$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft File: 25b8413b-5254-4959-a9f1-d00f0fc1b819.mft (raw, json) Hash identifier: 2NU00yNmovKAUPv23+1W9z5MI4Tjsl0scpwsJ26E7Dk= Subject key identifier: B1:3E:0B:FD:89:04:66:49:86:37:76:3B:05:2A:53:67:02:32:05:1D Authority key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A Certificate issuer: /CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Certificate serial: 010D0C9F4328584BD2065058D64813D7DB157D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft Manifest number: 010D0C9F432858451D2581D3B48CABDB22FE8DB6 Signing time: Tue 11 Nov 2025 04:00:08 +0000 Manifest this update: Tue 11 Nov 2025 04:00:08 +0000 Manifest next update: Thu 13 Nov 2025 04:00:00 +0000 Files and hashes: 1: 25b8413b-5254-4959-a9f1-d00f0fc1b819.crl (hash: yyrIxbN85RlzUNuYe8zpupfzB4NGIwIVWGJfL/0Ug6I=) 2: 81b30814-d14d-3119-b7df-c279bfdf03c6.roa (hash: 6j1wShWDddmXUM6q1RlqckbbUj+I3N9vyPWngueoyf4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d2:06:50:58:d6:48:13:d7:db:15:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819 Validity Not Before: Nov 11 04:00:08 2025 GMT Not After : Nov 13 04:00:00 2025 GMT Subject: CN=e3535ffb-c2cf-4f5c-8b62-636dda720768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:8d:09:b1:c9:b9:46:63:bf:94:7e:15:27: ab:a2:4f:12:8b:6d:12:ad:ba:28:77:1c:1e:5e:6f: 05:87:2d:f8:44:21:37:c3:27:b0:47:23:b8:26:e3: dd:ea:bb:3e:93:4b:4f:91:3c:ac:75:de:3c:66:0e: 35:d9:a4:73:4c:8e:87:cf:ae:b2:91:84:0d:19:70: 42:b5:46:6f:76:42:58:c9:03:93:92:9b:63:39:ad: ee:dc:5c:cc:78:ed:28:43:75:22:61:8b:f3:8e:44: 31:14:b3:2a:29:3e:42:8f:f0:ef:9f:f8:81:c1:b0: 83:5d:c9:5f:96:34:66:63:87:6f:9c:fa:1a:fb:94: 4b:8d:aa:a3:84:fc:e7:67:2c:71:ca:38:45:e9:13: 39:be:9e:a0:b8:90:4a:dd:21:f5:9a:67:9e:9c:e8: 10:27:04:68:42:f0:6e:6f:1d:49:db:3f:5d:ec:41: e5:4d:49:8f:7e:ba:7a:d9:81:96:62:d3:55:71:00: 82:d2:58:ec:b8:69:d8:69:72:f6:f5:81:cc:89:6a: 7f:f2:36:27:36:01:72:9c:59:4e:33:ba:5d:2e:01: 60:26:25:4a:cf:d4:e9:87:52:be:95:48:21:89:c1: d7:9a:51:46:c3:7f:ed:fa:8b:76:49:3b:41:62:ce: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3E:0B:FD:89:04:66:49:86:37:76:3B:05:2A:53:67:02:32:05:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl X509v3 Authority Key Identifier: keyid:9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:df:32:ba:c0:9d:4f:d5:c7:99:c1:91:3a:20:1a:ee:b5:41: 