$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft File: 452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft (raw, json) Hash identifier: xP9DWXgZ2mDOAkMZm1FaBxdQmuU2CWl38Z6pM2a6avM= Subject key identifier: E8:A7:15:AF:06:E8:94:7A:02:DE:B8:28:5F:DB:54:26:01:8A:B4:AD Authority key identifier: D7:81:5F:84:16:3A:89:52:26:AB:15:16:DA:78:CE:73:5B:75:41:05 Certificate issuer: /CN=452e93c5-9f6b-46bc-8a92-d0a6d80137b2 Certificate serial: 010D0C9F4328584BC1BD56030F14217AC09BFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft Manifest number: 010D0C9F4328584B818F7E2299027FA9105A5D17 Signing time: Wed 05 Nov 2025 08:00:08 +0000 Manifest this update: Wed 05 Nov 2025 08:00:08 +0000 Manifest next update: Fri 07 Nov 2025 08:00:00 +0000 Files and hashes: 1: 30d8d224-346c-3e5e-8862-d20e447b2cfe.roa (hash: /IGZgM1W/woQT4y/lu5zh2PSx+0yvsjzX5va7lh7xlM=) 2: 452e93c5-9f6b-46bc-8a92-d0a6d80137b2.crl (hash: w97aytXhYjkEvRGb83C0X9VAb0LhzczdFJo3KVvel48=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:bd:56:03:0f:14:21:7a:c0:9b:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452e93c5-9f6b-46bc-8a92-d0a6d80137b2 Validity Not Before: Nov 5 08:00:08 2025 GMT Not After : Nov 7 08:00:00 2025 GMT Subject: CN=84d9baad-99ec-4745-8e93-2baf301d2bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:1f:ff:3d:bf:0f:6c:58:fd:04:ea:23:00: 74:d1:dc:c4:b1:53:b2:72:64:35:1b:bf:8f:28:45: 00:0e:e3:00:98:20:d2:19:c8:2f:02:63:8d:4e:0b: d1:3d:94:4a:20:02:53:d2:83:2f:60:79:c7:29:91: 9a:1a:c4:f3:f2:6d:cc:54:27:9c:95:80:91:ef:61: 72:b1:fe:c3:17:ae:b2:74:67:3c:da:76:3d:48:a3: 46:27:e5:cf:30:a8:70:8f:95:1a:e4:f3:35:ed:22: 23:bf:d1:b7:0e:67:b6:65:16:17:ed:af:4a:bf:f1: 03:bc:a5:e5:01:5a:af:d8:f9:71:10:6a:9c:cb:55: b9:32:ce:e1:48:13:eb:3f:da:af:ea:b3:1a:41:cb: 0e:03:a7:78:c0:21:5a:4c:ac:bc:d1:29:39:9f:5c: d7:82:74:ab:6a:cc:02:89:86:b4:48:c7:67:e7:5d: 6e:57:99:2f:7e:de:13:22:81:16:83:e4:e2:c7:ec: 36:9b:9d:30:87:27:6c:45:1f:26:bc:ac:56:01:cb: fc:d6:70:52:63:dd:10:21:2a:1f:5d:43:eb:8c:d1: 43:56:24:e2:db:76:db:c2:1a:6a:b2:75:c8:e9:18: c0:9b:0c:cb:6b:e7:b8:6a:22:83:8e:c3:06:ea:92: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:15:AF:06:E8:94:7A:02:DE:B8:28:5F:DB:54:26:01:8A:B4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.crl X509v3 Authority Key Identifier: keyid:D7:81:5F:84:16:3A:89:52:26:AB:15:16:DA:78:CE:73:5B:75:41:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:1f:cc:a3:01:9e:82:ac:e2:da:2a:d9:5c:b4:74:5f:a5:f5: 