$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft File: 452d8948-a48b-4a64-bb88-5c289408944c.mft (raw, json) Hash identifier: Ilokef1io3vNrmYfGbWF9n0q1NksUF0yDP/6usiBrj8= Subject key identifier: A5:65:94:8F:E1:50:96:8B:00:13:54:FA:10:15:FD:26:D5:48:6D:D7 Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63 Certificate issuer: /CN=452d8948-a48b-4a64-bb88-5c289408944c Certificate serial: 010D0C9F4328584BBED4E0E1C8C29FF35AFC3C30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft Manifest number: 010D0C9F4328584073A845E2B75342A457BB9C24 Signing time: Tue 04 Nov 2025 07:00:09 +0000 Manifest this update: Tue 04 Nov 2025 07:00:09 +0000 Manifest next update: Thu 06 Nov 2025 07:00:00 +0000 Files and hashes: 1: 452d8948-a48b-4a64-bb88-5c289408944c.crl (hash: wAQZatYKP44SJRcYQ8bsZh6uxrb5uJkUfCTdccNT6IE=) 2: 97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (hash: sNJc1Olt8vOzK3WTbH/IMxg4wzx/Os/eI0oIhrgtn+I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:d4:e0:e1:c8:c2:9f:f3:5a:fc:3c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c Validity Not Before: Nov 4 07:00:09 2025 GMT Not After : Nov 6 07:00:00 2025 GMT Subject: CN=421ba550-3176-489a-820f-219ea1ca7d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:53:b8:64:1b:1e:72:19:54:84:47:91:06: 78:5f:92:1f:c7:5a:9e:2a:56:03:17:05:6e:18:54: f3:fb:8f:27:11:57:31:7e:8b:1a:ae:e2:fa:1f:bf: f6:8e:2f:4f:69:80:3d:b2:a5:c7:05:d7:cb:f7:ac: 83:d9:07:e2:b7:51:7b:4a:9e:98:00:90:3e:45:e1: 06:61:ab:a2:63:31:47:b2:50:4a:b7:da:02:30:96: 8c:1f:56:82:14:be:a5:e4:e3:24:50:93:62:f6:6b: f4:13:09:70:f1:81:a3:e5:57:30:82:42:00:69:4b: 04:c3:19:69:ce:3f:b3:b3:9c:b3:3e:bb:9b:49:81: 94:8d:d6:64:ea:be:ec:86:ac:8f:28:19:ce:b9:2f: 07:97:b0:1c:4f:cc:dd:5f:c2:a9:f7:d7:17:6d:25: 6a:32:36:2f:d7:eb:88:d8:b7:23:59:fc:c5:38:4d: f5:4f:85:b2:11:30:d0:87:e0:00:8d:79:dc:aa:40: 23:e3:f6:94:1a:8f:45:24:b2:df:f2:e1:36:28:32: a4:71:23:6e:fc:1e:4d:31:1d:98:c3:a6:99:d7:82: 4b:2a:9d:f4:47:cb:2d:8a:7a:96:68:60:0c:92:5e: 3c:1d:5d:17:87:1a:dc:9b:90:8a:e3:a0:b9:8d:8c: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:94:8F:E1:50:96:8B:00:13:54:FA:10:15:FD:26:D5:48:6D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl X509v3 Authority Key Identifier: keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4d:86:f2:fd:6a:8c:79:ea:15:f4:08:0e:a0:e8:fc:19:53: 8b:a9:60:cf:62:ec:32:71:5e:31:2c:17:7b:4d:02:14:b5:dc: 