$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft File: f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft (raw, json) Hash identifier: 0EmKdB4sTkXaWTFtl32yCudsok7s8w66eqf2eidfBaw= Subject key identifier: 91:D7:E6:46:BA:F2:AC:26:18:FD:94:48:B8:6F:1C:CD:40:ED:41:42 Authority key identifier: DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7 Certificate issuer: /CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e Certificate serial: 010D0C9F4328584BBB1BEB73C7DA1FDBE6D1D300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft Manifest number: 010D0C9F43285842C45A8340C2FF12F03B85C8AD Signing time: Sun 02 Nov 2025 23:00:03 +0000 Manifest this update: Sun 02 Nov 2025 23:00:03 +0000 Manifest next update: Wed 05 Nov 2025 23:00:00 +0000 Files and hashes: 1: 3184777e-25fd-379a-a23f-0b1444886974.roa (hash: 2qEsgxr6tTwPemdXOcgML6ToT79MywqGQriLnaA0Ocs=) 2: f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl (hash: AQ6UnHSjZGf/KqBZcxeKyKYB5VSNDqw4D/3s/m6/9lY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:1b:eb:73:c7:da:1f:db:e6:d1:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e Validity Not Before: Nov 2 23:00:03 2025 GMT Not After : Nov 5 23:00:00 2025 GMT Subject: CN=847ba6c7-73a1-47ec-bec8-e90ce745839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:0f:4c:5a:6f:e5:6f:68:13:67:c9:cd:67: f1:78:74:54:fb:3c:4b:a9:4c:d7:2e:19:c6:08:00: a6:22:78:af:00:63:c5:35:00:22:e0:07:c6:75:6b: 30:9e:8e:e7:e0:0b:fe:3d:54:f8:f4:ab:5e:f7:db: ac:6a:49:51:e8:65:97:78:c4:5f:79:f3:1e:eb:9f: 8c:61:82:53:f5:ec:a8:a2:0f:04:29:d0:ab:1d:4a: 91:ed:c6:4a:70:d5:a1:da:ea:4c:30:aa:dd:4b:ce: 9c:b2:ce:75:52:de:ba:9f:ba:eb:af:82:e5:45:29: c9:6f:2e:4a:81:ca:e0:01:cc:3f:af:11:fb:b1:cb: 03:9b:0d:5c:03:56:68:ed:23:b6:25:52:da:f7:16: ea:45:f5:15:c4:dd:d9:50:02:ed:e6:59:8a:e3:ed: 53:94:ae:01:6b:e8:21:41:3e:4b:81:41:51:81:f2: bc:a0:f5:2d:e5:0c:eb:10:a5:5f:23:90:d7:97:c9: fe:53:0d:af:ef:1f:10:15:31:cb:4c:93:70:20:69: 63:bd:fd:e7:74:c9:89:cf:eb:58:1d:31:2f:48:aa: 7c:ef:17:e8:ed:31:fb:42:cf:33:33:e5:31:c0:24: 89:29:ad:5c:02:a5:c5:b1:ae:54:fb:de:1c:f4:fd: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:E6:46:BA:F2:AC:26:18:FD:94:48:B8:6F:1C:CD:40:ED:41:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl X509v3 Authority Key Identifier: keyid:DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a1:d2:de:52:78:aa:61:0f:4f:10:c9:ed:2a:f6:cb:cb:78: