$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft File: 4a669737-4387-4a5c-829a-5cf431c6469e.mft (raw, json) Hash identifier: tLj1CW28K6gUrJ2VgJA/NMB8bjxfJ1/7RZs3AAlN+Jk= Subject key identifier: 9D:1A:7F:A1:2F:F1:C5:88:4B:EB:5B:77:0C:9C:AE:00:21:0D:E4:01 Authority key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9 Certificate issuer: /CN=4a669737-4387-4a5c-829a-5cf431c6469e Certificate serial: 010D0C9F4328584BBFC3111E0FAD37AC45C03580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft Manifest number: 010D0C9F43285849032037091960EFF903F730C5 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 4a669737-4387-4a5c-829a-5cf431c6469e.crl (hash: NKRYkQQfNZXINw+1JyrrL2np67nebcI8EnlMO9QXNzE=) 2: 718aca4e-36f9-388f-afe0-123ff07786c7.roa (hash: K3IcOWPhIIw5yR+95DyFPW/gHz+Vpldgjsb6ERDNBec=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:11:1e:0f:ad:37:ac:45:c0:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a669737-4387-4a5c-829a-5cf431c6469e Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=d5a02c84-e629-4dd0-8c5c-5733cb5bdf4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:80:b6:7a:88:e3:16:df:3e:57:53:04:23: 9c:9d:3f:c2:9b:d4:53:de:f3:3e:d8:91:60:37:45: de:eb:d1:5d:77:cd:da:8b:12:ea:71:6c:50:11:5c: ee:c5:bb:95:e3:f7:75:97:2c:ab:1a:88:c9:49:20: 82:82:d1:f3:98:ff:fa:5a:cb:9c:e4:4e:1d:16:d7: 5a:cd:71:4e:11:d8:bf:4b:2d:4a:9d:92:9f:23:7d: a1:da:c6:f7:fb:ac:88:82:c0:da:4c:a1:bb:a2:7f: f5:54:ef:9c:ff:49:4c:b0:b7:5c:ca:02:b9:21:3c: 47:fb:03:4b:ff:2c:2e:07:1c:2d:4c:57:4c:eb:a9: 56:9b:68:89:76:a0:ff:ce:09:e8:df:62:40:c4:0a: 4d:19:d8:5c:4b:da:90:1d:af:3a:f4:b9:2b:e4:68: ed:a1:6b:4c:43:79:5d:c0:e0:35:82:30:6b:48:b2: 21:64:58:cd:d0:5c:a4:2d:c6:18:51:c8:96:bf:27: eb:44:68:57:8b:ed:51:d6:51:d4:77:58:e6:67:ef: 28:a7:31:91:1a:24:2f:6c:ca:f6:1f:a6:38:ac:e3: bc:e4:8f:33:7c:fd:84:d9:a8:70:bf:81:ea:35:24: 46:b5:0f:e8:59:89:0e:ec:4c:5a:86:6e:d6:c4:ed: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1A:7F:A1:2F:F1:C5:88:4B:EB:5B:77:0C:9C:AE:00:21:0D:E4:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl X509v3 Authority Key Identifier: keyid:C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a5:b4:96:f7:1f:7b:0d:13:63:e6:97:55:2a:55:c1:21:20: c9:e4:9d:4a:11:ed:d8:63:87:c9:7f:27:d2:0e:cb:1c:36:11: 3a:a9:ad:5c:73:32:bb:bf:d9:2f:38:cd:db:80:ac:34:99:83: 35:54:ad:ba:63:e4:88:0d:40:f7:3a:4a:d1:b6:d6:b1:ce:15: 0b:4e:4c:22:de:31:81:8c:31:3e:72:19:96:51:a0:10:58:8f: 6a:ed:d9:36:dd:1f:50:f0:cd:78:07:4e:5d:16:ba:7f:90:4b: c1:0e:fb:5b:4f:a2:1e:f1:61:5b:4f:4f:46:82:f2:73:d1:21: fc:70:f9:7f:ba:d1:eb:8e:46:0b:0b:12:aa:12:c3:78:ed:16: 2c:57:e5:da:3a:2d:05:cb:63:47:83:b2:0e:2a:fb:45:c8:aa: ba:f8:eb:b1:41:4e:10:1f:c6:fc:cc:54:f1:29:21:8e:21:03: 5e:39:bd:ed:5e:2e:15:77:1f:31:17:1b:c4:7d:9a:b4:01:2b: 09:81:17:3c:85:67:4e:8e:f4:9e:34:bb:88:06:95:da:01:d2: 43:ee:c5:16:a7:23:28:a5:e6:eb:2b:80:9a:b1:6f:66:b3:f0: f2:55:39:e9:4f:f6:67:28:d3:47:1d:ea:9f:7e:bb:6e:19:9e: e6:7c:ea:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxEeD603rEXANYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2Njk3MzctNDM4Ny00YTVjLTgyOWEtNWNmNDMxYzY0 NjllMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk ZDVhMDJjODQtZTYyOS00ZGQwLThjNWMtNTczM2NiNWJkZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJSAtnqI4xbfPldTBCOcnT/Cm9RT3vM+2JFg N0Xe69Fdd83aixLqcWxQEVzuxbuV4/d1lyyrGojJSSCCgtHzmP/6Wsuc5E4dFtda zXFOEdi/Sy1KnZKfI32h2sb3+6yIgsDaTKG7on/1VO+c/0lMsLdcygK5ITxH+wNL /ywuBxwtTFdM66lWm2iJdqD/zgno32JAxApNGdhcS9qQHa869Lkr5GjtoWtMQ3ld wOA1gjBrSLIhZFjN0FykLcYYUciWvyfrRGhXi+1R1lHUd1jmZ+8opzGRGiQvbMr2 H6Y4rOO85I8zfP2E2ahwv4HqNSRGtQ/oWYkO7Exahm7WxO1QzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ0af6Ev8cWIS+tbdwycrgAhDeQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80YTY2 OTczNy00Mzg3LTRhNWMtODI5YS01Y2Y0MzFjNjQ2OWUvNGE2Njk3MzctNDM4Ny00 YTVjLTgyOWEtNWNmNDMxYzY0NjllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGE2Njk3MzctNDM4Ny00YTVjLTgy OWEtNWNmNDMxYzY0NjllLzRhNjY5NzM3LTQzODctNGE1Yy04MjlhLTVjZjQzMWM2 NDY5ZS5jcmwwHwYDVR0jBBgwFoAUwSEc+7d8t5PVFOi4il4KliXCqKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80YTY2OTczNy00Mzg3LTRhNWMtODI5YS01Y2Y0 MzFjNjQ2OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgpbSW9x97DRNj5pdVKlXB ISDJ5J1KEe3YY4fJfyfSDsscNhE6qa1cczK7v9kvOM3bgKw0mYM1VK26Y+SIDUD3 OkrRttaxzhULTkwi3jGBjDE+chmWUaAQWI9q7dk23R9Q8M14B05dFrp/kEvBDvtb T6Ie8WFbT09GgvJz0SH8cPl/utHrjkYLCxKqEsN47RYsV+XaOi0Fy2NHg7IOKvtF yKq6+OuxQU4QH8b8zFTxKSGOIQNeOb3tXi4Vdx8xFxvEfZq0ASsJgRc8hWdOjvSe NLuIBpXaAdJD7sUWpyMopebrK4CasW9ms/DyVTnpT/ZnKNNHHeqffrtuGZ7mfOrj -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:21 2025 by rpki-client