$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft File: 1c939443-d4d3-4122-9e02-8422f40f90c5.mft (raw, json) Hash identifier: ioRbHZrcyv4xQUByRVuldo3mTijXZD2NlX4YxjJYCOQ= Subject key identifier: 08:57:30:02:42:05:4E:D2:A2:26:06:99:3C:8F:0F:DA:30:E8:03:CF Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Certificate issuer: /CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Certificate serial: 010D0C9F4328584BBFC30F1A86D9EFB1A4D3E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft Manifest number: 010D0C9F432858430ED6AE4515AF570837AF18F0 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 1c939443-d4d3-4122-9e02-8422f40f90c5.crl (hash: Nr09TGRZBzvwFDiCST14hfefuLA9WPwlmEusVgFPdJQ=) 2: 6fccbf45-4871-3804-845f-da32fb15f471.roa (hash: Sjnd1kVQwTxg4eWo9c5eAjdmIccKNPWDUhcg6zkyN4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0f:1a:86:d9:ef:b1:a4:d3:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=28402653-491a-47b5-9f57-d1d7a57d660a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:11:ea:56:10:98:6e:9f:f8:90:1e:a9:11: 9a:a8:a2:44:19:14:f6:96:a9:6d:31:f0:1b:07:1d: 3b:e8:90:59:35:43:13:5c:29:7d:01:50:85:1e:7c: d9:27:df:10:10:08:d1:ca:64:08:98:69:5e:c0:1a: 25:8f:f8:49:58:cb:36:42:92:35:c3:19:de:3e:67: 88:0b:0b:19:eb:d0:25:a1:5e:11:9f:7a:2f:f6:5f: 2b:ff:e5:9d:fe:c3:7f:1b:4d:f1:14:38:ce:63:37: e0:32:f6:2a:d6:2f:a5:11:dd:7b:19:bd:54:db:41: c1:3c:e5:a6:db:00:01:92:14:5d:67:7e:64:21:10: bc:90:b5:42:42:9e:81:69:7c:47:25:c4:69:ab:2e: f7:75:89:e1:ac:c0:5e:7b:bf:5e:99:da:86:bc:c6: 4c:d4:95:c7:3e:ac:7e:83:10:a2:2f:7c:ba:32:fa: 0d:eb:4e:c3:89:37:68:37:12:ae:64:8d:14:68:df: 0a:7e:cc:77:e7:19:12:af:d0:55:58:d3:1d:0e:88: 00:d1:32:f3:a0:2c:1c:67:ab:54:c4:81:c7:03:c2: 14:d1:64:05:ce:26:c6:57:87:5d:84:d0:20:05:27: 8f:27:d7:b2:f7:d6:40:90:14:a3:e7:df:53:8d:c8: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:57:30:02:42:05:4E:D2:A2:26:06:99:3C:8F:0F:DA:30:E8:03:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl X509v3 Authority Key Identifier: keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8a:ba:79:36:68:b9:f5:1e:62:a3:8a:83:52:c0:b8:77:8f: 0d:06:65:21:d0:fa:1c:31:d1:9a:3f:40:2b:ac:e1:fb:a9:9b: c9:8e:46:4d:1d:f7:10:45:91:d8:8c:2f:62:bf:d9:61:6a:84: 93:1d:fb:4d:5e:c6:09:e9:52:06:97:5f:d9:85:61:e4:2d:76: 53:96:05:c2:b4:74:b9:5e:f8:d0:1e:6e:d2:00:46:a2:9e:04: a1:a9:64:19:d9:bb:81:3f:b9:ac:3a:6b:97:43:97:7b:6b:14: c3:13:8e:b5:80:02:ab:7b:56:2b:c6:60:a1:9f:91:fa:f3:8d: 4a:6d:21:80:12:09:70:31:fb:24:ac:ee:07:8f:ee:9b:d6:e2: 0c:24:fb:fb:d9:e1:3f:16:23:ca:9f:48:df:32:94:13:72:ee: de:f5:a8:62:ea:64:c0:2e:44:c0:58:5a:b4:ac:48:cc:f3:ca: 2b:e9:fa:d4:07:07:a9:32:4c:c1:4a:fa:6b:a2:73:25:3b:3c: 4c:3b:37:95:6e:80:18:47:5e:5a:15:87:b3:ad:f3:9a:f8:9f: e0:cf:ee:7f:2a:2d:e0:aa:01:24:55:bf:b4:77:d1:04:59:a3: fa:f1:4f:75:a3:82:3c:6e:b5:0c:9f:a3:53:f3:be:0e:1b:a4: 25:d8:9a:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww8ahtnvsaTT5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5 MGM1MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk Mjg0MDI2NTMtNDkxYS00N2I1LTlmNTctZDFkN2E1N2Q2NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/UR6lYQmG6f+JAeqRGaqKJEGRT2lqltMfAb Bx076JBZNUMTXCl9AVCFHnzZJ98QEAjRymQImGlewBolj/hJWMs2QpI1wxnePmeI CwsZ69AloV4Rn3ov9l8r/+Wd/sN/G03xFDjOYzfgMvYq1i+lEd17Gb1U20HBPOWm 2wABkhRdZ35kIRC8kLVCQp6BaXxHJcRpqy73dYnhrMBee79emdqGvMZM1JXHPqx+ gxCiL3y6MvoN607DiTdoNxKuZI0UaN8Kfsx35xkSr9BVWNMdDogA0TLzoCwcZ6tU xIHHA8IU0WQFzibGV4ddhNAgBSePJ9ey99ZAkBSj599TjciVKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAhXMAJCBU7SoiYGmTyPD9ow6APPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzkz OTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMWM5Mzk0NDMtZDRkMy00 MTIyLTllMDItODQyMmY0MGY5MGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM5Mzk0NDMtZDRkMy00MTIyLTll MDItODQyMmY0MGY5MGM1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05ZTAyLTg0MjJmNDBm OTBjNS5jcmwwHwYDVR0jBBgwFoAUcwBMVZEDoAnEK13od5gZ5m1HdWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIy ZjQwZjkwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsirp5Nmi59R5io4qDUsC4 d48NBmUh0PocMdGaP0ArrOH7qZvJjkZNHfcQRZHYjC9iv9lhaoSTHftNXsYJ6VIG l1/ZhWHkLXZTlgXCtHS5XvjQHm7SAEaingShqWQZ2buBP7msOmuXQ5d7axTDE461 gAKre1YrxmChn5H6841KbSGAEglwMfskrO4Hj+6b1uIMJPv72eE/FiPKn0jfMpQT cu7e9ahi6mTALkTAWFq0rEjM88or6frUBwepMkzBSvpronMlOzxMOzeVboAYR15a FYezrfOa+J/gz+5/Ki3gqgEkVb+0d9EEWaP68U91o4I8brUMn6NT874OG6Ql2JpO -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:40 2025 by rpki-client