$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft File: 4a2347a0-a386-4424-8887-fb176c5cf0b5.mft (raw, json) Hash identifier: ji0tAO1UAwQxi8oc2KPYaI53O52WbcbOdMaAikKAnks= Subject key identifier: DD:87:15:43:3C:FA:D5:DA:C8:F0:59:6F:43:B7:3D:16:08:1A:34:0F Authority key identifier: B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD Certificate issuer: /CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Certificate serial: 010D0C9F4328584BBF877FA955DF6B681CE77080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft Manifest number: 010D0C9F4328584B5B22A8A8EF383ECB51D9D025 Signing time: Tue 04 Nov 2025 13:00:03 +0000 Manifest this update: Tue 04 Nov 2025 13:00:03 +0000 Manifest next update: Fri 07 Nov 2025 13:00:00 +0000 Files and hashes: 1: 4a2347a0-a386-4424-8887-fb176c5cf0b5.crl (hash: 4tqXWW1OWkeiY4x7NC0hWFagmyEJrqoEX2imwEOXINw=) 2: a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa (hash: /68Nh/pnqLfL+shp7AWqeO8jgP/tPCCfTG14F2LtW9o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:87:7f:a9:55:df:6b:68:1c:e7:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Validity Not Before: Nov 4 13:00:03 2025 GMT Not After : Nov 7 13:00:00 2025 GMT Subject: CN=b10048b3-d5bc-4945-9a13-e193503b4c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a7:2b:fe:31:1d:92:2f:8c:57:79:77:40:f4: 45:6a:ea:4b:9a:0b:fb:11:a0:b4:f1:c1:27:b6:16: 4e:57:9a:37:58:cc:33:9e:4e:10:d6:b2:e0:23:21: 08:6a:5c:79:49:cc:3a:7e:c5:c7:0a:66:55:36:f6: 88:15:50:e4:72:13:8a:c2:6e:81:de:cf:2b:da:6b: 45:57:2a:86:ea:68:dc:3f:49:ab:93:4e:46:52:20: 14:75:0e:b6:15:f8:64:b2:a5:6f:17:83:df:6c:b0: 45:f3:b9:da:d0:cc:85:00:8c:fb:03:fd:52:31:28: f0:9c:c5:a7:ed:4f:f4:af:92:24:5c:35:bd:a0:44: c3:c4:23:3b:dd:87:3d:5c:a0:a4:d8:c6:6e:bb:fe: 0f:06:30:ee:6f:32:70:f5:6d:08:63:85:b1:52:a0: 0f:c6:c6:be:7b:26:7b:59:20:bd:cd:13:a0:44:5a: 52:b0:ed:bf:9e:ab:ca:b3:17:58:68:e2:05:ca:0f: 47:c2:94:e5:3e:b2:4b:8a:6b:b6:65:ea:cb:e3:38: 17:60:20:b8:a5:b7:a8:a3:f5:f9:bd:f3:5e:06:17: 56:fb:85:c7:58:f4:0d:26:9a:5b:b9:a4:8c:13:08: b9:ca:88:09:39:9c:49:96:00:85:ed:d9:63:10:3f: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:15:43:3C:FA:D5:DA:C8:F0:59:6F:43:B7:3D:16:08:1A:34:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl X509v3 Authority Key Identifier: keyid:B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:be:ae:e8:39:1b:3d:00:56:d5:b6:8a:a7:c0:e6:c2:0b:f6: fd:fc:df:b4:4f:ee:48:0c:55:fc:66:01:3f:99:87:b2:e3:f8: 