$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft File: 4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft (raw, json) Hash identifier: xh+bUkSocB2Wx2zRMYQdv8BYJuMKqji0m3G03AKwTzU= Subject key identifier: E7:5D:CA:7C:DA:EE:AF:16:80:7E:D8:49:68:9B:AF:BF:78:1E:49:26 Authority key identifier: 33:A7:C4:EC:EA:F1:1A:B4:2D:8D:29:06:E5:19:23:E4:E0:10:F8:33 Certificate issuer: /CN=4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d Certificate serial: 010D0C9F4328584BC3D5591869BEBAB5D6CCE080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft Manifest number: 010D0C9F4328584A2C3F6A996F1A909DB5674E95 Signing time: Thu 06 Nov 2025 02:00:08 +0000 Manifest this update: Thu 06 Nov 2025 02:00:08 +0000 Manifest next update: Sun 09 Nov 2025 02:00:00 +0000 Files and hashes: 1: 4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl (hash: eOaS7F2/qZKjW+ZXMuzlOQysVuxCsJdcrTua+6Bvqz4=) 2: b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa (hash: UdpCokVIRcwgKYQbIDGbbVSoujI1zWAwbLB3rB4DMbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:d5:59:18:69:be:ba:b5:d6:cc:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d Validity Not Before: Nov 6 02:00:08 2025 GMT Not After : Nov 9 02:00:00 2025 GMT Subject: CN=dd4ed510-6269-410b-b586-fe1fadabacc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fa:7f:c9:52:95:6f:14:4a:e0:93:f7:ad:d8: 17:45:b5:b5:0b:07:2a:04:46:17:d5:35:82:e3:77: e6:b6:0f:ad:2b:48:6d:c4:58:ac:28:2b:45:f6:17: a0:b3:c9:be:b2:52:71:2e:09:cc:8a:7f:52:5d:24: ab:5c:58:fe:19:bf:5a:f7:55:76:aa:72:97:ac:3c: dc:96:3f:7f:ce:08:1c:e2:94:ff:dd:4a:ed:bc:8c: 31:e0:2b:f5:9c:b9:a2:2a:14:df:f2:cd:14:d9:23: de:21:5c:3a:30:63:d9:e4:bd:dc:ee:9d:d7:67:6c: ff:2e:40:ef:c4:72:bf:a2:6e:b6:31:23:64:5d:fd: 5a:a4:e4:7a:67:ba:2f:2a:02:cd:e4:0d:39:91:21: 2c:84:b0:e3:25:af:d2:38:f6:2f:61:ec:bc:32:6f: 3c:2f:ca:6c:59:30:8c:d2:f1:89:1a:a3:46:71:3b: 20:72:b9:20:ee:7f:5f:6e:63:c3:f8:f8:e6:62:40: b8:be:a9:07:df:e7:90:f0:fc:3a:35:ee:21:08:97: 16:22:70:63:03:b0:88:48:33:e3:36:f9:8a:08:d0: 9d:4b:aa:0f:eb:df:54:e9:20:0c:97:66:3e:fd:21: 57:d4:eb:12:a8:25:0a:a7:f5:cb:f7:f4:e2:7b:a8: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5D:CA:7C:DA:EE:AF:16:80:7E:D8:49:68:9B:AF:BF:78:1E:49:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl X509v3 Authority Key Identifier: keyid:33:A7:C4:EC:EA:F1:1A:B4:2D:8D:29:06:E5:19:23:E4:E0:10:F8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a0:29:11:42:5a:5f:83:05:9b:11:c2:a9:60:55:ce:e6:6c: 