$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft File: f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft (raw, json) Hash identifier: qPEg2nNg/9BH4qySkx294dA/bePOAaDpzMEK+ZRBj3c= Subject key identifier: FF:1F:47:58:28:91:93:2D:60:5E:5C:02:73:CC:78:0D:30:26:95:2D Authority key identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Certificate issuer: /CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Certificate serial: 010D0C9F4328584BC075C6A445DD055A13694D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft Manifest number: 010D0C9F4328584B4B37046441AA269C9BB416AB Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: efafb3e1-c5fc-3111-b4db-21000f90654c.roa (hash: MF9KkQf2pImV3WK+NUEapbaXCMOBikcwHlg6ZWhU8CA=) 2: f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl (hash: ZyO/kXEaEFz6bRu2JPQ5TbmJVOWCX3K2yC594Ma5uKo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c6:a4:45:dd:05:5a:13:69:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=7ab661df-4daf-45f0-8ad3-31ea1b77377f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:76:43:99:49:d0:9d:13:67:f4:bb:f0:86: 44:cf:5c:65:c8:d8:f0:e3:0c:a0:5c:e4:98:98:56: c8:0c:a9:3b:28:cf:76:cd:d0:de:81:ce:e6:1a:68: bb:e0:2b:61:14:70:41:2a:6b:6d:83:8c:26:9b:c5: 7b:4d:d9:d3:16:c6:32:7e:80:a4:39:1e:ca:29:65: d9:82:bf:28:16:0a:00:46:81:1f:ae:f0:fd:ed:8b: 2d:f1:4b:54:57:1a:80:79:36:f0:af:1a:8c:02:2d: e9:ad:60:85:92:63:8b:e6:2f:04:54:a0:fd:c1:3b: 90:3f:ec:02:4f:3a:d0:07:c6:82:01:db:4f:7e:ab: 28:4c:bb:e2:3f:bd:be:c3:0e:4b:90:42:02:91:94: 08:57:13:d6:8b:12:d2:03:5f:4f:df:72:0b:ae:c3: 07:66:ce:9d:0f:bf:36:e8:32:38:e0:a3:23:44:f2: 1e:fa:72:b2:2c:87:16:e9:1f:1b:8d:ba:b1:1c:7a: ae:54:5f:98:98:ba:7d:bd:19:9b:c5:c1:67:6a:5b: f3:2f:3b:c3:7f:68:f1:54:a3:55:3e:90:92:a6:26: cc:39:09:d1:9c:dd:02:f4:74:6c:ce:f4:35:41:c6: 09:06:59:e4:82:15:88:64:27:bf:a7:b6:f3:9e:fb: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:47:58:28:91:93:2D:60:5E:5C:02:73:CC:78:0D:30:26:95:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl X509v3 Authority Key Identifier: keyid:7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c0:8b:e5:8f:ef:48:8b:bf:05:0a:af:3c:0f:11:07:f8:0e: 80:43:e8:1f:2f:8a:08:4c:90:1d:a4:c4:05:61:f9:a4:91:36: 4a:71:2e:7d:7e:75:ad:85:b9:a2:f2:42:c3:4a:63:74:31:50: 27:bf:bf:07:fe:e1:2f:22:92:5f:23:1a:87:e5:93:43:ee:9b: 8e:5c:24:df:7a:e9:d4:de:3e:51:2a:a9:5a:f8:01:03:88:fa: e0:d9:76:28:62:15:4f:f9:30:6f:f6:28:3c:9c:e0:22:8b:11: 7c:7c:fc:e3:65:e8:d8:56:91:8d:11:48:9a:54:7d:62:09:6e: 35:75:f1:fe:bc:01:d2:b9:b5:59:98:ef:a8:51:cd:aa:22:53: 6e:a4:20:57:9b:b0:69:6f:65:79:27:af:5c:76:42:47:ab:ac: c3:3c:5e:ff:b3:d3:93:00:6b:40:40:fc:88:b1:c4:4a:2c:72: 9b:64:25:e6:f0:70:bc:13:ff:3a:9c:80:e0:08:4a:61:8d:e8: 2f:43:97:4f:62:17:32:9a:6b:e0:dc:9e:ca:67:13:26:6a:b0: d7:ad:ba:48:da:5b:6e:f9:18:be:4b:53:08:ab:6f:04:d4:95: 24:5d:30:b1:fa:af:f8:78:ed:98:d5:c3:74:91:31:b5:15:9f: 10:7a:28:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcakRd0FWhNpTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJhMWYxNDktYmMwYy00ZjZjLTlmYjUtZTY1NjUxNWQx OTdiMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk N2FiNjYxZGYtNGRhZi00NWYwLThhZDMtMzFlYTFiNzczNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIF2Q5lJ0J0TZ/S78IZEz1xlyNjw4wygXOSY mFbIDKk7KM92zdDegc7mGmi74CthFHBBKmttg4wmm8V7TdnTFsYyfoCkOR7KKWXZ gr8oFgoARoEfrvD97Yst8UtUVxqAeTbwrxqMAi3prWCFkmOL5i8EVKD9wTuQP+wC TzrQB8aCAdtPfqsoTLviP72+ww5LkEICkZQIVxPWixLSA19P33ILrsMHZs6dD782 6DI44KMjRPIe+nKyLIcW6R8bjbqxHHquVF+YmLp9vRmbxcFnalvzLzvDf2jxVKNV PpCSpibMOQnRnN0C9HRszvQ1QcYJBlnkghWIZCe/p7bznvsW6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP8fR1gokZMtYF5cAnPMeA0wJpUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMmEx ZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1ZDE5N2IvZjJhMWYxNDktYmMwYy00 ZjZjLTlmYjUtZTY1NjUxNWQxOTdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjJhMWYxNDktYmMwYy00ZjZjLTlm YjUtZTY1NjUxNWQxOTdiL2YyYTFmMTQ5LWJjMGMtNGY2Yy05ZmI1LWU2NTY1MTVk MTk3Yi5jcmwwHwYDVR0jBBgwFoAUf71LL1xCRG0Mx1o/IOzDdoz1MtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2 NTE1ZDE5N2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALwIvlj+9Ii78FCq88DxEH +A6AQ+gfL4oITJAdpMQFYfmkkTZKcS59fnWthbmi8kLDSmN0MVAnv78H/uEvIpJf IxqH5ZND7puOXCTfeunU3j5RKqla+AEDiPrg2XYoYhVP+TBv9ig8nOAiixF8fPzj ZejYVpGNEUiaVH1iCW41dfH+vAHSubVZmO+oUc2qIlNupCBXm7Bpb2V5J69cdkJH q6zDPF7/s9OTAGtAQPyIscRKLHKbZCXm8HC8E/86nIDgCEphjegvQ5dPYhcymmvg 3J7KZxMmarDXrbpI2ltu+Ri+S1MIq28E1JUkXTCx+q/4eO2Y1cN0kTG1FZ8QeijK -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:37 2025 by rpki-client