$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.mft (raw, json) Hash identifier: 35ArwURPN74/vwgfw+whLaDfDLn4UnaeuuyIniaRstk= Subject key identifier: 95:A3:D1:61:9C:E8:65:C7:BA:7D:24:44:86:12:0F:B9:6E:96:32:AC Authority key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Certificate issuer: /CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Certificate serial: 010D0C9F4328584BC01C63BA98B6CDE17C4B45A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft Manifest number: 010D0C9F4328584B963D1DFEB59C4ACB2FD6718F Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 00583209-5ea8-3fc8-9999-e6dec99e63c9.roa (hash: C3Y3vFj51GRk27wxxefIXStm+qGOvSN2HWInuphK1rc=) 2: 4625cd05-e90e-4f91-9b34-2899122cfc5f.crl (hash: lrCWAgANIXP45mGIOq8XCdg/ukNwzO8lHTP7X4YfGvY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:ba:98:b6:cd:e1:7c:4b:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=ef426934-53a9-4b7d-a508-6cb088c4322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:74:42:b4:5e:76:a9:7a:26:6d:a5:7f:42:63: 88:16:59:18:f3:0d:24:1b:83:d2:fa:7e:7a:a4:39: f3:73:44:b0:25:43:62:cb:ce:84:7f:85:8e:91:ca: 30:cd:8f:3d:54:28:2b:a8:5b:9e:72:f8:f5:77:a1: f8:a8:7d:5a:2f:09:5a:d3:20:5d:12:9f:15:41:90: 16:59:26:8a:2a:8f:fa:c2:fb:19:97:87:5d:42:d8: ce:5e:e7:df:35:0a:4a:24:44:d2:8e:dd:9e:a9:5d: 27:6e:7a:ce:06:4a:a1:73:bb:e1:7a:98:57:26:bc: 3d:f6:68:8f:55:19:71:77:e8:53:9c:f4:e2:78:32: c9:cf:45:7c:56:0f:50:5d:00:16:17:c6:91:11:02: 80:50:cd:8f:ef:91:d5:45:3a:43:f0:89:61:d7:ed: 32:69:17:ed:e9:df:c2:1f:1d:32:b3:da:fe:c1:33: 01:46:10:96:b4:49:e9:eb:c9:3a:e0:0e:08:75:e4: 23:fd:f3:73:78:0d:e6:0c:f8:3b:9a:da:c8:55:5e: 2e:f9:3d:73:d7:bf:ed:3f:c5:8f:33:a4:16:33:1a: 87:04:82:84:ce:09:32:37:56:e3:aa:66:2f:2c:2d: 09:68:8c:b5:57:ad:c9:ca:23:0c:80:f5:6f:64:37: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A3:D1:61:9C:E8:65:C7:BA:7D:24:44:86:12:0F:B9:6E:96:32:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl X509v3 Authority Key Identifier: keyid:52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:75:7b:73:2e:aa:42:e5:14:80:4b:b2:e5:58:54:f1:19:2e: 0c:87:0b:3b:c9:07:4f:6d:82:3b:1f:e7:61:53:97:4d:f3:b5: c1:92:f0:64:1d:28:8d:d7:5b:a1:81:9c:07:d7:16:6e:12:df: 2c:2c:39:a4:95:67:e5:07:aa:49:8b:2d:8d:c1:50:4a:aa:88: 28:85:31:2a:33:bb:ac:dd:d3:6a:56:a6:79:78:d8:d6:21:94: 70:7e:0a:c2:87:65:6f:06:33:49:66:d5:2d:1c:2a:78:9a:ea: 12:5c:69:38:15:f0:19:2c:f6:dc:89:e3:b9:cb:6b:66:4d:2d: ec:08:63:ab:15:6c:e5:ce:f9:8a:1b:16:86:22:e4:54:3e:7b: 5f:4e:15:36:4b:01:3e:7c:98:93:e8:28:fa:e9:f4:3a:3a:cf: 52:d8:08:91:d9:f1:23:ac:2e:b6:15:e1:41:2e:1a:48:18:10: 90:8e:25:72:27:5e:fb:02:b0:8e:59:4a:27:a0:af:b3:11:ed: 63:bc:b0:d9:61:07:83:a1:37:ec:d6:63:aa:cf:d8:1f:ff:6d: 9e:ac:90:6f:c6:63:d9:ae:62:9e:e4:22:dd:77:79:51:d0:03: 9a:a5:ad:6d:50:7e:69:de:f6:7d:7c:ad:2d:0f:4c:28:c6:6e: 36:e8:84:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGO6mLbN4XxLRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNm YzVmMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZWY0MjY5MzQtNTNhOS00YjdkLWE1MDgtNmNiMDg4YzQzMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHRCtF52qXombaV/QmOIFlkY8w0kG4PS+n56 pDnzc0SwJUNiy86Ef4WOkcowzY89VCgrqFuecvj1d6H4qH1aLwla0yBdEp8VQZAW WSaKKo/6wvsZl4ddQtjOXuffNQpKJETSjt2eqV0nbnrOBkqhc7vhephXJrw99miP VRlxd+hTnPTieDLJz0V8Vg9QXQAWF8aREQKAUM2P75HVRTpD8Ilh1+0yaRft6d/C Hx0ys9r+wTMBRhCWtEnp68k64A4IdeQj/fNzeA3mDPg7mtrIVV4u+T1z17/tP8WP M6QWMxqHBIKEzgkyN1bjqmYvLC0JaIy1V63JyiMMgPVvZDfVYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJWj0WGc6GXHun0kRIYSD7luljKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1 Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvNDYyNWNkMDUtZTkwZS00 ZjkxLTliMzQtMjg5OTEyMmNmYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDYyNWNkMDUtZTkwZS00ZjkxLTli MzQtMjg5OTEyMmNmYzVmLzQ2MjVjZDA1LWU5MGUtNGY5MS05YjM0LTI4OTkxMjJj ZmM1Zi5jcmwwHwYDVR0jBBgwFoAUUheecWx1fh1zBe8WvU1WIcoiY1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5 MTIyY2ZjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkdXtzLqpC5RSAS7LlWFTx GS4Mhws7yQdPbYI7H+dhU5dN87XBkvBkHSiN11uhgZwH1xZuEt8sLDmklWflB6pJ iy2NwVBKqogohTEqM7us3dNqVqZ5eNjWIZRwfgrCh2VvBjNJZtUtHCp4muoSXGk4 FfAZLPbcieO5y2tmTS3sCGOrFWzlzvmKGxaGIuRUPntfThU2SwE+fJiT6Cj66fQ6 Os9S2AiR2fEjrC62FeFBLhpIGBCQjiVyJ177ArCOWUonoK+zEe1jvLDZYQeDoTfs 1mOqz9gf/22erJBvxmPZrmKe5CLdd3lR0AOapa1tUH5p3vZ9fK0tD0woxm426IQw -----END CERTIFICATE-----Generated at Wed Nov 5 10:13:10 2025 by rpki-client