$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: 70OhZauledhB++rmJzSZpFqx9uOkyjn+i4JVsptR910= Subject key identifier: D6:77:9F:71:A8:C7:85:74:7D:6A:30:69:E5:65:D1:1F:69:DB:0F:38 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584BBFE0D6D364D697D4C74E4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02EE5 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: VOWVHmrgM7+U8+tB8e8hs+YYXg4Sb62/2VrywjnGDDI=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: CU0ZnnwGj8gncJrAIAKUgjbzQan2iTzZVYhhbOT4T90=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d6:d3:64:d6:97:d4:c7:4e:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=be63e6fa-9af3-47c9-840d-640a33effdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:f8:74:7c:10:f8:0b:c0:93:d6:ea:64:3d: 95:67:1c:ce:72:30:a0:f4:c5:02:f3:e0:db:f2:62: 71:1e:4b:d5:b4:bb:d2:36:c4:84:c9:42:3e:6e:d7: e7:d2:96:aa:87:aa:38:69:91:6f:e9:99:de:4f:94: 5c:c6:21:a1:fa:11:5b:e6:5c:84:9d:d3:ab:39:fb: be:79:08:22:90:80:d2:1f:3b:45:7d:08:f2:99:b4: 90:f5:9b:01:a1:9c:05:b0:64:3e:af:a2:b9:c0:b5: 2d:07:cc:d0:ee:f5:03:53:f3:ff:b5:83:dc:46:73: 89:a3:1a:3a:99:3a:04:c9:57:0a:4c:cd:4b:ab:af: 3f:67:52:0d:8a:ed:c0:02:8d:2a:90:f8:f7:02:34: c1:92:64:4b:64:60:bd:03:b2:03:66:a7:de:e9:1e: 75:71:24:e5:1f:3c:22:51:b0:dc:9d:99:5b:60:e4: fb:ce:b8:fe:b0:a3:4a:d3:d8:42:44:41:a0:a2:21: 71:7c:b1:1d:39:94:5f:a5:cc:3c:6d:d8:ab:53:08: d1:53:5a:11:61:52:34:65:fe:f7:98:aa:2e:7d:59: e1:32:b7:75:3f:33:35:50:81:26:fb:33:2c:d0:c7: 2e:df:13:f6:bc:f1:a0:21:5e:6f:83:b9:7a:cf:6b: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:9F:71:A8:C7:85:74:7D:6A:30:69:E5:65:D1:1F:69:DB:0F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:98:bf:e8:da:0c:c0:53:90:b1:29:eb:cb:82:80:ee:47:aa: ec:82:a1:64:b2:87:06:d8:eb:3f:66:fd:10:e5:cc:a9:ed:3c: f9:68:98:76:86:1d:53:9d:9d:0a:7c:9a:b8:8c:e1:a4:d5:48: 97:77:c8:db:25:2c:6e:7d:3e:d6:b4:bb:2b:ea:46:b5:aa:f0: 64:31:00:1d:2b:10:58:0e:3a:f2:31:fa:66:3c:20:12:6e:4f: 31:81:ca:14:ea:e5:a1:40:ad:05:5a:41:51:f0:b1:ba:d6:b4: bb:c7:94:59:b2:60:f3:b0:66:4c:56:b5:b4:b3:ec:22:ed:8a: f4:eb:95:fb:6f:03:cb:c5:8f:18:2e:04:7a:55:40:5d:6a:71: 56:e5:ac:50:33:0c:4e:61:85:88:33:27:a4:d1:d7:9c:df:e9: aa:3f:c1:87:73:50:e8:b0:c9:0c:71:cb:ba:e7:a6:77:77:f9: e1:0c:d1:eb:62:a8:93:72:04:e1:9d:07:12:07:0d:6e:17:ee: bd:36:69:e8:8f:50:94:4f:b0:54:24:f8:22:ee:db:a9:8b:c6: f2:c0:51:a4:19:03:ad:c8:8a:cf:36:f5:34:24:e2:2d:5f:b9: c0:59:f8:2b:35:cd:8b:86:69:10:e8:a6:ff:31:05:ef:db:05: a4:f2:18:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NbTZNaX1MdOSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk YmU2M2U2ZmEtOWFmMy00N2M5LTg0MGQtNjQwYTMzZWZmZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit34dHwQ+AvAk9bqZD2VZxzOcjCg9MUC8+Db 8mJxHkvVtLvSNsSEyUI+btfn0paqh6o4aZFv6ZneT5RcxiGh+hFb5lyEndOrOfu+ eQgikIDSHztFfQjymbSQ9ZsBoZwFsGQ+r6K5wLUtB8zQ7vUDU/P/tYPcRnOJoxo6 mToEyVcKTM1Lq68/Z1INiu3AAo0qkPj3AjTBkmRLZGC9A7IDZqfe6R51cSTlHzwi UbDcnZlbYOT7zrj+sKNK09hCREGgoiFxfLEdOZRfpcw8bdirUwjRU1oRYVI0Zf73 mKoufVnhMrd1PzM1UIEm+zMs0Mcu3xP2vPGgIV5vg7l6z2sqYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNZ3n3Gox4V0fWowaeVl0R9p2w84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7mL/o2gzAU5CxKevLgoDu R6rsgqFksocG2Os/Zv0Q5cyp7Tz5aJh2hh1TnZ0KfJq4jOGk1UiXd8jbJSxufT7W tLsr6ka1qvBkMQAdKxBYDjryMfpmPCASbk8xgcoU6uWhQK0FWkFR8LG61rS7x5RZ smDzsGZMVrW0s+wi7Yr065X7bwPLxY8YLgR6VUBdanFW5axQMwxOYYWIMyek0dec 3+mqP8GHc1DosMkMccu656Z3d/nhDNHrYqiTcgThnQcSBw1uF+69Nmnoj1CUT7BU JPgi7tupi8bywFGkGQOtyIrPNvU0JOItX7nAWfgrNc2LhmkQ6Kb/MQXv2wWk8hiQ -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:42 2025 by rpki-client