$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft File: c0311fc7-1b9e-4472-8780-7822d83e32fc.mft (raw, json) Hash identifier: eGvs7+NNLtTgPQVE5Blg7BrluzKPi6FUyEfcWmM7GzU= Subject key identifier: CD:59:95:7C:A5:96:2B:56:0A:DE:85:8D:51:98:10:61:7B:50:92:3C Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584BBFFEA531E9CD0FDD7A667780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft Manifest number: 010D0C9F4328584073A81FC56BE9847C21180943 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 275dad88-147b-3524-8dd1-125da05ff542.roa (hash: pBIlS1XJwepNVy09PSTzrkVqORitBVba9RrfLGJEMUM=) 2: 3e196079-8695-30ec-97ad-a014098a62f1.roa (hash: /LX8Gexsny8K9K1N3zLCCEDFYfSy5miwUAOyF12RZKk=) 3: 98352e91-c3ba-3a49-b20e-9ea88df7f116.roa (hash: RiZdFEATT4bngC2UrE58LQBGbr6vTfoYTRore9cGr5M=) 4: c0311fc7-1b9e-4472-8780-7822d83e32fc.crl (hash: 6Qb6vVDETFgn+85FDIi2ajMfGtwhc/P83HQSJwsXCpg=) 5: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (hash: kK7oC3YYZwhfpPM7hwKsejNcY/saYyztMPb14o8k+eA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a5:31:e9:cd:0f:dd:7a:66:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=79ea5066-461e-49f5-b0f5-41fad06fcee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:e8:db:91:29:a5:53:7f:78:92:79:78:cd: f0:09:6d:b3:1e:a6:86:cb:2c:15:df:67:b9:7b:dd: 1f:b6:e4:ff:3d:38:2c:6e:6b:4b:c6:46:24:d0:07: 13:6c:d8:0c:96:45:86:e1:73:fd:bb:eb:c6:3a:17: cc:d5:ab:74:f0:9c:a0:4a:6d:c4:d7:7e:35:06:c3: 32:0d:b4:5f:1e:eb:a9:a3:f7:92:5c:e6:8f:47:8d: be:43:e9:22:90:0d:67:7c:47:a5:b0:37:93:00:05: 3a:21:bd:12:09:b7:46:07:d6:5d:31:9a:a0:32:2f: ad:b4:c2:90:2d:fc:6f:8b:ea:91:aa:ca:3f:c3:52: 6a:97:52:a9:65:41:35:3d:c0:96:05:85:8e:09:0f: b3:56:13:15:19:57:49:c8:61:29:d3:76:ad:25:27: 95:5c:1f:63:3a:dd:ea:5c:cd:6b:68:f8:fc:37:1e: 48:f8:c9:f7:75:f4:9c:65:88:f3:57:66:7f:24:24: 80:5e:91:bd:56:bc:dc:ef:60:ad:aa:2e:05:3a:74: c7:38:4f:68:54:39:e5:d1:92:80:06:d6:23:7c:1b: e3:02:b2:11:e1:81:bb:81:19:9a:69:f2:ec:5c:a4: 30:a2:3d:18:9f:9f:7d:84:fd:4a:26:80:dd:70:bb: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:59:95:7C:A5:96:2B:56:0A:DE:85:8D:51:98:10:61:7B:50:92:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:41:06:cc:14:0e:33:0c:e0:82:3d:d9:4c:31:fa:dc:95:de: 75:51:82:72:c0:7e:2a:7c:35:f7:e2:57:b5:e5:3b:4d:6f:8b: 07:1f:f2:ad:de:9f:70:09:02:73:7f:9b:ed:c0:94:71:df:a6: 7e:65:aa:d0:26:78:4c:f1:92:55:2a:f0:fa:a2:0a:d2:bd:c9: 14:d6:6e:37:e7:78:93:74:50:b6:84:6a:12:dd:e5:11:7e:cf: 61:e5:48:fd:0d:12:1f:c5:55:3f:79:59:28:54:d5:ca:1d:db: 77:62:54:cf:e8:42:4a:53:f5:02:0b:c1:78:62:56:83:77:0c: 09:f8:d8:a4:e0:68:ed:09:91:0f:69:9d:8e:71:6f:aa:e2:3d: 8d:22:7d:e7:90:10:59:00:cf:fe:2f:ac:c2:66:17:8b:d1:f0: 2d:03:f6:f1:ae:2e:92:d9:06:90:c4:c0:ed:2f:38:c8:6d:4f: 54:b3:25:7e:c5:bc:50:8b:ef:7b:48:44:66:80:02:43:78:6d: 3b:c8:c1:29:89:ca:8e:16:cd:0f:c7:f0:d2:d1:0a:6e:71:cd: 69:00:0f:bd:7a:1d:d7:32:45:40:e5:b1:c9:73:7a:12:cf:80: b4:da:b5:fb:39:95:50:10:79:3a:f1:e5:b7:2c:26:5b:85:24: d5:bd:6c:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qUx6c0P3Xpmd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk NzllYTUwNjYtNDYxZS00OWY1LWIwZjUtNDFmYWQwNmZjZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPjo25EppVN/eJJ5eM3wCW2zHqaGyywV32e5 e90ftuT/PTgsbmtLxkYk0AcTbNgMlkWG4XP9u+vGOhfM1at08JygSm3E1341BsMy DbRfHuupo/eSXOaPR42+Q+kikA1nfEelsDeTAAU6Ib0SCbdGB9ZdMZqgMi+ttMKQ Lfxvi+qRqso/w1Jql1KpZUE1PcCWBYWOCQ+zVhMVGVdJyGEp03atJSeVXB9jOt3q XM1raPj8Nx5I+Mn3dfScZYjzV2Z/JCSAXpG9Vrzc72Ctqi4FOnTHOE9oVDnl0ZKA BtYjfBvjArIR4YG7gRmaafLsXKQwoj0Yn599hP1KJoDdcLuIYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM1ZlXyllitWCt6FjVGYEGF7UJI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvYzAzMTFmYzctMWI5ZS00 NDcyLTg3ODAtNzgyMmQ4M2UzMmZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkQQbMFA4zDOCCPdlMMfrc ld51UYJywH4qfDX34le15TtNb4sHH/Kt3p9wCQJzf5vtwJRx36Z+ZarQJnhM8ZJV KvD6ogrSvckU1m4353iTdFC2hGoS3eURfs9h5Uj9DRIfxVU/eVkoVNXKHdt3YlTP 6EJKU/UCC8F4YlaDdwwJ+Nik4GjtCZEPaZ2OcW+q4j2NIn3nkBBZAM/+L6zCZheL 0fAtA/bxri6S2QaQxMDtLzjIbU9UsyV+xbxQi+97SERmgAJDeG07yMEpicqOFs0P x/DS0Qpucc1pAA+9eh3XMkVA5bHJc3oSz4C02rX7OZVQEHk68eW3LCZbhSTVvWwD -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:44 2025 by rpki-client