71:3b:eb:e3:a6:fa:6b:c2:ad:2d:66:e9:df:a4:ff:03:d6:d3: 74:ed:87:f1:19:90:69:0f:78:08:f3:41:09:f0:72:ea:c7:9a: 67:4e:a6:ad:2d:d2:77:1d:71:b3:06:89:66:64:d7:f7:d5:62: a7:63:cc:40:3e:2c:43:19:92:d0:e3:12:ad:e0:37:71:40:9f: 63:12:ec:d6:be:37:3e:1f:84:b7:84:26:8a:f7:3f:f5:fa:e7: 52:a8:2a:87:ae:d1:73:26:cf:68:67:58:83:78:97:34:90:26: 13:48:7b:4d:e5:e6:46:e7:e0:05:8f:18:87:64:9d:3b:7e:9c: be:df:30:48:24:d6:c2:a5:e7:f8:6f:f6:b5:1d:78:08:d7:c5: 18:89:be:04:ea:23:52:91:db:8e:b7:f7:bc:ad:3e:e4:92:b8: e3:31:77:83:2b:df:0c:75:98:a5:a8:e5:6e:eb:c4:29:0e:3d: 16:24:e7:a1:d3:79:0e:14:7f:33:87:1a:59:10:da:26:c4:40: cd:d4:ad:12:0d:1c:e1:99:a1:00:e8:c6:93:f8:99:ec:4d:31: 90:fb:1f:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+1ODhyMKf81r8PDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUyZDg5NDgtYTQ4Yi00YTY0LWJiODgtNWMyODk0MDg5 NDRjMB4XDTI1MTEwNDA3MDAwOVoXDTI1MTEwNjA3MDAwMFowLzEtMCsGA1UEAxMk NDIxYmE1NTAtMzE3Ni00ODlhLTgyMGYtMjE5ZWExY2E3ZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpTuGQbHnIZVIRHkQZ4X5Ifx1qeKlYDFwVu GFTz+48nEVcxfosaruL6H7/2ji9PaYA9sqXHBdfL96yD2Qfit1F7Sp6YAJA+ReEG YauiYzFHslBKt9oCMJaMH1aCFL6l5OMkUJNi9mv0Ewlw8YGj5VcwgkIAaUsEwxlp zj+zs5yzPrubSYGUjdZk6r7shqyPKBnOuS8Hl7AcT8zdX8Kp99cXbSVqMjYv1+uI 2LcjWfzFOE31T4WyETDQh+AAjXncqkAj4/aUGo9FJLLf8uE2KDKkcSNu/B5NMR2Y w6aZ14JLKp30R8stinqWaGAMkl48HV0Xhxrcm5CK46C5jYzCqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKVllI/hUJaLABNU+hAV/SbVSG3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTJk ODk0OC1hNDhiLTRhNjQtYmI4OC01YzI4OTQwODk0NGMvNDUyZDg5NDgtYTQ4Yi00 YTY0LWJiODgtNWMyODk0MDg5NDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDUyZDg5NDgtYTQ4Yi00YTY0LWJi ODgtNWMyODk0MDg5NDRjLzQ1MmQ4OTQ4LWE0OGItNGE2NC1iYjg4LTVjMjg5NDA4 OTQ0Yy5jcmwwHwYDVR0jBBgwFoAUKsewww4das+JnT01pxsrYbZMN2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTJkODk0OC1hNDhiLTRhNjQtYmI4OC01YzI4 OTQwODk0NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtTYby/WqMeeoV9AgOoOj8 GVOLqWDPYuwycV4xLBd7TQIUtdxxO+vjpvprwq0tZunfpP8D1tN07YfxGZBpD3gI 80EJ8HLqx5pnTqatLdJ3HXGzBolmZNf31WKnY8xAPixDGZLQ4xKt4DdxQJ9jEuzW vjc+H4S3hCaK9z/1+udSqCqHrtFzJs9oZ1iDeJc0kCYTSHtN5eZG5+AFjxiHZJ07 fpy+3zBIJNbCpef4b/a1HXgI18UYib4E6iNSkduOt/e8rT7kkrjjMXeDK98MdZil qOVu68QpDj0WJOeh03kOFH8zhxpZENomxEDN1K0SDRzhmaEA6MaT+JnsTTGQ+x+w -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:33 2025 by rpki-client