$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft File: 42804204-aefa-4fac-9d39-1599fa403e46.mft (raw, json) Hash identifier: ittFQu5n1q1ePlOJXZOvr/ZZ0l+0oPXWBHB7eT8/voA= Subject key identifier: 19:EB:F1:7D:31:30:B9:FF:0F:29:43:72:14:D3:9A:0D:19:85:9C:60 Authority key identifier: 05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 Certificate issuer: /CN=42804204-aefa-4fac-9d39-1599fa403e46 Certificate serial: 010D0C9F4328584BC1640476A5A54B96ACBEEF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft Manifest number: 010D0C9F432858481A2CC971E119A90804F49400 Signing time: Wed 05 Nov 2025 05:00:10 +0000 Manifest this update: Wed 05 Nov 2025 05:00:10 +0000 Manifest next update: Fri 07 Nov 2025 05:00:00 +0000 Files and hashes: 1: 42804204-aefa-4fac-9d39-1599fa403e46.crl (hash: ezkip8kQK1dRyEv+AQpfR5w0Nr3OOqQz2NCx5eVlQgg=) 2: cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa (hash: TlyRfJKlwkxcJtbIJJepK3Xlhaepp9NDKt3dOvpBEdM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:64:04:76:a5:a5:4b:96:ac:be:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42804204-aefa-4fac-9d39-1599fa403e46 Validity Not Before: Nov 5 05:00:10 2025 GMT Not After : Nov 7 05:00:00 2025 GMT Subject: CN=fe2f5d1d-97c0-4e1b-a686-5cf7a66f55e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:49:ac:cc:df:13:fc:c1:40:d7:cd:27:f8: af:06:cc:06:71:38:0f:52:3f:fa:97:b5:42:27:78: 4d:2e:0b:cf:b6:f0:4b:3c:8e:85:fc:c1:90:5f:e6: 73:b1:67:01:d0:da:71:a7:43:09:23:0a:56:64:2c: 71:51:38:f8:c0:b6:59:de:f5:61:0b:9c:0f:aa:05: f8:bc:9a:db:2e:9e:45:7c:2e:6b:dc:f7:f0:3d:f3: d2:e5:26:a8:6f:da:e0:34:13:cd:0d:b0:48:49:09: c1:43:4f:98:05:4b:9f:2e:05:ce:ec:98:af:f7:cc: e7:4f:31:d3:0b:6d:48:27:94:0e:83:40:c2:8b:ed: 84:d5:45:eb:52:a9:7f:87:a4:dd:08:c3:95:1e:6d: 56:ef:0c:c9:47:2b:59:fc:6e:dc:03:34:d6:93:69: f3:eb:1a:2c:e9:86:ae:da:56:b4:e0:61:4d:67:1a: f5:51:b7:fb:86:b0:72:57:30:e4:ae:29:83:af:72: 20:b8:60:92:35:5a:19:d4:57:43:d6:44:bc:d4:4c: fd:c5:6e:9c:86:f2:f9:bc:62:f8:04:0d:b2:74:2a: 94:cb:4b:54:b3:df:63:62:ad:1f:42:c3:e9:00:36: 8b:6d:31:dc:13:64:e5:21:61:e4:e8:be:72:42:5a: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EB:F1:7D:31:30:B9:FF:0F:29:43:72:14:D3:9A:0D:19:85:9C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl X509v3 Authority Key Identifier: keyid:05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:25:46:69:b4:ae:4a:58:1e:d0:e4:35:46:44:ce:de:b0:6b: 32:cb:04:49:69:73:0a:a0:04:d6:85:47:70:29:f4:0a:8c:6e: