$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: VTFO1IPJ8QjKWdBG1BMGFvbJ6Nq35cg59IvHhaWKgws= Subject key identifier: 80:66:46:66:BD:D8:6C:0E:DC:15:BC:4C:3F:54:62:8C:14:82:73:FE Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584BBEF29AF925951C9207932713 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F18C3 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: RXBvgF24c7ZarK+UYeWgJVWaCqsGYlDKQ2Aem3MkZNc=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: U3zkvr5Q7iDeuddnfCLZiww0bI4kA0c+RjH0MzLie+Q=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: FAvFudVWyiv+gz8/82Md32+ZanGnJSIWq9kZSIvX32Y=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: WcfINdkCPHqkHATuhKLilOwDHRCK2SOdk7ukS/1ai8s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:f9:25:95:1c:92:07:93:27:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=7ed7db36-fd6c-4acc-a700-5d7bb8bba385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:8d:5a:84:a8:51:ed:2f:ee:75:0c:59:1e: b4:c9:1d:b4:39:f9:92:75:64:f4:83:5f:d2:92:4d: 21:2a:e0:06:73:b2:4c:f6:ff:40:4a:b7:ac:ea:e5: d2:be:26:6c:84:4b:95:37:9a:98:de:89:bf:b6:66: 1f:07:53:6f:2f:d0:c2:7e:46:f4:54:c0:fd:e0:5e: 4d:5e:5b:9f:a7:bf:70:7e:c6:62:21:6d:a1:fd:e9: ab:e5:39:83:60:01:6c:cd:09:4c:c6:57:5e:78:4d: f3:fe:3c:c8:f8:02:b8:00:14:67:ab:41:e9:f3:93: 46:22:fb:1a:7b:6a:1f:30:d7:8f:c0:e5:24:98:78: 3d:20:c5:c5:68:62:58:fe:46:6f:16:f4:93:e7:1a: 6f:fd:dd:2a:e1:9c:25:6b:f1:f4:1d:f8:b3:5e:ab: 61:f1:bc:3f:c8:20:2b:1a:d1:dc:a0:bf:00:9b:ab: 23:8f:67:69:a0:43:db:55:39:c6:6b:9c:02:df:d4: d4:c4:ef:1e:2e:af:ea:8f:ab:33:71:d4:6e:84:1a: 04:c0:e1:30:77:fd:f6:2c:40:8e:3e:fb:5e:21:ba: 80:2e:d8:5d:98:5a:1b:66:a3:8f:f6:7d:66:f2:69: c5:94:e6:1a:b0:84:7b:02:47:5f:90:a7:45:c1:74: 59:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:66:46:66:BD:D8:6C:0E:DC:15:BC:4C:3F:54:62:8C:14:82:73:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:69:5a:66:cc:03:80:7b:7d:8f:f4:3e:05:9b:c1:63:40:10: b0:cd:1d:c8:d7:4c:69:a2:fe:49:eb:7d:d2:41:72:ce:ab:96: d2:9e:11:5c:24:0f:a5:e1:eb:f7:3b:07:9c:96:67:2b:0e:ff: 32:1c:9c:7b:63:ea:ac:cb:57:1c:79:80:81:7b:e4:2c:60:1b: 61:30:93:92:a5:3c:b9:e1:fa:cd:12:5f:90:79:de:8b:c3:09: 9b:c8:bc:54:59:5c:46:be:ff:2f:9b:5c:ad:cb:44:02:f4:e6: af:ef:8f:fb:36:53:df:28:46:d6:0d:ed:2c:21:90:dd:bc:6b: 84:75:ca:e8:fd:6f:fd:0a:77:6e:26:5f:f9:13:1a:0f:a6:de: 78:da:99:7e:c5:96:b1:5b:4e:57:85:8f:0b:f2:cb:67:58:f7: f6:a2:49:e9:1a:0a:f2:1b:30:e5:9e:d7:f3:b0:6c:13:09:58: d3:f2:4f:77:1c:74:f2:4e:f0:4b:0b:02:a6:6c:77:26:8f:ff: 39:34:dc:89:48:57:81:b7:0a:68:79:49:e9:d6:5d:84:9b:43: 6c:54:da:81:7e:ef:02:5f:6b:47:ff:2a:27:86:ca:68:03:08: 64:12:d3:b9:d5:90:7e:c8:d6:9a:46:44:72:72:3c:10:c7:39: 88:37:fa:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8pr5JZUckgeTJxMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk N2VkN2RiMzYtZmQ2Yy00YWNjLWE3MDAtNWQ3YmI4YmJhMzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33qNWoSoUe0v7nUMWR60yR20OfmSdWT0g1/S kk0hKuAGc7JM9v9ASres6uXSviZshEuVN5qY3om/tmYfB1NvL9DCfkb0VMD94F5N Xlufp79wfsZiIW2h/emr5TmDYAFszQlMxldeeE3z/jzI+AK4ABRnq0Hp85NGIvsa e2ofMNePwOUkmHg9IMXFaGJY/kZvFvST5xpv/d0q4Zwla/H0HfizXqth8bw/yCAr GtHcoL8Am6sjj2dpoEPbVTnGa5wC39TUxO8eLq/qj6szcdRuhBoEwOEwd/32LECO PvteIbqALthdmFobZqOP9n1m8mnFlOYasIR7AkdfkKdFwXRZgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIBmRma92GwO3BW8TD9UYowUgnP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiaVpmzAOAe32P9D4Fm8Fj QBCwzR3I10xpov5J633SQXLOq5bSnhFcJA+l4ev3OweclmcrDv8yHJx7Y+qsy1cc eYCBe+QsYBthMJOSpTy54frNEl+Qed6LwwmbyLxUWVxGvv8vm1yty0QC9Oav74/7 NlPfKEbWDe0sIZDdvGuEdcro/W/9CnduJl/5ExoPpt542pl+xZaxW05XhY8L8stn WPf2oknpGgryGzDlntfzsGwTCVjT8k93HHTyTvBLCwKmbHcmj/85NNyJSFeBtwpo eUnp1l2Em0NsVNqBfu8CX2tH/yonhspoAwhkEtO51ZB+yNaaRkRycjwQxzmIN/p1 -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:56 2025 by rpki-client