$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: jYAGKx64rWb/25kq9YvFKaiah/VrIgeQLxda7Mvd+Lw= Subject key identifier: 14:31:94:FD:79:E7:11:ED:E4:25:4B:FD:AC:F6:2A:E7:AC:12:E3:20 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584BC058017CF07DE281FC8F2B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3C4C Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: uJ9rNDHwP+yMzqlwO7lrN49lv3bUrXJxNDBsFtFhR7s=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: t9Uo79paPEOneFBkBSzRllO1kxpjAnHADLYyh7p2vsA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:01:7c:f0:7d:e2:81:fc:8f:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=2d520124-2768-470a-bfdb-b5217c01e066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5e:3b:ea:24:60:5b:bd:59:fe:60:df:b0:19: a1:ec:1f:6b:bf:46:d5:3b:8e:a8:75:cf:f0:88:03: df:41:ad:aa:29:0a:03:4e:04:e1:1e:fc:83:80:eb: 7c:c4:0a:02:1b:f7:82:21:68:45:03:e0:ca:d3:57: 35:8d:d1:b2:9e:21:4a:6b:d9:f3:0c:9b:7f:20:c4: 17:f4:80:27:82:7d:3a:58:5e:c3:47:a4:ed:ad:0e: 8e:2d:83:99:69:d7:ba:fc:ee:c7:d8:a1:4e:8e:ff: c1:d6:0a:06:54:73:a8:87:84:17:69:42:cf:05:72: 1f:fd:ef:e0:c8:fa:5e:ed:cf:20:2f:9e:4b:8c:31: 9d:d1:14:66:f6:0a:fb:4d:43:65:c3:62:ee:5b:4b: 86:49:36:bb:b0:df:52:62:60:aa:5d:9a:ef:19:e4: 08:d3:dd:a1:b2:1d:08:c3:b5:33:e0:d5:0c:6b:0c: f5:66:75:53:5b:97:0e:3c:a2:a2:32:b6:68:42:45: 2c:b7:ab:b1:e6:97:dd:c1:46:a1:59:af:9e:38:de: 41:09:74:13:c2:53:92:9e:5a:c3:67:ea:c8:bd:86: a2:34:ae:17:87:0a:e5:fe:3b:7e:d4:0a:e7:b0:76: 80:6c:40:10:23:fc:04:bc:27:5a:01:6b:56:89:17: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:94:FD:79:E7:11:ED:E4:25:4B:FD:AC:F6:2A:E7:AC:12:E3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b0:58:d4:63:80:9c:c3:0e:80:49:ef:39:02:3b:aa:37:19: 75:9a:b6:31:8c:ea:2f:ca:69:88:80:24:9c:6c:1e:17:fc:d7: 9e:5e:ac:bc:de:ea:7f:b9:69:d4:a4:b9:b6:96:d3:13:42:af: 36:8a:d6:66:f8:9c:53:fd:8e:a5:3f:fd:53:e6:cf:0a:b8:42: e3:31:cc:cb:40:8d:c5:b2:69:4e:cf:33:9a:fa:11:90:03:56: e2:36:77:66:5b:9b:f7:30:ba:6c:f3:89:9a:16:50:9c:5d:50: 5d:30:ca:df:55:e7:70:4f:03:21:f4:ac:f7:d9:78:55:a4:d9: c1:d4:cc:8b:4a:48:9d:72:ef:a4:18:b0:c2:97:16:3e:1c:42: 82:23:77:2d:4f:33:8f:f6:87:ab:35:fc:31:c7:8a:8c:66:f3: 6d:6d:5f:5f:c0:fb:2a:e0:ec:74:41:da:23:5a:3c:39:33:d5: 54:39:01:7a:b5:bc:59:e8:e5:7e:82:b8:1a:b7:95:76:fa:28: bc:0b:d3:ec:63:50:e3:62:8b:91:3f:96:54:9a:11:34:4c:db: 4c:c5:c1:4a:ed:d0:3c:26:bf:c9:85:ef:b3:d4:66:bb:f9:af: d0:33:f7:3e:3d:a0:2f:74:73:7b:9e:2b:46:04:e5:0a:72:fc: d6:e5:12:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWAF88H3igfyPKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk MmQ1MjAxMjQtMjc2OC00NzBhLWJmZGItYjUyMTdjMDFlMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF476iRgW71Z/mDfsBmh7B9rv0bVO46odc/w iAPfQa2qKQoDTgThHvyDgOt8xAoCG/eCIWhFA+DK01c1jdGyniFKa9nzDJt/IMQX 9IAngn06WF7DR6TtrQ6OLYOZade6/O7H2KFOjv/B1goGVHOoh4QXaULPBXIf/e/g yPpe7c8gL55LjDGd0RRm9gr7TUNlw2LuW0uGSTa7sN9SYmCqXZrvGeQI092hsh0I w7Uz4NUMawz1ZnVTW5cOPKKiMrZoQkUst6ux5pfdwUahWa+eON5BCXQTwlOSnlrD Z+rIvYaiNK4Xhwrl/jt+1ArnsHaAbEAQI/wEvCdaAWtWiReJ7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBQxlP155xHt5CVL/az2KuesEuMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHsFjUY4Ccww6ASe85Ajuq Nxl1mrYxjOovymmIgCScbB4X/NeeXqy83up/uWnUpLm2ltMTQq82itZm+JxT/Y6l P/1T5s8KuELjMczLQI3FsmlOzzOa+hGQA1biNndmW5v3MLps84maFlCcXVBdMMrf VedwTwMh9Kz32XhVpNnB1MyLSkidcu+kGLDClxY+HEKCI3ctTzOP9oerNfwxx4qM ZvNtbV9fwPsq4Ox0QdojWjw5M9VUOQF6tbxZ6OV+grgat5V2+ii8C9PsY1DjYouR P5ZUmhE0TNtMxcFK7dA8Jr/Jhe+z1Ga7+a/QM/c+PaAvdHN7nitGBOUKcvzW5RJJ -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:09 2025 by rpki-client