$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft File: 41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft (raw, json) Hash identifier: OAuFgVg0NL1/YdAneCwlIDDBWox6NeuS34e9YTzO768= Subject key identifier: A0:4B:81:B8:CB:12:34:37:9D:D2:E3:51:D1:37:52:59:8C:D9:87:3A Authority key identifier: D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6 Certificate issuer: /CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b Certificate serial: 010D0C9F4328584BBCF86CE80B19DC3253B66A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft Manifest number: 010D0C9F43285841B1CA5299FA9C311840C1F128 Signing time: Mon 03 Nov 2025 15:00:08 +0000 Manifest this update: Mon 03 Nov 2025 15:00:08 +0000 Manifest next update: Wed 05 Nov 2025 15:00:00 +0000 Files and hashes: 1: 41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl (hash: PjiuD6gqmj2w86t1uFPzQnChEXcd0btTMgyDi2gJLVA=) 2: db334f3d-45ff-3147-8b7b-0e824caf304f.roa (hash: t9rplrcheBsDu5tqhRsG/5gZQHmMB/xElITwmX+5NjM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:f8:6c:e8:0b:19:dc:32:53:b6:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b Validity Not Before: Nov 3 15:00:08 2025 GMT Not After : Nov 5 15:00:00 2025 GMT Subject: CN=af4f8d6e-c4d1-44a9-bab5-019dc470ddd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:79:fc:95:70:34:cb:a7:ab:f0:02:6f:40: c4:59:ed:10:91:a6:36:20:13:ca:0b:32:10:99:6a: 1c:7e:b2:2f:fd:44:24:9f:3d:58:12:e5:73:e2:9c: 6a:34:bd:2e:48:ff:a5:c3:0b:56:2c:de:1e:d4:02: 4d:0b:47:0d:fc:32:28:f6:b9:cf:f8:ad:4b:d6:3c: 20:d7:ac:36:c2:d5:a5:64:d7:73:3b:c3:ab:df:0b: a2:89:8f:4a:a0:1b:49:e9:56:aa:a9:d5:fc:44:17: 0d:37:6e:39:f7:9f:4b:79:cf:9a:e7:1f:c5:20:0f: 98:34:6f:12:4b:09:6a:52:86:b8:2e:fe:5c:1d:ed: fd:e5:a0:35:ea:e0:a9:60:39:49:12:d9:84:56:71: c3:f8:59:73:b2:46:81:d7:f2:8d:c0:c3:6c:a7:61: c9:3b:f7:55:f1:6d:eb:4b:f7:b8:1d:14:46:f2:34: 1f:46:45:3f:44:6c:8d:65:bf:d5:25:81:59:4a:e9: ca:0b:a7:14:ef:8c:3b:16:45:52:78:a6:a3:6c:b2: 80:90:c1:24:29:6c:70:e4:1c:44:6a:c1:ae:30:33: 5f:89:fe:b6:5f:fd:a5:d0:33:6a:d5:d3:a6:bf:3c: bc:4d:20:bc:89:f6:da:c5:fe:06:d2:20:d5:fd:da: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4B:81:B8:CB:12:34:37:9D:D2:E3:51:D1:37:52:59:8C:D9:87:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl X509v3 Authority Key Identifier: keyid:D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2c:fc:b2:ff:31:81:7d:ed:dc:ff:58:94:94:ad:39:52:77: 