$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft File: debe33c0-a52c-4362-ae80-4f1fc15922a1.mft (raw, json) Hash identifier: hw7lJjSQ1lGSW6bu+jB1JvpH+BsAtvV+g4+ewpuZvrw= Subject key identifier: 3D:29:81:34:FD:6B:FD:3B:31:99:EC:8C:19:A2:59:02:9F:9E:8A:CB Authority key identifier: 02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 Certificate issuer: /CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Certificate serial: 010D0C9F4328584BBF887C9D6D105F5903695A86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft Manifest number: 010D0C9F4328584B52C0A09E7BD91B6DDACF20C8 Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: 03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa (hash: hIeGs5WWxHwTaE+KKLWgzhsIfSd+yDfLccb+++ydzNg=) 2: debe33c0-a52c-4362-ae80-4f1fc15922a1.crl (hash: B5b//alNCvuFX+EkpQFPqX27MZq5kogF+74kUr8gN9A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7c:9d:6d:10:5f:59:03:69:5a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=7be00bbe-3a47-462c-be5a-26f78521a595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:39:5e:83:20:dd:d1:4a:2e:f6:7b:5d:9b: 5e:8a:49:df:30:75:88:58:25:6f:2a:aa:0f:17:94: 87:37:cc:d4:c4:be:5a:04:61:78:e8:e0:3c:2d:a4: 32:35:4d:c9:62:99:73:fc:fc:ca:44:29:89:f9:a0: e7:fd:88:e1:02:c4:5e:d3:18:16:3c:cf:76:a0:95: e7:c5:2e:fc:9e:84:71:1f:88:c9:b4:b1:1a:d3:a3: 39:5c:3a:e9:f0:20:6e:35:38:56:e3:59:d7:5a:05: e9:aa:10:c8:84:23:a1:6f:a4:d5:e4:36:43:73:1b: fa:0f:fb:80:09:dc:2a:6e:1c:e7:b1:51:3b:90:03: 7f:46:36:e1:68:83:99:0b:f6:31:ad:d0:ae:5c:0c: 1b:47:be:79:c9:5d:e4:c5:e5:2c:19:d8:de:7c:2b: b6:de:a6:84:ad:9b:79:99:50:58:32:02:6e:99:b3: b8:58:15:97:9c:b2:0e:59:bd:2f:5c:ec:9e:b3:36: ba:2c:cd:ce:df:85:15:53:c7:a1:b6:c1:f4:44:54: 0d:11:da:c2:39:93:cd:da:af:56:42:05:f9:ea:81: 16:c5:f4:a2:60:6d:6b:f1:f1:0e:e8:57:e0:fd:3a: 02:ed:f3:f7:e1:e2:5d:f2:2b:c9:a6:aa:dc:9c:25: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:29:81:34:FD:6B:FD:3B:31:99:EC:8C:19:A2:59:02:9F:9E:8A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl X509v3 Authority Key Identifier: keyid:02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e4:92:2e:60:4c:49:92:25:ca:c0:e3:76:a1:4b:62:33:b8: 95:d6:fd:59:a3:da:5c:b0:cc:cd:60:4f:31:a3:50:fb:4e:34: b0:bb:6e:65:95:45:ac:f1:2c:2d:d5:bf:66:b6:ce:fe:4f:3e: b8:de:37:57:c0:e9:30:94:8e:6b:64:b6:2b:9e:60:5a:82:08: 96:70:a8:35:f0:8c:e6:fc:0d:92:32:5d:47:39:2b:82:75:1b: bb:62:ce:b7:36:d9:3a:8f:a4:f1:83:7e:7d:0a:16:6a:76:e9: 7c:c4:cb:59:21:a7:97:b2:3f:5b:e7:51:8a:d7:15:9a:03:97: a6:f6:2e:a6:0e:28:fc:50:eb:a5:88:af:23:7f:38:25:0f:2c: a3:6b:c6:b4:6e:79:20:4f:9f:95:74:7c:c0:5e:6a:3d:ea:07: c8:6e:83:16:5d:13:83:35:fb:b1:8f:39:77:4d:5f:d8:e0:e6: c9:e0:e2:78:a7:1c:f7:80:d0:32:09:3f:b6:e0:44:af:d3:61: d5:e7:84:b1:76:aa:1f:eb:16:d6:a8:0a:37:f0:35:8d:1b:ef: be:cf:a8:f2:38:50:ec:ec:91:22:9f:b3:97:4d:53:40:0f:7f: 5e:de:8e:94:b0:82:f4:46:86:f5:e7:78:36:cd:93:c3:40:44: e5:e9:41:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iHydbRBfWQNpWoYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGViZTMzYzAtYTUyYy00MzYyLWFlODAtNGYxZmMxNTky MmExMB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk N2JlMDBiYmUtM2E0Ny00NjJjLWJlNWEtMjZmNzg1MjFhNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDA5XoMg3dFKLvZ7XZteiknfMHWIWCVvKqoP F5SHN8zUxL5aBGF46OA8LaQyNU3JYplz/PzKRCmJ+aDn/YjhAsRe0xgWPM92oJXn xS78noRxH4jJtLEa06M5XDrp8CBuNThW41nXWgXpqhDIhCOhb6TV5DZDcxv6D/uA CdwqbhznsVE7kAN/RjbhaIOZC/YxrdCuXAwbR755yV3kxeUsGdjefCu23qaErZt5 mVBYMgJumbO4WBWXnLIOWb0vXOyesza6LM3O34UVU8ehtsH0RFQNEdrCOZPN2q9W QgX56oEWxfSiYG1r8fEO6Ffg/ToC7fP34eJd8ivJpqrcnCXVAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD0pgTT9a/07MZnsjBmiWQKfnorLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJl MzNjMC1hNTJjLTQzNjItYWU4MC00ZjFmYzE1OTIyYTEvZGViZTMzYzAtYTUyYy00 MzYyLWFlODAtNGYxZmMxNTkyMmExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGViZTMzYzAtYTUyYy00MzYyLWFl ODAtNGYxZmMxNTkyMmExL2RlYmUzM2MwLWE1MmMtNDM2Mi1hZTgwLTRmMWZjMTU5 MjJhMS5jcmwwHwYDVR0jBBgwFoAUAoI5F2CNOITn3mwO8Z9jPlDKbFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJlMzNjMC1hNTJjLTQzNjItYWU4MC00ZjFm YzE1OTIyYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBS5JIuYExJkiXKwON2oUti M7iV1v1Zo9pcsMzNYE8xo1D7TjSwu25llUWs8Swt1b9mts7+Tz643jdXwOkwlI5r ZLYrnmBaggiWcKg18Izm/A2SMl1HOSuCdRu7Ys63Ntk6j6Txg359ChZqdul8xMtZ IaeXsj9b51GK1xWaA5em9i6mDij8UOuliK8jfzglDyyja8a0bnkgT5+VdHzAXmo9 6gfIboMWXRODNfuxjzl3TV/Y4ObJ4OJ4pxz3gNAyCT+24ESv02HV54Sxdqof6xbW qAo38DWNG+++z6jyOFDs7JEin7OXTVNAD39e3o6UsIL0Rob153g2zZPDQETl6UF2 -----END CERTIFICATE-----Generated at Wed Nov 5 08:13:48 2025 by rpki-client