$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft File: a29a724c-0ef8-416c-bb2c-359a0122375e.mft (raw, json) Hash identifier: p73ANEy5IXrNL+Gxwr+EyxY75/gub2t9IbfeELC91Hg= Subject key identifier: 20:7A:02:82:79:3E:0B:D6:A4:54:E2:ED:89:CE:75:10:BC:ED:04:FF Authority key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 Certificate issuer: /CN=a29a724c-0ef8-416c-bb2c-359a0122375e Certificate serial: 010D0C9F4328584BBFFEA5D9F06101E6269FD490 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft Manifest number: 010D0C9F43285845C0915449DD71BC1B73136EB3 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa (hash: Na9expUng7Gaw8dzJJA1l23fhikQFvDaCtgrfaMwOcU=) 2: a29a724c-0ef8-416c-bb2c-359a0122375e.crl (hash: ScgqdzkP2GXOLVEpiHJPu6Zvh/GMMEV1SOoea+uWhbY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a5:d9:f0:61:01:e6:26:9f:d4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29a724c-0ef8-416c-bb2c-359a0122375e Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=c790bd6e-35af-4f8d-809e-a9b706cfeaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:be:7d:84:a1:5f:87:52:cc:f7:e8:cc:a3: b7:79:45:ef:82:53:ff:00:3f:4b:66:42:0a:e1:ca: 01:44:c2:e1:b3:5f:66:9a:3d:31:0f:1e:0a:41:a3: 43:da:e7:6b:58:02:31:59:09:a2:97:2c:78:6b:41: cc:0b:d3:a4:04:b7:3e:54:ee:85:66:2d:e1:92:53: ea:79:87:78:80:df:a2:2c:0a:ce:86:a3:0e:9a:5b: e1:28:fa:38:5c:e9:0f:a7:c9:55:c6:3a:be:67:f1: 5c:2d:69:0c:95:5a:20:6c:b9:c5:4d:d9:94:06:98: c6:49:c8:23:d2:28:8f:b4:b7:65:9c:0e:1c:fb:65: 91:c2:4b:7e:1f:ad:79:76:30:35:4b:d8:4d:51:9d: 16:5a:f7:c2:e6:62:ed:11:b0:1a:dc:d4:73:f9:13: 13:aa:3b:7f:9d:12:05:cc:82:96:43:c7:7c:2c:69: 29:1b:c9:3a:94:a2:c1:89:0f:b7:cc:84:13:c5:d0: d4:2c:4b:62:85:32:29:51:ee:23:71:44:24:e1:58: 65:86:ac:02:5a:a5:48:cf:32:2e:a5:ad:55:b6:3d: 19:3d:5f:3a:ef:05:c5:06:38:98:86:0c:62:61:1c: 42:2f:f7:52:af:cc:fc:93:40:97:b1:d6:ce:2b:1c: 37:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:02:82:79:3E:0B:D6:A4:54:E2:ED:89:CE:75:10:BC:ED:04:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl X509v3 Authority Key Identifier: keyid:E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f3:28:63:d9:59:4b:8d:50:5e:aa:1a:a9:54:f9:7c:60:8d: 0f:6f:f1:48:08:a9:d0:9b:b3:e3:06:62:c6:bd:ce:ef:df:bf: 4b:af:4e:2d:58:72:1c:d6:15:bd:a7:69:ab:db:d6:25:43:7e: a4:34:cf:ef:78:79:ae:d4:23:a2:f5:c8:dd:d3:55:64:a9:b8: 2e:5d:67:2b:06:4d:fa:23:bc:79:d7:4a:87:92:f5:ad:53:dc: d0:3d:56:f3:06:72:f4:3f:f1:89:6c:00:95:fd:b5:89:3c:73: e2:4a:af:f8:4e:82:de:0c:ce:c9:50:89:02:76:ee:3b:02:ba: f2:01:0a:57:fa:03:11:65:9c:ec:57:d1:a0:14:a1:3c:69:71: a9:92:f4:88:dc:14:cd:70:be:72:8f:34:d2:60:8b:e9:6c:ce: c1:81:bf:87:e9:26:a2:c9:50:3e:a7:5e:d1:f7:4e:4b:df:0b: 3d:fa:76:98:81:f5:39:53:36:7f:67:fe:59:ba:a7:46:f0:1a: 9b:c0:f5:60:c0:50:a2:7a:bb:cb:22:68:11:a0:e1:81:dd:11: 67:ce:99:a3:27:cd:81:52:c9:38:67:8d:82:c2:34:03:1a:29: 4c:98:0d:c0:a1:0a:a9:94:5d:3d:70:68:5e:b3:e1:8c:81:01: a6:98:82:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qXZ8GEB5iaf1JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5YTcyNGMtMGVmOC00MTZjLWJiMmMtMzU5YTAxMjIz NzVlMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk Yzc5MGJkNmUtMzVhZi00ZjhkLTgwOWUtYTliNzA2Y2ZlYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX++fYShX4dSzPfozKO3eUXvglP/AD9LZkIK 4coBRMLhs19mmj0xDx4KQaND2udrWAIxWQmilyx4a0HMC9OkBLc+VO6FZi3hklPq eYd4gN+iLArOhqMOmlvhKPo4XOkPp8lVxjq+Z/FcLWkMlVogbLnFTdmUBpjGScgj 0iiPtLdlnA4c+2WRwkt+H615djA1S9hNUZ0WWvfC5mLtEbAa3NRz+RMTqjt/nRIF zIKWQ8d8LGkpG8k6lKLBiQ+3zIQTxdDULEtihTIpUe4jcUQk4VhlhqwCWqVIzzIu pa1Vtj0ZPV867wXFBjiYhgxiYRxCL/dSr8z8k0CXsdbOKxw3XwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCB6AoJ5PgvWpFTi7YnOdRC87QT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjlh NzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlhMDEyMjM3NWUvYTI5YTcyNGMtMGVmOC00 MTZjLWJiMmMtMzU5YTAxMjIzNzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTI5YTcyNGMtMGVmOC00MTZjLWJi MmMtMzU5YTAxMjIzNzVlL2EyOWE3MjRjLTBlZjgtNDE2Yy1iYjJjLTM1OWEwMTIy Mzc1ZS5jcmwwHwYDVR0jBBgwFoAU4tGxHBySEApJXuagmu0kotxwWLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMjlhNzI0Yy0wZWY4LTQxNmMtYmIyYy0zNTlh MDEyMjM3NWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR8yhj2VlLjVBeqhqpVPl8 YI0Pb/FICKnQm7PjBmLGvc7v379Lr04tWHIc1hW9p2mr29YlQ36kNM/veHmu1COi 9cjd01VkqbguXWcrBk36I7x510qHkvWtU9zQPVbzBnL0P/GJbACV/bWJPHPiSq/4 ToLeDM7JUIkCdu47ArryAQpX+gMRZZzsV9GgFKE8aXGpkvSI3BTNcL5yjzTSYIvp bM7Bgb+H6SaiyVA+p17R905L3ws9+naYgfU5UzZ/Z/5ZuqdG8BqbwPVgwFCiervL ImgRoOGB3RFnzpmjJ82BUsk4Z42CwjQDGilMmA3AoQqplF09cGhes+GMgQGmmIJw -----END CERTIFICATE-----Generated at Wed Nov 5 09:35:30 2025 by rpki-client