$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft File: 1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft (raw, json) Hash identifier: lgTb2BJr7eOe6J4Bm9C4DWbPlq/FwoUSF2ZW3iNiGgw= Subject key identifier: 55:E0:3D:1D:CA:4A:FF:4C:A2:CB:C6:7D:9F:73:BF:B6:7D:04:3B:5F Authority key identifier: 14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A Certificate issuer: /CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce Certificate serial: 010D0C9F4328584BAF20BB4E814161AD5D557A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft Manifest number: 010D0C9F4328584073A81CE05EEAEE9FBE850BA0 Signing time: Wed 29 Oct 2025 16:00:03 +0000 Manifest this update: Wed 29 Oct 2025 16:00:03 +0000 Manifest next update: Sat 01 Nov 2025 16:00:00 +0000 Files and hashes: 1: 1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl (hash: 4BoYXEjxx/wEupQpCx4EnzIGwWYllOonWJN5m0rznRM=) 2: 426b412f-a43c-3d09-aae6-0833d218aefc.roa (hash: CvblXLThTNC8vHK41NIh5CHNZpZN6kmpP/Q20aCCxlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:20:bb:4e:81:41:61:ad:5d:55:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce Validity Not Before: Oct 29 16:00:03 2025 GMT Not After : Nov 1 16:00:00 2025 GMT Subject: CN=4d36fb7c-b90d-46f7-adb1-2c64d469daa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:99:e9:5a:fc:e7:d7:14:dc:25:fb:ca:89: 42:10:72:7b:43:63:14:14:e0:d1:b1:1c:6d:8d:dc: 30:d6:e4:8a:08:0d:fb:17:d1:c2:60:62:9a:c5:3b: a8:87:af:ce:aa:d2:bc:12:19:60:af:d7:6b:34:b4: c9:1e:6c:80:85:91:45:46:05:2b:4e:f1:c4:77:0d: b8:e0:35:fa:9a:73:8a:11:4f:98:96:cb:a1:f4:4a: d3:58:8d:bb:f0:ab:68:8d:fb:fc:1c:b9:4c:bd:e2: 18:86:5d:17:0d:f4:4a:d4:9b:19:8a:5f:d9:3d:97: a4:4f:4f:36:19:36:55:f3:89:07:f7:38:02:58:5b: e2:0d:c5:7a:36:13:79:3e:3a:e4:d8:d9:3f:ff:46: 7a:7b:13:9b:bd:74:d3:bf:cd:4b:55:41:15:48:fb: aa:7d:32:15:89:98:d7:36:36:92:e4:ab:46:60:f3: cf:8a:f2:db:88:1e:42:3a:7d:6f:a9:77:f9:8f:a2: fb:bb:82:d3:da:0b:c3:02:25:6d:f1:a6:e5:da:67: fc:53:2a:67:03:d4:be:2f:1d:b4:bd:30:c4:f8:22: 54:fc:eb:a3:e7:88:62:8a:39:7c:92:6a:2c:58:b0: 2d:47:6f:ed:40:b1:9a:dc:ad:79:35:c4:d3:4d:eb: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E0:3D:1D:CA:4A:FF:4C:A2:CB:C6:7D:9F:73:BF:B6:7D:04:3B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl X509v3 Authority Key Identifier: keyid:14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e2:9e:c1:8d:23:88:47:17:f8:f5:b1:0f:eb:4c:7b:48:ff: