$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f/7e907d33-7f73-482e-9b65-732f6b83780f.mft File: 7e907d33-7f73-482e-9b65-732f6b83780f.mft (raw, json) Hash identifier: fY6T86MlkwCCF8eruXFOUDBiz80KI1F1fM5GEmPMljo= Subject key identifier: 45:65:34:96:32:71:04:0F:EE:B7:07:C1:A8:9B:3B:AD:21:34:E3:02 Authority key identifier: 4E:D4:2D:DA:41:BE:51:4F:A8:2C:A3:88:EF:22:C8:86:57:A6:3A:49 Certificate issuer: /CN=7e907d33-7f73-482e-9b65-732f6b83780f Certificate serial: 010D0C9F4328584BBFA5533CE33D12AFE9585B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f/7e907d33-7f73-482e-9b65-732f6b83780f.mft Manifest number: 010D0C9F432858473399D6051E4D580B675F14EB Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 52509914-43df-3e1f-9f36-d5997aa4e591.roa (hash: 5ZOF9S9gE0/Mar0Tw48/ZStZetPUfXvQAyAKKwmSq6Q=) 2: 7e907d33-7f73-482e-9b65-732f6b83780f.crl (hash: S5hGeDO3XMC+93h+8nVZYtFx6fQGlzcxOquy7pxZYds=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f/7e907d33-7f73-482e-9b65-732f6b83780f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f/7e907d33-7f73-482e-9b65-732f6b83780f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:53:3c:e3:3d:12:af:e9:58:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e907d33-7f73-482e-9b65-732f6b83780f Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=fcb67d91-26ff-4441-886f-daac6f2be6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:05:c2:16:b2:75:fa:da:13:7e:03:5c:47: 79:f1:78:4c:0f:80:6a:17:ba:21:b6:13:17:29:87: c2:b2:4f:b9:b1:ca:4b:fa:1c:fd:bd:67:e2:0d:57: f5:ee:e7:a6:ea:fb:0d:b5:7b:34:84:2f:4d:f0:6d: b4:f9:a5:20:19:06:44:e1:c0:a5:24:fa:45:41:90: 44:5c:44:1c:21:15:fd:5a:01:83:3e:16:c3:f6:ab: 89:4e:96:d3:fb:6e:0f:c7:f0:4d:36:00:2f:81:f8: 20:38:70:84:0a:2c:f4:15:9f:33:59:19:64:04:eb: 1a:f6:b3:f3:e1:56:a7:1d:6a:a5:78:37:18:f1:77: c3:7b:0b:34:b2:4e:c7:b8:5f:cd:b6:fe:b0:fc:e1: 02:15:17:8a:6d:66:69:46:64:f2:3c:a4:af:37:1e: 3b:39:3a:06:91:dc:fb:aa:bb:94:b9:55:b1:c5:41: cd:90:1b:bf:f3:fc:a0:76:44:14:d5:29:b5:fb:d4: 20:47:0a:b0:18:c2:b2:93:8d:a7:f0:15:01:d0:08: 5f:21:ae:a1:f3:f1:88:8b:7a:04:6f:14:42:56:20: 25:d6:da:b6:46:40:9d:1c:56:f9:97:6d:cc:b6:db: fc:47:71:0c:6c:29:84:27:72:c4:fe:de:21:9d:4c: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:34:96:32:71:04:0F:EE:B7:07:C1:A8:9B:3B:AD:21:34:E3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f/7e907d33-7f73-482e-9b65-732f6b83780f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f/7e907d33-7f73-482e-9b65-732f6b83780f.crl X509v3 Authority Key Identifier: