$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft File: 27e70452-5e7e-4070-905f-86c708cbebd5.mft (raw, json) Hash identifier: dM7sSTrwcb1CNIuzCxTaWuUeoxO4IM+5PdRlrNHM0Rc= Subject key identifier: 11:9F:B8:39:37:15:DC:DA:C8:5D:41:68:76:C5:47:1F:BE:2D:D2:4B Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584BC0B1499C7B811E91D321B100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft Manifest number: 010D0C9F43285847C5D06CE8A04E829CA21F7BF6 Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Thu 06 Nov 2025 23:00:00 +0000 Files and hashes: 1: 27e70452-5e7e-4070-905f-86c708cbebd5.crl (hash: zuRqb8qcxPHaii8Tw4ZX0MjUk4ua8uITNMeddkEAnC8=) 2: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (hash: BQb8zPHt8VJ8Pv18I+6OuF7Sx8EW6iLz5dRAZ+bqxpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:49:9c:7b:81:1e:91:d3:21:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 6 23:00:00 2025 GMT Subject: CN=2b9b0d74-612f-4ca2-b800-009e65cb60cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:2d:7b:b9:10:ee:a1:23:92:62:17:d9:69: b2:65:47:c2:5d:c6:7c:81:6d:8e:5d:c9:9d:95:77: 6c:fd:1f:2b:86:32:e9:4b:78:6b:fe:59:92:1c:c3: 8f:f0:2d:03:be:5c:69:10:d2:a7:3e:46:51:e4:e3: cd:73:f6:c4:7e:f7:5d:0c:02:64:38:94:e5:5a:d5: 0f:6d:3b:78:75:ae:a5:2d:2b:e7:3a:b7:2d:e2:ad: c7:1e:d6:85:61:62:b5:ab:0b:e9:93:78:24:26:6a: a4:1c:92:c1:73:34:dd:c9:7e:dc:42:01:de:7d:50: 93:63:88:a5:f3:fa:f4:e3:c2:a5:4c:61:a3:b9:bd: 72:bc:72:e9:ab:a5:05:d5:76:10:f1:b8:6c:63:5c: 49:47:91:14:44:e1:69:b6:31:62:dd:00:bd:eb:c8: ba:6d:fa:f6:a8:10:1d:91:72:e0:8d:77:1b:80:c3: e1:de:b2:80:10:74:41:77:f5:88:1a:b9:f8:4a:49: 7f:d2:b9:5f:77:cf:a5:e5:a3:60:54:0d:c4:94:1e: e6:77:33:ff:32:d6:07:27:62:74:28:ab:89:2f:06: 49:98:cf:7e:9c:a3:03:86:3b:e4:90:14:24:ad:72: 38:fb:f8:aa:dd:30:9a:b1:b0:7b:e0:86:27:41:7f: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9F:B8:39:37:15:DC:DA:C8:5D:41:68:76:C5:47:1F:BE:2D:D2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:55:47:4a:c3:02:bd:8d:74:c8:19:52:7a:66:3d:36:37:59: 71:1a:0a:48:10:ef:28:f5:c7:5a:d6:79:c8:33:88:88:70:32: 15:f4:77:87:42:13:5b:46:84:bd:1d:3c:17:a1:89:20:f7:23: 97:32:c5:d0:ec:7a:13:e9:73:88:56:7b:f7:e6:ca:0a:56:98: d2:2a:27:d7:6a:3e:bd:1b:56:c9:77:6a:62:94:c8:4b:3e:0d: 1c:66:78:5d:2d:51:8d:3b:49:54:d3:ee:9a:bf:58:37:6d:56: d2:58:57:76:0f:6d:fc:48:23:29:d5:3f:3e:9d:3d:67:42:6d: ce:50:5f:71:3f:55:12:fc:de:25:a7:1e:77:d6:20:45:7b:60: fa:06:89:84:ad:ab:17:80:db:7a:21:0d:b4:b4:51:fe:d7:62: 68:50:de:3a:b7:db:9a:13:23:67:75:d4:37:f3:9f:e8:77:69: d0:c6:86:fa:93:c1:2b:7a:db:84:dd:b8:02:72:38:da:e6:dd: b7:75:4c:c6:6d:f9:9f:a2:48:f6:d4:08:47:bf:4c:d2:17:5f: dd:45:91:a6:81:ab:60:55:f0:86:4a:45:26:89:06:6e:cd:70: 29:46:e8:71:02:28:e3:99:b7:04:70:db:e3:4c:84:f4:90:ab: 32:0f:76:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUmce4EekdMhsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNjIzMDAwMFowLzEtMCsGA1UEAxMk MmI5YjBkNzQtNjEyZi00Y2EyLWI4MDAtMDA5ZTY1Y2I2MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhkte7kQ7qEjkmIX2WmyZUfCXcZ8gW2OXcmd lXds/R8rhjLpS3hr/lmSHMOP8C0DvlxpENKnPkZR5OPNc/bEfvddDAJkOJTlWtUP bTt4da6lLSvnOrct4q3HHtaFYWK1qwvpk3gkJmqkHJLBczTdyX7cQgHefVCTY4il 8/r048KlTGGjub1yvHLpq6UF1XYQ8bhsY1xJR5EUROFptjFi3QC968i6bfr2qBAd kXLgjXcbgMPh3rKAEHRBd/WIGrn4Skl/0rlfd8+l5aNgVA3ElB7mdzP/MtYHJ2J0 KKuJLwZJmM9+nKMDhjvkkBQkrXI4+/iq3TCasbB74IYnQX/9WQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBGfuDk3FdzayF1BaHbFRx++LdJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvMjdlNzA0NTItNWU3ZS00 MDcwLTkwNWYtODZjNzA4Y2JlYmQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaVUdKwwK9jXTIGVJ6Zj02 N1lxGgpIEO8o9cda1nnIM4iIcDIV9HeHQhNbRoS9HTwXoYkg9yOXMsXQ7HoT6XOI Vnv35soKVpjSKifXaj69G1bJd2pilMhLPg0cZnhdLVGNO0lU0+6av1g3bVbSWFd2 D238SCMp1T8+nT1nQm3OUF9xP1US/N4lpx531iBFe2D6BomErasXgNt6IQ20tFH+ 12JoUN46t9uaEyNnddQ385/od2nQxob6k8EretuE3bgCcjja5t23dUzGbfmfokj2 1AhHv0zSF1/dRZGmgatgVfCGSkUmiQZuzXApRuhxAijjmbcEcNvjTIT0kKsyD3ZH -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:24 2025 by rpki-client