$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft File: c74e641d-a8b6-48e3-9084-066627b0310f.mft (raw, json) Hash identifier: IgImQkfMD9onZu6zvaQRPI3ni/3GRx7u8YQnNBzDHPo= Subject key identifier: C3:56:1F:70:85:0D:0A:84:0E:DF:BB:48:E2:C1:40:83:91:6E:56:16 Authority key identifier: 57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B Certificate issuer: /CN=c74e641d-a8b6-48e3-9084-066627b0310f Certificate serial: 010D0C9F4328584BC2C94C9A89250D46DFD3BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft Manifest number: 010D0C9F4328584BA6E36A1804766512AB744F0B Signing time: Wed 05 Nov 2025 17:00:03 +0000 Manifest this update: Wed 05 Nov 2025 17:00:03 +0000 Manifest next update: Sat 08 Nov 2025 17:00:00 +0000 Files and hashes: 1: 911b81d6-064e-3073-b257-5ae82f6799f2.roa (hash: YQg1m1lymJru+zmuFtBkHrZwDsk/aAbbII0jYMYVD1g=) 2: c74e641d-a8b6-48e3-9084-066627b0310f.crl (hash: QqlPVxw+xBF6QRBmiWYSfsgys3dfYfN4cWUOd/cEw9c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:c9:4c:9a:89:25:0d:46:df:d3:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74e641d-a8b6-48e3-9084-066627b0310f Validity Not Before: Nov 5 17:00:03 2025 GMT Not After : Nov 8 17:00:00 2025 GMT Subject: CN=75f7cde3-51ae-4b66-9602-003c1328f6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:ad:6e:50:41:1c:3c:23:03:dc:25:2b:2a: d5:bd:2b:c6:40:36:cd:1a:db:a4:64:79:24:0e:a8: ad:ec:de:c1:85:35:c5:a5:13:16:62:6f:92:ce:fb: 01:b0:32:67:6a:71:68:91:d0:77:b0:d7:51:0d:07: 29:ec:5c:1b:51:28:cf:36:42:2f:5f:26:60:cc:0c: 3e:8e:e8:e1:e4:f7:eb:96:f9:3a:68:b2:33:3b:64: 81:cc:95:b4:a4:f2:71:98:e9:31:0d:93:c8:76:82: 1c:c0:77:ef:4c:b5:9d:6f:48:c8:64:40:75:09:fe: 55:75:b2:4a:e4:f1:87:28:d0:c8:ec:8c:ce:b4:70: 11:ff:3b:53:b1:d5:d7:2c:e5:07:35:70:a2:37:3d: 60:2d:12:22:a8:40:45:a7:48:cc:9b:1d:82:de:db: 3a:8b:a4:d9:f6:68:f8:6c:84:9f:12:f2:23:d1:07: c9:6e:41:e7:1f:fe:28:06:68:73:e8:1b:e0:d8:55: f9:de:7c:ee:4c:39:10:29:5a:ce:2e:2d:93:14:09: c6:e4:2a:b8:8d:2e:fc:e5:95:13:3b:8f:a0:60:36: 61:ae:bf:0a:a7:ef:69:d8:55:7c:e2:b6:f6:50:4b: 79:aa:4d:30:6b:9e:f5:44:b6:10:8b:79:5a:51:04: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:56:1F:70:85:0D:0A:84:0E:DF:BB:48:E2:C1:40:83:91:6E:56:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.crl X509v3 Authority Key Identifier: keyid:57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:74:38:98:5f:0a:2c:df:50:f9:8b:79:6e:03:6b:df:d0: 