$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.mft File: cb29a492-e225-4723-973a-07560c140eea.mft (raw, json) Hash identifier: 9RtrQ68/62KjHnCoJSMIWklsFSRny9/Le+Nxp63iuuM= Subject key identifier: 5F:B6:47:00:7E:72:E6:31:18:E8:35:4D:57:12:FF:38:41:A9:4F:EF Authority key identifier: A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41 Certificate issuer: /CN=cb29a492-e225-4723-973a-07560c140eea Certificate serial: 010D0C9F4328584BC01C67B9075C88C7AB41B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.mft Manifest number: 010D0C9F4328584073A8217FC57295733A599F9E Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: ace08759-ae56-37f9-b6d2-429a1b0989b7.roa (hash: 0so0dX/e6gnb7IIb9+icge7LtMrpYQ9IZbYzfFpW5lE=) 2: cb29a492-e225-4723-973a-07560c140eea.crl (hash: t3BHgeP6dothgOr9H6uk6jnsBsm7HxsTAq55CP5mW1E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:67:b9:07:5c:88:c7:ab:41:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a492-e225-4723-973a-07560c140eea Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=ed42e135-9895-407f-84bd-a338b8b1ea97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:5c:29:73:db:bf:b4:a2:94:07:a3:c3:8c: 1d:f1:2b:2c:d4:21:7a:fa:7d:0e:30:3a:27:52:aa: 51:a9:77:b3:d5:18:03:13:3d:df:fe:3b:55:8b:c4: d9:cc:94:0a:62:a1:e0:fb:25:e7:a3:4f:d8:6f:4b: 82:5d:82:ed:b6:5f:60:d8:5e:fe:1f:ad:5a:38:7d: ed:c2:09:38:36:34:03:32:42:9c:26:10:a3:6c:33: 81:4f:bd:3e:16:65:59:c7:76:0f:86:4e:81:2f:fa: 96:51:c9:17:51:6f:8f:5a:d9:78:19:67:64:2f:15: f6:21:75:89:94:03:a2:70:20:58:3d:db:63:4e:e0: 76:e9:1a:80:fc:c3:fc:6d:22:e6:ab:5a:6a:92:9d: ff:c1:39:ad:b0:cf:23:99:ea:a5:4a:35:db:39:59: cc:b8:e6:cf:13:0d:f1:70:39:e7:7b:06:f6:33:ee: a5:35:c9:30:48:82:8e:c6:e2:7e:07:57:27:a4:df: 3a:5e:67:25:2c:96:e2:61:a6:4b:84:90:4d:58:7e: 1a:e6:3a:67:60:f9:3c:c3:6f:b1:c8:25:29:2f:d7: fd:19:aa:d4:4a:d6:1b:e5:f7:08:1c:a3:26:5d:fb: 41:1b:26:ea:1f:47:46:08:26:70:83:77:8d:ab:31: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:47:00:7E:72:E6:31:18:E8:35:4D:57:12:FF:38:41:A9:4F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.crl X509v3 Authority Key Identifier: keyid:A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:61:99:b2:ab:ef:9e:30:88:ed:22:e6:8e:3b:73:dc:0d:27: 88:c6:df:ae:09:4a:7b:80:e4:3c:76:d5:91:7b:2d:a9:d9:9e: 11:f6:e8:5a:65:51:50:c5:4e:ed:b5:bd:59:77:cf:01:af:9c: a1:a9:9f:10:d0:f2:c8:45:f5:e5:02:b9:57:a1:32:2d:99:ad: 81:5e:e0:a5:ea:97:ad:da:a4:72:37:26:9c:9f:0b:ca:41:1b: 5d:c1:0c:44:51:ef:37:12:33:d4:be:e4:94:17:06:22:52:56: 76:34:9d:d0:fa:96:d4:dd:ba:32:60:85:bb:3a:3e:a9:28:c4: e0:f2:65:85:82:43:13:01:41:cc:70:ce:1b:ab:ee:b2:86:33: bd:75:42:6d:92:68:0a:37:e2:e6:36:8f:25:77:1f:dd:22:db: c5:9e:68:7f:6a:f1:c5:5b:77:f4:12:ef:83:ab:68:41:9e:c4: f6:bf:e1:f8:5f:c4:57:77:4b:4b:23:2f:c2:b0:f2:ab:7c:f4: 12:66:64:01:41:1e:a3:ef:8d:a3:33:a1:02:60:d4:6c:38:a4: 31:7d:91:48:82:f3:ab:00:29:51:5b:01:f6:00:4e:46:7e:0e: 4f:2c:be:51:33:13:f9:7e:77:c6:db:25:57:c7:7b:00:7f:d3: 7c:d7:eb:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGe5B1yIx6tBtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IyOWE0OTItZTIyNS00NzIzLTk3M2EtMDc1NjBjMTQw ZWVhMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZWQ0MmUxMzUtOTg5NS00MDdmLTg0YmQtYTMzOGI4YjFlYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizdcKXPbv7SilAejw4wd8Sss1CF6+n0OMDon UqpRqXez1RgDEz3f/jtVi8TZzJQKYqHg+yXno0/Yb0uCXYLttl9g2F7+H61aOH3t wgk4NjQDMkKcJhCjbDOBT70+FmVZx3YPhk6BL/qWUckXUW+PWtl4GWdkLxX2IXWJ lAOicCBYPdtjTuB26RqA/MP8bSLmq1pqkp3/wTmtsM8jmeqlSjXbOVnMuObPEw3x cDnnewb2M+6lNckwSIKOxuJ+B1cnpN86XmclLJbiYaZLhJBNWH4a5jpnYPk8w2+x yCUpL9f9GarUStYb5fcIHKMmXftBGybqH0dGCCZwg3eNqzGKKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF+2RwB+cuYxGOg1TVcS/zhBqU/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYjI5 YTQ5Mi1lMjI1LTQ3MjMtOTczYS0wNzU2MGMxNDBlZWEvY2IyOWE0OTItZTIyNS00 NzIzLTk3M2EtMDc1NjBjMTQwZWVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2IyOWE0OTItZTIyNS00NzIzLTk3 M2EtMDc1NjBjMTQwZWVhL2NiMjlhNDkyLWUyMjUtNDcyMy05NzNhLTA3NTYwYzE0 MGVlYS5jcmwwHwYDVR0jBBgwFoAUqW756Yj01upWVDSWndm8BaMcBkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYjI5YTQ5Mi1lMjI1LTQ3MjMtOTczYS0wNzU2 MGMxNDBlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVYZmyq++eMIjtIuaOO3Pc DSeIxt+uCUp7gOQ8dtWRey2p2Z4R9uhaZVFQxU7ttb1Zd88Br5yhqZ8Q0PLIRfXl ArlXoTItma2BXuCl6pet2qRyNyacnwvKQRtdwQxEUe83EjPUvuSUFwYiUlZ2NJ3Q +pbU3boyYIW7Oj6pKMTg8mWFgkMTAUHMcM4bq+6yhjO9dUJtkmgKN+LmNo8ldx/d ItvFnmh/avHFW3f0Eu+Dq2hBnsT2v+H4X8RXd0tLIy/CsPKrfPQSZmQBQR6j742j M6ECYNRsOKQxfZFIgvOrAClRWwH2AE5Gfg5PLL5RMxP5fnfG2yVXx3sAf9N81+tG -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:50 2025 by rpki-client