$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft File: e49f1cd9-302a-4377-9a40-b12c78b69f87.mft (raw, json) Hash identifier: HLf0Qjpk+IoqG24v72q+ZajHl67MIL191bPEs7f/Pts= Subject key identifier: CB:9C:06:44:62:A3:1D:92:2A:84:81:8A:8C:A8:85:85:2B:B2:03:71 Authority key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Certificate issuer: /CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Certificate serial: 010D0C9F4328584BBFC313070615F5659D4113C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft Manifest number: 010D0C9F43285841636D8947664456676FDBFB0F Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa (hash: 2ZPdb0LhBWkwTeXQP9WbVeJ09/Fa7sEwG5S4DhADzBE=) 2: e49f1cd9-302a-4377-9a40-b12c78b69f87.crl (hash: 4qUJQpy5etQMBUFva0tZDcQ2cmMbT4vsM3JC/0FQAZI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:13:07:06:15:f5:65:9d:41:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=597aa269-d89a-459c-a71c-aaee96a8edb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:ba:cc:7f:81:aa:de:6e:5a:f3:12:27:e2: a6:17:d8:69:f9:a2:77:4a:36:13:17:f2:47:92:bd: 06:d1:6a:9f:0d:c2:70:43:2b:3f:82:e7:48:5e:29: e1:99:f2:09:6b:07:10:85:fa:4a:40:f9:e1:de:8b: 1a:5a:b2:5c:b1:30:82:e6:8b:df:ba:ec:ae:94:79: 8d:b7:1b:69:d0:72:3f:94:15:52:c4:1f:c4:17:90: 2b:bb:bb:c8:39:3b:ec:e6:86:c1:3e:73:77:8f:f4: 26:8b:64:8d:82:ba:5a:96:3f:5d:e1:67:83:2b:a7: 81:44:85:f6:19:a0:d1:ae:6a:33:d0:6d:c2:ae:9e: 7b:c3:4d:55:0e:86:64:6e:ba:17:c6:71:fd:13:bf: 8a:74:61:b6:df:13:dd:4b:1a:4b:67:8f:e6:e3:71: 5b:6a:8c:93:d6:d1:73:c1:7c:72:d5:0a:c3:ec:87: b5:3f:8d:e0:39:9e:88:0b:d1:0a:fd:a5:64:b5:46: b5:7d:08:10:f9:cc:cf:df:87:40:bd:3b:1f:05:9b: 11:08:81:8c:9b:f9:2c:b0:75:49:9e:89:0e:e4:fc: 88:d6:36:87:2a:72:bb:f8:11:af:9b:34:e1:44:70: 3b:85:ed:02:e1:95:fe:f1:bc:f9:78:e3:ac:3e:50: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:06:44:62:A3:1D:92:2A:84:81:8A:8C:A8:85:85:2B:B2:03:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl X509v3 Authority Key Identifier: keyid:E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f6:18:8e:1c:bc:33:f3:ca:ca:72:b7:08:13:68:dc:ad:2a: 6b:9c:a6:a7:6c:90:6c:0a:70:08:f2:15:16:f5:50:56:a1:10: 09:15:e2:9e:a1:70:f6:d1:9d:62:50:06:aa:84:90:af:6d:1d: ca:79:2d:ca:c3:10:a9:bf:a1:f8:0b:81:59:99:80:e6:d1:08: 31:ea:49:f3:53:b1:2f:86:23:bb:73:56:7b:15:f0:c8:a2:c7: f6:75:ea:99:87:4a:d7:6d:26:09:3a:1d:68:de:a3:f4:10:b5: ba:8f:62:89:4c:e5:71:5a:c6:26:c4:8d:88:47:c1:fc:c4:e4: cc:a9:23:6b:6e:09:05:f7:7d:f8:d9:df:6c:1e:2f:f8:07:9f: 91:72:9f:66:a7:fd:65:37:3f:19:7d:f4:d8:0a:97:05:75:87: 2b:7c:56:c5:67:33:0e:12:fd:16:a8:77:74:8e:34:8c:66:52: 15:db:d5:71:35:83:45:9a:41:88:f5:74:93:fb:62:6c:9c:8b: e2:a8:83:ae:3d:04:f3:a3:07:21:93:dd:d9:ec:42:d9:74:c6: 2a:42:cc:d4:52:24:72:82:bb:06:87:31:df:d2:60:c8:89:45: 2f:9a:c1:a0:dc:d8:13:d0:aa:77:4f:20:7e:7c:4d:b2:84:f4: af:d5:b4:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxMHBhX1ZZ1BE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ5ZjFjZDktMzAyYS00Mzc3LTlhNDAtYjEyYzc4YjY5 Zjg3MB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk NTk3YWEyNjktZDg5YS00NTljLWE3MWMtYWFlZTk2YThlZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkC6zH+Bqt5uWvMSJ+KmF9hp+aJ3SjYTF/JH kr0G0WqfDcJwQys/gudIXinhmfIJawcQhfpKQPnh3osaWrJcsTCC5ovfuuyulHmN txtp0HI/lBVSxB/EF5Aru7vIOTvs5obBPnN3j/Qmi2SNgrpalj9d4WeDK6eBRIX2 GaDRrmoz0G3Crp57w01VDoZkbroXxnH9E7+KdGG23xPdSxpLZ4/m43FbaoyT1tFz wXxy1QrD7Ie1P43gOZ6IC9EK/aVktUa1fQgQ+czP34dAvTsfBZsRCIGMm/kssHVJ nokO5PyI1jaHKnK7+BGvmzThRHA7he0C4ZX+8bz5eOOsPlC5swIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMucBkRiox2SKoSBioyohYUrsgNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNDlm MWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhiNjlmODcvZTQ5ZjFjZDktMzAyYS00 Mzc3LTlhNDAtYjEyYzc4YjY5Zjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTQ5ZjFjZDktMzAyYS00Mzc3LTlh NDAtYjEyYzc4YjY5Zjg3L2U0OWYxY2Q5LTMwMmEtNDM3Ny05YTQwLWIxMmM3OGI2 OWY4Ny5jcmwwHwYDVR0jBBgwFoAU52APEsECvJc3o/Np0qc8ROVOvN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJj NzhiNjlmODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa9hiOHLwz88rKcrcIE2jc rSprnKanbJBsCnAI8hUW9VBWoRAJFeKeoXD20Z1iUAaqhJCvbR3KeS3KwxCpv6H4 C4FZmYDm0Qgx6knzU7EvhiO7c1Z7FfDIosf2deqZh0rXbSYJOh1o3qP0ELW6j2KJ TOVxWsYmxI2IR8H8xOTMqSNrbgkF93342d9sHi/4B5+Rcp9mp/1lNz8ZffTYCpcF dYcrfFbFZzMOEv0WqHd0jjSMZlIV29VxNYNFmkGI9XST+2JsnIviqIOuPQTzowch k93Z7ELZdMYqQszUUiRygrsGhzHf0mDIiUUvmsGg3NgT0Kp3TyB+fE2yhPSv1bQH -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:14 2025 by rpki-client