$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft File: ab0439ab-3236-4080-a238-62d21f65e1ad.mft (raw, json) Hash identifier: le2msRE0am7X5dUcT6j+2OCwxMFNLog6cdAmRnBxeXg= Subject key identifier: A4:44:22:A3:26:BF:68:10:18:C9:E7:94:A3:25:A3:90:B1:B1:41:8F Authority key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Certificate issuer: /CN=ab0439ab-3236-4080-a238-62d21f65e1ad Certificate serial: 010D0C9F4328584BB93F771B1E75BB7AC28E5000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft Manifest number: 010D0C9F4328584073A844EDAD74ADED79EBCA20 Signing time: Sun 02 Nov 2025 07:00:03 +0000 Manifest this update: Sun 02 Nov 2025 07:00:03 +0000 Manifest next update: Tue 04 Nov 2025 07:00:00 +0000 Files and hashes: 1: 7ef25e37-4a09-3253-a970-a0546e63a3fe.roa (hash: Tav8n0P92a19G5b6M5ceHoIOBeQP33IdkT0MtGPl2Cw=) 2: ab0439ab-3236-4080-a238-62d21f65e1ad.crl (hash: KrfFASWpzcMWdzWGi7jINJezcE+PpQ+VtcOhg0E5w98=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:3f:77:1b:1e:75:bb:7a:c2:8e:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Validity Not Before: Nov 2 07:00:03 2025 GMT Not After : Nov 4 07:00:00 2025 GMT Subject: CN=7de976b2-d2cd-4f1a-a1ea-ce640a6eaef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:b9:19:a1:d2:8d:d9:6c:8b:a1:c2:e7:0d: a0:00:39:d2:e5:40:9d:66:00:b2:2d:e8:b0:f5:95: 71:e1:c0:e6:51:42:9d:64:27:4c:36:06:a3:42:7f: 1d:8a:ca:7f:29:78:98:94:c9:d9:c8:03:fd:a4:dd: 8e:23:e4:74:ae:ea:5c:b3:79:aa:d1:ac:b0:f9:10: f0:cf:47:01:e6:0a:dd:c1:bc:b7:11:48:83:1a:f0: 78:a8:9b:d8:65:f3:c7:a8:f0:8a:10:5e:51:16:1c: 41:48:ee:0b:aa:e0:31:b2:38:95:25:60:e4:9d:d9: 3d:f0:5b:ca:b9:da:32:64:2e:b1:65:39:0e:f7:b4: 88:9a:46:05:ac:c7:05:4b:e8:be:82:79:6b:e2:96: 23:4a:f7:59:34:db:9d:04:bd:2a:15:da:40:3c:0d: 1f:75:4e:f0:50:13:18:72:a2:d1:84:b0:f0:59:80: e2:02:4c:63:47:67:a0:5d:6c:25:41:f5:fe:e9:fa: 11:b8:3d:58:4c:69:27:74:95:b9:ec:9b:d7:4c:32: ba:09:77:a4:b5:3c:3c:3c:73:59:a7:87:dd:6e:69: 27:9d:80:a9:9d:3b:18:27:f9:bc:f5:b7:79:b4:11: 29:9d:00:ae:b5:3e:d7:51:30:16:03:65:7a:92:b3: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:44:22:A3:26:BF:68:10:18:C9:E7:94:A3:25:A3:90:B1:B1:41:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl X509v3 Authority Key Identifier: keyid:17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:83:a7:73:fb:ec:78:c4:9c:bb:f8:16:6b:71:18:6a:a5:40: 