$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.mft (raw, json) Hash identifier: HC7xajOUF6HGB+aSw7bdxss5LfOf/pYSrUEEyDFJNM4= Subject key identifier: 2C:E7:74:91:B8:29:BE:1C:49:96:67:41:23:2C:44:4F:49:69:25:81 Authority key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Certificate issuer: /CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Certificate serial: 010D0C9F4328584B963D1DF9D3459EE5F957BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft Manifest number: 010D0C9F4328584B963D1DFEB59C4ACB2FD67181 Signing time: Mon 20 Oct 2025 18:02:03 +0000 Manifest this update: Mon 20 Oct 2025 18:02:03 +0000 Manifest next update: Thu 23 Oct 2025 18:00:00 +0000 Files and hashes: 1: 00583209-5ea8-3fc8-9999-e6dec99e63c9.roa (hash: C3Y3vFj51GRk27wxxefIXStm+qGOvSN2HWInuphK1rc=) 2: 4625cd05-e90e-4f91-9b34-2899122cfc5f.crl (hash: RCCj3bacs3TFj/UiB59s2E2yIim/eu2GabMGZdurUqk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3d:1d:f9:d3:45:9e:e5:f9:57:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Validity Not Before: Oct 20 18:02:03 2025 GMT Not After : Oct 23 18:00:00 2025 GMT Subject: CN=3f16a458-9add-4dea-b6b4-e724b120d7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:47:90:5a:c4:71:d1:c3:fb:8e:24:97:9e: 87:a7:94:17:02:1f:bc:77:cc:1c:94:db:60:3e:77: 18:bf:5c:04:22:74:a6:86:6d:73:72:a5:34:ac:19: 7e:04:84:aa:81:f5:a4:26:18:70:fc:5f:09:6f:1a: 08:ee:da:cc:94:b2:3e:eb:54:77:fe:5d:73:0c:6b: 6a:69:06:6f:3c:31:28:44:57:c7:bd:da:7e:f8:93: a6:5d:4f:a4:60:7c:92:78:37:7d:c6:ad:7b:0e:05: e6:f1:48:1c:e6:f6:8c:c7:cc:a6:c9:44:4c:4f:26: cf:cb:e2:05:9b:1b:34:7e:0c:df:09:42:f2:f6:b4: 77:e5:0e:a4:d7:85:1d:32:53:4d:83:a5:ce:cb:51: d3:f5:c7:a3:12:31:51:98:52:ef:53:5d:29:d4:d9: 55:90:d8:3e:b0:ef:c1:59:7c:69:3d:3e:1c:8c:42: 67:05:8a:55:7b:6c:72:90:43:a2:23:9e:bf:06:31: 28:54:ba:ad:ef:2e:95:54:03:e4:72:bf:be:5c:24: 14:0f:e2:dd:be:f7:0c:07:73:8d:46:8f:72:77:a9: 6b:55:3a:61:af:45:2d:08:e0:59:49:40:75:35:f2: 06:8b:27:ae:b0:64:1b:80:e5:39:a3:39:1f:ee:bb: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:74:91:B8:29:BE:1C:49:96:67:41:23:2C:44:4F:49:69:25:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl X509v3 Authority Key Identifier: keyid:52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:da:8b:79:28:d0:7c:33:4b:e4:33:7f:03:20:24:d6:ca:cd: a3:89:a6:98:33:0f:d5:0b:f2:25:ee:92:f7:d8:6c:79:48:c8: 3d:65:bc:05:f2:cd:71:da:09:64:99:35:84:d5:ff:5a:4e:21: 10:33:c9:4a:0d:54:32:11:8f:7d:8a:74:bf:77:cd:13:ef:3c: 95:85:ec:ba:fb:ad:ee:97:8c:36:d6:fc:33:74:f3:2e:61:c2: 94:a2:93:26:57:27:93:37:e4:cb:16:22:08:ef:c7:c7:eb:e8: 19:12:3d:13:af:99:c8:c9:9d:ca:dc:ba:e0:07:7f:91:df:19: ef:db:bc:58:f8:3a:3e:4d:98:71:6d:53:98:5e:d5:97:b0:e7: 3c:29:ca:2c:06:62:d3:5d:69:85:b2:8a:40:63:64:4f:86:69: a6:20:75:f3:02:2c:7c:50:1f:b1:ba:0f:82:dd:49:37:c7:2f: f6:43:9f:a9:4d:ef:95:53:96:e0:03:ba:82:39:d8:3d:e9:f3: 4f:61:90:ff:ff:3f:ed:89:4e:44:df:19:cc:77:96:7c:22:39: e9:e9:72:69:03:93:a0:d2:eb:7b:69:a1:3c:42:28:34:82:ca: b4:6e:cd:4b:ce:09:6e:48:e9:b1:66:3f:29:2d:7e:a3:c1:9b: 8a:80:34:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPR3500We5flXvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNm YzVmMB4XDTI1MTAyMDE4MDIwM1oXDTI1MTAyMzE4MDAwMFowLzEtMCsGA1UEAxMk M2YxNmE0NTgtOWFkZC00ZGVhLWI2YjQtZTcyNGIxMjBkN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji1HkFrEcdHD+44kl56Hp5QXAh+8d8wclNtg PncYv1wEInSmhm1zcqU0rBl+BISqgfWkJhhw/F8JbxoI7trMlLI+61R3/l1zDGtq aQZvPDEoRFfHvdp++JOmXU+kYHySeDd9xq17DgXm8Ugc5vaMx8ymyURMTybPy+IF mxs0fgzfCULy9rR35Q6k14UdMlNNg6XOy1HT9cejEjFRmFLvU10p1NlVkNg+sO/B WXxpPT4cjEJnBYpVe2xykEOiI56/BjEoVLqt7y6VVAPkcr++XCQUD+LdvvcMB3ON Ro9yd6lrVTphr0UtCOBZSUB1NfIGiyeusGQbgOU5ozkf7rsD3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCzndJG4Kb4cSZZnQSMsRE9JaSWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1 Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvNDYyNWNkMDUtZTkwZS00 ZjkxLTliMzQtMjg5OTEyMmNmYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDYyNWNkMDUtZTkwZS00ZjkxLTli MzQtMjg5OTEyMmNmYzVmLzQ2MjVjZDA1LWU5MGUtNGY5MS05YjM0LTI4OTkxMjJj ZmM1Zi5jcmwwHwYDVR0jBBgwFoAUUheecWx1fh1zBe8WvU1WIcoiY1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5 MTIyY2ZjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw2ot5KNB8M0vkM38DICTW ys2jiaaYMw/VC/Il7pL32Gx5SMg9ZbwF8s1x2glkmTWE1f9aTiEQM8lKDVQyEY99 inS/d80T7zyVhey6+63ul4w21vwzdPMuYcKUopMmVyeTN+TLFiII78fH6+gZEj0T r5nIyZ3K3LrgB3+R3xnv27xY+Do+TZhxbVOYXtWXsOc8KcosBmLTXWmFsopAY2RP hmmmIHXzAix8UB+xug+C3Uk3xy/2Q5+pTe+VU5bgA7qCOdg96fNPYZD//z/tiU5E 3xnMd5Z8Ijnp6XJpA5Og0ut7aaE8Qig0gsq0bs1LzgluSOmxZj8pLX6jwZuKgDRe -----END CERTIFICATE-----Generated at Wed Oct 22 17:29:52 2025 by rpki-client