8f:7e:cc:4a:4b:cc:87:2c:77:a9:5f:bd:93:8d:6a:71:78:91: a9:41:74:5d:96:b7:e6:a8:69:55:d6:87:38:f3:0a:81:57:82: 29:61:81:51:83:df:91:bc:5e:df:90:91:9a:a9:09:cc:a8:a0: d6:08:5c:ba:88:32:f6:8d:92:aa:ea:3b:50:ae:45:fd:d6:f6: ad:4c:1c:99:6e:61:8f:e5:fd:31:8a:c4:d0:6f:d9:73:1a:f2: 0f:57:2b:39:e9:18:39:b6:97:f1:3f:eb:92:83:7b:9c:2f:16: bd:10:d7:85:fe:02:4f:16:ff:28:c9:f0:bf:d7:fe:d2:a2:1c: e4:44:e8:a9:c4:ab:e5:fc:0c:b3:17:12:14:64:7d:22:2d:1c: 34:14:fc:cc:b5:91:5f:c7:26:bc:80:67:3a:5e:e1:19:54:44: d9:69:64:14:92:7b:18:50:81:91:8b:ca:cf:26:ad:9b:5a:88: f9:5b:07:4b:d1:ca:0b:dc:53:28:ee:72:02:7a:24:25:b2:85: a2:d4:67:ed:cb:4f:c6:30:77:da:77:a4:5f:97:14:29:96:37: 5d:1f:25:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/h3+pVd9raBzncIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEyMzQ3YTAtYTM4Ni00NDI0LTg4ODctZmIxNzZjNWNm MGI1MB4XDTI1MTEwNDEzMDAwM1oXDTI1MTEwNzEzMDAwMFowLzEtMCsGA1UEAxMk YjEwMDQ4YjMtZDViYy00OTQ1LTlhMTMtZTE5MzUwM2I0YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8acr/jEdki+MV3l3QPRFaupLmgv7EaC08cEn thZOV5o3WMwznk4Q1rLgIyEIalx5Scw6fsXHCmZVNvaIFVDkchOKwm6B3s8r2mtF VyqG6mjcP0mrk05GUiAUdQ62FfhksqVvF4PfbLBF87na0MyFAIz7A/1SMSjwnMWn 7U/0r5IkXDW9oETDxCM73Yc9XKCk2MZuu/4PBjDubzJw9W0IY4WxUqAPxsa+eyZ7 WSC9zROgRFpSsO2/nqvKsxdYaOIFyg9HwpTlPrJLimu2ZerL4zgXYCC4pbeoo/X5 vfNeBhdW+4XHWPQNJppbuaSMEwi5yogJOZxJlgCF7dljED9sDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN2HFUM8+tXayPBZb0O3PRYIGjQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTIz NDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3NmM1Y2YwYjUvNGEyMzQ3YTAtYTM4Ni00 NDI0LTg4ODctZmIxNzZjNWNmMGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGEyMzQ3YTAtYTM4Ni00NDI0LTg4 ODctZmIxNzZjNWNmMGI1LzRhMjM0N2EwLWEzODYtNDQyNC04ODg3LWZiMTc2YzVj ZjBiNS5jcmwwHwYDVR0jBBgwFoAUuMRj9lLGaxQjn2qJJGnzlk952P0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTIzNDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3 NmM1Y2YwYjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGvq7oORs9AFbVtoqnwObC C/b9/N+0T+5IDFX8ZgE/mYey4/iPfsxKS8yHLHepX72TjWpxeJGpQXRdlrfmqGlV 1oc48wqBV4IpYYFRg9+RvF7fkJGaqQnMqKDWCFy6iDL2jZKq6jtQrkX91vatTByZ bmGP5f0xisTQb9lzGvIPVys56Rg5tpfxP+uSg3ucLxa9ENeF/gJPFv8oyfC/1/7S ohzkROipxKvl/AyzFxIUZH0iLRw0FPzMtZFfxya8gGc6XuEZVETZaWQUknsYUIGR i8rPJq2bWoj5WwdL0coL3FMo7nICeiQlsoWi1Gfty0/GMHfad6RflxQpljddHyUo -----END CERTIFICATE-----Generated at Wed Nov 5 09:46:18 2025 by rpki-client