$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft File: f0ba84c0-5d44-4547-a368-e574b20611e4.mft (raw, json) Hash identifier: It+XTxtRc0PM9xWWnxH2Ka41rloE298Tmz4vFnnYFSo= Subject key identifier: 94:C4:43:A6:A1:16:CB:FE:5A:E5:EB:17:E5:0A:BA:15:DA:0E:FF:A9 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584BBF10612E7757EF4C00F73A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft Manifest number: 010D0C9F4328584073A84A8F170EC439FD54A292 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: f0ba84c0-5d44-4547-a368-e574b20611e4.crl (hash: iBDSHOcy61nPT6JHeoVhmMexYAap6fEUIat6DzL5IoY=) 2: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (hash: DslSFJUg7vk3v0aMzu3qZl2hhGbTuFny1xA00Kf7ogU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:61:2e:77:57:ef:4c:00:f7:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=45d41676-f3d0-4e2a-9042-62867e3c2e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:c2:95:80:cd:17:d5:5d:81:83:b3:e6:93: f3:87:16:45:13:42:92:c2:8f:cd:6e:1b:9e:12:c9: 42:bb:3a:e7:25:38:32:cd:86:ca:ab:10:58:6a:e1: ac:22:9e:15:2a:4f:eb:e4:8e:57:4a:43:12:46:3e: 6d:ce:74:35:4f:2a:09:0e:39:80:0b:6d:73:47:06: 74:e0:28:f7:b3:cf:c3:d0:b7:10:9e:30:56:75:8b: 20:26:8c:fb:31:d4:f5:b5:b7:c6:d5:af:80:57:e6: 70:36:9b:50:5e:c7:ba:65:6a:6a:53:84:a2:20:f1: 74:e4:f6:f3:7c:5e:2f:8e:a3:ff:b7:e3:57:c3:5c: 1d:31:5b:a3:35:e2:63:ea:32:18:d1:e8:9c:b6:12: 00:f3:dc:f0:95:7a:5e:08:4e:fe:c2:a6:13:47:64: 23:48:bb:55:6d:e2:dc:b8:e1:70:7f:90:96:97:4c: 55:5f:15:27:0f:2a:fd:bc:a5:2c:26:29:66:e3:ef: 1a:f8:a0:d6:4a:8b:0c:67:06:00:8f:d9:0a:9a:e9: fc:25:56:89:20:9a:f5:a8:8f:fa:0f:23:ec:db:fc: 70:1b:cb:6f:6d:3e:86:af:e6:0a:92:22:af:db:09: be:9d:60:65:4a:35:f1:6a:fc:ad:f5:24:2c:0b:b7: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:43:A6:A1:16:CB:FE:5A:E5:EB:17:E5:0A:BA:15:DA:0E:FF:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ef:fa:a5:c3:b0:a7:8c:16:ab:38:5b:f7:7b:b4:91:ba:bc: 29:b7:c6:b5:43:ea:72:16:f0:2a:72:55:ad:0f:61:46:d4:0f: 17:24:2b:f2:7f:01:1a:a4:ee:d7:fe:8c:b3:67:f4:18:e9:af: 98:fa:d7:fa:46:51:0f:93:8f:87:3f:d6:87:5a:4c:d2:7f:ca: ef:5a:d5:fd:67:45:bb:2c:87:22:cb:15:50:b4:97:8c:25:2a: 30:33:b5:76:2b:6a:22:d4:94:0b:3d:6a:b9:66:17:67:3b:83: 50:fc:66:6a:19:96:2a:be:fb:f6:0e:f9:0f:e1:76:19:75:ce: 3f:53:80:ba:a6:9d:26:47:b7:58:05:6a:98:40:69:a1:78:d0: 51:30:77:f3:f3:3c:89:43:76:b4:12:53:df:86:99:89:74:9c: ae:6f:54:c3:f7:c8:fb:1d:1e:53:77:60:0f:85:96:eb:79:bb: 15:78:0b:a3:0b:a2:43:f6:38:29:ee:ad:a9:e1:95:ba:e8:bb: 37:d6:dc:5b:b0:e9:03:41:b3:91:2c:b3:28:39:3e:22:b1:59: 2b:ab:94:dc:81:16:3b:b1:94:8b:6e:ed:e0:5b:63:3c:73:ed: f6:c4:78:a2:d2:14:34:5f:1d:33:cc:6d:f3:89:1e:f1:45:6f: 07:ca:44:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGEud1fvTAD3OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk NDVkNDE2NzYtZjNkMC00ZTJhLTkwNDItNjI4NjdlM2MyZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukjClYDNF9VdgYOz5pPzhxZFE0KSwo/Nbhue EslCuzrnJTgyzYbKqxBYauGsIp4VKk/r5I5XSkMSRj5tznQ1TyoJDjmAC21zRwZ0 4Cj3s8/D0LcQnjBWdYsgJoz7MdT1tbfG1a+AV+ZwNptQXse6ZWpqU4SiIPF05Pbz fF4vjqP/t+NXw1wdMVujNeJj6jIY0eicthIA89zwlXpeCE7+wqYTR2QjSLtVbeLc uOFwf5CWl0xVXxUnDyr9vKUsJilm4+8a+KDWSosMZwYAj9kKmun8JVaJIJr1qI/6 DyPs2/xwG8tvbT6Gr+YKkiKv2wm+nWBlSjXxavyt9SQsC7f+yQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJTEQ6ahFsv+WuXrF+UKuhXaDv+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjBiYTg0YzAtNWQ0NC00 NTQ3LWEzNjgtZTU3NGIyMDYxMWU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBB7/qlw7CnjBarOFv3e7SR urwpt8a1Q+pyFvAqclWtD2FG1A8XJCvyfwEapO7X/oyzZ/QY6a+Y+tf6RlEPk4+H P9aHWkzSf8rvWtX9Z0W7LIciyxVQtJeMJSowM7V2K2oi1JQLPWq5ZhdnO4NQ/GZq GZYqvvv2DvkP4XYZdc4/U4C6pp0mR7dYBWqYQGmheNBRMHfz8zyJQ3a0ElPfhpmJ dJyub1TD98j7HR5Td2APhZbrebsVeAujC6JD9jgp7q2p4ZW66Ls31txbsOkDQbOR LLMoOT4isVkrq5TcgRY7sZSLbu3gW2M8c+32xHii0hQ0Xx0zzG3ziR7xRW8HykSI -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:56 2025 by rpki-client