$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft File: 511ed25c-3ac7-4d86-9290-879e3813322e.mft (raw, json) Hash identifier: CSVhw7DNu56USe9I+UrWe9rNle+zPDU2nD2W+naIIus= Subject key identifier: A2:4C:67:91:39:D5:8A:01:CA:B3:C9:60:A1:82:F8:F3:CB:6F:C7:83 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584BC075C583D7A3F48D99B9EA38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft Manifest number: 010D0C9F43285841EFE6102B086F82254ED047BB Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 511ed25c-3ac7-4d86-9290-879e3813322e.crl (hash: OlpiZu/Zm2wvsmxBvyGoK9Un7wpjCF62oOpjNyEK8hg=) 2: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (hash: KvOFKgH8rdYkelFqc1dPUasJferEwzUjBSrKbVQ2pMk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c5:83:d7:a3:f4:8d:99:b9:ea:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=0ed72e92-a47b-4326-94a9-d8f763b3e8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:87:de:fb:9b:17:13:7e:05:4a:73:19:94: d1:2a:d2:74:f2:24:df:f7:93:cb:5e:d6:30:16:41: 73:12:7a:19:5c:1f:f1:ed:aa:08:12:61:7e:af:34: c6:44:10:88:90:88:19:ba:a8:e0:cf:7a:2f:28:99: fc:dc:18:d8:c7:bb:57:5c:ce:39:40:80:d4:44:e8: 7f:b5:b6:16:77:8a:b0:c8:e9:cd:ac:90:53:01:13: 25:77:78:05:0d:94:18:f5:db:a7:63:bf:da:75:6a: 15:29:0b:84:7c:ce:1e:04:92:e3:57:c1:93:70:d1: b0:f8:4d:8e:2a:9a:c1:86:44:a7:76:76:65:d4:a2: 93:df:97:b9:b2:e4:29:e5:66:56:c0:95:31:f3:6b: fe:27:af:16:2e:47:86:78:63:61:de:5a:f5:15:e2: 4e:fa:c7:e6:ae:0a:1d:15:13:c0:7e:4b:cf:87:e7: 24:4d:e7:0b:45:b8:5a:01:f5:e4:c9:40:4e:3d:12: dc:cc:a2:76:b4:e1:21:66:30:25:7a:e7:b2:ce:b4: 12:94:38:d4:8b:f6:61:95:7e:1d:29:54:b6:14:64: bb:cd:7f:04:da:4a:50:05:19:03:e3:75:6b:be:2e: 9e:d5:7d:fe:6f:e5:d2:be:cc:4f:1f:d6:d1:f4:d3: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4C:67:91:39:D5:8A:01:CA:B3:C9:60:A1:82:F8:F3:CB:6F:C7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8c:e5:be:ac:d6:12:2a:9e:a6:cc:53:86:2b:dd:5c:48:01: 68:02:5f:39:ca:d3:43:a7:78:bd:b2:77:5f:e6:d3:f6:ee:c1: 7e:48:20:b0:9f:57:d4:4a:c7:fe:cb:3f:82:53:ed:b8:48:e3: 0c:4e:dd:f2:f0:8b:42:45:2a:0b:92:9a:69:06:eb:60:82:3b: 6c:55:d1:2f:cf:f6:31:ac:34:e0:84:7a:58:2c:c9:9b:1c:43: e3:24:14:dd:5c:e0:68:31:ab:7e:5b:b3:5d:43:5e:1f:c7:4e: 85:66:53:7f:8c:f7:2a:ce:6d:a2:f9:4e:53:63:c4:6d:c0:c6: f5:cc:9d:09:e2:e7:17:2f:1d:85:0f:4c:e9:0b:14:3e:fb:b0: e9:7c:5a:90:b2:e7:1f:e1:a6:b5:b9:5b:be:a1:42:50:24:ec: d4:24:84:d1:1b:ba:fe:69:18:07:8f:97:be:1b:8a:2d:d8:44: b6:20:d7:0e:e8:db:cd:f2:b3:9d:6d:1d:57:72:ad:83:a2:bc: 27:d4:3b:cc:7f:a3:b0:75:74:50:00:c6:4f:c9:e7:64:40:0e: bd:0a:5f:be:56:05:38:7a:de:74:e0:c3:70:e5:10:2e:b3:af: ea:f2:30:9e:66:87:61:24:3b:9d:0f:2b:f1:4e:ba:31:e7:3e: 73:1d:00:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcWD16P0jZm56jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk MGVkNzJlOTItYTQ3Yi00MzI2LTk0YTktZDhmNzYzYjNlOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CmH3vubFxN+BUpzGZTRKtJ08iTf95PLXtYw FkFzEnoZXB/x7aoIEmF+rzTGRBCIkIgZuqjgz3ovKJn83BjYx7tXXM45QIDUROh/ tbYWd4qwyOnNrJBTARMld3gFDZQY9dunY7/adWoVKQuEfM4eBJLjV8GTcNGw+E2O KprBhkSndnZl1KKT35e5suQp5WZWwJUx82v+J68WLkeGeGNh3lr1FeJO+sfmrgod FRPAfkvPh+ckTecLRbhaAfXkyUBOPRLczKJ2tOEhZjAleueyzrQSlDjUi/ZhlX4d KVS2FGS7zX8E2kpQBRkD43Vrvi6e1X3+b+XSvsxPH9bR9NOnWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKJMZ5E51YoByrPJYKGC+PPLb8eDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvNTExZWQyNWMtM2FjNy00 ZDg2LTkyOTAtODc5ZTM4MTMzMjJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1jOW+rNYSKp6mzFOGK91c SAFoAl85ytNDp3i9sndf5tP27sF+SCCwn1fUSsf+yz+CU+24SOMMTt3y8ItCRSoL kpppButggjtsVdEvz/YxrDTghHpYLMmbHEPjJBTdXOBoMat+W7NdQ14fx06FZlN/ jPcqzm2i+U5TY8RtwMb1zJ0J4ucXLx2FD0zpCxQ++7DpfFqQsucf4aa1uVu+oUJQ JOzUJITRG7r+aRgHj5e+G4ot2ES2INcO6NvN8rOdbR1Xcq2Dorwn1DvMf6OwdXRQ AMZPyedkQA69Cl++VgU4et504MNw5RAus6/q8jCeZodhJDudDyvxTrox5z5zHQAm -----END CERTIFICATE-----Generated at Wed Nov 5 09:54:48 2025 by rpki-client