c5:09:af:cf:48:2e:d5:c9:0d:68:06:4b:22:65:8c:b2:52:de: a1:1c:68:63:e6:1a:43:f7:f2:59:31:c6:52:cb:10:44:b0:b0: ae:37:77:95:0a:8d:81:7f:99:fb:4e:9f:8f:38:93:d6:76:db: ea:e0:98:45:84:60:c2:6f:dd:4d:43:14:49:ae:17:f3:e3:81: f3:0f:c3:b5:f0:ed:49:f7:a6:31:2d:b8:11:00:63:ef:c4:a2: 8a:53:16:d8:20:04:50:96:7e:a3:a7:8e:04:dc:a5:08:cb:80: 33:50:b2:62:ae:8b:26:4e:8c:6b:54:c1:09:2a:cf:9b:32:2a: e4:0f:b6:d6:06:f3:04:2f:64:0c:f7:b9:92:cd:dc:84:1b:ee: ef:af:92:ca:85:13:4c:80:53:b1:30:23:12:16:ec:f4:b5:ef: 21:19:3f:28:df:b1:a2:24:4a:35:51:af:33:c1:f9:5c:93:b5: 9a:95:51:fc:35:8b:a6:61:46:f1:7c:45:ce:3e:50:ad:4e:4a: cb:ab:5d:39:5c:79:66:56:8c:9c:1f:21:b9:9e:1d:5f:86:22: b0:85:6c:6b:4f:fb:c7:84:50:93:fa:c2:ad:08:48:91:36:b6: dd:8c:cb:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu7G+tzx9of2+bR0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUyMWU0YTItZmJkNy00MjkxLTliZTAtMmVhNjE5YTE4 YzdlMB4XDTI1MTEwMjIzMDAwM1oXDTI1MTEwNTIzMDAwMFowLzEtMCsGA1UEAxMk ODQ3YmE2YzctNzNhMS00N2VjLWJlYzgtZTkwY2U3NDU4MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFkPTFpv5W9oE2fJzWfxeHRU+zxLqUzXLhnG CACmInivAGPFNQAi4AfGdWswno7n4Av+PVT49Kte99usaklR6GWXeMRfefMe65+M YYJT9eyoog8EKdCrHUqR7cZKcNWh2upMMKrdS86css51Ut66n7rrr4LlRSnJby5K gcrgAcw/rxH7scsDmw1cA1Zo7SO2JVLa9xbqRfUVxN3ZUALt5lmK4+1TlK4Ba+gh QT5LgUFRgfK8oPUt5QzrEKVfI5DXl8n+Uw2v7x8QFTHLTJNwIGljvf3ndMmJz+tY HTEvSKp87xfo7TH7Qs8zM+UxwCSJKa1cAqXFsa5U+94c9P2zbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJHX5ka68qwmGP2USLhvHM1A7UFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNTIx ZTRhMi1mYmQ3LTQyOTEtOWJlMC0yZWE2MTlhMThjN2UvZjUyMWU0YTItZmJkNy00 MjkxLTliZTAtMmVhNjE5YTE4YzdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjUyMWU0YTItZmJkNy00MjkxLTli ZTAtMmVhNjE5YTE4YzdlL2Y1MjFlNGEyLWZiZDctNDI5MS05YmUwLTJlYTYxOWEx OGM3ZS5jcmwwHwYDVR0jBBgwFoAU25Ua3TQyhRiM9J8jpRlu1S03o6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNTIxZTRhMi1mYmQ3LTQyOTEtOWJlMC0yZWE2 MTlhMThjN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALodLeUniqYQ9PEMntKvbL y3jFCa/PSC7VyQ1oBksiZYyyUt6hHGhj5hpD9/JZMcZSyxBEsLCuN3eVCo2Bf5n7 Tp+POJPWdtvq4JhFhGDCb91NQxRJrhfz44HzD8O18O1J96YxLbgRAGPvxKKKUxbY IARQln6jp44E3KUIy4AzULJirosmToxrVMEJKs+bMirkD7bWBvMEL2QM97mSzdyE G+7vr5LKhRNMgFOxMCMSFuz0te8hGT8o37GiJEo1Ua8zwflck7WalVH8NYumYUbx fEXOPlCtTkrLq105XHlmVoycHyG5nh1fhiKwhWxrT/vHhFCT+sKtCEiRNrbdjMsP -----END CERTIFICATE-----Generated at Mon Nov 3 07:55:10 2025 by rpki-client