$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft File: 4e8d73da-047f-4a47-9523-47bcb685cad5.mft (raw, json) Hash identifier: nMQ7M80WN4ytQewsa4gaZPEQpvroIn7YYcWqifP5L5Q= Subject key identifier: 8E:E8:70:DF:10:82:05:F0:B5:E2:0E:F6:54:1E:A2:0E:B7:28:DF:E0 Authority key identifier: EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02 Certificate issuer: /CN=4e8d73da-047f-4a47-9523-47bcb685cad5 Certificate serial: 010D0C9F4328584BC058004996A5DE60A275B440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft Manifest number: 010D0C9F432858456D3FFAEFBB36AF09EC7FF4D3 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 4e8d73da-047f-4a47-9523-47bcb685cad5.crl (hash: hRuRAqM3l1GGMaE0juK4hn/LZECRNVeRkENoeqxNjgE=) 2: 87b3aef9-2e02-38eb-b992-85bcb4568f26.roa (hash: G7chAnODh6i7KoCD+Va751M/Bqk+is6i1k2dZ5XmdS8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:49:96:a5:de:60:a2:75:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8d73da-047f-4a47-9523-47bcb685cad5 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=3a76696b-5181-4a46-bfa4-b3a41216ab5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:24:41:d7:b1:23:fd:49:50:9a:7c:b1:90: 00:ec:70:2a:10:49:b7:06:02:75:f0:44:d7:c5:ee: 9e:93:fc:6b:c9:b7:94:bc:03:9e:3a:8c:f9:ba:40: 02:14:45:84:6c:37:ba:c1:93:02:f4:f9:d0:a6:6f: 38:17:2e:01:ff:f8:61:1b:2e:87:5e:59:93:ba:2e: bc:94:98:73:f5:c3:33:b0:68:cc:60:40:3f:f8:c6: bf:fb:ca:93:22:10:62:a6:b6:c5:92:b9:74:ae:b6: 62:f0:37:22:c0:e9:43:73:03:90:04:64:38:4a:06: 20:b0:72:13:17:33:0c:9f:1a:d5:93:c9:81:e9:10: 25:11:95:fc:60:28:15:fb:9c:10:8f:a7:3d:7e:76: 97:2b:25:70:98:95:78:05:04:80:76:ef:91:38:a2: af:36:e3:de:17:30:e9:1e:73:c0:c0:f0:7f:79:11: 5d:7c:40:64:87:59:66:fd:ac:bc:c8:17:1b:ff:ad: c2:5c:b5:16:52:53:66:9a:6e:64:6e:dc:97:42:5a: ba:41:51:a4:cc:53:78:86:be:55:f1:bf:86:f0:50: 35:80:93:b0:eb:da:19:d6:ad:b8:f5:d4:87:ad:3b: 0e:82:59:ff:19:29:1b:b3:5b:81:d1:93:a0:f3:ef: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:70:DF:10:82:05:F0:B5:E2:0E:F6:54:1E:A2:0E:B7:28:DF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.crl X509v3 Authority Key Identifier: keyid:EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d4:62:21:46:3e:8c:1a:fc:5d:a1:a0:d9:4e:93:b5:97:9d: b1:5d:df:b0:ad:67:02:a5:80:bf:8b:16:1e:13:f9:7c:11:16: dc:5d:e8:d0:5a:80:45:79:49:c6:dc:a5:ae:e7:4e:2f:04:f0: dd:66:88:71:c8:95:86:50:95:6e:07:4c:f4:97:7c:62:0f:db: c1:9d:92:aa:fd:52:2e:05:65:df:fd:a1:92:f3:4a:75:b7:41: a2:2e:4f:10:e1:d1:42:2a:78:d2:98:fd:71:40:e5:42:a4:09: 96:89:62:3b:f7:26:79:54:17:86:c9:50:1b:60:81:c6:e8:10: 75:ef:69:be:99:5f:75:34:f1:2b:65:3c:08:46:b8:bc:9b:95: 16:50:11:c5:0d:2d:26:af:93:68:77:32:7c:bd:6d:19:d0:2b: 14:ef:40:ae:e6:e2:e6:d5:f9:ad:f4:6e:47:c3:21:75:02:77: 51:2f:08:5d:6b:e3:2e:3e:53:7a:50:07:70:c2:98:24:73:89: e1:a0:04:63:be:7e:6f:3c:7f:78:49:31:b8:27:65:f1:06:b0: fd:56:71:7c:92:97:f7:dc:a5:99:41:c9:06:ab:86:1c:8f:16: 79:30:5d:73:46:5b:1d:50:1d:d3:e0:04:0e:3b:63:31:7b:83: b3:57:cb:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWABJlqXeYKJ1tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4ZDczZGEtMDQ3Zi00YTQ3LTk1MjMtNDdiY2I2ODVj YWQ1MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk M2E3NjY5NmItNTE4MS00YTQ2LWJmYTQtYjNhNDEyMTZhYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+okQdexI/1JUJp8sZAA7HAqEEm3BgJ18ETX xe6ek/xrybeUvAOeOoz5ukACFEWEbDe6wZMC9PnQpm84Fy4B//hhGy6HXlmTui68 lJhz9cMzsGjMYEA/+Ma/+8qTIhBiprbFkrl0rrZi8DciwOlDcwOQBGQ4SgYgsHIT FzMMnxrVk8mB6RAlEZX8YCgV+5wQj6c9fnaXKyVwmJV4BQSAdu+ROKKvNuPeFzDp HnPAwPB/eRFdfEBkh1lm/ay8yBcb/63CXLUWUlNmmm5kbtyXQlq6QVGkzFN4hr5V 8b+G8FA1gJOw69oZ1q249dSHrTsOgln/GSkbs1uB0ZOg8+/irwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI7ocN8QggXwteIO9lQeog63KN/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZThk NzNkYS0wNDdmLTRhNDctOTUyMy00N2JjYjY4NWNhZDUvNGU4ZDczZGEtMDQ3Zi00 YTQ3LTk1MjMtNDdiY2I2ODVjYWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGU4ZDczZGEtMDQ3Zi00YTQ3LTk1 MjMtNDdiY2I2ODVjYWQ1LzRlOGQ3M2RhLTA0N2YtNGE0Ny05NTIzLTQ3YmNiNjg1 Y2FkNS5jcmwwHwYDVR0jBBgwFoAU6gQ/ImCzPRwSUce/t5ReQWwxpgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZThkNzNkYS0wNDdmLTRhNDctOTUyMy00N2Jj YjY4NWNhZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBX1GIhRj6MGvxdoaDZTpO1 l52xXd+wrWcCpYC/ixYeE/l8ERbcXejQWoBFeUnG3KWu504vBPDdZohxyJWGUJVu B0z0l3xiD9vBnZKq/VIuBWXf/aGS80p1t0GiLk8Q4dFCKnjSmP1xQOVCpAmWiWI7 9yZ5VBeGyVAbYIHG6BB172m+mV91NPErZTwIRri8m5UWUBHFDS0mr5NodzJ8vW0Z 0CsU70Cu5uLm1fmt9G5HwyF1AndRLwhda+MuPlN6UAdwwpgkc4nhoARjvn5vPH94 STG4J2XxBrD9VnF8kpf33KWZQckGq4YcjxZ5MF1zRlsdUB3T4AQOO2Mxe4OzV8vm -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:15 2025 by rpki-client