c9:63:a5:6e:77:99:a7:09:2e:ba:b5:e5:62:83:1f:e6:2e:ce: 5d:6f:0d:36:33:3d:a1:b7:ec:29:c7:9d:05:4b:81:c5:cc:5f: fa:07:0c:4f:83:fc:33:28:10:95:98:d9:b3:09:b3:63:b6:51: c6:f1:80:6b:d3:3d:4b:96:f9:be:f9:48:8a:b9:47:13:1e:f0: 74:e0:20:86:de:59:53:44:6d:b7:e0:a7:d1:d7:5a:53:47:4f: 41:05:c6:8b:20:98:62:a4:7d:de:d6:f6:24:ad:9a:24:3f:53: a7:9d:f2:79:07:9f:de:d7:b5:4a:de:c5:64:fa:e7:c4:25:cc: e8:d3:8f:66:a9:de:c3:93:4a:98:5d:f7:6d:96:ba:69:43:5c: 94:ab:87:40:2c:97:3c:22:b8:fd:eb:ef:62:b0:7c:5a:56:72: 90:37:fe:de:06:dd:c7:b8:7f:42:7a:b9:9a:61:39:21:4f:b0: a9:0b:a1:4a:ca:7a:09:01:2e:77:bf:1a:84:a4:38:0d:c3:31: d2:c1:67:87:ad:39:29:1e:a5:88:29:6a:ed:71:6d:52:a2:ee: c1:95:ad:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBZAR2paVLlqy+7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MDQyMDQtYWVmYS00ZmFjLTlkMzktMTU5OWZhNDAz ZTQ2MB4XDTI1MTEwNTA1MDAxMFoXDTI1MTEwNzA1MDAwMFowLzEtMCsGA1UEAxMk ZmUyZjVkMWQtOTdjMC00ZTFiLWE2ODYtNWNmN2E2NmY1NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRxJrMzfE/zBQNfNJ/ivBswGcTgPUj/6l7VC J3hNLgvPtvBLPI6F/MGQX+ZzsWcB0Npxp0MJIwpWZCxxUTj4wLZZ3vVhC5wPqgX4 vJrbLp5FfC5r3PfwPfPS5Saob9rgNBPNDbBISQnBQ0+YBUufLgXO7Jiv98znTzHT C21IJ5QOg0DCi+2E1UXrUql/h6TdCMOVHm1W7wzJRytZ/G7cAzTWk2nz6xos6Yau 2la04GFNZxr1Ubf7hrByVzDkrimDr3IguGCSNVoZ1FdD1kS81Ez9xW6chvL5vGL4 BA2ydCqUy0tUs99jYq0fQsPpADaLbTHcE2TlIWHk6L5yQlpqLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBnr8X0xMLn/DylDchTTmg0ZhZxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80Mjgw NDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5ZmE0MDNlNDYvNDI4MDQyMDQtYWVmYS00 ZmFjLTlkMzktMTU5OWZhNDAzZTQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDI4MDQyMDQtYWVmYS00ZmFjLTlk MzktMTU5OWZhNDAzZTQ2LzQyODA0MjA0LWFlZmEtNGZhYy05ZDM5LTE1OTlmYTQw M2U0Ni5jcmwwHwYDVR0jBBgwFoAUBXzILUv4qGmvJ6oIhxcWElC11HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MjgwNDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5 ZmE0MDNlNDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASJUZptK5KWB7Q5DVGRM7e sGsyywRJaXMKoATWhUdwKfQKjG7JY6Vud5mnCS66teVigx/mLs5dbw02Mz2ht+wp x50FS4HFzF/6BwxPg/wzKBCVmNmzCbNjtlHG8YBr0z1Llvm++UiKuUcTHvB04CCG 3llTRG234KfR11pTR09BBcaLIJhipH3e1vYkrZokP1OnnfJ5B5/e17VK3sVk+ufE Jczo049mqd7Dk0qYXfdtlrppQ1yUq4dALJc8Irj96+9isHxaVnKQN/7eBt3HuH9C ermaYTkhT7CpC6FKynoJAS53vxqEpDgNwzHSwWeHrTkpHqWIKWrtcW1Sou7Bla34 -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:24 2025 by rpki-client