw/iIUyNvscKe9YXV+7+UKlTYsJKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAnbPN2FGSBKv05pkUC8wZlkEWERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJh MTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQyMDRlMWNhMTgvYTAyYTE3NzUtZTNlZi00 ZDVlLWE5MzQtMWQ0MjA0ZTFjYTE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTAyYTE3NzUtZTNlZi00ZDVlLWE5 MzQtMWQ0MjA0ZTFjYTE4L2EwMmExNzc1LWUzZWYtNGQ1ZS1hOTM0LTFkNDIwNGUx Y2ExOC5jcmwwHwYDVR0jBBgwFoAUYDR67fAhJVvGkAa1VwaTNKpdNTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJhMTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQy MDRlMWNhMTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGvVCuOZ9PsoqDGPGRJTUI WGyxWoIfw7C/ECTIdpRg+iC/9D7ESPfJFx5kjzoCy2KeGM6UsxfT7TONBrPKADD7 LTII/okYOp5myW0RMfOgaQ2YqPsLK8LFbUadDCmEpv3vJSKYJU2qNm30zEEOJ3MR phTg8YVdPQ38PrdEe0OB4dFRnXgeoyg7+3U/EDDYZBWNkrilsRhyhzdCdxR+7R3s WNUeDnfAjlqpYWCVuqil0c0hiiAi8RW9CDQs2mcn1tkbokziz3wA81KzAnkK3YSV a1wxwreqmisViik5Dr4SJxMAvOH/P0mZ4oEiysKj8Tq8gfSK9VnEgwFpBF5bWI4t -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:02 2025 by rpki-client