$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft File: da044fca-c418-4088-8a66-0c6896769f77.mft (raw, json) Hash identifier: nGwMUxZvcvX6hsDQEgS39L3qladmt1ai7HxGihUsWpA= Subject key identifier: 47:FF:40:90:A6:BE:C4:12:71:9C:06:33:21:EF:04:53:84:EE:78:BE Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 Certificate issuer: /CN=da044fca-c418-4088-8a66-0c6896769f77 Certificate serial: 010D0C9F4328584BC057FD87C6D795BA733B9E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft Manifest number: 010D0C9F4328584875513DB7F2A2963484295332 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer (hash: O9W3ZL0F+by7Yph6dsOXXSIPaE+dYo6viV4jbfXz5qY=) 2: da044fca-c418-4088-8a66-0c6896769f77.crl (hash: hW2XUWuC9CU+El63t9d5fO3HYss287SPIPxbaz6aDew=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fd:87:c6:d7:95:ba:73:3b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=8373d70e-8600-48d4-af6c-05bb90a1977a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a3:bf:32:41:64:92:b6:f8:2a:6a:88:d1:9a: a6:96:89:7a:20:ea:4b:6b:15:b1:32:a2:c8:e7:c4: cb:3a:bc:96:8d:d8:70:45:69:0f:46:7e:e3:70:db: 83:96:1b:85:ea:73:36:d4:28:05:87:41:99:be:84: d5:3a:19:5c:6e:b0:f9:34:a8:2c:4d:80:fb:72:2a: 0a:28:ee:bd:48:d0:a1:c4:73:72:e1:ce:a8:e9:9d: b0:a3:df:6c:88:a4:d6:38:4f:71:4a:b3:fd:68:54: c6:d8:58:cc:99:db:72:7f:ca:b7:24:da:ad:c8:ee: 02:f0:b8:40:ae:c6:33:8c:8a:5e:f5:91:fd:3c:1e: 3b:35:f6:c5:f0:6e:c1:f2:3d:2a:ee:30:fb:62:9e: 63:31:56:d7:12:53:f4:bd:7f:e0:60:43:83:be:fb: eb:57:7f:6e:cd:13:a6:04:31:52:e2:8b:55:88:e9: 75:3f:37:b2:d3:19:c8:0c:95:b3:28:c9:38:0b:15: 03:52:33:9a:cb:16:97:7f:4c:06:de:c1:c3:8a:32: 8e:8f:f1:36:3e:d5:d5:ee:59:bd:79:9c:41:03:59: dc:fa:b3:a3:1c:25:03:e0:ac:10:f7:67:87:d1:07: e6:00:db:94:07:da:81:9b:ef:57:8e:1e:19:53:84: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FF:40:90:A6:BE:C4:12:71:9C:06:33:21:EF:04:53:84:EE:78:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl X509v3 Authority Key Identifier: keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9a:ed:fe:50:e1:d5:aa:5b:83:a9:10:2b:84:92:e3:dd:cc: aa:bf:6f:b5:93:d2:00:69:51:c3:12:7f:56:06:db:4e:62:67: 31:78:2a:1c:f0:ce:f5:4e:93:5c:6b:b8:26:12:a8:25:03:e2: 37:45:2b:c8:a3:36:9b:5f:cd:2f:22:27:f6:9d:b7:45:73:36: 74:fe:7e:de:f0:33:40:42:4a:28:3f:c6:4b:6d:be:ea:f3:8a: 96:29:65:b4:c1:26:72:37:9f:98:13:e7:45:b2:2c:0b:c5:65: e9:c2:8c:02:cc:af:1c:21:4d:61:74:5d:0f:19:8c:c3:49:f1: 77:cf:d0:00:09:31:f6:77:92:66:76:94:f5:8c:52:3f:13:d7: a5:47:f0:a1:71:2b:ba:be:3e:27:34:af:e6:a4:6b:6f:f6:a9: 7f:1e:67:68:ef:e9:28:9b:2d:a8:72:c1:7c:e8:1e:d2:31:52: 84:c9:b9:54:43:c4:41:b8:b9:2b:32:4e:16:26:eb:b6:0c:40: 26:24:cc:b5:be:20:9c:da:d4:3d:78:8b:0c:99:81:25:2b:7e: 22:c7:fb:60:37:50:b1:bc:20:ba:c2:d1:af:5d:90:ef:c6:b8: 6c:46:e8:d9:f0:2c:55:0d:67:54:bc:46:35:e8:b2:f0:b7:40: 40:f8:b5:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/2HxteVunM7ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwNDRmY2EtYzQxOC00MDg4LThhNjYtMGM2ODk2NzY5 Zjc3MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk ODM3M2Q3MGUtODYwMC00OGQ0LWFmNmMtMDViYjkwYTE5NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6O/MkFkkrb4KmqI0Zqmlol6IOpLaxWxMqLI 58TLOryWjdhwRWkPRn7jcNuDlhuF6nM21CgFh0GZvoTVOhlcbrD5NKgsTYD7cioK KO69SNChxHNy4c6o6Z2wo99siKTWOE9xSrP9aFTG2FjMmdtyf8q3JNqtyO4C8LhA rsYzjIpe9ZH9PB47NfbF8G7B8j0q7jD7Yp5jMVbXElP0vX/gYEODvvvrV39uzROm BDFS4otViOl1Pzey0xnIDJWzKMk4CxUDUjOayxaXf0wG3sHDijKOj/E2PtXV7lm9 eZxBA1nc+rOjHCUD4KwQ92eH0QfmANuUB9qBm+9Xjh4ZU4Rd+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEf/QJCmvsQScZwGMyHvBFOE7ni+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0 NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4OTY3NjlmNzcvZGEwNDRmY2EtYzQxOC00 MDg4LThhNjYtMGM2ODk2NzY5Zjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwNDRmY2EtYzQxOC00MDg4LThh NjYtMGM2ODk2NzY5Zjc3L2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2 OWY3Ny5jcmwwHwYDVR0jBBgwFoAUjcyAYfi6cVkdKmxFPIslnfWf/TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4 OTY3NjlmNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGmu3+UOHVqluDqRArhJLj 3cyqv2+1k9IAaVHDEn9WBttOYmcxeCoc8M71TpNca7gmEqglA+I3RSvIozabX80v Iif2nbdFczZ0/n7e8DNAQkooP8ZLbb7q84qWKWW0wSZyN5+YE+dFsiwLxWXpwowC zK8cIU1hdF0PGYzDSfF3z9AACTH2d5JmdpT1jFI/E9elR/ChcSu6vj4nNK/mpGtv 9ql/Hmdo7+komy2ocsF86B7SMVKEyblUQ8RBuLkrMk4WJuu2DEAmJMy1viCc2tQ9 eIsMmYElK34ix/tgN1CxvCC6wtGvXZDvxrhsRujZ8CxVDWdUvEY16LLwt0BA+LWW -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:48 2025 by rpki-client