3e:9e:0c:c8:85:7d:97:4c:98:cd:20:e9:f6:22:e2:2e:51:10: f5:2c:25:be:fd:5e:02:85:24:5c:34:11:f1:b1:33:1b:56:35: 6f:6e:1a:bf:72:50:52:64:79:6e:56:ef:f6:44:ba:a1:c1:ef: 58:b2:ac:79:cf:51:97:4a:9e:98:4a:41:37:b8:3b:06:2c:08: 30:00:85:40:7a:3b:26:83:72:49:60:8e:d1:97:4a:ce:c1:a0: 7c:9a:7d:c2:fe:c5:89:d6:2d:4d:b4:dd:73:e0:48:18:1a:69: 45:8a:a3:f2:ce:37:4c:ec:4a:ca:78:fb:a4:7a:aa:5e:50:a7: c9:8b:bf:74:33:b7:39:ca:d1:ec:bf:a2:93:ae:8a:96:25:73: 33:19:89:60:f7:31:b9:b6:c4:84:02:b5:35:4d:eb:c6:66:d9: 8f:bb:68:68:c6:71:86:97:5f:06:5e:83:2e:ee:2d:8d:de:3c: 09:b4:9b:40:38:c4:b8:e0:7a:bd:bf:a1:e4:dc:d8:d0:1e:15: 2c:2f:3d:07:ef:1d:39:9b:76:fc:b9:10:ee:86:b7:75:dd:85: c4:21:55:54:56:9e:4f:ea:d6:a2:df:18:bd:8f:6a:2d:40:fe: 90:04:c3:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvD1VkYab66tdbM4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE0MDVjYTktZThhNS00MWE2LWJlYzktM2JmY2M5ZDAx ZTlkMB4XDTI1MTEwNjAyMDAwOFoXDTI1MTEwOTAyMDAwMFowLzEtMCsGA1UEAxMk ZGQ0ZWQ1MTAtNjI2OS00MTBiLWI1ODYtZmUxZmFkYWJhY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/p/yVKVbxRK4JP3rdgXRbW1CwcqBEYX1TWC 43fmtg+tK0htxFisKCtF9hegs8m+slJxLgnMin9SXSSrXFj+Gb9a91V2qnKXrDzc lj9/zggc4pT/3UrtvIwx4Cv1nLmiKhTf8s0U2SPeIVw6MGPZ5L3c7p3XZ2z/LkDv xHK/om62MSNkXf1apOR6Z7ovKgLN5A05kSEshLDjJa/SOPYvYey8Mm88L8psWTCM 0vGJGqNGcTsgcrkg7n9fbmPD+PjmYkC4vqkH3+eQ8Pw6Ne4hCJcWInBjA7CISDPj NvmKCNCdS6oP699U6SAMl2Y+/SFX1OsSqCUKp/XL9/Tie6hDcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOddynza7q8WgH7YSWibr794HkkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YTQw NWNhOS1lOGE1LTQxYTYtYmVjOS0zYmZjYzlkMDFlOWQvNGE0MDVjYTktZThhNS00 MWE2LWJlYzktM2JmY2M5ZDAxZTlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGE0MDVjYTktZThhNS00MWE2LWJl YzktM2JmY2M5ZDAxZTlkLzRhNDA1Y2E5LWU4YTUtNDFhNi1iZWM5LTNiZmNjOWQw MWU5ZC5jcmwwHwYDVR0jBBgwFoAUM6fE7OrxGrQtjSkG5Rkj5OAQ+DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YTQwNWNhOS1lOGE1LTQxYTYtYmVjOS0zYmZj YzlkMDFlOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFoCkRQlpfgwWbEcKpYFXO 5mw+ngzIhX2XTJjNIOn2IuIuURD1LCW+/V4ChSRcNBHxsTMbVjVvbhq/clBSZHlu Vu/2RLqhwe9Ysqx5z1GXSp6YSkE3uDsGLAgwAIVAejsmg3JJYI7Rl0rOwaB8mn3C /sWJ1i1NtN1z4EgYGmlFiqPyzjdM7ErKePukeqpeUKfJi790M7c5ytHsv6KTroqW JXMzGYlg9zG5tsSEArU1TevGZtmPu2hoxnGGl18GXoMu7i2N3jwJtJtAOMS44Hq9 v6Hk3NjQHhUsLz0H7x05m3b8uRDuhrd13YXEIVVUVp5P6tai3xi9j2otQP6QBMMc -----END CERTIFICATE-----Generated at Thu Nov 6 07:49:11 2025 by rpki-client