$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft File: 44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft (raw, json) Hash identifier: PHhRKPhCkHk+LAggJ0cRraYlUTdZFu3eUcXP4NL6jU0= Subject key identifier: 20:A8:AC:05:0D:57:F5:26:1F:2F:E2:94:53:4B:33:31:33:AD:15:2B Authority key identifier: D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC Certificate issuer: /CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5 Certificate serial: 010D0C9F4328584BC03A2D5A4B74257F3D606500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft Manifest number: 010D0C9F43285847772142B4CAAF77A08BD30451 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Thu 06 Nov 2025 19:00:00 +0000 Files and hashes: 1: 44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl (hash: skXUTaYh1WpQl6LxqyMeFu0JpSltT8V/euIBzPorWeE=) 2: 79feea74-1d7a-36a9-8d6d-3fb485b20383.roa (hash: ofKdOcwpbI0okPJrxb7Ov9G2h3IOX5V6HCUKP5Ptclc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:5a:4b:74:25:7f:3d:60:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 6 19:00:00 2025 GMT Subject: CN=f24fa73a-9a21-4500-ba57-56bd4f6719dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5a:cf:59:98:99:b8:e0:9f:ab:73:73:d5:be: f1:f5:43:51:d2:11:29:d9:a4:28:ce:4d:5d:cd:ac: 22:fa:b5:cf:4a:58:6c:38:84:43:38:e0:66:75:aa: 8d:d7:5d:df:8c:86:f9:8a:26:f3:ae:8e:6d:1f:ba: b9:1c:17:37:87:17:f2:85:42:00:e5:7f:79:7c:50: cc:34:3c:8b:15:45:40:ab:44:20:12:31:5a:40:1e: ee:9f:62:20:ab:4e:75:2f:86:c5:4d:6b:44:99:41: 46:62:93:d5:b2:53:1e:67:09:5b:dd:50:0a:24:9e: a0:67:92:c2:96:09:a8:b1:19:d1:47:a7:78:12:9c: 5e:ea:45:7d:e9:9a:83:0d:7e:c2:32:d9:39:ac:61: c0:ff:71:99:ca:00:9c:31:17:a6:c0:b9:0b:10:d0: db:80:ef:52:9b:1f:d4:a4:c2:dc:d3:c4:b5:99:c6: 8a:9c:59:0c:33:97:a5:fa:7b:d9:1d:48:3b:ed:3f: fe:db:8e:f1:4a:f3:29:cd:69:02:fd:c9:89:db:9c: c1:c7:dd:95:df:52:24:47:1d:be:4d:40:17:7a:b8: 8c:07:0f:cc:8e:79:fc:80:89:91:a6:37:20:ca:6d: aa:66:38:c2:aa:87:87:b1:1e:89:06:43:ce:ab:57: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A8:AC:05:0D:57:F5:26:1F:2F:E2:94:53:4B:33:31:33:AD:15:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl X509v3 Authority Key Identifier: keyid:D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bc:10:53:78:68:8c:71:38:f8:d4:4f:12:e6:aa:e5:1e:c9: 08:45:22:52:64:c0:6d:24:c8:03:05:40:e1:b3:67:dc:1e:b3: 10:16:57:3d:62:ea:b8:d8:a3:53:94:5d:43:a7:32:c6:07:31: 30:f0:04:ac:5e:32:7e:ab:57:ae:29:66:a4:21:c8:0d:63:ee: b3:4c:83:66:52:14:1e:91:9f:20:7d:0a:aa:49:4b:31:bb:fa: fe:b4:31:fa:02:d7:aa:ba:7c:3a:7a:87:47:6b:3e:2b:10:3c: 1d:db:33:a3:47:21:ed:ec:68:8d:97:f4:16:10:29:5a:fa:62: d9:27:39:5c:5a:58:6e:da:42:d5:b2:11:a2:5a:ba:d8:a0:e1: d5:cd:07:42:ab:18:29:b4:d4:66:8b:f5:c7:91:49:7b:33:64: f0:a3:b2:0a:7b:c4:36:4c:61:18:ec:e5:63:26:9f:cb:9b:c8: 73:e2:f9:ef:1a:6b:e0:1a:db:ec:1c:ac:0c:53:32:b0:ac:be: 3c:66:de:7d:81:cc:38:a6:ef:80:3c:b2:fe:da:40:49:b3:30: 25:73:56:39:4c:cc:b7:08:50:99:ad:47:12:3d:4d:85:fe:3f: 06:bc:01:a4:3f:92:f3:df:a1:60:39:91:74:45:2f:cd:f1:b1: e5:86:7c:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi1aS3Qlfz1gZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiOTIxZjctNjVkZC00YjMzLWIzOTktOWQzNzJmYjRh OWU1MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNjE5MDAwMFowLzEtMCsGA1UEAxMk ZjI0ZmE3M2EtOWEyMS00NTAwLWJhNTctNTZiZDRmNjcxOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lrPWZiZuOCfq3Nz1b7x9UNR0hEp2aQozk1d zawi+rXPSlhsOIRDOOBmdaqN113fjIb5iibzro5tH7q5HBc3hxfyhUIA5X95fFDM NDyLFUVAq0QgEjFaQB7un2Igq051L4bFTWtEmUFGYpPVslMeZwlb3VAKJJ6gZ5LC lgmosRnRR6d4Epxe6kV96ZqDDX7CMtk5rGHA/3GZygCcMRemwLkLENDbgO9Smx/U pMLc08S1mcaKnFkMM5el+nvZHUg77T/+247xSvMpzWkC/cmJ25zBx92V31IkRx2+ TUAXeriMBw/Mjnn8gImRpjcgym2qZjjCqoeHsR6JBkPOq1c1RQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCCorAUNV/UmHy/ilFNLMzEzrRUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGI5 MjFmNy02NWRkLTRiMzMtYjM5OS05ZDM3MmZiNGE5ZTUvNDRiOTIxZjctNjVkZC00 YjMzLWIzOTktOWQzNzJmYjRhOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRiOTIxZjctNjVkZC00YjMzLWIz OTktOWQzNzJmYjRhOWU1LzQ0YjkyMWY3LTY1ZGQtNGIzMy1iMzk5LTlkMzcyZmI0 YTllNS5jcmwwHwYDVR0jBBgwFoAU18/Lg1PgOa7sPm+PHXgsUlHxS6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGI5MjFmNy02NWRkLTRiMzMtYjM5OS05ZDM3 MmZiNGE5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFvBBTeGiMcTj41E8S5qrl HskIRSJSZMBtJMgDBUDhs2fcHrMQFlc9Yuq42KNTlF1DpzLGBzEw8ASsXjJ+q1eu KWakIcgNY+6zTINmUhQekZ8gfQqqSUsxu/r+tDH6Atequnw6eodHaz4rEDwd2zOj RyHt7GiNl/QWECla+mLZJzlcWlhu2kLVshGiWrrYoOHVzQdCqxgptNRmi/XHkUl7 M2Two7IKe8Q2TGEY7OVjJp/Lm8hz4vnvGmvgGtvsHKwMUzKwrL48Zt59gcw4pu+A PLL+2kBJszAlc1Y5TMy3CFCZrUcSPU2F/j8GvAGkP5Lz36FgOZF0RS/N8bHlhnw3 -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:07 2025 by rpki-client