$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: yyQ1RuqUJ8ePckZS3Ez1pYgTNpw+AVOi/mdogupI7Ck= Subject key identifier: 9D:4B:3B:67:8E:47:EB:14:94:A3:C4:1E:53:90:26:1E:97:33:75:76 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584BC01C639D5CC09263C42C9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F918 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: SPNnjS+KEEHSckb6Ye2f7pKXh17cODaQuZDgE8KfLvQ=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: qlBWgQVHIokIjDb6QASxIynORN+xy8Kc7Lulq2B7wKg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:63:9d:5c:c0:92:63:c4:2c:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=90d5b0b3-4f28-41ab-8598-170d6ddedba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:ce:65:f1:7d:ad:bf:25:d6:f8:f0:cb:46: 9b:5b:8f:6b:fd:1f:4b:80:76:29:b2:a8:1f:46:ca: e2:fa:5c:9b:24:e5:32:09:c1:43:c6:5c:7d:95:dd: d4:75:d2:e1:fc:ea:f7:d8:78:98:fc:2e:9d:a1:4d: f5:04:b2:d3:31:ca:de:93:eb:fc:5a:ee:62:56:84: cb:a8:7f:24:59:07:11:fd:fe:df:13:9a:a9:87:8c: 71:10:7a:17:1c:61:f9:c6:45:5a:ed:e1:29:d1:8c: bb:fd:83:08:4e:63:31:30:63:5c:0b:b4:84:47:78: 25:74:e2:22:d4:91:98:dc:94:f3:29:03:06:8c:99: 07:1c:8c:e3:93:81:0b:f2:11:96:eb:07:64:7c:b6: 08:a9:49:26:90:7b:96:c4:c9:97:8f:7c:b2:7f:f5: 01:eb:e1:2b:ec:7a:6f:ed:32:7e:70:4a:f3:99:8d: 87:8f:f5:c1:1e:d1:d6:c5:e4:2c:c0:8e:6b:37:02: bb:bd:f6:76:d3:c4:90:df:a0:4f:1b:e9:3e:04:3e: 7e:01:fb:28:35:89:aa:aa:be:02:f3:58:c4:2d:47: 51:0f:03:0d:0e:6e:41:13:c3:b8:2c:62:45:ad:e8: 34:38:6a:c8:0a:36:51:73:e9:58:30:22:10:13:a2: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:3B:67:8E:47:EB:14:94:A3:C4:1E:53:90:26:1E:97:33:75:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:09:3e:9c:c5:4b:2b:7a:ac:96:23:b2:fa:05:25:25:43:f2: d8:cd:d4:9b:3b:5c:1a:28:26:31:60:b1:4f:86:98:76:f5:40: dd:01:3f:e2:9c:e5:89:ec:c8:78:4a:59:64:66:14:92:54:6f: a8:ea:e2:8e:73:a0:f8:ec:65:e8:cd:d2:80:61:2f:ea:53:07: af:5c:68:ac:b5:d7:ec:2e:3a:64:a4:0b:64:c1:47:d8:36:3e: 89:8c:aa:59:1e:51:55:05:08:01:75:0a:a3:9b:68:bc:9c:71: df:6d:d9:77:e0:8f:01:66:c5:a7:34:f6:a3:4e:1a:a5:d7:2d: dd:1a:24:e8:c4:33:88:56:b0:91:0e:08:ff:ff:21:2f:87:16: 6e:e9:05:c7:da:24:75:12:e7:c4:60:ca:c6:24:7b:69:52:32: bf:c4:33:af:8d:cd:14:11:44:c8:1c:00:07:21:d2:0c:45:82: 58:9f:ce:f3:68:05:44:73:c1:62:29:1e:c4:6c:16:91:cf:d6: 7f:e0:d0:b9:6d:6e:dd:a1:ab:86:af:a3:ec:b6:fc:50:7e:f0: e2:a0:15:cc:af:48:97:d8:aa:4c:d4:c2:29:a8:db:4e:b7:90: 5f:12:32:f0:9d:1d:d4:54:3b:fb:3c:4e:af:04:c9:80:ec:7c: f6:bd:6f:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGOdXMCSY8QslQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk OTBkNWIwYjMtNGYyOC00MWFiLTg1OTgtMTcwZDZkZGVkYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4HOZfF9rb8l1vjwy0abW49r/R9LgHYpsqgf Rsri+lybJOUyCcFDxlx9ld3UddLh/Or32HiY/C6doU31BLLTMcrek+v8Wu5iVoTL qH8kWQcR/f7fE5qph4xxEHoXHGH5xkVa7eEp0Yy7/YMITmMxMGNcC7SER3gldOIi 1JGY3JTzKQMGjJkHHIzjk4EL8hGW6wdkfLYIqUkmkHuWxMmXj3yyf/UB6+Er7Hpv 7TJ+cErzmY2Hj/XBHtHWxeQswI5rNwK7vfZ208SQ36BPG+k+BD5+AfsoNYmqqr4C 81jELUdRDwMNDm5BE8O4LGJFreg0OGrICjZRc+lYMCIQE6LscQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ1LO2eOR+sUlKPEHlOQJh6XM3V2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhCT6cxUsreqyWI7L6BSUl Q/LYzdSbO1waKCYxYLFPhph29UDdAT/inOWJ7Mh4SllkZhSSVG+o6uKOc6D47GXo zdKAYS/qUwevXGistdfsLjpkpAtkwUfYNj6JjKpZHlFVBQgBdQqjm2i8nHHfbdl3 4I8BZsWnNPajThql1y3dGiToxDOIVrCRDgj//yEvhxZu6QXH2iR1EufEYMrGJHtp UjK/xDOvjc0UEUTIHAAHIdIMRYJYn87zaAVEc8FiKR7EbBaRz9Z/4NC5bW7doauG r6PstvxQfvDioBXMr0iX2KpM1MIpqNtOt5BfEjLwnR3UVDv7PE6vBMmA7Hz2vW8H -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:39 2025 by rpki-client