$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft File: dec2e862-2539-4fd7-a8e3-0930c1d95215.mft (raw, json) Hash identifier: MwTbhN4qwVt1EUQEorMsdT/QdZVsmMT0gcKUtYwbh3I= Subject key identifier: 9E:45:65:57:B7:11:6A:00:BA:D3:17:41:5E:D0:39:05:6B:FD:62:E1 Authority key identifier: 74:15:5B:D6:B8:C4:B2:C2:49:82:E7:3E:4A:16:77:1C:C0:60:6A:EE Certificate issuer: /CN=dec2e862-2539-4fd7-a8e3-0930c1d95215 Certificate serial: 010D0C9F4328584BBF887FD941DDEEB11D3E4780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft Manifest number: 010D0C9F4328584AC72977E505842F07B4A6661B Signing time: Tue 04 Nov 2025 13:02:03 +0000 Manifest this update: Tue 04 Nov 2025 13:02:03 +0000 Manifest next update: Thu 06 Nov 2025 13:00:00 +0000 Files and hashes: 1: dec2e862-2539-4fd7-a8e3-0930c1d95215.crl (hash: GEJF0oO06LcITz9yHzo4j6vXDxxwUM+EggYL5IlTDqs=) 2: e2a99546-ec1f-3e07-b38c-0f7298907be9.roa (hash: hx0RklHSZdN4k9CDdeWKLMU8oR0mTWPfS9JfyDlDqRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:88:7f:d9:41:dd:ee:b1:1d:3e:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec2e862-2539-4fd7-a8e3-0930c1d95215 Validity Not Before: Nov 4 13:02:03 2025 GMT Not After : Nov 6 13:00:00 2025 GMT Subject: CN=4d0da7c5-fa2f-4d5e-9928-871a41f8e288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:f6:88:ad:89:27:06:77:1f:c1:7f:31:f6: 7e:ad:9b:c7:93:ef:d9:fb:b2:01:56:11:95:3e:40: 6b:b6:72:2e:87:7e:29:c6:7a:01:22:5d:79:2f:df: f6:5a:18:1c:3e:2e:49:d9:cc:bb:5d:a4:63:cb:3d: 19:78:b0:67:fc:fe:5c:8e:f0:c8:3f:f0:e7:34:36: 48:59:1e:3f:ea:7a:ec:29:9c:7e:a1:43:fb:74:f4: cb:e8:c2:c8:24:5d:17:31:c8:69:90:3a:30:51:61: 06:df:82:ca:1d:6f:28:9c:bc:4f:dc:9b:56:2c:2c: ea:1d:d6:4e:b1:f2:fb:41:a6:50:92:94:35:76:cf: 3d:ea:b6:33:66:e7:1e:96:60:72:a5:9c:5b:aa:68: 65:b1:52:0f:a8:8f:59:5e:df:5e:a5:0f:dc:63:cd: d0:89:ef:a4:8d:3c:0f:56:d6:0d:72:72:5a:ae:df: 92:82:e9:0a:a1:1e:ca:e8:e4:53:59:99:20:9a:58: f1:a1:9b:dd:46:19:b4:0a:11:2e:94:84:ba:de:9f: 2b:5f:97:bd:0e:42:80:5c:7c:39:09:27:00:7c:db: 40:29:68:e1:1f:7b:19:44:14:91:7c:1d:35:e9:a3: 1b:e2:4c:83:f1:0a:e5:81:2f:27:ee:8f:48:93:ab: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:65:57:B7:11:6A:00:BA:D3:17:41:5E:D0:39:05:6B:FD:62:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.crl X509v3 Authority Key Identifier: keyid:74:15:5B:D6:B8:C4:B2:C2:49:82:E7:3E:4A:16:77:1C:C0:60:6A:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d9:37:f3:4a:9c:a0:8f:f6:a2:3d:d4:c3:25:b9:9e:a4:42: 