$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft File: c428d8f6-c296-4695-bec2-37368886f4fa.mft (raw, json) Hash identifier: zXGBrRkvaAffFZKMVgT4pKX3XfJYp3BI4W2yJWe+Y2g= Subject key identifier: 21:2A:35:17:B8:F4:71:03:BE:CB:C3:C4:F3:E3:79:F5:60:F4:85:FC Authority key identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Certificate issuer: /CN=c428d8f6-c296-4695-bec2-37368886f4fa Certificate serial: 010D0C9F4328584BC075C438A64F1DF75EA9BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft Manifest number: 010D0C9F432858484E419FC75A622BA4155699C3 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 6cfd4cc1-a1b1-38de-8fd2-cd211b3b2686.roa (hash: vuUThSQIh8StX2YPo5/2SRjGaY6jHxmIPY/tPvWI/7A=) 2: c428d8f6-c296-4695-bec2-37368886f4fa.crl (hash: TXkgn8YBX092gP/dGF97YIkXJ6wu9L5C3X1ildjIU6k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c4:38:a6:4f:1d:f7:5e:a9:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c428d8f6-c296-4695-bec2-37368886f4fa Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=c30b8f15-d69e-47ed-be58-fa171f8ae10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:e3:28:2b:97:ea:46:ac:c3:39:fb:3d:02: 84:50:a5:bd:6e:e7:8f:6b:af:13:6d:53:1e:84:6a: 50:57:84:84:0d:48:d5:f5:e8:f3:fd:7b:44:83:f9: dd:97:b4:0f:c5:89:fb:2f:10:cd:f1:02:df:ba:b1: cf:d5:be:6d:bb:38:59:c7:63:84:f5:7d:17:5e:de: 6e:f0:b7:ed:09:d4:d2:7b:84:df:40:6c:89:79:5b: cf:b8:8c:c1:8f:64:bc:a5:0d:55:b8:82:47:fe:cc: 51:0f:f8:ab:95:16:98:9e:d6:a4:ef:98:3c:f2:81: 7c:dd:b6:04:4b:39:18:16:90:b2:84:5b:37:d1:31: d0:49:e0:78:65:ba:4c:60:b7:1d:5c:d5:e1:c4:6e: c1:e4:32:99:3f:9a:ed:e8:2a:ae:1c:37:93:19:4e: 48:bd:45:10:98:82:c0:67:b9:d6:28:e1:09:25:b7: ae:9e:2d:81:2a:e8:09:14:ff:cd:e1:05:26:30:fa: 60:fc:07:4d:20:d6:60:89:c3:ad:cd:8e:e3:54:ea: 5b:b7:69:f4:82:1b:fb:9e:34:7a:3f:36:d0:bc:cd: c6:b1:83:fc:ac:ec:0c:b6:b9:25:d7:55:05:67:ac: 1a:fa:19:ef:db:45:3f:5a:e3:1b:75:7a:e9:d9:4b: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:35:17:B8:F4:71:03:BE:CB:C3:C4:F3:E3:79:F5:60:F4:85:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.crl X509v3 Authority Key Identifier: keyid:0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:79:79:c9:07:65:98:c2:c4:dd:6d:4a:58:c3:00:00:ac:3b: 43:ff:14:99:64:66:a7:5a:81:c9:14:11:3c:70:e6:1c:3d:62: 2e:aa:ca:df:87:02:f9:b4:5a:b2:4a:46:b1:9f:0b:01:9e:46: 14:2b:59:30:63:ce:0e:6a:be:53:07:48:90:6d:7f:ac:11:f9: dc:a8:af:57:73:a0:6b:35:1f:50:3c:8b:46:d4:3c:28:73:7f: 42:5e:8d:79:6a:25:9c:cd:1b:6e:42:50:7d:2b:4a:b0:f4:21: 04:f7:17:24:a2:02:a4:2d:66:c0:9d:b1:32:5f:66:58:4a:0c: 76:94:83:23:84:24:10:71:49:5c:1c:76:df:1b:a5:2d:2b:ba: c0:11:92:c7:dc:24:95:9f:73:f8:5a:34:cf:ce:99:a8:ba:27: a3:03:74:9a:30:eb:14:c5:1f:bf:15:b2:9d:c0:29:06:5a:08: 2c:7b:42:8c:f8:18:91:6e:76:f3:4c:30:b2:cd:81:1a:95:9c: 2f:cc:a9:07:b9:0a:3e:68:83:81:c1:20:73:27:4d:6a:97:b6: 99:8c:46:18:c0:a1:f7:4d:a0:59:9a:7d:bf:ae:7a:d8:f2:32: 58:8f:27:ba:d4:c1:a0:06:d3:e7:0c:7e:47:e0:2f:c0:b3:73: ac:76:6c:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcQ4pk8d916pvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyOGQ4ZjYtYzI5Ni00Njk1LWJlYzItMzczNjg4ODZm NGZhMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk YzMwYjhmMTUtZDY5ZS00N2VkLWJlNTgtZmExNzFmOGFlMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuofjKCuX6kaswzn7PQKEUKW9buePa68TbVMe hGpQV4SEDUjV9ejz/XtEg/ndl7QPxYn7LxDN8QLfurHP1b5tuzhZx2OE9X0XXt5u 8LftCdTSe4TfQGyJeVvPuIzBj2S8pQ1VuIJH/sxRD/irlRaYntak75g88oF83bYE SzkYFpCyhFs30THQSeB4ZbpMYLcdXNXhxG7B5DKZP5rt6CquHDeTGU5IvUUQmILA Z7nWKOEJJbeuni2BKugJFP/N4QUmMPpg/AdNINZgicOtzY7jVOpbt2n0ghv7njR6 PzbQvM3GsYP8rOwMtrkl11UFZ6wa+hnv20U/WuMbdXrp2UsHyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCEqNRe49HEDvsvDxPPjefVg9IX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDI4 ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4NmY0ZmEvYzQyOGQ4ZjYtYzI5Ni00 Njk1LWJlYzItMzczNjg4ODZmNGZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQyOGQ4ZjYtYzI5Ni00Njk1LWJl YzItMzczNjg4ODZmNGZhL2M0MjhkOGY2LWMyOTYtNDY5NS1iZWMyLTM3MzY4ODg2 ZjRmYS5jcmwwHwYDVR0jBBgwFoAUC5WlQbJYfmG9S+9uMS6pNybW25AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2 ODg4NmY0ZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGeXnJB2WYwsTdbUpYwwAA rDtD/xSZZGanWoHJFBE8cOYcPWIuqsrfhwL5tFqySkaxnwsBnkYUK1kwY84Oar5T B0iQbX+sEfncqK9Xc6BrNR9QPItG1Dwoc39CXo15aiWczRtuQlB9K0qw9CEE9xck ogKkLWbAnbEyX2ZYSgx2lIMjhCQQcUlcHHbfG6UtK7rAEZLH3CSVn3P4WjTPzpmo uiejA3SaMOsUxR+/FbKdwCkGWggse0KM+BiRbnbzTDCyzYEalZwvzKkHuQo+aIOB wSBzJ01ql7aZjEYYwKH3TaBZmn2/rnrY8jJYjye61MGgBtPnDH5H4C/As3Osdmzv -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:35 2025 by rpki-client