$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft File: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft (raw, json) Hash identifier: vMCBW35AlL983cEdEMy9KDrLyjoMRkDMzv9ZJKWy6tA= Subject key identifier: 7F:13:FE:FB:76:E9:65:70:1C:ED:BD:32:0C:33:C4:61:B8:7A:A9:46 Authority key identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 Certificate issuer: /CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Certificate serial: 010D0C9F4328584BC075C7F1A44AED8BBC447320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft Manifest number: 010D0C9F4328584ADB979262E885ABB43C7FA354 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl (hash: 2RzSbk8/D7WJNBXVj/UxJvm4HLQtymH0wfJ0FQuHuN0=) 2: b04b7367-5452-3760-b2f3-796a906930bc.roa (hash: bjYUFneqNqeWu8SHxWaMLEr5TJFphhXp1qkF7BOhlk4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c7:f1:a4:4a:ed:8b:bc:44:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=457513b0-ea97-4233-86c0-5f4840432b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:40:cd:da:19:2f:a7:32:74:6a:d5:f7:85: 72:50:e3:55:73:a9:b1:1f:7d:8d:af:a6:24:80:cd: 8c:2f:7e:bf:da:20:08:c5:ae:ea:50:1e:04:6a:c2: af:7d:b9:59:59:32:db:18:b4:4f:bf:75:7b:c0:4d: f1:8a:a2:88:a3:82:6a:e4:d3:ea:98:51:78:38:6c: 10:4d:79:13:f8:52:fb:ac:77:25:f3:5c:b9:16:71: 57:3b:68:5e:96:6f:65:db:fd:cc:26:4e:9d:ea:7f: e6:2b:a2:4f:95:56:4b:a4:5f:56:c9:1f:23:81:80: 96:df:91:a4:26:0e:4b:10:1b:ea:8c:97:3f:f3:f8: ed:cd:7d:8e:ca:ad:4f:70:00:0b:da:a5:f5:f1:48: 7e:f6:b2:ac:1b:85:ce:09:d6:be:ce:90:bc:ac:82: f5:2e:63:e4:4b:d1:bd:20:81:3f:a8:96:62:e5:e9: f5:85:0d:ae:2f:bc:79:3d:e7:6a:3d:61:7d:16:4c: eb:c5:35:08:cd:63:ee:86:3b:a1:b0:5c:0f:06:3e: 66:62:58:d6:a1:43:19:d4:8d:c3:16:4f:6b:26:c8: e8:f9:37:50:76:c0:d7:db:1c:b2:43:04:f3:7b:09: 7a:9c:1e:34:ff:33:18:ad:a6:52:f4:ab:0c:4a:b7: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:13:FE:FB:76:E9:65:70:1C:ED:BD:32:0C:33:C4:61:B8:7A:A9:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl X509v3 Authority Key Identifier: keyid:B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e3:a8:3c:f5:32:49:14:b8:a9:cd:ee:99:7c:8f:4d:13:f0: 16:98:21:ab:5c:4e:ef:72:9d:c5:ee:cc:2a:47:a6:de:d0:1b: 85:e8:4b:fd:e0:66:ca:f3:10:47:98:d7:d7:4e:dd:43:1f:88: b0:07:15:7a:14:db:8a:a2:3e:8d:27:7b:78:b2:3a:73:ae:1a: 03:be:01:b4:63:38:1b:ba:de:8c:32:21:f1:70:9b:19:66:7d: ec:29:31:17:cc:c3:63:1f:04:e6:21:91:3a:0f:06:ef:24:41: fa:94:f0:61:35:40:dd:f5:0b:89:7e:3a:c3:08:3d:c3:bc:b4: ea:34:c6:fc:78:ee:d3:8e:17:6a:6f:4b:51:8b:6d:44:84:e7: e7:cc:b7:c0:41:ac:4a:9a:be:c7:48:6d:70:c2:47:34:91:05: c2:67:98:bf:2d:3f:43:79:db:ff:a6:7e:25:64:74:76:b8:ed: f2:4a:14:71:78:73:27:23:7c:17:8a:c5:83:3e:be:66:9e:f3: c9:0a:a5:70:a9:d2:d2:01:76:87:f4:1f:99:02:36:12:02:21: b5:85:eb:43:cd:38:46:38:94:46:a5:89:e5:dc:c0:c5:0f:67: 4d:32:c7:b7:cd:75:16:b7:91:e5:11:de:65:f4:4f:71:74:05: d0:19:fe:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcfxpErti7xEcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyYzZiNjUtZGNmZC00MTJhLTg3ODgtOGJhYTkxZmIz YTFkMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk NDU3NTEzYjAtZWE5Ny00MjMzLTg2YzAtNWY0ODQwNDMyYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4NAzdoZL6cydGrV94VyUONVc6mxH32Nr6Yk gM2ML36/2iAIxa7qUB4EasKvfblZWTLbGLRPv3V7wE3xiqKIo4Jq5NPqmFF4OGwQ TXkT+FL7rHcl81y5FnFXO2helm9l2/3MJk6d6n/mK6JPlVZLpF9WyR8jgYCW35Gk Jg5LEBvqjJc/8/jtzX2Oyq1PcAAL2qX18Uh+9rKsG4XOCda+zpC8rIL1LmPkS9G9 IIE/qJZi5en1hQ2uL7x5PedqPWF9FkzrxTUIzWPuhjuhsFwPBj5mYljWoUMZ1I3D Fk9rJsjo+TdQdsDX2xyyQwTzewl6nB40/zMYraZS9KsMSrcT5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH8T/vt26WVwHO29MgwzxGG4eqlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDJj NmI2NS1kY2ZkLTQxMmEtODc4OC04YmFhOTFmYjNhMWQvNDAyYzZiNjUtZGNmZC00 MTJhLTg3ODgtOGJhYTkxZmIzYTFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDAyYzZiNjUtZGNmZC00MTJhLTg3 ODgtOGJhYTkxZmIzYTFkLzQwMmM2YjY1LWRjZmQtNDEyYS04Nzg4LThiYWE5MWZi M2ExZC5jcmwwHwYDVR0jBBgwFoAUtsg0jmaGn6w1+CVuUQdfRLRRSSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDJjNmI2NS1kY2ZkLTQxMmEtODc4OC04YmFh OTFmYjNhMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR46g89TJJFLipze6ZfI9N E/AWmCGrXE7vcp3F7swqR6be0BuF6Ev94GbK8xBHmNfXTt1DH4iwBxV6FNuKoj6N J3t4sjpzrhoDvgG0Yzgbut6MMiHxcJsZZn3sKTEXzMNjHwTmIZE6DwbvJEH6lPBh NUDd9QuJfjrDCD3DvLTqNMb8eO7Tjhdqb0tRi21EhOfnzLfAQaxKmr7HSG1wwkc0 kQXCZ5i/LT9Dedv/pn4lZHR2uO3yShRxeHMnI3wXisWDPr5mnvPJCqVwqdLSAXaH 9B+ZAjYSAiG1hetDzThGOJRGpYnl3MDFD2dNMse3zXUWt5HlEd5l9E9xdAXQGf6L -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:51 2025 by rpki-client