$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft File: 52a24bfe-7695-456c-8b3d-349b37b047d3.mft (raw, json) Hash identifier: 3nVJSDoLU6qF17pHNkK+LKc/1kE3J/ALIQMfzZOUqqU= Subject key identifier: B6:39:BF:B8:C5:D6:80:EA:53:2B:3A:FB:65:8A:B3:AD:30:BB:26:3C Authority key identifier: D5:61:BC:F4:CC:84:48:B1:9D:43:35:0F:37:01:17:EA:5F:57:45:64 Certificate issuer: /CN=52a24bfe-7695-456c-8b3d-349b37b047d3 Certificate serial: 010D0C9F4328584BBFC313233DDEA4E2AAC0A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft Manifest number: 010D0C9F432858452EF498DB89B75E2F56D0FFDC Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 52a24bfe-7695-456c-8b3d-349b37b047d3.crl (hash: riEbP9cUCkQe7xOBJYywPWdqKwrue+S0AWLOGQgmGTU=) 2: f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer (hash: +hvRERrBcsiRdxxg6N+eK68YMuwcHQ5XFf3thcgQy0k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:13:23:3d:de:a4:e2:aa:c0:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a24bfe-7695-456c-8b3d-349b37b047d3 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=41a2a8a2-ed39-4777-afe8-e65690886003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:aa:6e:b9:e7:b7:67:da:1b:dd:0a:3c:fc:89: c0:7e:a7:02:3e:62:af:17:f1:df:7f:e6:19:07:43: 56:b4:53:cb:8e:10:50:6f:d4:76:03:61:c8:23:ab: 34:e1:80:ee:bd:dc:98:b8:4e:3d:41:e8:2d:94:c9: 36:4a:2b:96:58:22:30:fa:01:5d:67:d2:cb:af:80: be:b2:5f:63:f0:3c:14:20:19:be:0f:7d:74:0a:ca: 73:ce:b9:b6:33:98:4b:2e:63:c8:9c:b4:0e:8d:03: d8:4c:24:82:aa:6b:14:6e:b8:55:74:84:5f:29:99: 5d:69:cf:e6:44:ba:ab:39:6b:30:d4:a3:95:a5:a2: 5d:a0:ce:f1:52:42:d0:4c:58:a1:5f:43:f5:f0:1a: ca:72:24:11:50:46:e8:38:0c:ec:45:fa:bb:15:1a: e0:5d:b7:ed:f6:17:51:22:09:39:46:bc:8f:c3:9b: 83:9f:80:79:80:e9:91:d0:bc:2b:b8:51:64:59:75: 96:e1:ca:0c:f6:6a:2f:c4:2a:03:0e:45:6b:b4:e0: b1:ee:5b:93:a1:41:e2:5b:86:30:2b:44:53:d6:0c: 68:46:ed:53:33:04:89:07:cb:46:0e:ab:07:63:e4: e3:6f:39:46:5d:75:b1:92:c7:9e:8a:10:ab:13:43: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:39:BF:B8:C5:D6:80:EA:53:2B:3A:FB:65:8A:B3:AD:30:BB:26:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl X509v3 Authority Key Identifier: keyid:D5:61:BC:F4:CC:84:48:B1:9D:43:35:0F:37:01:17:EA:5F:57:45:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fc:25:f2:32:54:46:fb:9b:fd:61:69:d0:c5:6a:ed:d1:6b: 24:3b:0d:37:34:8b:80:79:77:7e:21:c5:e9:43:60:9e:18:be: 