$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft File: ab0439ab-3236-4080-a238-62d21f65e1ad.mft (raw, json) Hash identifier: o0bGkrnGcijlO02CwQRQtUJDcTZt8C/fvzuWeu21e3o= Subject key identifier: 56:8B:60:70:31:63:E5:A7:CB:E1:09:03:5C:C6:CD:24:67:68:CC:F8 Authority key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Certificate issuer: /CN=ab0439ab-3236-4080-a238-62d21f65e1ad Certificate serial: 010D0C9F4328584BC19F84305BA8A2B8C37F04C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft Manifest number: 010D0C9F4328584073A844EDAD74ADED79EBCA23 Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Sat 08 Nov 2025 07:00:00 +0000 Files and hashes: 1: 7ef25e37-4a09-3253-a970-a0546e63a3fe.roa (hash: Tav8n0P92a19G5b6M5ceHoIOBeQP33IdkT0MtGPl2Cw=) 2: ab0439ab-3236-4080-a238-62d21f65e1ad.crl (hash: TY4OKgi8lrmGcknCPMMrPnw1S4HehOs8dEoyfOnRasA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:84:30:5b:a8:a2:b8:c3:7f:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 8 07:00:00 2025 GMT Subject: CN=38d19d1e-d859-48a0-8fbc-cd81497a1ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:63:b5:d1:3a:2e:f5:4d:63:d1:6a:3f:4c: 89:a6:84:ef:62:08:a6:ea:04:e6:45:24:34:27:13: f4:7a:3d:2a:4f:02:8c:3e:10:35:40:b2:25:1f:a1: 2d:55:f4:43:f6:9c:82:98:70:90:e8:9c:10:29:b1: 2e:fb:61:fb:44:1f:95:0c:ca:2d:e0:a4:84:a7:c8: 11:23:f5:54:33:ef:7f:18:7c:63:b5:94:fc:a2:08: 73:a9:d7:9c:00:86:d0:c6:40:92:b5:00:36:27:f0: 93:31:91:31:30:10:46:df:b6:94:b5:d4:22:f4:9c: 5a:aa:3e:4f:ee:ee:0e:7b:5d:f9:2f:72:44:de:a2: 02:1a:9a:78:9d:1d:a8:81:57:df:ab:c7:7a:54:1c: 7d:38:72:e9:f0:f4:83:b0:b5:ee:58:ec:b5:84:c6: 1f:bd:ca:e1:1c:48:9e:9f:be:df:09:67:32:3f:ac: dd:00:ed:1e:78:f8:9e:24:58:17:ec:5d:b8:50:58: b9:46:8b:72:73:f8:2b:27:64:f6:b4:8f:30:f6:48: 0f:41:b2:e9:b6:e8:e3:e0:d0:38:e3:2a:d2:81:56: 87:7f:49:51:43:e7:de:b4:53:ee:01:eb:21:d1:9e: af:aa:50:87:16:b9:a2:3e:78:f1:2b:92:7d:d0:aa: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8B:60:70:31:63:E5:A7:CB:E1:09:03:5C:C6:CD:24:67:68:CC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl X509v3 Authority Key Identifier: keyid:17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:21:f6:d2:44:45:c5:1a:99:82:25:32:be:c0:61:9d:45:26: fc:a0:17:ae:03:e7:b3:14:55:28:dd:d9:63:58:92:66:08:67: 63:ed:7d:83:85:62:48:63:9d:5f:71:a9:b7:07:43:b0:b4:03: 5a:62:e5:6a:17:c5:f4:90:48:cf:54:55:4e:4a:8c:df:3f:5f: 8a:29:89:03:b3:06:6e:b6:2b:2f:68:52:04:8b:8f:d6:38:26: 7c:7d:2a:9e:7a:28:59:0b:8e:39:84:65:da:43:5f:df:5b:84: 49:e4:8d:49:b6:5b:5c:31:63:cf:65:d2:97:79:c3:28:ba:16: ae:3e:70:f7:e0:fc:54:a8:c7:13:3d:90:4b:54:ff:28:e2:28: 21:3f:7d:a1:b8:4c:2a:d5:cd:45:80:ba:e2:f5:c5:12:0a:09: 69:0d:2b:86:dc:84:9e:69:63:5e:dc:9b:d3:2a:de:21:41:f4: e9:b2:cf:11:c7:e6:01:77:ba:67:ef:12:f3:70:f1:f3:63:c0: 5c:9a:df:6f:e3:f3:e3:c2:78:8c:57:89:b1:3c:18:25:41:d6: 3e:cf:0e:8f:3d:ab:fa:b9:d8:28:27:0b:76:e9:7d:a3:ff:4e: b6:e4:52:ec:da:13:7e:03:32:29:c2:ca:a3:9c:4a:34:f3:65: d8:dc:76:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4QwW6iiuMN/BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVl MWFkMB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwODA3MDAwMFowLzEtMCsGA1UEAxMk MzhkMTlkMWUtZDg1OS00OGEwLThmYmMtY2Q4MTQ5N2ExZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmpjtdE6LvVNY9FqP0yJpoTvYgim6gTmRSQ0 JxP0ej0qTwKMPhA1QLIlH6EtVfRD9pyCmHCQ6JwQKbEu+2H7RB+VDMot4KSEp8gR I/VUM+9/GHxjtZT8oghzqdecAIbQxkCStQA2J/CTMZExMBBG37aUtdQi9Jxaqj5P 7u4Oe135L3JE3qICGpp4nR2ogVffq8d6VBx9OHLp8PSDsLXuWOy1hMYfvcrhHEie n77fCWcyP6zdAO0eePieJFgX7F24UFi5Rotyc/grJ2T2tI8w9kgPQbLptujj4NA4 4yrSgVaHf0lRQ+fetFPuAesh0Z6vqlCHFrmiPnjxK5J90KpKyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFaLYHAxY+Wny+EJA1zGzSRnaMz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0 MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvYWIwNDM5YWItMzIzNi00 MDgwLWEyMzgtNjJkMjFmNjVlMWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIwNDM5YWItMzIzNi00MDgwLWEy MzgtNjJkMjFmNjVlMWFkL2FiMDQzOWFiLTMyMzYtNDA4MC1hMjM4LTYyZDIxZjY1 ZTFhZC5jcmwwHwYDVR0jBBgwFoAUF0Cy9uReLQ26ZzruEeAYaMPwXa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQy MWY2NWUxYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjIfbSREXFGpmCJTK+wGGd RSb8oBeuA+ezFFUo3dljWJJmCGdj7X2DhWJIY51fcam3B0OwtANaYuVqF8X0kEjP VFVOSozfP1+KKYkDswZutisvaFIEi4/WOCZ8fSqeeihZC445hGXaQ1/fW4RJ5I1J tltcMWPPZdKXecMouhauPnD34PxUqMcTPZBLVP8o4ighP32huEwq1c1FgLri9cUS CglpDSuG3ISeaWNe3JvTKt4hQfTpss8Rx+YBd7pn7xLzcPHzY8Bcmt9v4/PjwniM V4mxPBglQdY+zw6PPav6udgoJwt26X2j/0625FLs2hN+AzIpwsqjnEo082XY3HbN -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:02 2025 by rpki-client