49:03:be:26:bb:7b:10:ea:d3:bf:9d:4e:dd:a8:6d:9e:cd:4d: 41:e4:51:87:87:27:a8:16:a5:0d:a7:90:64:59:6e:b6:bc:fe: 41:5a:6a:21:2f:5e:a0:37:4e:dc:97:bd:9f:7f:1e:ea:f5:54: 38:62:96:57:fc:09:91:93:a2:e1:45:f9:f8:07:d5:f2:69:9f: 47:ea:c6:29:a8:8a:12:dd:98:cf:52:ea:7c:99:04:fa:36:e8: 1b:e5:96:bc:5e:cb:46:6a:d0:97:57:ec:13:a0:51:aa:1f:84: f6:18:30:ed:41:f6:75:a1:0d:55:0a:d0:e4:a3:f4:49:41:bd: 26:47:0f:c1:7c:3e:c8:b5:52:4c:25:e6:61:cb:f7:be:9c:2f: 0c:42:9b:c3:1b:5c:bd:bc:a4:68:54:02:5b:c2:76:fe:69:59: ef:0e:ef:c8:16:cd:d8:30:4e:10:13:b1:5a:ba:d6:da:aa:0b: e8:f8:2f:32:fc:be:43:92:bd:da:44:bd:ba:86:63:14:40:94: d3:41:bd:db:be:cd:89:76:a4:b6:e5:1d:50:23:83:76:d1:47: ea:32:db:d3:fe:80:0a:00:a7:2a:72:98:50:ba:80:6b:2a:7d: 73:98:88:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu5P3cbHnW7esKOUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVl MWFkMB4XDTI1MTEwMjA3MDAwM1oXDTI1MTEwNDA3MDAwMFowLzEtMCsGA1UEAxMk N2RlOTc2YjItZDJjZC00ZjFhLWExZWEtY2U2NDBhNmVhZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6+5GaHSjdlsi6HC5w2gADnS5UCdZgCyLeiw 9ZVx4cDmUUKdZCdMNgajQn8disp/KXiYlMnZyAP9pN2OI+R0rupcs3mq0ayw+RDw z0cB5grdwby3EUiDGvB4qJvYZfPHqPCKEF5RFhxBSO4LquAxsjiVJWDkndk98FvK udoyZC6xZTkO97SImkYFrMcFS+i+gnlr4pYjSvdZNNudBL0qFdpAPA0fdU7wUBMY cqLRhLDwWYDiAkxjR2egXWwlQfX+6foRuD1YTGkndJW57JvXTDK6CXektTw8PHNZ p4fdbmknnYCpnTsYJ/m89bd5tBEpnQCutT7XUTAWA2V6krNDSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKREIqMmv2gQGMnnlKMlo5CxsUGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0 MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvYWIwNDM5YWItMzIzNi00 MDgwLWEyMzgtNjJkMjFmNjVlMWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIwNDM5YWItMzIzNi00MDgwLWEy MzgtNjJkMjFmNjVlMWFkL2FiMDQzOWFiLTMyMzYtNDA4MC1hMjM4LTYyZDIxZjY1 ZTFhZC5jcmwwHwYDVR0jBBgwFoAUF0Cy9uReLQ26ZzruEeAYaMPwXa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQy MWY2NWUxYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASg6dz++x4xJy7+BZrcRhq pUBJA74mu3sQ6tO/nU7dqG2ezU1B5FGHhyeoFqUNp5BkWW62vP5BWmohL16gN07c l72ffx7q9VQ4YpZX/AmRk6LhRfn4B9XyaZ9H6sYpqIoS3ZjPUup8mQT6Nugb5Za8 XstGatCXV+wToFGqH4T2GDDtQfZ1oQ1VCtDko/RJQb0mRw/BfD7ItVJMJeZhy/e+ nC8MQpvDG1y9vKRoVAJbwnb+aVnvDu/IFs3YME4QE7Fautbaqgvo+C8y/L5Dkr3a RL26hmMUQJTTQb3bvs2JdqS25R1QI4N20UfqMtvT/oAKAKcqcphQuoBrKn1zmIgg -----END CERTIFICATE-----Generated at Sun Nov 2 16:39:09 2025 by rpki-client