59:88:45:16:e2:38:83:06:1c:41:5b:00:a8:a5:30:49:a6:c0: a9:d6:8e:46:ea:26:7c:98:3a:63:e6:c7:cc:a3:16:5c:71:fd: 2d:46:f6:a9:cc:f1:f4:e5:c4:68:fd:4d:8a:79:0a:72:b7:b5: d8:82:52:03:73:52:0c:cc:98:36:e7:38:7f:58:80:5c:f3:30: 99:1c:e6:8f:51:e2:d8:5a:30:96:72:23:6c:25:c2:93:8a:b0: 90:40:2b:2f:26:5c:9f:69:b3:8d:cc:c9:cb:ba:b3:5d:cd:8a: e5:ee:c6:9e:b9:44:9e:11:f8:0d:a4:1f:fb:92:0d:bb:75:50: e0:10:f3:f4:1f:97:2c:27:a9:ad:e0:2a:18:fd:08:e1:e2:ff: d7:1f:3d:08:60:f5:5a:9e:f5:19:48:ee:ed:e5:54:0c:ff:57: 31:e4:41:c2:1c:84:38:2d:0e:28:74:30:5a:46:a5:16:3c:8b: 3a:f1:fe:2c:5a:17:88:17:d8:a5:98:a1:84:2d:92:4a:cf:f0: 4c:13:7c:2e:59:77:81:57:01:c6:96:1f:8a:ed:67:94:06:d0: 2a:c0:e2:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxMjPd6k4qrApQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjRiZmUtNzY5NS00NTZjLThiM2QtMzQ5YjM3YjA0 N2QzMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk NDFhMmE4YTItZWQzOS00Nzc3LWFmZTgtZTY1NjkwODg2MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKpuuee3Z9ob3Qo8/InAfqcCPmKvF/Hff+YZ B0NWtFPLjhBQb9R2A2HII6s04YDuvdyYuE49QegtlMk2SiuWWCIw+gFdZ9LLr4C+ sl9j8DwUIBm+D310Cspzzrm2M5hLLmPInLQOjQPYTCSCqmsUbrhVdIRfKZldac/m RLqrOWsw1KOVpaJdoM7xUkLQTFihX0P18BrKciQRUEboOAzsRfq7FRrgXbft9hdR Igk5RryPw5uDn4B5gOmR0LwruFFkWXWW4coM9movxCoDDkVrtOCx7luToUHiW4Yw K0RT1gxoRu1TMwSJB8tGDqsHY+TjbzlGXXWxkseeihCrE0NQqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLY5v7jF1oDqUys6+2WKs60wuyY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MmEy NGJmZS03Njk1LTQ1NmMtOGIzZC0zNDliMzdiMDQ3ZDMvNTJhMjRiZmUtNzY5NS00 NTZjLThiM2QtMzQ5YjM3YjA0N2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTJhMjRiZmUtNzY5NS00NTZjLThi M2QtMzQ5YjM3YjA0N2QzLzUyYTI0YmZlLTc2OTUtNDU2Yy04YjNkLTM0OWIzN2Iw NDdkMy5jcmwwHwYDVR0jBBgwFoAU1WG89MyESLGdQzUPNwEX6l9XRWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MmEyNGJmZS03Njk1LTQ1NmMtOGIzZC0zNDli MzdiMDQ3ZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCS/CXyMlRG+5v9YWnQxWrt 0WskOw03NIuAeXd+IcXpQ2CeGL5ZiEUW4jiDBhxBWwCopTBJpsCp1o5G6iZ8mDpj 5sfMoxZccf0tRvapzPH05cRo/U2KeQpyt7XYglIDc1IMzJg25zh/WIBc8zCZHOaP UeLYWjCWciNsJcKTirCQQCsvJlyfabONzMnLurNdzYrl7saeuUSeEfgNpB/7kg27 dVDgEPP0H5csJ6mt4CoY/Qjh4v/XHz0IYPVanvUZSO7t5VQM/1cx5EHCHIQ4LQ4o dDBaRqUWPIs68f4sWheIF9ilmKGELZJKz/BME3wuWXeBVwHGlh+K7WeUBtAqwOJR -----END CERTIFICATE-----Generated at Tue Nov 4 23:08:28 2025 by rpki-client