$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft File: 4680d191-3a38-4cef-89dd-c84240e3a1cf.mft (raw, json) Hash identifier: OHSu6qkpvA9sOy1XG3VZ7r+Ui07v1j30chqpwhiRFlw= Subject key identifier: 6D:AC:6E:60:44:B4:F5:DB:D6:E9:E5:A4:02:B0:0D:11:C3:D7:5F:A5 Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584BBFC30E468C5945A695A6C8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft Manifest number: 010D0C9F43285849276F14CDE0AA3B404E68EFF4 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 4680d191-3a38-4cef-89dd-c84240e3a1cf.crl (hash: 5y/9SidHjXNto1izXUj55EvPL23/G6oGbD5wCKJ6pok=) 2: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (hash: h+uJh2oa35LfnRQW/yt80keQUbHJ0nHBBZ89OXHFxF4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0e:46:8c:59:45:a6:95:a6:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=925e922c-2a71-498d-9f4d-752d4ff84714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:7c:f8:78:84:b4:65:ee:e1:0a:1d:0b:51: 71:ed:1a:d7:df:2a:a6:79:e6:31:5c:f9:fd:8f:35: 8b:c2:f4:91:3e:56:7f:1b:4a:97:98:70:1e:91:5b: c5:f4:d1:ac:16:cb:41:cb:57:37:8c:b6:7d:b5:68: e0:32:55:8e:6d:bc:f3:d3:dd:93:39:50:6a:56:1e: 32:40:1d:6a:5f:46:9b:61:95:bf:07:60:3b:a9:a0: 12:82:1c:43:56:87:89:93:7f:1b:0a:80:9c:11:0f: a6:5e:11:30:05:df:ef:89:37:22:f1:63:d3:d4:6f: 3c:15:a5:63:85:b6:e9:ed:bb:8f:ab:db:6a:e7:e7: e8:4e:e3:13:d8:7c:57:5f:f7:51:44:55:e6:78:37: e0:77:0a:85:ce:89:b6:b8:0f:9c:a1:9e:b7:ea:dd: dc:cc:9f:ba:f4:2a:7f:a7:1b:aa:e7:a0:70:09:39: 2b:58:65:50:4f:08:55:c8:9f:23:f3:90:dc:54:2e: 17:8b:26:e2:31:61:1c:25:35:e8:18:d6:52:70:95: 35:53:2c:c7:a4:a4:a4:08:3b:7a:6d:af:12:99:86: cf:64:d4:97:96:c3:5d:de:b9:44:9b:42:cc:eb:44: 41:b9:d2:3b:21:f5:8f:e5:82:3c:4c:0e:96:f8:5d: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AC:6E:60:44:B4:F5:DB:D6:E9:E5:A4:02:B0:0D:11:C3:D7:5F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:34:e9:63:28:a5:c1:56:44:66:10:01:38:37:5f:f2:5d:18: 53:7e:ce:4b:f0:57:54:82:c5:f0:62:83:71:83:13:5c:f0:c8: 17:ae:63:ba:ef:ce:4d:3a:b3:0c:75:e6:df:da:29:f3:4e:e2: b3:65:9a:ad:01:4f:7f:a1:fd:1f:ea:98:ff:9a:99:3b:b5:e9: fb:0f:4a:e3:35:d5:02:b2:9b:86:db:15:17:82:cc:73:e7:35: 57:8f:5b:1e:bf:60:36:91:ec:c6:81:54:5c:7b:c0:9b:7d:06: 8a:d2:d0:a4:d0:bb:c7:50:db:c9:1a:a8:a6:02:3b:fb:40:c2: fd:ad:0d:10:08:3c:a8:e3:22:63:19:15:5a:b1:df:75:c5:30: 22:26:df:56:46:0e:ce:cb:81:4f:72:be:7c:82:db:2d:a3:ac: c2:89:04:c1:b5:27:36:32:3d:17:62:61:53:a1:5b:ba:2f:cb: 2d:e1:13:07:94:db:04:cb:5f:7e:c4:40:15:64:5f:77:f9:f1: 9b:02:45:46:cd:13:b7:d6:3f:d7:5c:fa:57:21:cc:2f:16:56: 14:30:c7:79:2f:67:24:7f:04:55:80:56:6c:62:19:65:57:a5: 27:e2:c0:78:7d:0f:64:78:46:29:c6:3d:9f:e9:9f:06:a6:a2: 55:c3:9b:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww5GjFlFppWmyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk OTI1ZTkyMmMtMmE3MS00OThkLTlmNGQtNzUyZDRmZjg0NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIR8+HiEtGXu4QodC1Fx7RrX3yqmeeYxXPn9 jzWLwvSRPlZ/G0qXmHAekVvF9NGsFstBy1c3jLZ9tWjgMlWObbzz092TOVBqVh4y QB1qX0abYZW/B2A7qaASghxDVoeJk38bCoCcEQ+mXhEwBd/viTci8WPT1G88FaVj hbbp7buPq9tq5+foTuMT2HxXX/dRRFXmeDfgdwqFzom2uA+coZ636t3czJ+69Cp/ pxuq56BwCTkrWGVQTwhVyJ8j85DcVC4XiybiMWEcJTXoGNZScJU1UyzHpKSkCDt6 ba8SmYbPZNSXlsNd3rlEm0LM60RBudI7IfWP5YI8TA6W+F0XlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG2sbmBEtPXb1unlpAKwDRHD11+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvNDY4MGQxOTEtM2EzOC00 Y2VmLTg5ZGQtYzg0MjQwZTNhMWNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvNOljKKXBVkRmEAE4N1/y XRhTfs5L8FdUgsXwYoNxgxNc8MgXrmO6785NOrMMdebf2inzTuKzZZqtAU9/of0f 6pj/mpk7ten7D0rjNdUCspuG2xUXgsxz5zVXj1sev2A2kezGgVRce8CbfQaK0tCk 0LvHUNvJGqimAjv7QML9rQ0QCDyo4yJjGRVasd91xTAiJt9WRg7Oy4FPcr58gtst o6zCiQTBtSc2Mj0XYmFToVu6L8st4RMHlNsEy19+xEAVZF93+fGbAkVGzRO31j/X XPpXIcwvFlYUMMd5L2ckfwRVgFZsYhllV6Un4sB4fQ9keEYpxj2f6Z8GpqJVw5tE -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:13 2025 by rpki-client