$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft File: a7001425-6965-4c1f-8e35-f578d112295c.mft (raw, json) Hash identifier: i6ibib4IxZviE0erd8JNXAoD7RGFiT7GgZzAyWT0gZ0= Subject key identifier: BF:15:45:8E:8C:1A:2C:F4:AA:CC:2D:E2:A2:2C:61:AB:87:23:CB:07 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F4328584BBF1063C11BC12FFC2D37BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft Manifest number: 010D0C9F4328584073A84BBBF8F6F9BE6215515C Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (hash: UfFEgkQNDANjFb41s8AENK/ZlrYG74Oq9O9qGwpu7QA=) 2: a7001425-6965-4c1f-8e35-f578d112295c.crl (hash: 2GkNjvUqtYsmIkwnAQ6BUKM9fCmSvmskFS9GFsoGxPs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:63:c1:1b:c1:2f:fc:2d:37:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=53361c18-e115-4234-b4ae-ef0653f4b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:62:45:15:2d:0c:a4:b9:3e:90:19:2d:d2: d4:18:48:9a:d4:fb:8f:fa:9e:56:dc:f6:39:c1:fe: 63:36:99:b8:d8:ac:2c:e1:e3:36:b7:1e:7b:8a:d5: 03:ef:46:8d:10:aa:92:d7:ce:91:8f:39:87:14:e1: 70:69:8b:f3:5f:92:5b:23:ca:fd:7e:30:fc:5c:1d: 42:70:2f:29:b4:ef:a6:a8:c8:83:d3:89:42:97:d7: b4:dd:8c:3a:94:64:d0:86:1e:be:60:75:5f:c3:c6: 20:d6:61:df:d7:42:e1:87:99:bc:81:84:eb:5c:87: d2:7d:99:f2:bd:b2:af:5a:00:be:54:17:c3:ed:4f: d4:20:4f:5b:a7:b2:e9:8f:c9:5e:b2:cd:70:de:eb: a6:e8:92:7f:f5:d0:93:c7:54:e2:cb:7b:48:cc:99: 37:96:d8:ab:44:ad:0a:9e:2a:39:86:9c:b6:a2:35: f5:4f:58:f6:8d:93:c9:4d:66:5b:04:5e:70:55:8b: 1a:3c:45:f5:85:b7:c4:01:0d:6b:9d:b3:0f:82:20: 4d:19:f1:c9:de:ee:6e:f9:c2:41:a5:cf:ad:bc:bf: ac:dd:e9:fc:d5:ea:31:5b:5a:76:72:b0:83:b3:30: da:96:7e:71:e8:69:c2:98:c4:34:08:d2:c6:68:97: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:15:45:8E:8C:1A:2C:F4:AA:CC:2D:E2:A2:2C:61:AB:87:23:CB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:28:9e:1b:f8:ae:ba:95:9a:c4:82:f2:d6:ff:3d:ab:55:18: d1:45:d3:7a:04:59:68:7f:6a:46:4f:ad:0f:0a:48:2c:a8:5d: eb:cb:80:93:3e:af:d8:6e:f7:32:8d:64:5e:b5:42:8b:99:55: 53:88:78:96:cd:2d:c6:62:70:b1:52:7a:85:fa:08:7b:c7:fb: c5:04:56:df:65:e5:20:50:f2:c4:ae:72:fa:30:f5:6d:97:29: 58:fb:e1:e9:61:3c:65:b6:09:23:d8:9a:90:b4:29:14:4c:5b: d5:1d:23:64:8f:87:fe:e5:d1:09:4a:f9:ec:fd:a1:b5:e4:dd: e7:6c:49:3c:8d:0c:6f:8c:a7:56:56:95:9f:a2:32:1d:b2:c5: 73:50:cb:79:31:f8:68:67:95:4d:4b:cf:b9:07:17:3a:0d:44: 84:32:ee:de:ac:d2:d2:a1:a6:b4:a9:c1:70:12:25:8a:3f:f5: 47:87:be:63:6c:54:f1:c4:c2:4a:8c:d3:a3:f9:84:db:21:39: 4d:7c:2e:57:bd:ce:51:7e:4c:c5:29:d8:78:41:61:1c:fb:5f: a3:0c:86:95:25:f8:d9:df:f2:50:79:07:ec:07:b7:02:66:63: 13:43:b2:80:cb:5f:c4:ef:01:1f:54:f2:5b:1e:a4:b3:d5:08: a8:56:a7:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGPBG8Ev/C03v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk NTMzNjFjMTgtZTExNS00MjM0LWI0YWUtZWYwNjUzZjRiNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TtiRRUtDKS5PpAZLdLUGEia1PuP+p5W3PY5 wf5jNpm42Kws4eM2tx57itUD70aNEKqS186RjzmHFOFwaYvzX5JbI8r9fjD8XB1C cC8ptO+mqMiD04lCl9e03Yw6lGTQhh6+YHVfw8Yg1mHf10Lhh5m8gYTrXIfSfZny vbKvWgC+VBfD7U/UIE9bp7Lpj8less1w3uum6JJ/9dCTx1Tiy3tIzJk3ltirRK0K nio5hpy2ojX1T1j2jZPJTWZbBF5wVYsaPEX1hbfEAQ1rnbMPgiBNGfHJ3u5u+cJB pc+tvL+s3en81eoxW1p2crCDszDaln5x6GnCmMQ0CNLGaJeSzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL8VRY6MGiz0qswt4qIsYauHI8sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvYTcwMDE0MjUtNjk2NS00 YzFmLThlMzUtZjU3OGQxMTIyOTVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADKJ4b+K66lZrEgvLW/z2r VRjRRdN6BFlof2pGT60PCkgsqF3ry4CTPq/YbvcyjWRetUKLmVVTiHiWzS3GYnCx UnqF+gh7x/vFBFbfZeUgUPLErnL6MPVtlylY++HpYTxltgkj2JqQtCkUTFvVHSNk j4f+5dEJSvns/aG15N3nbEk8jQxvjKdWVpWfojIdssVzUMt5MfhoZ5VNS8+5Bxc6 DUSEMu7erNLSoaa0qcFwEiWKP/VHh75jbFTxxMJKjNOj+YTbITlNfC5Xvc5RfkzF Kdh4QWEc+1+jDIaVJfjZ3/JQeQfsB7cCZmMTQ7KAy1/E7wEfVPJbHqSz1QioVqcI -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:47 2025 by rpki-client