$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft File: c424337b-6d69-49df-8a01-857b948a7a5a.mft (raw, json) Hash identifier: Jco6Dm4TfY3/jA4MAgKxS+8il9HVkTA06nIdahAa8kc= Subject key identifier: D4:1B:A1:71:9E:F8:44:C0:63:FE:C8:7E:8E:AE:9F:FD:28:19:22:69 Authority key identifier: 08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22 Certificate issuer: /CN=c424337b-6d69-49df-8a01-857b948a7a5a Certificate serial: 010D0C9F4328584BC1462FF516B4F18B8FC99F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft Manifest number: 010D0C9F4328584A8E40CA8626A37C68DE816F70 Signing time: Wed 05 Nov 2025 04:00:03 +0000 Manifest this update: Wed 05 Nov 2025 04:00:03 +0000 Manifest next update: Sat 08 Nov 2025 04:00:00 +0000 Files and hashes: 1: c424337b-6d69-49df-8a01-857b948a7a5a.crl (hash: cVSUzHdf/qys0tczd/gbW9i/iwMrgOGQlGhF8NY9QF8=) 2: e0555883-68da-3ed0-b20b-f794cbe5b3fc.roa (hash: T0Z5RCj8o6RLpnxhrvCybPK12V9b6ChZDjvzePwZctA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:46:2f:f5:16:b4:f1:8b:8f:c9:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c424337b-6d69-49df-8a01-857b948a7a5a Validity Not Before: Nov 5 04:00:03 2025 GMT Not After : Nov 8 04:00:00 2025 GMT Subject: CN=aaec7198-2c68-42dc-89b9-a6f4711b46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:4f:30:71:e8:a5:f9:6f:18:b2:ad:ad:46: 0e:e1:c6:ec:be:4a:9e:fc:30:2e:19:6a:02:61:ad: cb:85:05:2c:02:93:fd:04:d0:78:00:15:e6:27:b5: 33:33:db:87:b8:57:ff:ad:81:b6:a9:5a:a4:84:79: 72:05:6c:ef:67:7a:06:29:31:23:5f:96:5e:7e:1f: 1d:7e:36:25:26:8d:db:e2:68:45:49:7f:e9:82:58: db:3f:a9:5b:90:ec:6d:54:e0:83:24:9f:ee:44:ed: 48:5e:6c:0e:9d:66:73:67:d1:63:15:f3:a5:38:a7: 7c:e0:8f:72:f3:3a:f4:f1:67:9d:20:6d:db:33:a6: d0:70:e0:20:73:6e:d7:4c:1b:10:8b:08:b2:2f:c1: 28:48:43:12:95:c5:28:a6:e8:93:04:1f:ba:1f:15: 0e:8a:54:ac:b9:f2:8c:dc:0c:cf:7f:36:6c:0f:f3: 7a:4c:ed:6f:9d:37:3a:90:39:72:75:40:8e:cf:40: 84:25:73:1c:6b:9d:ea:46:24:8f:94:b9:be:63:4a: a6:29:18:85:23:6e:6b:6c:ad:50:ee:e6:da:01:e5: fc:aa:56:78:fe:ad:e9:9b:f5:d5:a0:e9:cc:aa:ff: 66:d5:56:ff:6f:56:80:e8:9f:25:fd:e4:81:e1:51: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1B:A1:71:9E:F8:44:C0:63:FE:C8:7E:8E:AE:9F:FD:28:19:22:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.crl X509v3 Authority Key Identifier: keyid:08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9b:f5:a5:d1:0f:b1:34:1e:f6:28:9a:b5:ef:69:fd:7d:e7: 