23:8a:7b:10:fd:d6:86:49:86:03:ff:b5:c9:e8:dc:5a:d6:f4: 5d:cb:c7:63:10:09:cc:78:44:2b:d6:81:07:bf:18:31:71:77: e3:1e:d7:ba:f7:f2:50:40:cb:ae:0c:51:21:29:a9:57:3d:1c: 8e:9d:12:13:c0:38:00:e9:c7:55:d0:e4:fa:d6:11:e9:c4:ee: 78:76:72:d2:4f:51:8b:a3:16:02:e4:69:94:74:2c:b9:93:c0: 04:17:61:54:88:54:5d:40:82:56:8c:60:e0:36:ff:a4:9a:c3: cb:fd:41:a8:d8:39:73:c6:f0:63:e0:37:5d:9e:bb:17:0c:fa: 9a:de:1a:ff:91:be:ed:aa:91:21:f6:c2:ac:b4:34:db:e0:1a: d1:fb:79:88:08:73:04:69:2c:e3:4f:bb:a6:8e:a4:af:9a:05: 62:64:93:41:99:bb:a3:99:23:e1:97:ff:d7:e3:24:52:6d:52: da:72:61:08:51:76:52:02:ed:2d:a6:2a:cb:16:1a:80:1a:2c: 12:b1:62:d0:04:ff:83:42:1d:5b:fd:f2:f0:3d:14:45:f1:31: 33:1e:d5:26:26:33:92:7c:5e:23:d3:8a:05:28:a2:3b:4b:5f: 6f:c2:9c:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/iH/ZQd3usR0+R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjMmU4NjItMjUzOS00ZmQ3LWE4ZTMtMDkzMGMxZDk1 MjE1MB4XDTI1MTEwNDEzMDIwM1oXDTI1MTEwNjEzMDAwMFowLzEtMCsGA1UEAxMk NGQwZGE3YzUtZmEyZi00ZDVlLTk5MjgtODcxYTQxZjhlMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCb2iK2JJwZ3H8F/MfZ+rZvHk+/Z+7IBVhGV PkBrtnIuh34pxnoBIl15L9/2WhgcPi5J2cy7XaRjyz0ZeLBn/P5cjvDIP/DnNDZI WR4/6nrsKZx+oUP7dPTL6MLIJF0XMchpkDowUWEG34LKHW8onLxP3JtWLCzqHdZO sfL7QaZQkpQ1ds896rYzZucelmBypZxbqmhlsVIPqI9ZXt9epQ/cY83Qie+kjTwP VtYNcnJart+SgukKoR7K6ORTWZkgmljxoZvdRhm0ChEulIS63p8rX5e9DkKAXHw5 CScAfNtAKWjhH3sZRBSRfB016aMb4kyD8QrlgS8n7o9Ik6sR0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ5FZVe3EWoAutMXQV7QOQVr/WLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZWMy ZTg2Mi0yNTM5LTRmZDctYThlMy0wOTMwYzFkOTUyMTUvZGVjMmU4NjItMjUzOS00 ZmQ3LWE4ZTMtMDkzMGMxZDk1MjE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGVjMmU4NjItMjUzOS00ZmQ3LWE4 ZTMtMDkzMGMxZDk1MjE1L2RlYzJlODYyLTI1MzktNGZkNy1hOGUzLTA5MzBjMWQ5 NTIxNS5jcmwwHwYDVR0jBBgwFoAUdBVb1rjEssJJguc+ShZ3HMBgau4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZWMyZTg2Mi0yNTM5LTRmZDctYThlMy0wOTMw YzFkOTUyMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr2TfzSpygj/aiPdTDJbme pEIjinsQ/daGSYYD/7XJ6Nxa1vRdy8djEAnMeEQr1oEHvxgxcXfjHte69/JQQMuu DFEhKalXPRyOnRITwDgA6cdV0OT61hHpxO54dnLST1GLoxYC5GmUdCy5k8AEF2FU iFRdQIJWjGDgNv+kmsPL/UGo2DlzxvBj4DddnrsXDPqa3hr/kb7tqpEh9sKstDTb 4BrR+3mICHMEaSzjT7umjqSvmgViZJNBmbujmSPhl//X4yRSbVLacmEIUXZSAu0t pirLFhqAGiwSsWLQBP+DQh1b/fLwPRRF8TEzHtUmJjOSfF4j04oFKKI7S19vwpyB -----END CERTIFICATE-----Generated at Tue Nov 4 19:48:38 2025 by rpki-client