$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft File: 04b45e42-c2e7-4254-9ecb-472a7693a730.mft (raw, json) Hash identifier: cRplcDCJO6nUZb0DEJ1QsI+A2+ZirJIjnS2fahebrjA= Subject key identifier: A4:0C:FD:40:1B:CE:26:C6:8C:4E:31:9A:28:4A:CC:83:B0:0E:13:8E Authority key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE Certificate issuer: /CN=04b45e42-c2e7-4254-9ecb-472a7693a730 Certificate serial: 010D0C9F4328584BBF69B643A03DC67F5EB95780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft Manifest number: 010D0C9F4328584073A853735F7826679E463D95 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 04b45e42-c2e7-4254-9ecb-472a7693a730.crl (hash: ftgdQ3UuPEppn2HXtp/bKbYWlWau9YqxcbvX6Sqy3zM=) 2: 8b7a8af7-f7ba-312f-8140-005dd293f00c.roa (hash: mUnDyS2UQsl4w5dX9eiHsXwL+KrNlX1k4UAtdJ074N4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b6:43:a0:3d:c6:7f:5e:b9:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04b45e42-c2e7-4254-9ecb-472a7693a730 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=28a34138-7d4b-4fdf-86aa-c9624f6594dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:98:f4:83:2c:9d:29:24:20:71:39:b2:d2: 00:0a:02:8e:3d:55:37:a9:d7:63:a0:f3:21:fb:25: a6:fa:da:85:bc:bf:f0:bd:9e:9a:16:41:69:de:46: 21:53:24:e6:91:38:ad:d4:5b:2d:e6:85:9b:d4:81: d5:c8:86:74:3d:3b:ab:1d:fd:31:8d:ad:eb:90:bf: e5:40:7d:0d:d4:f8:af:77:01:22:ad:03:41:78:8d: 36:aa:be:82:d8:61:37:a9:b7:f3:88:c8:67:fb:ba: 51:9e:21:d2:a9:59:65:e2:e9:d4:57:62:4e:c2:cc: 01:63:0f:6c:aa:22:91:c7:07:4d:ba:88:2c:f7:c8: a7:46:ec:0c:20:80:94:1e:bb:bf:9d:eb:f5:59:92: b1:fc:62:c4:70:c3:de:98:fb:97:67:75:04:27:a4: 6a:9d:f4:f2:5c:8e:77:9a:de:ce:e0:84:0d:f9:9a: 57:68:fe:0e:fc:e3:64:c1:58:af:41:1d:0b:e8:a6: 1b:0a:47:07:07:69:7b:a5:c8:10:33:56:50:a5:34: dd:79:46:1e:e7:93:89:0e:fa:a1:7b:69:41:9c:30: e1:5d:81:b5:a6:8a:40:21:8e:40:c6:f5:28:55:06: fc:31:30:c9:43:61:9a:b8:f1:24:48:3a:75:2b:3b: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0C:FD:40:1B:CE:26:C6:8C:4E:31:9A:28:4A:CC:83:B0:0E:13:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl X509v3 Authority Key Identifier: keyid:DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6f:96:1c:a5:c2:0f:59:53:18:d2:27:a4:66:4b:cf:0e:5e: 72:0f:f2:65:1b:82:b8:cf:3b:3f:07:ec:97:7b:97:1b:d2:5e: b7:46:a7:25:72:9f:c9:18:82:61:bd:73:6c:f6:80:00:44:f9: 76:58:bc:dc:cf:00:ec:06:2f:a8:86:ce:b7:b5:ab:d6:cc:17: f9:d3:3c:b5:8c:90:47:1f:61:3d:60:94:62:1e:ca:a2:60:7b: c2:1d:05:7c:7b:37:70:b2:97:f4:74:cb:f5:e9:7f:64:18:6e: 35:93:d5:0c:cd:ac:0b:fc:c5:e1:53:b2:06:45:67:db:2c:3a: 1a:36:84:4a:3f:59:06:a5:6b:d4:fe:29:fe:3d:55:db:50:f9: bd:77:95:7f:55:6f:bc:3d:1c:13:11:12:60:fd:3d:22:87:aa: df:60:eb:02:29:e8:e8:7d:74:51:eb:08:7c:76:9c:b8:88:22: 44:ce:6f:81:b6:67:e8:e2:12:08:e9:e9:1f:69:a0:fe:6d:15: f7:b8:d5:0b:6a:50:33:01:6c:0f:79:03:de:53:a9:8f:64:77: d9:4d:d5:b9:48:af:59:a8:23:5c:43:3b:f5:d8:ff:eb:da:b2: f9:d5:1b:29:db:b7:cd:c7:09:cb:44:b8:a4:f7:a6:58:41:ab: f9:bb:d5:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/abZDoD3Gf165V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiNDVlNDItYzJlNy00MjU0LTllY2ItNDcyYTc2OTNh NzMwMB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk MjhhMzQxMzgtN2Q0Yi00ZmRmLTg2YWEtYzk2MjRmNjU5NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8yY9IMsnSkkIHE5stIACgKOPVU3qddjoPMh +yWm+tqFvL/wvZ6aFkFp3kYhUyTmkTit1Fst5oWb1IHVyIZ0PTurHf0xja3rkL/l QH0N1PivdwEirQNBeI02qr6C2GE3qbfziMhn+7pRniHSqVll4unUV2JOwswBYw9s qiKRxwdNuogs98inRuwMIICUHru/nev1WZKx/GLEcMPemPuXZ3UEJ6RqnfTyXI53 mt7O4IQN+ZpXaP4O/ONkwVivQR0L6KYbCkcHB2l7pcgQM1ZQpTTdeUYe55OJDvqh e2lBnDDhXYG1popAIY5AxvUoVQb8MTDJQ2GauPEkSDp1KzvN5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKQM/UAbzibGjE4xmihKzIOwDhOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNGI0 NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJhNzY5M2E3MzAvMDRiNDVlNDItYzJlNy00 MjU0LTllY2ItNDcyYTc2OTNhNzMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDRiNDVlNDItYzJlNy00MjU0LTll Y2ItNDcyYTc2OTNhNzMwLzA0YjQ1ZTQyLWMyZTctNDI1NC05ZWNiLTQ3MmE3Njkz YTczMC5jcmwwHwYDVR0jBBgwFoAU31CzmHm+N8CDVI/L3fzSRGpRyM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNGI0NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJh NzY5M2E3MzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjb5YcpcIPWVMY0iekZkvP Dl5yD/JlG4K4zzs/B+yXe5cb0l63Rqclcp/JGIJhvXNs9oAARPl2WLzczwDsBi+o hs63tavWzBf50zy1jJBHH2E9YJRiHsqiYHvCHQV8ezdwspf0dMv16X9kGG41k9UM zawL/MXhU7IGRWfbLDoaNoRKP1kGpWvU/in+PVXbUPm9d5V/VW+8PRwTERJg/T0i h6rfYOsCKejofXRR6wh8dpy4iCJEzm+Btmfo4hII6ekfaaD+bRX3uNULalAzAWwP eQPeU6mPZHfZTdW5SK9ZqCNcQzv12P/r2rL51Rsp27fNxwnLRLik96ZYQav5u9Ub -----END CERTIFICATE-----Generated at Wed Nov 5 09:06:10 2025 by rpki-client