$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: 9tnLiEiz4pdVZF5+VoIYIQ+fm3qJDwu5B5bTWBVlUNI= Subject key identifier: 0C:10:55:9F:C6:5B:00:87:8E:B9:AD:4C:1B:AB:02:7A:4C:FC:49:1A Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584BC1287076CD583FA43E088A30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C0966B Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: 9VrrtAp/pzvHxRnzwBIhLWmIrOAcTs1JNfqq2QqGIFw=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: LlJ0/f+T6vbS8FwhHW4TE9joTHofC5pejN11knqDxv8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:70:76:cd:58:3f:a4:3e:08:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=9c1e4e8c-6b85-4454-8e56-c0983cb56416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ec:d8:10:02:68:78:fd:7a:9b:ce:9d:9f:75: 91:b3:71:90:ce:1c:d4:b6:06:9f:12:17:1f:aa:2b: 1b:57:99:b8:c5:50:ba:9d:34:79:2f:11:72:0a:64: 62:e4:d1:95:a9:9d:55:2d:60:e6:d8:85:31:52:16: c9:86:e8:7c:aa:8a:9a:41:d2:85:27:fb:27:75:de: 6c:64:02:c2:a5:ff:46:b8:0f:5f:af:5f:50:4d:c6: 46:c7:8b:05:fc:4a:ed:07:21:04:6d:23:31:20:ac: df:3e:04:ee:fa:22:33:af:19:b3:7a:f3:5c:08:6d: 24:22:62:0f:c0:76:00:5b:8f:be:8e:a2:8a:ca:43: d7:9e:00:15:67:e7:1c:af:13:99:53:34:2e:c8:42: f2:97:fc:f4:4b:17:28:60:9a:99:b0:14:01:0d:3a: 9b:cf:b9:cb:88:56:03:c0:59:1f:0a:46:8c:a2:e7: 2d:8d:f3:76:79:b6:f6:af:dd:7e:8a:90:cb:10:d6: 40:39:04:40:66:09:45:3c:2f:e5:10:4d:e6:68:2f: d7:e3:4a:7b:ad:fd:ce:2d:c0:47:67:bc:c6:a4:01: 50:b6:c3:cd:ab:de:a4:82:5d:82:78:a0:a8:05:c7: ea:f1:7b:e4:e3:5e:08:98:41:43:57:0e:61:b2:70: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:10:55:9F:C6:5B:00:87:8E:B9:AD:4C:1B:AB:02:7A:4C:FC:49:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b9:a4:28:54:88:95:52:80:45:87:26:9d:47:18:e4:6f:50: 8e:14:19:4a:70:6a:45:8c:80:ea:56:b2:f3:10:32:0d:69:f0: f6:80:8b:2d:ff:90:53:a3:29:61:a5:2b:fd:82:df:48:c1:d1: fc:b5:dc:68:cd:62:f8:4a:0c:31:7d:19:cd:63:a8:1f:51:0f: 1e:41:9b:1b:ea:e3:86:73:60:6e:37:83:79:66:af:69:55:cb: 7f:d1:6c:49:6e:eb:fb:4d:a9:62:83:72:57:b4:9a:fb:c1:66: 5a:ed:f8:df:c0:c8:43:a9:0a:ae:82:40:57:b4:6c:b9:ba:42: e4:15:c4:64:36:d3:7e:c6:66:7b:34:f5:60:da:7f:08:93:4b: aa:c0:fd:eb:8c:71:79:ed:3f:9a:c1:32:bf:08:87:51:99:a8: cf:8d:43:48:79:f6:70:e2:a7:b7:b8:98:65:7a:f9:76:81:95: 1d:79:21:af:c9:40:02:62:87:59:b2:79:69:5c:5b:7e:df:8d: 03:72:8b:29:97:f5:2b:99:15:ae:0d:a5:79:75:00:82:80:9b: f7:02:4a:25:5a:3a:eb:ce:1c:53:c2:89:8f:59:09:48:6c:a0: 3e:c2:50:39:5f:bc:4b:aa:d1:78:7e:69:bb:ac:84:64:b3:ff: 34:98:37:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKHB2zVg/pD4IijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk OWMxZTRlOGMtNmI4NS00NDU0LThlNTYtYzA5ODNjYjU2NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOzYEAJoeP16m86dn3WRs3GQzhzUtgafEhcf qisbV5m4xVC6nTR5LxFyCmRi5NGVqZ1VLWDm2IUxUhbJhuh8qoqaQdKFJ/sndd5s ZALCpf9GuA9fr19QTcZGx4sF/ErtByEEbSMxIKzfPgTu+iIzrxmzevNcCG0kImIP wHYAW4++jqKKykPXngAVZ+ccrxOZUzQuyELyl/z0SxcoYJqZsBQBDTqbz7nLiFYD wFkfCkaMouctjfN2ebb2r91+ipDLENZAOQRAZglFPC/lEE3maC/X40p7rf3OLcBH Z7zGpAFQtsPNq96kgl2CeKCoBcfq8Xvk414ImEFDVw5hsnBYgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAwQVZ/GWwCHjrmtTBurAnpM/EkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsuaQoVIiVUoBFhyadRxjk b1COFBlKcGpFjIDqVrLzEDINafD2gIst/5BToylhpSv9gt9IwdH8tdxozWL4Sgwx fRnNY6gfUQ8eQZsb6uOGc2BuN4N5Zq9pVct/0WxJbuv7Talig3JXtJr7wWZa7fjf wMhDqQqugkBXtGy5ukLkFcRkNtN+xmZ7NPVg2n8Ik0uqwP3rjHF57T+awTK/CIdR majPjUNIefZw4qe3uJhlevl2gZUdeSGvyUACYodZsnlpXFt+340Dcospl/UrmRWu DaV5dQCCgJv3AkolWjrrzhxTwomPWQlIbKA+wlA5X7xLqtF4fmm7rIRks/80mDdV -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:16 2025 by rpki-client