$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft File: 4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft (raw, json) Hash identifier: sik1Iq/qFKn1mgrkUDZJgNum2LP3Lp9IaFcDmowxxXg= Subject key identifier: D3:B1:E6:4D:8B:9C:AC:20:A2:C0:BE:B3:7A:B5:EE:5E:83:C0:A6:C9 Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99 Certificate issuer: /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de Certificate serial: 010D0C9F4328584BC0ECE42E6B8B7FE1E9B37F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft Manifest number: 010D0C9F4328584073A8360660C5C8F8D6485441 Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Sat 08 Nov 2025 01:00:00 +0000 Files and hashes: 1: 4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl (hash: jgl+E0hdE2IjiBwQeJVcXPdvqtxl4z6+L6MBEiEufik=) 2: 7bf082f3-7712-3b6f-9529-66baede8d766.roa (hash: 6wUMKY8rWZ8gW3DRUA+ro6hhWgC/c40SPKcZm4fBW3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:ec:e4:2e:6b:8b:7f:e1:e9:b3:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 8 01:00:00 2025 GMT Subject: CN=d9f68ed0-d73d-4d82-a408-15e6571d0b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:9c:6f:80:24:79:62:29:ef:55:3b:b9:79: 41:c4:4e:fd:a2:f2:8f:16:e2:a1:46:76:88:51:99: 43:9b:04:04:4a:24:95:a5:24:bf:82:c2:1a:1b:99: 88:1e:37:f3:f1:ce:ed:f7:79:56:ce:e5:32:ba:a0: b0:75:b7:c8:97:71:1a:67:5e:f0:25:f2:87:ee:0b: 2f:24:e2:a1:75:36:7f:94:ad:9b:ff:4b:69:3e:02: 28:f5:9f:90:c9:d6:d3:95:f5:de:c3:95:cb:2a:7e: 6c:30:4e:69:00:93:12:5d:08:b6:79:79:24:de:ce: 2c:7e:ed:ba:4e:1f:cf:28:85:20:f9:7b:d1:b8:87: 55:bb:02:8e:fd:1b:a7:45:15:b6:18:dc:6e:85:fd: 0e:13:c1:e7:ce:f1:d3:4c:6e:9d:0d:b1:27:e5:fa: 10:42:5c:48:39:8c:84:1f:d4:6b:8f:14:6e:a3:85: f5:57:8b:3a:f3:a0:ef:0c:f9:17:81:6f:87:0d:90: 7c:70:a9:6e:00:85:85:d6:7f:bc:03:30:65:50:b2: e2:c7:72:75:25:da:62:5e:33:0d:7b:da:7d:31:43: e2:fb:fa:2a:af:1d:f6:49:aa:cf:c2:ca:f0:a0:af: 07:1b:e3:c5:19:96:49:01:e1:99:6f:e0:6f:1b:bd: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:E6:4D:8B:9C:AC:20:A2:C0:BE:B3:7A:B5:EE:5E:83:C0:A6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl X509v3 Authority Key Identifier: keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c8:84:cc:e2:76:f1:e7:c1:cd:96:fc:7d:c8:b4:bb:ef:e7: d5:c7:2c:fb:e4:ae:3d:85:01:46:6a:4e:c9:8b:b5:5b:83:7b: 4c:19:69:97:b3:33:cc:22:91:66:74:4f:cd:07:9b:5a:f6:87: 3f:57:2c:ad:17:c4:29:a5:cc:9d:41:02:c0:bf:7e:c8:4d:f8: 18:f7:0b:4c:73:fd:95:0e:56:9c:64:ae:17:ed:7d:af:ea:03: 5d:3d:f0:bf:95:39:98:2f:94:fa:69:81:e8:ef:ae:fe:ae:b1: 62:d8:f2:11:6a:c7:f4:a3:10:45:cb:e2:13:9a:f0:4f:31:ba: db:6a:b9:28:f4:b3:a8:42:c1:1c:1a:7b:84:1b:a7:4b:ad:35: dc:64:b0:66:fa:29:c8:82:b5:b0:67:3b:9d:62:2a:6c:88:c5: 2f:76:a9:d5:c3:e5:e7:58:13:ee:e9:6d:8e:d4:7b:69:9d:ff: 63:34:30:9f:1c:9d:09:51:78:2c:c3:c1:40:19:d8:c8:66:09: a9:a9:f9:61:ad:d3:80:03:59:13:a4:63:f1:6b:52:f3:59:78: dd:a7:a0:58:af:62:97:d5:a6:ce:4e:3a:6a:e7:06:f5:05:6a: e2:a4:05:cf:a5:17:0e:73:cd:2f:f9:4a:0d:e1:1e:68:2e:ca: 3c:1e:0f:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvA7OQua4t/4emzf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MDExZmEtZjFhZS00NmM2LTk0NDEtMmY0ODZlMDRh NmRlMB4XDTI1MTEwNTAxMDAwOFoXDTI1MTEwODAxMDAwMFowLzEtMCsGA1UEAxMk ZDlmNjhlZDAtZDczZC00ZDgyLWE0MDgtMTVlNjU3MWQwYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDecb4AkeWIp71U7uXlBxE79ovKPFuKhRnaI UZlDmwQESiSVpSS/gsIaG5mIHjfz8c7t93lWzuUyuqCwdbfIl3EaZ17wJfKH7gsv JOKhdTZ/lK2b/0tpPgIo9Z+QydbTlfXew5XLKn5sME5pAJMSXQi2eXkk3s4sfu26 Th/PKIUg+XvRuIdVuwKO/RunRRW2GNxuhf0OE8HnzvHTTG6dDbEn5foQQlxIOYyE H9RrjxRuo4X1V4s686DvDPkXgW+HDZB8cKluAIWF1n+8AzBlULLix3J1JdpiXjMN e9p9MUPi+/oqrx32SarPwsrwoK8HG+PFGZZJAeGZb+BvG72TuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNOx5k2LnKwgosC+s3q17l6DwKbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgw MTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4NmUwNGE2ZGUvNGQ4MDExZmEtZjFhZS00 NmM2LTk0NDEtMmY0ODZlMDRhNmRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGQ4MDExZmEtZjFhZS00NmM2LTk0 NDEtMmY0ODZlMDRhNmRlLzRkODAxMWZhLWYxYWUtNDZjNi05NDQxLTJmNDg2ZTA0 YTZkZS5jcmwwHwYDVR0jBBgwFoAU54hrAHQubHuwCUVp2sUyljNfs5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgwMTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4 NmUwNGE2ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQyITM4nbx58HNlvx9yLS7 7+fVxyz75K49hQFGak7Ji7Vbg3tMGWmXszPMIpFmdE/NB5ta9oc/VyytF8Qppcyd QQLAv37ITfgY9wtMc/2VDlacZK4X7X2v6gNdPfC/lTmYL5T6aYHo767+rrFi2PIR asf0oxBFy+ITmvBPMbrbarko9LOoQsEcGnuEG6dLrTXcZLBm+inIgrWwZzudYips iMUvdqnVw+XnWBPu6W2O1Htpnf9jNDCfHJ0JUXgsw8FAGdjIZgmpqflhrdOAA1kT pGPxa1LzWXjdp6BYr2KX1abOTjpq5wb1BWripAXPpRcOc80v+UoN4R5oLso8Hg8b -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:56 2025 by rpki-client