40:2f:c9:37:00:b9:06:a0:53:de:7c:35:62:05:8a:86:ef:82: 02:05:d0:ec:ef:8d:e2:67:82:fb:19:b6:3e:50:09:98:b5:48: fa:f5:33:59:21:00:f8:bb:50:13:27:fe:33:b7:7e:12:2b:84: 6a:62:07:04:6e:89:e8:1d:15:33:c5:38:a4:81:00:89:44:4a: 41:19:42:44:3a:30:0a:ba:bc:c5:d7:6b:49:a0:f9:87:12:0c: 20:0c:54:c4:c9:bd:14:0b:9c:b8:de:5b:e9:44:a7:4f:68:65: e6:70:d8:af:6e:d4:d9:62:03:21:75:62:f1:7d:64:2e:c4:48: b7:21:ca:32:35:f7:1b:b1:98:3a:1f:41:21:12:62:81:a1:73: 56:1f:84:30:e7:4b:ce:a2:dd:cc:2a:00:33:65:9f:2e:0a:c1: 1e:e9:ca:65:05:e1:5f:20:33:6c:df:0b:3c:55:c7:0a:af:e4: 18:ab:60:68:ac:c2:3c:4c:17:c2:eb:d9:e3:59:d8:28:d4:1d: 33:e9:21:b1:e4:9a:94:84:2f:dc:d3:98:e3:01:ac:39:c9:41: 2c:fd:18:cb:4c:be:cd:96:9d:14:f0:6c:99:85:bf:f9:84:48: ad:9f:42:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCyUyaiSUNRt/TvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc0ZTY0MWQtYThiNi00OGUzLTkwODQtMDY2NjI3YjAz MTBmMB4XDTI1MTEwNTE3MDAwM1oXDTI1MTEwODE3MDAwMFowLzEtMCsGA1UEAxMk NzVmN2NkZTMtNTFhZS00YjY2LTk2MDItMDAzYzEzMjhmNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss6tblBBHDwjA9wlKyrVvSvGQDbNGtukZHkk Dqit7N7BhTXFpRMWYm+SzvsBsDJnanFokdB3sNdRDQcp7FwbUSjPNkIvXyZgzAw+ jujh5Pfrlvk6aLIzO2SBzJW0pPJxmOkxDZPIdoIcwHfvTLWdb0jIZEB1Cf5VdbJK 5PGHKNDI7IzOtHAR/ztTsdXXLOUHNXCiNz1gLRIiqEBFp0jMmx2C3ts6i6TZ9mj4 bISfEvIj0QfJbkHnH/4oBmhz6Bvg2FX53nzuTDkQKVrOLi2TFAnG5Cq4jS785ZUT O4+gYDZhrr8Kp+9p2FV84rb2UEt5qk0wa571RLYQi3laUQSFJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMNWH3CFDQqEDt+7SOLBQIORblYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzRl NjQxZC1hOGI2LTQ4ZTMtOTA4NC0wNjY2MjdiMDMxMGYvYzc0ZTY0MWQtYThiNi00 OGUzLTkwODQtMDY2NjI3YjAzMTBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc0ZTY0MWQtYThiNi00OGUzLTkw ODQtMDY2NjI3YjAzMTBmL2M3NGU2NDFkLWE4YjYtNDhlMy05MDg0LTA2NjYyN2Iw MzEwZi5jcmwwHwYDVR0jBBgwFoAUV9eGtUl6xXZqr9q/puRJrL4u62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzRlNjQxZC1hOGI2LTQ4ZTMtOTA4NC0wNjY2 MjdiMDMxMGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk9HQ4mF8KLN9Q+Yt5bgNr 39BAL8k3ALkGoFPefDViBYqG74ICBdDs743iZ4L7GbY+UAmYtUj69TNZIQD4u1AT J/4zt34SK4RqYgcEbonoHRUzxTikgQCJREpBGUJEOjAKurzF12tJoPmHEgwgDFTE yb0UC5y43lvpRKdPaGXmcNivbtTZYgMhdWLxfWQuxEi3IcoyNfcbsZg6H0EhEmKB oXNWH4Qw50vOot3MKgAzZZ8uCsEe6cplBeFfIDNs3ws8VccKr+QYq2BorMI8TBfC 69njWdgo1B0z6SGx5JqUhC/c05jjAaw5yUEs/RjLTL7Nlp0U8GyZhb/5hEitn0LQ -----END CERTIFICATE-----Generated at Wed Nov 5 22:43:23 2025 by rpki-client