c3:80:a0:33:7c:ea:96:44:50:81:8e:e0:e0:43:c2:69:0a:1a: 89:d1:cc:7f:68:ad:76:52:d3:61:43:70:02:16:36:5d:74:d3: f7:a1:50:67:d2:bf:1b:9b:ed:71:78:e8:11:9b:57:59:be:d0: fd:57:8c:be:69:fa:e9:98:18:64:e7:e8:81:57:74:4a:e3:8d: 39:29:e9:08:ec:ad:15:bc:42:44:c3:42:9a:c2:b1:41:b8:f1: 6f:75:cc:15:85:35:64:d1:40:1a:de:b4:93:3f:a0:12:04:d1: 20:a4:84:10:36:1b:5c:54:f4:c4:f6:57:47:20:2f:c9:4d:7c: 6d:79:16:9f:6b:bc:77:8d:92:ea:37:50:0b:ba:5b:c0:5e:7a: 90:15:39:99:25:87:da:97:73:6e:b1:db:07:8c:d8:8f:67:5c: eb:19:1f:ef:8a:14:c1:9d:1f:2c:79:ae:cc:21:db:d9:38:3f: 7a:f0:23:bc:ba:74:23:06:80:c7:7e:c5:50:2f:aa:de:64:f5: 15:b7:09:c6:72:70:4a:42:92:4e:43:4a:22:f2:2b:14:49:0f: eb:45:c2:a2:5e:fc:dc:14:a0:ed:3c:e4:34:94:ce:fb:2a:cf: 8c:51:b4:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuvILtOgUFhrV1VeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkNWQ5ZDItZDc0YS00YmEwLWI4YTUtN2Y1OTAwMTlm NGNlMB4XDTI1MTAyOTE2MDAwM1oXDTI1MTEwMTE2MDAwMFowLzEtMCsGA1UEAxMk NGQzNmZiN2MtYjkwZC00NmY3LWFkYjEtMmM2NGQ0NjlkYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AOZ6Vr859cU3CX7yolCEHJ7Q2MUFODRsRxt jdww1uSKCA37F9HCYGKaxTuoh6/OqtK8Ehlgr9drNLTJHmyAhZFFRgUrTvHEdw24 4DX6mnOKEU+Ylsuh9ErTWI278Ktojfv8HLlMveIYhl0XDfRK1JsZil/ZPZekT082 GTZV84kH9zgCWFviDcV6NhN5Pjrk2Nk//0Z6exObvXTTv81LVUEVSPuqfTIViZjX NjaS5KtGYPPPivLbiB5COn1vqXf5j6L7u4LT2gvDAiVt8abl2mf8UypnA9S+Lx20 vTDE+CJU/Ouj54hiijl8kmosWLAtR2/tQLGa3K15NcTTTevLFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFXgPR3KSv9MosvGfZ9zv7Z9BDtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWQ1 ZDlkMi1kNzRhLTRiYTAtYjhhNS03ZjU5MDAxOWY0Y2UvMWFkNWQ5ZDItZDc0YS00 YmEwLWI4YTUtN2Y1OTAwMTlmNGNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFkNWQ5ZDItZDc0YS00YmEwLWI4 YTUtN2Y1OTAwMTlmNGNlLzFhZDVkOWQyLWQ3NGEtNGJhMC1iOGE1LTdmNTkwMDE5 ZjRjZS5jcmwwHwYDVR0jBBgwFoAUFAKCcmSTqTSlrybDC8+4+0k3QDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWQ1ZDlkMi1kNzRhLTRiYTAtYjhhNS03ZjU5 MDAxOWY0Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBd4p7BjSOIRxf49bEP60x7 SP/DgKAzfOqWRFCBjuDgQ8JpChqJ0cx/aK12UtNhQ3ACFjZddNP3oVBn0r8bm+1x eOgRm1dZvtD9V4y+afrpmBhk5+iBV3RK4405KekI7K0VvEJEw0KawrFBuPFvdcwV hTVk0UAa3rSTP6ASBNEgpIQQNhtcVPTE9ldHIC/JTXxteRafa7x3jZLqN1ALulvA XnqQFTmZJYfal3NusdsHjNiPZ1zrGR/vihTBnR8sea7MIdvZOD968CO8unQjBoDH fsVQL6reZPUVtwnGcnBKQpJOQ0oi8isUSQ/rRcKiXvzcFKDtPOQ0lM77Ks+MUbSl -----END CERTIFICATE-----Generated at Thu Oct 30 16:06:48 2025 by rpki-client