76:ee:69:a2:e6:65:ae:ce:5f:2d:aa:12:a4:d4:e2:dc:56:64: ee:18:18:19:17:65:b9:9c:1e:b4:ff:d0:29:72:35:b6:0d:ee: 1b:c1:e3:25:16:68:e9:ec:39:2f:8d:00:5f:e2:50:13:24:34: 32:a5:8a:a3:bc:34:c7:5a:1d:76:39:c1:4b:1a:71:1c:44:8a: 18:30:9b:f2:3e:45:13:1c:6a:51:02:aa:3b:60:25:aa:49:b9: 64:ce:75:bd:3c:db:48:07:24:8a:f4:5f:94:03:e1:3e:d7:cd: 99:11:89:84:6c:5f:bd:0b:ed:38:8f:3f:6e:04:f5:1d:b1:73: 71:c5:2c:4c:0d:33:a4:c6:69:4d:61:45:fd:c8:e1:7d:86:4a: 01:99:a0:11:05:a9:84:35:5f:ce:c7:5c:02:49:6e:38:84:a8: 40:b3:d2:e6:73:9e:29:a0:d7:89:b3:ee:3f:8d:5a:dc:52:61: c3:2d:a2:65:97:ea:07:c9:1b:fd:4a:99:58:da:9d:f7:04:6a: db:50:84:c3:d2:bc:ee:ab:46:b4:22:8e:f8:02:25:8e:9d:aa: 27:34:48:44:32:9c:f3:ca:f4:51:c2:9a:77:09:3d:79:8a:fb: 57:f9:d1:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBvVYDDxQhesCb+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUyZTkzYzUtOWY2Yi00NmJjLThhOTItZDBhNmQ4MDEz N2IyMB4XDTI1MTEwNTA4MDAwOFoXDTI1MTEwNzA4MDAwMFowLzEtMCsGA1UEAxMk ODRkOWJhYWQtOTllYy00NzQ1LThlOTMtMmJhZjMwMWQyYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Qf/z2/D2xY/QTqIwB00dzEsVOycmQ1G7+P KEUADuMAmCDSGcgvAmONTgvRPZRKIAJT0oMvYHnHKZGaGsTz8m3MVCeclYCR72Fy sf7DF66ydGc82nY9SKNGJ+XPMKhwj5Ua5PM17SIjv9G3Dme2ZRYX7a9Kv/EDvKXl AVqv2PlxEGqcy1W5Ms7hSBPrP9qv6rMaQcsOA6d4wCFaTKy80Sk5n1zXgnSraswC iYa0SMdn511uV5kvft4TIoEWg+Tix+w2m50whydsRR8mvKxWAcv81nBSY90QISof XUPrjNFDViTi23bbwhpqsnXI6RjAmwzLa+e4aiKDjsMG6pLb2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOinFa8G6JR6At64KF/bVCYBirStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NTJl OTNjNS05ZjZiLTQ2YmMtOGE5Mi1kMGE2ZDgwMTM3YjIvNDUyZTkzYzUtOWY2Yi00 NmJjLThhOTItZDBhNmQ4MDEzN2IyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDUyZTkzYzUtOWY2Yi00NmJjLThh OTItZDBhNmQ4MDEzN2IyLzQ1MmU5M2M1LTlmNmItNDZiYy04YTkyLWQwYTZkODAx MzdiMi5jcmwwHwYDVR0jBBgwFoAU14FfhBY6iVImqxUW2njOc1t1QQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NTJlOTNjNS05ZjZiLTQ2YmMtOGE5Mi1kMGE2 ZDgwMTM3YjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkH8yjAZ6CrOLaKtlctHRf pfV27mmi5mWuzl8tqhKk1OLcVmTuGBgZF2W5nB60/9ApcjW2De4bweMlFmjp7Dkv jQBf4lATJDQypYqjvDTHWh12OcFLGnEcRIoYMJvyPkUTHGpRAqo7YCWqSblkznW9 PNtIBySK9F+UA+E+182ZEYmEbF+9C+04jz9uBPUdsXNxxSxMDTOkxmlNYUX9yOF9 hkoBmaARBamENV/Ox1wCSW44hKhAs9Lmc54poNeJs+4/jVrcUmHDLaJll+oHyRv9 SplY2p33BGrbUITD0rzuq0a0Io74AiWOnaonNEhEMpzzyvRRwpp3CT15ivtX+dGb -----END CERTIFICATE-----Generated at Wed Nov 5 11:39:56 2025 by rpki-client