$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft (raw, json) Hash identifier: ZL/4WFA2ClYowswqcCsCAZgBjEP5zEidaibyjj4bZSA= Subject key identifier: 3B:5B:E8:91:D5:62:17:E8:01:19:C8:48:B7:7D:BD:53:95:DE:7A:8F Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F4328584BDF490925E2A9E9DB85885380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft Manifest number: 010D0C9F43285842C17DF555B8C50D6E9612E7D9 Signing time: Sat 15 Nov 2025 22:00:04 +0000 Manifest this update: Sat 15 Nov 2025 22:00:04 +0000 Manifest next update: Tue 18 Nov 2025 22:00:00 +0000 Files and hashes: 1: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (hash: LmihFJgF2kSNI7mIEF5lZXYBc9Q1Zygu1ag0bBUR/Xw=) 2: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl (hash: MCnPRrZaD9BEo1+gs+sj7G4X/hYZnVG5BT25B1Pf9kk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:df:49:09:25:e2:a9:e9:db:85:88:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Nov 15 22:00:04 2025 GMT Not After : Nov 18 22:00:00 2025 GMT Subject: CN=c40d6e41-1fc5-49aa-8b9a-dd2f86346377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:81:69:b9:39:a5:2b:a7:dd:33:8a:cd:49: 96:82:4e:71:f1:34:2d:d6:e6:a1:4e:00:22:31:b2: 5c:18:49:c6:78:db:11:a8:8f:a8:91:41:d1:f7:b7: 35:ac:f5:8c:b5:79:39:77:41:96:59:cf:86:55:27: 1a:ba:10:ee:7c:37:fa:8c:89:82:49:d5:27:94:5d: f7:8a:87:c5:94:fa:8c:21:a7:2d:94:c8:6a:da:07: 24:2f:70:dc:00:4d:61:28:77:3b:6b:26:ff:5d:f9: a1:a6:ed:bb:41:5e:b7:29:1b:c5:55:22:57:e9:2c: bd:a9:3b:dc:a8:63:d7:62:24:b2:b7:78:56:c7:9c: 2a:d4:47:24:d9:1e:5b:37:0c:c0:bb:53:f2:86:64: b9:0f:de:36:4f:80:c2:7f:7b:45:a7:3d:e3:81:95: e1:53:81:27:84:95:82:69:f5:b6:4f:45:17:8f:b1: 12:39:9e:c0:ff:92:04:10:7e:d3:6a:32:e2:31:18: f0:7a:9c:e7:8e:12:d1:9d:7a:99:e0:b6:49:b1:08: 1c:fd:fb:0f:38:19:eb:cb:0b:51:80:1f:b8:b1:1d: cf:c8:c1:5e:26:56:09:c3:12:06:87:14:ae:8b:e7: 2d:d8:1e:ed:b8:53:4a:46:7d:9e:d2:56:0c:2a:dd: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:E8:91:D5:62:17:E8:01:19:C8:48:B7:7D:BD:53:95:DE:7A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6e:9f:64:9a:06:3e:fc:52:52:ba:93:dc:16:34:ed:e0:d4: 3d:7e:3f:a6:02:8b:5b:40:79:af:af:b9:c3:e1:a2:57:4d:4f: 23:aa:4c:f8:2f:e0:02:8c:95:07:91:12:27:5d:20:72:fb:62: b3:05:c6:49:cc:eb:1f:a9:bb:38:1f:82:8f:a0:a3:ba:ad:f1: 9a:65:27:a7:22:bb:4b:7d:9a:ff:0d:b0:9c:49:7e:bb:96:30: 5d:18:cb:00:a4:26:16:4b:83:63:f6:4f:f1:fd:f8:a5:e4:fd: ce:19:de:c5:31:4b:ad:01:fa:78:5a:b0:9c:40:83:95:62:82: 84:a6:33:37:49:18:61:8d:8e:40:77:e6:6a:4d:aa:c7:20:16: c7:e1:17:f8:82:f8:1e:3a:3d:17:5a:78:10:67:1a:36:a4:bf: 0e:68:5f:8f:f1:95:80:32:8d:87:c5:6d:95:2e:28:dd:40:e6: e2:7c:55:0a:76:54:8f:75:ed:c0:d9:f6:53:c7:49:7c:6f:da: 2e:19:db:05:7c:91:f0:0c:0c:fe:30:3a:b6:45:f6:48:4f:d6: 0a:a3:93:2b:bb:d9:cb:ec:fc:39:5b:71:b2:68:38:62:ba:c5: 98:44:d0:c3:1c:55:ba:9b:63:ba:66:ad:b2:fb:b0:67:66:6a: 1c:7b:25:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvfSQkl4qnp24WIU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MTExNTIyMDAwNFoXDTI1MTExODIyMDAwMFowLzEtMCsGA1UEAxMk YzQwZDZlNDEtMWZjNS00OWFhLThiOWEtZGQyZjg2MzQ2Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZiBabk5pSun3TOKzUmWgk5x8TQt1uahTgAi MbJcGEnGeNsRqI+okUHR97c1rPWMtXk5d0GWWc+GVScauhDufDf6jImCSdUnlF33 iofFlPqMIactlMhq2gckL3DcAE1hKHc7ayb/Xfmhpu27QV63KRvFVSJX6Sy9qTvc qGPXYiSyt3hWx5wq1Eck2R5bNwzAu1PyhmS5D942T4DCf3tFpz3jgZXhU4EnhJWC afW2T0UXj7ESOZ7A/5IEEH7TajLiMRjwepznjhLRnXqZ4LZJsQgc/fsPOBnrywtR gB+4sR3PyMFeJlYJwxIGhxSui+ct2B7tuFNKRn2e0lYMKt01dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDtb6JHVYhfoARnISLd9vVOV3nqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMmE1Mzg0OWMtNmY3Ny00 ZTY5LThiMzktYmNiODVkYTkwZjRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPbp9kmgY+/FJSupPcFjTt 4NQ9fj+mAotbQHmvr7nD4aJXTU8jqkz4L+ACjJUHkRInXSBy+2KzBcZJzOsfqbs4 H4KPoKO6rfGaZSenIrtLfZr/DbCcSX67ljBdGMsApCYWS4Nj9k/x/fil5P3OGd7F MUutAfp4WrCcQIOVYoKEpjM3SRhhjY5Ad+ZqTarHIBbH4Rf4gvgeOj0XWngQZxo2 pL8OaF+P8ZWAMo2HxW2VLijdQObifFUKdlSPde3A2fZTx0l8b9ouGdsFfJHwDAz+ MDq2RfZIT9YKo5Mru9nL7Pw5W3GyaDhiusWYRNDDHFW6m2O6Zq2y+7BnZmoceyUf -----END CERTIFICATE-----Generated at Sun Nov 16 19:45:06 2025 by rpki-client