keyid:4E:D4:2D:DA:41:BE:51:4F:A8:2C:A3:88:EF:22:C8:86:57:A6:3A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7e907d33-7f73-482e-9b65-732f6b83780f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b5:0d:68:02:2f:bc:10:49:78:54:66:30:99:fb:18:a6:22: 12:63:b3:88:9d:77:76:74:0c:e7:b6:1b:17:4b:23:94:cd:b8: 73:c3:09:7f:97:8c:22:69:8e:89:8d:62:f1:a3:2f:5b:43:bb: 96:70:69:99:8b:09:7b:c2:35:d4:ac:de:e9:c4:54:9c:2a:41: 38:90:fd:96:d5:cb:a8:ae:66:95:35:01:f2:d2:f1:ca:b2:fb: 01:c6:86:65:e3:78:73:95:74:9b:d3:0c:60:86:7e:a9:8e:08: 8a:87:6f:9d:cc:5a:c8:48:6c:d9:91:82:b9:16:43:1d:0f:ff: 6d:b0:db:52:27:68:51:87:26:54:0e:21:d1:05:93:1f:b6:53: 16:75:08:3b:78:80:ff:b6:f7:1b:9a:84:63:c3:d4:02:6f:4e: c0:b2:ad:60:ad:20:00:34:b8:45:d6:59:44:91:f1:0f:36:26: f3:3b:73:ff:41:23:f8:db:17:41:e6:8a:a2:40:e7:b8:d6:c0: 80:24:6d:c2:bf:b4:a8:74:6d:c6:67:e8:f1:e8:1c:5e:7c:7c: ff:5c:2a:c6:64:ee:77:c5:22:30:6c:c5:6f:ee:16:90:dd:cd: 63:c4:13:22:c6:21:68:4d:2e:d5:1d:fc:81:52:e7:70:11:fb: 59:aa:c3:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVM84z0Sr+lYWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5MDdkMzMtN2Y3My00ODJlLTliNjUtNzMyZjZiODM3 ODBmMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk ZmNiNjdkOTEtMjZmZi00NDQxLTg4NmYtZGFhYzZmMmJlNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr50FwhaydfraE34DXEd58XhMD4BqF7ohthMX KYfCsk+5scpL+hz9vWfiDVf17uem6vsNtXs0hC9N8G20+aUgGQZE4cClJPpFQZBE XEQcIRX9WgGDPhbD9quJTpbT+24Px/BNNgAvgfggOHCECiz0FZ8zWRlkBOsa9rPz 4VanHWqleDcY8XfDews0sk7HuF/Ntv6w/OECFReKbWZpRmTyPKSvNx47OToGkdz7 qruUuVWxxUHNkBu/8/ygdkQU1Sm1+9QgRwqwGMKyk42n8BUB0AhfIa6h8/GIi3oE bxRCViAl1tq2RkCdHFb5l23Mttv8R3EMbCmEJ3LE/t4hnUzNowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVlNJYycQQP7rcHwaibO60hNOMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZTkw N2QzMy03ZjczLTQ4MmUtOWI2NS03MzJmNmI4Mzc4MGYvN2U5MDdkMzMtN2Y3My00 ODJlLTliNjUtNzMyZjZiODM3ODBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2U5MDdkMzMtN2Y3My00ODJlLTli NjUtNzMyZjZiODM3ODBmLzdlOTA3ZDMzLTdmNzMtNDgyZS05YjY1LTczMmY2Yjgz NzgwZi5jcmwwHwYDVR0jBBgwFoAUTtQt2kG+UU+oLKOI7yLIhlemOkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZTkwN2QzMy03ZjczLTQ4MmUtOWI2NS03MzJm NmI4Mzc4MGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxtQ1oAi+8EEl4VGYwmfsY piISY7OInXd2dAznthsXSyOUzbhzwwl/l4wiaY6JjWLxoy9bQ7uWcGmZiwl7wjXU rN7pxFScKkE4kP2W1cuormaVNQHy0vHKsvsBxoZl43hzlXSb0wxghn6pjgiKh2+d zFrISGzZkYK5FkMdD/9tsNtSJ2hRhyZUDiHRBZMftlMWdQg7eID/tvcbmoRjw9QC b07Asq1grSAANLhF1llEkfEPNibzO3P/QSP42xdB5oqiQOe41sCAJG3Cv7SodG3G Z+jx6BxefHz/XCrGZO53xSIwbMVv7haQ3c1jxBMixiFoTS7VHfyBUudwEftZqsNS -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:19 2025 by rpki-client