6a:52:bf:1f:9a:38:0c:00:7c:a3:2c:95:0e:c0:70:ee:e5:0e: 6a:9a:95:f6:c4:50:50:34:fb:d1:c6:ea:19:89:29:5a:67:f4: 73:50:c2:f7:76:d4:0f:4c:a8:f0:f4:e8:c7:90:ec:45:ff:f2: 45:96:bb:85:2e:e3:5f:6b:ba:2a:8a:2d:64:0d:b4:41:b2:f9: d8:eb:2d:90:a5:86:e5:8b:7e:0e:f5:81:96:23:59:3a:47:47: 07:57:67:08:02:3a:9f:e9:9a:1b:5d:d2:21:cc:04:9f:e8:af: c9:e9:89:cd:ed:ab:10:8a:71:36:9a:e6:4f:1c:ee:2f:6c:fb: c4:27:ef:c6:9f:59:9f:3c:d0:82:f1:ae:9d:bb:27:0a:06:21: 60:18:c5:cd:5d:bd:9e:6b:ba:31:12:5b:ca:01:67:9d:2d:07: cb:8d:d9:54:1f:46:9e:d3:5a:64:77:39:8a:9e:ec:8b:0e:ed: 4a:fa:46:3f:d2:b4:09:85:7f:7f:33:ee:8e:dd:b0:5f:a4:9b: 25:bb:45:3d:6d:66:19:a4:59:b2:75:c3:e7:f3:44:24:cb:e0: 13:3e:07:e5:d4:f0:30:88:ef:cc:e6:27:25:ed:e2:4d:33:99: af:2e:4b:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBRi/1FrTxi4/Jn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNDMzN2ItNmQ2OS00OWRmLThhMDEtODU3Yjk0OGE3 YTVhMB4XDTI1MTEwNTA0MDAwM1oXDTI1MTEwODA0MDAwMFowLzEtMCsGA1UEAxMk YWFlYzcxOTgtMmM2OC00MmRjLTg5YjktYTZmNDcxMWI0NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDFPMHHopflvGLKtrUYO4cbsvkqe/DAuGWoC Ya3LhQUsApP9BNB4ABXmJ7UzM9uHuFf/rYG2qVqkhHlyBWzvZ3oGKTEjX5Zefh8d fjYlJo3b4mhFSX/pgljbP6lbkOxtVOCDJJ/uRO1IXmwOnWZzZ9FjFfOlOKd84I9y 8zr08WedIG3bM6bQcOAgc27XTBsQiwiyL8EoSEMSlcUopuiTBB+6HxUOilSsufKM 3AzPfzZsD/N6TO1vnTc6kDlydUCOz0CEJXMca53qRiSPlLm+Y0qmKRiFI25rbK1Q 7ubaAeX8qlZ4/q3pm/XVoOnMqv9m1Vb/b1aA6J8l/eSB4VEL0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNQboXGe+ETAY/7Ifo6un/0oGSJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDI0 MzM3Yi02ZDY5LTQ5ZGYtOGEwMS04NTdiOTQ4YTdhNWEvYzQyNDMzN2ItNmQ2OS00 OWRmLThhMDEtODU3Yjk0OGE3YTVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQyNDMzN2ItNmQ2OS00OWRmLThh MDEtODU3Yjk0OGE3YTVhL2M0MjQzMzdiLTZkNjktNDlkZi04YTAxLTg1N2I5NDhh N2E1YS5jcmwwHwYDVR0jBBgwFoAUCKvTuwS4dMiNNgdGQwvZffbrAiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDI0MzM3Yi02ZDY5LTQ5ZGYtOGEwMS04NTdi OTQ4YTdhNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHm/Wl0Q+xNB72KJq172n9 fedqUr8fmjgMAHyjLJUOwHDu5Q5qmpX2xFBQNPvRxuoZiSlaZ/RzUML3dtQPTKjw 9OjHkOxF//JFlruFLuNfa7oqii1kDbRBsvnY6y2QpYbli34O9YGWI1k6R0cHV2cI Ajqf6ZobXdIhzASf6K/J6YnN7asQinE2muZPHO4vbPvEJ+/Gn1mfPNCC8a6duycK BiFgGMXNXb2ea7oxElvKAWedLQfLjdlUH0ae01pkdzmKnuyLDu1K+kY/0rQJhX9/ M+6O3bBfpJslu0U9bWYZpFmydcPn80Qky+ATPgfl1PAwiO/M5icl7eJNM5mvLksK -----END CERTIFICATE-----Generated at Thu Nov 6 01:07:58 2025 by rpki-client