$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft File: fd61a214-d867-444e-b2f4-ca291d4c4419.mft (raw, json) Hash identifier: 0NyKMUookRc/+YCTDtCieMQ4v0OH/yjjY3mUs0aZ1OE= Subject key identifier: 8A:42:E9:EB:3D:C1:9D:83:E1:04:0E:AA:54:65:6D:86:D2:D5:5B:F8 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F4328584BC075C937FB634A4ACDE05F60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft Manifest number: 010D0C9F4328584073A828C80957C4AEF0069C1E Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 86181317-6bc3-3829-8e82-a5679c723f33.roa (hash: kyiZynOEBW3gCGdNk/R/k+eXcyAxcqCfO/ZLQF9W91M=) 2: fd61a214-d867-444e-b2f4-ca291d4c4419.crl (hash: XB+IP2EstYcTMD8hYYr2AAMntFTq0sR/VxAzsKQC5Og=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c9:37:fb:63:4a:4a:cd:e0:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=cb3b89e4-0022-4156-acc9-c686684cb5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:01:0e:3b:87:52:cc:35:7f:7f:fb:c0:92: 57:fe:fc:2d:00:0d:e3:50:a6:97:1c:17:46:11:2f: 4a:3b:f5:5f:f6:c5:23:7f:4b:9a:b4:55:94:70:99: 7b:d3:c8:a8:94:06:4f:16:87:b4:86:a3:58:16:29: 7e:07:96:30:39:f2:d7:f0:99:58:63:aa:57:27:bb: 71:ee:b4:bb:36:65:d6:15:7d:77:93:1e:ab:ef:27: 35:be:89:e4:4c:87:cb:fc:83:bb:63:cb:e6:4b:b9: f5:ea:b6:1b:05:0c:62:c2:46:ad:b7:d2:37:25:23: 4d:de:81:b3:ce:9a:dc:cd:75:5f:5e:1f:ac:73:fb: 21:4a:a7:18:1b:da:a8:35:dd:bd:64:42:4e:ee:c7: eb:6a:f1:4f:59:9a:82:c7:3b:3d:31:8f:f5:be:63: b4:fd:f3:51:6d:b6:7b:62:42:ea:b2:f3:1a:89:57: ff:d5:bc:ed:9a:84:00:9f:45:9e:68:4a:38:4e:cb: ff:9d:62:50:49:04:c5:95:8a:9f:39:6e:19:79:71: 95:3c:c3:c3:29:44:47:21:25:35:d9:f7:1a:d3:0d: e7:92:c8:39:d8:fb:71:0c:e5:b4:7f:9e:1b:c3:3b: 65:cc:43:22:cc:9a:67:1d:5b:3d:84:89:73:ad:cb: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:42:E9:EB:3D:C1:9D:83:E1:04:0E:AA:54:65:6D:86:D2:D5:5B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:39:23:8a:41:cd:0f:4d:f5:e9:29:62:94:e0:0c:42:ce:ca: d9:f2:3f:90:e8:bd:4b:75:3a:20:12:56:d6:6b:4c:45:11:b9: a7:9d:f0:30:62:a9:04:15:5a:74:3f:ae:28:74:d3:07:ab:c6: 90:a3:e6:ae:61:d0:c7:44:5e:1d:fa:ea:10:da:f8:79:92:15: 24:6c:f1:12:0c:79:70:85:9c:8f:4f:b9:46:30:77:80:2e:dd: 05:01:70:c6:e0:2a:db:06:0b:57:c4:8f:a8:b0:30:d9:28:7b: 9e:bb:bd:99:4a:46:09:06:26:59:62:cc:10:3e:05:b7:1f:e9: 87:aa:24:0e:54:f5:09:b4:04:da:8d:e3:8f:59:50:ad:78:4b: de:34:f1:99:97:6b:55:c4:9f:bf:27:87:a5:62:0c:a3:c8:25: 8c:78:1c:cd:23:23:53:46:99:72:97:08:a9:8a:71:ee:9f:57: b9:c5:04:38:ba:04:7f:21:79:e9:cf:7c:19:4d:2a:b1:14:35: 87:45:fa:2b:2a:d9:a5:13:88:7f:84:f8:c5:6c:7c:2d:eb:a6: f5:9a:00:be:5d:67:01:c1:82:57:3f:42:9b:7a:ba:9e:b4:03: 62:e0:ce:8c:5d:fc:0f:43:f9:d5:b9:65:29:22:a4:5b:4d:6e: 84:00:e2:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdck3+2NKSs3gX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk Y2IzYjg5ZTQtMDAyMi00MTU2LWFjYzktYzY4NjY4NGNiNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6gBDjuHUsw1f3/7wJJX/vwtAA3jUKaXHBdG ES9KO/Vf9sUjf0uatFWUcJl708iolAZPFoe0hqNYFil+B5YwOfLX8JlYY6pXJ7tx 7rS7NmXWFX13kx6r7yc1vonkTIfL/IO7Y8vmS7n16rYbBQxiwkatt9I3JSNN3oGz zprczXVfXh+sc/shSqcYG9qoNd29ZEJO7sfravFPWZqCxzs9MY/1vmO0/fNRbbZ7 YkLqsvMaiVf/1bztmoQAn0WeaEo4Tsv/nWJQSQTFlYqfOW4ZeXGVPMPDKURHISU1 2fca0w3nksg52PtxDOW0f54bwztlzEMizJpnHVs9hIlzrcv+3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIpC6es9wZ2D4QQOqlRlbYbS1Vv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvZmQ2MWEyMTQtZDg2Ny00 NDRlLWIyZjQtY2EyOTFkNGM0NDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1OSOKQc0PTfXpKWKU4AxC zsrZ8j+Q6L1LdTogElbWa0xFEbmnnfAwYqkEFVp0P64odNMHq8aQo+auYdDHRF4d +uoQ2vh5khUkbPESDHlwhZyPT7lGMHeALt0FAXDG4CrbBgtXxI+osDDZKHueu72Z SkYJBiZZYswQPgW3H+mHqiQOVPUJtATajeOPWVCteEveNPGZl2tVxJ+/J4elYgyj yCWMeBzNIyNTRplylwipinHun1e5xQQ4ugR/IXnpz3wZTSqxFDWHRforKtmlE4h/ hPjFbHwt66b1mgC+XWcBwYJXP0KberqetANi4M6MXfwPQ/nVuWUpIqRbTW6EAOKL -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:04 2025 by rpki-client