77:6d:da:32:8a:7b:f5:04:2a:a2:31:93:d3:9d:06:a2:d5:3a: 3b:f6:dd:43:55:fc:63:01:34:d7:2f:10:3a:d2:6c:9b:65:2b: c6:74:3d:2c:3f:d7:45:42:9a:a0:f4:64:4e:1d:f2:87:af:be: 59:70:9b:8d:5f:2b:f5:3a:18:a4:58:65:73:0d:d5:43:51:75: 94:a6:ce:1e:0c:69:d0:36:93:1d:9f:44:37:17:fc:fb:51:07: 27:35:fd:dd:14:cd:44:3b:65:ca:65:e6:1f:89:4e:17:91:6c: 6e:a9:b4:80:62:f6:3e:a2:e6:d8:2d:42:a1:3e:07:2c:b9:b7: af:fe:19:54:ee:c3:12:4c:d6:d7:12:86:5d:c3:a2:b8:01:f4: af:a5:42:26:2c:42:06:c9:ae:1d:29:b1:e4:c4:71:54:0b:2c: bf:41:ed:f0:5b:9c:b0:74:08:7c:8b:1e:65:51:2e:b9:da:11: 83:62:01:fb:4e:26:0e:4a:d9:13:ef:4c:41:02:d2:97:69:33: 0a:93:13:c9:90:19:9a:5f:14:d1:22:d8:e4:60:69:2d:38:d2: b2:f1:7e:18:ca:7d:02:ff:0d:d2:a8:2a:0b:25:60:c6:0c:cc: 5f:cb:47:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvSBlBY1kgT19sVfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViODQxM2ItNTI1NC00OTU5LWE5ZjEtZDAwZjBmYzFi ODE5MB4XDTI1MTExMTA0MDAwOFoXDTI1MTExMzA0MDAwMFowLzEtMCsGA1UEAxMk ZTM1MzVmZmItYzJjZi00ZjVjLThiNjItNjM2ZGRhNzIwNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8iNCbHJuUZjv5R+FSerok8Si20Srboodxwe Xm8Fhy34RCE3wyewRyO4JuPd6rs+k0tPkTysdd48Zg412aRzTI6Hz66ykYQNGXBC tUZvdkJYyQOTkptjOa3u3FzMeO0oQ3UiYYvzjkQxFLMqKT5Cj/Dvn/iBwbCDXclf ljRmY4dvnPoa+5RLjaqjhPznZyxxyjhF6RM5vp6guJBK3SH1mmeenOgQJwRoQvBu bx1J2z9d7EHlTUmPfrp62YGWYtNVcQCC0ljsuGnYaXL29YHMiWp/8jYnNgFynFlO M7pdLgFgJiVKz9Tph1K+lUghicHXmlFGw3/t+ot2STtBYs7ArQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLE+C/2JBGZJhjd2OwUqU2cCMgUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI4 NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZjMWI4MTkvMjViODQxM2ItNTI1NC00 OTU5LWE5ZjEtZDAwZjBmYzFiODE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViODQxM2ItNTI1NC00OTU5LWE5 ZjEtZDAwZjBmYzFiODE5LzI1Yjg0MTNiLTUyNTQtNDk1OS1hOWYxLWQwMGYwZmMx YjgxOS5jcmwwHwYDVR0jBBgwFoAUm8HV8p8M9XZ5Z99wJUpri2W5HlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBm MGZjMWI4MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo3zK6wJ1P1ceZwZE6IBru tUF3bdoyinv1BCqiMZPTnQai1To79t1DVfxjATTXLxA60mybZSvGdD0sP9dFQpqg 9GROHfKHr75ZcJuNXyv1OhikWGVzDdVDUXWUps4eDGnQNpMdn0Q3F/z7UQcnNf3d FM1EO2XKZeYfiU4XkWxuqbSAYvY+oubYLUKhPgcsubev/hlU7sMSTNbXEoZdw6K4 AfSvpUImLEIGya4dKbHkxHFUCyy/Qe3wW5ywdAh8ix5lUS652hGDYgH7TiYOStkT 70xBAtKXaTMKkxPJkBmaXxTRItjkYGktONKy8X4Yyn0C/w3SqCoLJWDGDMxfy0cs -----END CERTIFICATE-----Generated at Tue Nov 11 08:45:36 2025 by rpki-client