$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft File: 304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft (raw, json) Hash identifier: PHC2JpAd1WW6JyyqNGchN261mZN8iVsAPhWNmKVuJ4U= Subject key identifier: A3:F1:EC:31:BB:85:14:60:81:CA:C4:9B:2D:A2:05:53:3E:F4:B0:67 Authority key identifier: 41:64:1A:9B:CC:D8:C6:F1:8F:DF:56:59:6D:E7:8F:9B:98:9E:D4:9B Certificate issuer: /CN=304836f0-c519-45e1-9cf2-97e7a7c0baa3 Certificate serial: 010D0C9F4328584BC6DB897763D7BA5240810C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft Manifest number: 010D0C9F4328584B8C56F861B63DEE1949F05FF6 Signing time: Fri 07 Nov 2025 04:00:03 +0000 Manifest this update: Fri 07 Nov 2025 04:00:03 +0000 Manifest next update: Sun 09 Nov 2025 04:00:00 +0000 Files and hashes: 1: 304836f0-c519-45e1-9cf2-97e7a7c0baa3.crl (hash: ZgEOB6V0C2QO5G6DoVABfEyRrfc75LcP+cRhzx6SPhE=) 2: ae49c8f0-4ffd-36bf-8744-c61e7d7e9af5.roa (hash: dPXzqLIqDtXvzM+T0UvIZXQROqsDDjowHDxMBW+/gZo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c6:db:89:77:63:d7:ba:52:40:81:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304836f0-c519-45e1-9cf2-97e7a7c0baa3 Validity Not Before: Nov 7 04:00:03 2025 GMT Not After : Nov 9 04:00:00 2025 GMT Subject: CN=e79f933a-522f-46fe-ac0c-39fb4049f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:16:f7:fe:53:39:b8:19:2d:15:73:64:2b: 68:de:28:b1:77:1e:bb:44:53:de:49:e7:4e:4b:11: 6c:46:01:e3:90:94:09:ac:32:58:07:0a:4a:30:7c: a6:3c:dd:aa:a4:cd:83:65:cb:4f:04:3c:87:b4:00: a8:d6:30:b1:32:74:b6:9c:43:1f:10:7c:75:09:39: 30:64:b3:82:6f:86:df:8f:03:c3:a1:a7:71:ef:ef: 78:2d:fc:6f:53:ac:dd:99:9e:a9:a4:e7:b8:04:5a: 18:79:7b:94:93:21:3b:a4:8d:29:dd:1f:c7:a0:c3: 9c:f6:fc:a1:07:f6:14:55:be:7e:42:93:39:87:0d: 34:cc:96:22:a9:ea:72:bc:57:6c:07:02:b0:1a:fe: 8c:33:13:0f:81:39:e5:04:60:72:c4:8c:84:32:36: a6:85:d8:ac:78:21:31:94:a3:1f:ee:d6:fd:16:60: f8:8e:12:73:57:c2:e9:a8:34:a9:97:b7:65:fc:56: 48:35:fb:6a:23:84:33:3c:54:b3:3b:7f:ca:85:df: ae:ff:34:ec:c3:d6:be:ae:50:1e:6b:b1:60:40:04: 55:cd:79:d9:d1:c1:c1:83:82:b7:e2:7f:3e:84:e1: d2:59:ad:c2:ff:eb:b1:1e:5a:79:36:ca:b9:99:b0: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:EC:31:BB:85:14:60:81:CA:C4:9B:2D:A2:05:53:3E:F4:B0:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3/304836f0-c519-45e1-9cf2-97e7a7c0baa3.crl X509v3 Authority Key Identifier: keyid:41:64:1A:9B:CC:D8:C6:F1:8F:DF:56:59:6D:E7:8F:9B:98:9E:D4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/304836f0-c519-45e1-9cf2-97e7a7c0baa3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:85:c6:5a:4a:82:dc:a2:ac:9f:93:52:45:c0:5f:17:ca:64: 