$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft File: f30a83fc-5753-4d94-85d1-26924afa8ea3.mft (raw, json) Hash identifier: kGAK4D1ofgDruYsGSlUb6J47LokaAfDSN3duaGdnJ80= Subject key identifier: 4C:85:02:26:00:3F:BC:5E:9C:1F:32:CA:90:2A:C2:E9:DA:49:C8:D9 Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Certificate serial: 010D0C9F4328584BBA2DB005689C0EFC73ABF400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft Manifest number: 010D0C9F4328584073A85A5393752575F39E6741 Signing time: Sun 02 Nov 2025 15:00:03 +0000 Manifest this update: Sun 02 Nov 2025 15:00:03 +0000 Manifest next update: Tue 04 Nov 2025 15:00:00 +0000 Files and hashes: 1: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (hash: fZe7+PDUqa24EOLngCQ9mjIaeYJYxIWuaTSrvXfVWEg=) 2: f30a83fc-5753-4d94-85d1-26924afa8ea3.crl (hash: bMAjcEZkPLYDGCCeUaNAsoHyrrjuz4Fb8pbqWAQ3EeM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:2d:b0:05:68:9c:0e:fc:73:ab:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Validity Not Before: Nov 2 15:00:03 2025 GMT Not After : Nov 4 15:00:00 2025 GMT Subject: CN=e2973971-c4ee-4b89-b5f2-eda6cadc2693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:eb:f0:49:12:23:fa:94:3e:d2:e5:e9:59:ff: 68:a1:fd:b1:97:27:9e:ac:2a:68:d8:0d:9e:4a:db: f3:49:32:1d:b6:92:aa:fe:98:45:84:55:c6:ed:8a: 3a:a0:9d:56:cd:5d:c5:17:0c:f1:c3:13:ef:86:0d: 42:c7:38:54:01:11:8e:00:ed:69:38:3e:a3:e2:76: 64:89:20:1a:20:5d:ea:03:b5:fe:7b:ea:d7:5f:f6: a5:6f:7a:96:ed:f4:9e:d0:a1:2a:34:c6:61:46:a0: 86:96:50:75:a4:8f:c8:bf:b9:95:34:ee:84:9f:d7: 2f:02:7b:45:18:00:6a:cf:79:30:99:f7:d9:11:e5: 69:09:90:91:92:61:31:1d:a5:9c:5c:f2:8f:01:95: 03:56:c3:e5:f7:21:3a:f4:c3:f9:fd:9e:5e:85:5b: a9:30:ae:b6:f4:d4:80:bb:ab:38:af:3e:ff:30:fe: bf:5d:a3:0e:5e:d9:ae:09:89:0f:cc:27:fb:5f:68: 81:de:29:6f:49:b4:35:8c:b9:36:e1:4a:ae:f5:e5: e5:c2:21:f0:fa:b5:2a:67:25:41:b0:2b:71:7f:cf: d7:af:88:89:6e:1e:43:54:0c:87:e5:7e:52:34:00: 21:c2:71:0f:ab:76:ad:3b:8a:30:f0:58:e2:b9:05: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:85:02:26:00:3F:BC:5E:9C:1F:32:CA:90:2A:C2:E9:DA:49:C8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl X509v3 Authority Key Identifier: keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f1:8b:1e:68:7e:e5:76:4d:6a:d6:5f:ac:72:dd:0f:8d:d2: a6:17:f0:fe:35:1f:f9:46:df:9a:9f:35:66:56:70:ba:d8:9f: 01:75:c5:64:ce:07:86:6d:da:d1:18:5f:4e:2e:64:96:e9:11: ea:3a:7a:38:b3:fb:4b:68:20:39:c0:07:7a:5b:12:ad:17:02: db:6a:ff:1b:20:ac:95:b4:0f:41:be:6b:64:56:9a:44:fe:bc: 18:a8:a3:f8:c9:fa:4e:3d:65:d9:9a:c5:2d:75:44:41:4a:4a: bb:b0:07:97:53:a2:4b:a4:bd:4d:b6:be:28:a9:6f:41:a1:93: 77:3a:79:c2:8f:cc:9d:8d:0f:12:63:e1:28:63:06:2e:1e:59: e2:d8:c1:60:22:7c:d2:0a:f6:01:0e:35:bc:e0:19:f1:06:9d: c8:ac:c7:71:2e:30:be:a6:69:ca:f2:82:d5:8f:18:be:d9:ea: 0a:01:63:79:db:3e:ac:dc:8c:e9:e4:4c:f4:94:eb:89:19:38: a9:db:ab:18:f3:5f:31:98:c3:01:24:fb:de:ab:9a:3f:1d:85: de:e8:dd:c5:48:64:92:45:90:a1:2b:d3:be:3f:32:0d:f2:d0: 1f:0e:d5:77:0e:2e:87:50:40:25:fd:7c:45:5e:70:f1:74:86: 3c:9d:bc:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6LbAFaJwO/HOr9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4 ZWEzMB4XDTI1MTEwMjE1MDAwM1oXDTI1MTEwNDE1MDAwMFowLzEtMCsGA1UEAxMk ZTI5NzM5NzEtYzRlZS00Yjg5LWI1ZjItZWRhNmNhZGMyNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+vwSRIj+pQ+0uXpWf9oof2xlyeerCpo2A2e StvzSTIdtpKq/phFhFXG7Yo6oJ1WzV3FFwzxwxPvhg1CxzhUARGOAO1pOD6j4nZk iSAaIF3qA7X+e+rXX/alb3qW7fSe0KEqNMZhRqCGllB1pI/Iv7mVNO6En9cvAntF GABqz3kwmffZEeVpCZCRkmExHaWcXPKPAZUDVsPl9yE69MP5/Z5ehVupMK629NSA u6s4rz7/MP6/XaMOXtmuCYkPzCf7X2iB3ilvSbQ1jLk24Uqu9eXlwiHw+rUqZyVB sCtxf8/Xr4iJbh5DVAyH5X5SNAAhwnEPq3atO4ow8FjiuQXhZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEyFAiYAP7xenB8yypAqwunaScjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBh ODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvZjMwYTgzZmMtNTc1My00 ZDk0LTg1ZDEtMjY5MjRhZmE4ZWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjMwYTgzZmMtNTc1My00ZDk0LTg1 ZDEtMjY5MjRhZmE4ZWEzL2YzMGE4M2ZjLTU3NTMtNGQ5NC04NWQxLTI2OTI0YWZh OGVhMy5jcmwwHwYDVR0jBBgwFoAU8FBMFnRyiq26v7tn6h9pVELZXz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjky NGFmYThlYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCB8YseaH7ldk1q1l+sct0P jdKmF/D+NR/5Rt+anzVmVnC62J8BdcVkzgeGbdrRGF9OLmSW6RHqOno4s/tLaCA5 wAd6WxKtFwLbav8bIKyVtA9BvmtkVppE/rwYqKP4yfpOPWXZmsUtdURBSkq7sAeX U6JLpL1Ntr4oqW9BoZN3OnnCj8ydjQ8SY+EoYwYuHlni2MFgInzSCvYBDjW84Bnx Bp3IrMdxLjC+pmnK8oLVjxi+2eoKAWN52z6s3Izp5Ez0lOuJGTip26sY818xmMMB JPveq5o/HYXe6N3FSGSSRZChK9O+PzIN8tAfDtV3Di6HUEAl/XxFXnDxdIY8nbyw -----END CERTIFICATE-----Generated at Sun Nov 2 16:38:40 2025 by rpki-client