$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft File: 647c9192-235d-4283-a432-fa5f0508c594.mft (raw, json) Hash identifier: 5gUsRFGdtCVqb33s/PaQBPWQxOtgvqn005/DhiF+ZuA= Subject key identifier: 66:2D:DC:00:0C:BD:D3:20:A7:9D:64:60:B5:8F:81:CF:63:E6:DD:4F Authority key identifier: CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01 Certificate issuer: /CN=647c9192-235d-4283-a432-fa5f0508c594 Certificate serial: 010D0C9F4328584BBEF29ADE9D8C7B3062FA8580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft Manifest number: 010D0C9F432858490245D6A74E9CF153401FC682 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 647c9192-235d-4283-a432-fa5f0508c594.crl (hash: 4EBu4Fs/X7y5Zf6yZEcQhjC8V26I/a84JaE5lE7G7tI=) 2: 81beadc7-93c0-3ae4-8756-e5e33989dadb.roa (hash: 2lnD3sThK1sHckp4WMMqnSeEPX3dXmalabstJAHzLao=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:de:9d:8c:7b:30:62:fa:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647c9192-235d-4283-a432-fa5f0508c594 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=c6c21b91-388b-4a1c-8ee7-808c2e3f6597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:2e:c5:88:34:90:89:9f:38:58:ae:5e:62: 82:73:a0:60:1a:69:9c:6b:42:65:09:76:37:a2:fa: 28:2b:81:4c:29:1d:b0:87:ff:7a:4a:fb:4c:cc:6f: 98:00:f9:4e:1e:bf:dd:72:0b:9f:09:40:86:76:e3: a2:c5:18:00:f3:28:0c:3d:b8:aa:81:01:ef:5b:a6: e2:70:35:9d:1f:60:25:f7:15:3c:10:65:eb:ff:1f: 63:30:5e:b7:98:99:94:8a:dc:ea:12:f4:1c:03:bd: 8f:dc:f0:2d:3f:61:6a:a1:9f:56:16:ea:f2:19:13: 6e:e9:d8:40:c8:b2:77:8a:3a:67:84:a4:45:7c:77: dc:73:36:3f:9f:3f:b1:02:d9:cf:f5:e3:c4:61:de: 85:47:6c:4f:a7:74:60:94:9a:dc:d7:b6:e3:a0:2d: d2:bb:8d:74:33:bc:d9:5e:59:ae:54:f4:29:1c:4e: 09:87:83:6a:de:e7:11:c6:6c:4c:a1:0a:a3:38:23: 0a:87:4f:d8:2a:8d:f5:21:94:37:a1:ca:85:ca:50: c0:19:21:61:13:49:21:b9:19:00:bd:60:30:e6:4f: 7b:fa:57:d3:49:fd:2c:45:33:62:f1:9b:0e:1d:ec: 6f:61:14:1f:20:6c:26:57:3f:de:d4:ba:7b:b8:aa: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:DC:00:0C:BD:D3:20:A7:9D:64:60:B5:8F:81:CF:63:E6:DD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.crl X509v3 Authority Key Identifier: keyid:CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a5:d5:c6:5a:90:7c:c8:bf:77:e5:0c:06:c2:1e:9f:6e:65: 46:f2:5d:a2:31:18:7e:c7:87:17:d7:58:6d:ed:b0:27:37:54: 49:6d:4c:76:86:bb:d8:61:93:84:91:2a:d3:ef:ca:1a:a1:da: f2:84:68:25:aa:93:8b:6c:b2:7e:b4:e5:84:41:d5:9f:2f:86: b7:77:42:62:81:fa:fc:37:89:55:73:0d:44:b5:7e:67:36:d5: ac:ce:b6:80:80:03:0e:21:29:95:2e:f3:3e:89:4c:a8:07:89: c9:a2:43:82:34:01:24:4f:cb:57:cd:0d:3b:33:dd:5d:a0:bc: 61:e2:99:6a:09:47:db:d8:49:49:3b:cb:08:df:a8:37:f9:23: f2:15:15:06:f2:2d:c6:34:d5:93:79:ef:ac:64:d6:6b:90:03: 0c:cf:a2:58:a2:8b:5f:8b:a7:98:72:fa:bc:24:10:de:9b:d3: 0f:44:c2:cc:8e:05:f3:3e:7c:0d:d7:b1:67:e7:16:61:a1:46: e0:83:84:dc:f9:9c:10:9d:5b:87:33:0d:1d:b0:d5:4b:d0:04: a9:30:55:a9:2b:7f:80:6e:34:17:e7:f2:62:74:88:d1:1f:60: 1f:48:84:63:74:52:e7:bb:98:72:45:45:fb:f8:73:81:e9:e4: ad:d7:6b:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8prenYx7MGL6hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3YzkxOTItMjM1ZC00MjgzLWE0MzItZmE1ZjA1MDhj NTk0MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk YzZjMjFiOTEtMzg4Yi00YTFjLThlZTctODA4YzJlM2Y2NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj30uxYg0kImfOFiuXmKCc6BgGmmca0JlCXY3 ovooK4FMKR2wh/96SvtMzG+YAPlOHr/dcgufCUCGduOixRgA8ygMPbiqgQHvW6bi cDWdH2Al9xU8EGXr/x9jMF63mJmUitzqEvQcA72P3PAtP2FqoZ9WFuryGRNu6dhA yLJ3ijpnhKRFfHfcczY/nz+xAtnP9ePEYd6FR2xPp3RglJrc17bjoC3Su410M7zZ XlmuVPQpHE4Jh4Nq3ucRxmxMoQqjOCMKh0/YKo31IZQ3ocqFylDAGSFhE0khuRkA vWAw5k97+lfTSf0sRTNi8ZsOHexvYRQfIGwmVz/e1Lp7uKoOuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGYt3AAMvdMgp51kYLWPgc9j5t1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82NDdj OTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUwOGM1OTQvNjQ3YzkxOTItMjM1ZC00 MjgzLWE0MzItZmE1ZjA1MDhjNTk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjQ3YzkxOTItMjM1ZC00MjgzLWE0 MzItZmE1ZjA1MDhjNTk0LzY0N2M5MTkyLTIzNWQtNDI4My1hNDMyLWZhNWYwNTA4 YzU5NC5jcmwwHwYDVR0jBBgwFoAUzTEfdnP0mFOvT9MlX1O0uk9HyQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVm MDUwOGM1OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlpdXGWpB8yL935QwGwh6f bmVG8l2iMRh+x4cX11ht7bAnN1RJbUx2hrvYYZOEkSrT78oaodryhGglqpOLbLJ+ tOWEQdWfL4a3d0Jigfr8N4lVcw1EtX5nNtWszraAgAMOISmVLvM+iUyoB4nJokOC NAEkT8tXzQ07M91doLxh4plqCUfb2ElJO8sI36g3+SPyFRUG8i3GNNWTee+sZNZr kAMMz6JYootfi6eYcvq8JBDem9MPRMLMjgXzPnwN17Fn5xZhoUbgg4Tc+ZwQnVuH Mw0dsNVL0ASpMFWpK3+AbjQX5/JidIjRH2AfSIRjdFLnu5hyRUX7+HOB6eSt12vi -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:32 2025 by rpki-client