04:f7:45:8c:68:2b:38:16:02:8b:06:17:21:8e:4e:4e:21:da: 9c:35:13:37:46:1c:e5:bc:45:2d:c6:cc:20:59:27:7c:b5:bf: be:2f:9b:35:4c:7c:61:1d:cc:fe:78:8c:a5:a8:5f:3c:68:c0: fd:b0:c8:bf:c6:61:f3:82:17:7b:a6:d9:92:13:80:66:d0:f7: b2:6a:51:b5:ca:13:88:ac:4f:34:0c:21:6e:60:ea:93:32:f1: f0:49:cc:eb:62:30:87:ee:97:f4:58:55:9e:ae:74:b5:b7:7c: be:92:d3:af:4e:a1:fb:ef:9c:6d:b2:51:aa:ac:a5:56:b3:d5: 59:3b:47:fe:53:7c:54:0e:c4:d6:ca:91:0b:31:57:91:17:0b: 30:bf:db:cd:fd:80:1f:9d:36:20:ce:de:3d:a2:e7:74:f9:7c: 4a:f8:34:23:69:cf:e0:16:46:27:53:61:69:db:e3:ca:5f:7c: 2b:10:7d:1f:fc:79:4d:65:3d:89:09:13:f8:c5:48:82:54:dc: 85:95:3d:dd:c0:05:19:aa:e6:81:d7:21:50:44:5c:d8:ab:de: f4:59:4f:c9:41:dd:17:8c:b8:2d:3f:65:9a:e6:9d:15:2f:ea: 68:d9:05:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvG24l3Y9e6UkCBDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA0ODM2ZjAtYzUxOS00NWUxLTljZjItOTdlN2E3YzBi YWEzMB4XDTI1MTEwNzA0MDAwM1oXDTI1MTEwOTA0MDAwMFowLzEtMCsGA1UEAxMk ZTc5ZjkzM2EtNTIyZi00NmZlLWFjMGMtMzlmYjQwNDlmMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprAW9/5TObgZLRVzZCto3iixdx67RFPeSedO SxFsRgHjkJQJrDJYBwpKMHymPN2qpM2DZctPBDyHtACo1jCxMnS2nEMfEHx1CTkw ZLOCb4bfjwPDoadx7+94LfxvU6zdmZ6ppOe4BFoYeXuUkyE7pI0p3R/HoMOc9vyh B/YUVb5+QpM5hw00zJYiqepyvFdsBwKwGv6MMxMPgTnlBGByxIyEMjamhdiseCEx lKMf7tb9FmD4jhJzV8LpqDSpl7dl/FZINftqI4QzPFSzO3/Khd+u/zTsw9a+rlAe a7FgQARVzXnZ0cHBg4K34n8+hOHSWa3C/+uxHlp5Nsq5mbDO9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKPx7DG7hRRggcrEmy2iBVM+9LBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMDQ4 MzZmMC1jNTE5LTQ1ZTEtOWNmMi05N2U3YTdjMGJhYTMvMzA0ODM2ZjAtYzUxOS00 NWUxLTljZjItOTdlN2E3YzBiYWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzA0ODM2ZjAtYzUxOS00NWUxLTlj ZjItOTdlN2E3YzBiYWEzLzMwNDgzNmYwLWM1MTktNDVlMS05Y2YyLTk3ZTdhN2Mw YmFhMy5jcmwwHwYDVR0jBBgwFoAUQWQam8zYxvGP31ZZbeePm5ie1JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMDQ4MzZmMC1jNTE5LTQ1ZTEtOWNmMi05N2U3 YTdjMGJhYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIhcZaSoLcoqyfk1JFwF8X ymQE90WMaCs4FgKLBhchjk5OIdqcNRM3RhzlvEUtxswgWSd8tb++L5s1THxhHcz+ eIylqF88aMD9sMi/xmHzghd7ptmSE4Bm0PeyalG1yhOIrE80DCFuYOqTMvHwSczr YjCH7pf0WFWernS1t3y+ktOvTqH775xtslGqrKVWs9VZO0f+U3xUDsTWypELMVeR Fwswv9vN/YAfnTYgzt49oud0+XxK+DQjac/gFkYnU2Fp2+PKX3wrEH0f/HlNZT2J CRP4xUiCVNyFlT3dwAUZquaB1yFQRFzYq970WU/JQd0XjLgtP2Wa5p0VL+po2QX7 -----END CERTIFICATE-----Generated at Sat Nov 8 01:30:55 2025 by rpki-client