18:2d:48:98:94:88:78:23:47:89:a7:b7:2f:27:e6:ec:1d:f6: b7:fd:46:ea:b9:28:b0:6b:a3:d2:12:16:78:e7:bf:3d:f8:e2: 78:1e:58:9c:15:46:16:cf:4e:f1:05:9c:91:be:0b:3d:36:02: c6:c4:a5:54:27:e6:04:85:81:50:8e:52:fd:dd:72:5b:1c:0e: 22:c6:51:af:fa:ff:71:62:f1:a9:ef:ed:7a:b3:31:49:74:f5: dd:ad:67:c1:7e:3a:75:6b:3e:6d:ac:80:6d:e2:9f:6f:1d:e6: 66:ec:d7:c3:95:c3:2d:e9:80:3f:df:98:14:d7:b7:4e:4e:ad: 84:1b:ee:4a:53:4f:11:e2:41:94:f4:9b:1e:00:45:65:71:dd: 5d:e7:09:bb:1e:71:ff:af:ef:9e:1c:37:a0:e3:c5:79:eb:46: f8:d3:50:0f:56:bc:46:e4:21:21:24:95:f3:76:b4:6b:f4:95: ed:f8:d7:85:c5:74:c6:4c:d4:2c:be:ae:4b:71:c0:cc:2d:e0: 16:88:4b:84:4b:ce:dd:4c:fd:c9:0a:0a:55:75:22:46:94:8d: 67:45:5e:eb:35:b9:76:a9:f0:b0:5c:08:63:a9:b1:48:74:19: 1a:df:54:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu8+GzoCxncMlO2aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiNWY0ZDEtMWY0YS00MjVlLWJkNzYtMDkyYzVjZmM2 NzhiMB4XDTI1MTEwMzE1MDAwOFoXDTI1MTEwNTE1MDAwMFowLzEtMCsGA1UEAxMk YWY0ZjhkNmUtYzRkMS00NGE5LWJhYjUtMDE5ZGM0NzBkZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxt5/JVwNMunq/ACb0DEWe0QkaY2IBPKCzIQ mWocfrIv/UQknz1YEuVz4pxqNL0uSP+lwwtWLN4e1AJNC0cN/DIo9rnP+K1L1jwg 16w2wtWlZNdzO8Or3wuiiY9KoBtJ6VaqqdX8RBcNN245959Lec+a5x/FIA+YNG8S SwlqUoa4Lv5cHe395aA16uCpYDlJEtmEVnHD+FlzskaB1/KNwMNsp2HJO/dV8W3r S/e4HRRG8jQfRkU/RGyNZb/VJYFZSunKC6cU74w7FkVSeKajbLKAkMEkKWxw5BxE asGuMDNfif62X/2l0DNq1dOmvzy8TSC8ifbaxf4G0iDV/dpM+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKBLgbjLEjQ3ndLjUdE3UlmM2Yc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWI1 ZjRkMS0xZjRhLTQyNWUtYmQ3Ni0wOTJjNWNmYzY3OGIvNDFiNWY0ZDEtMWY0YS00 MjVlLWJkNzYtMDkyYzVjZmM2NzhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFiNWY0ZDEtMWY0YS00MjVlLWJk NzYtMDkyYzVjZmM2NzhiLzQxYjVmNGQxLTFmNGEtNDI1ZS1iZDc2LTA5MmM1Y2Zj Njc4Yi5jcmwwHwYDVR0jBBgwFoAU0rtMeISo5gSsR/Ow/yr4n7JmTqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWI1ZjRkMS0xZjRhLTQyNWUtYmQ3Ni0wOTJj NWNmYzY3OGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCILPyy/zGBfe3c/1iUlK05 UncYLUiYlIh4I0eJp7cvJ+bsHfa3/UbquSiwa6PSEhZ45789+OJ4HlicFUYWz07x BZyRvgs9NgLGxKVUJ+YEhYFQjlL93XJbHA4ixlGv+v9xYvGp7+16szFJdPXdrWfB fjp1az5trIBt4p9vHeZm7NfDlcMt6YA/35gU17dOTq2EG+5KU08R4kGU9JseAEVl cd1d5wm7HnH/r++eHDeg48V560b401APVrxG5CEhJJXzdrRr9JXt+NeFxXTGTNQs vq5LccDMLeAWiEuES87dTP3JCgpVdSJGlI1nRV7rNbl2qfCwXAhjqbFIdBka31Sn -----END CERTIFICATE-----Generated at Tue Nov 4 08:26:52 2025 by rpki-client