$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft File: 4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft (raw, json) Hash identifier: SwxWREi/pvFS5M7G5E16cFiHehYGPekECELf8W2V7Fs= Subject key identifier: 58:FE:CD:96:E5:9B:23:58:CA:C2:71:98:5B:95:15:68:9F:C6:F1:A0 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584BBFE0D5AEAB76F2A96E3D7200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft Manifest number: 010D0C9F43285841AC21196C44CDC8DC02C40A18 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (hash: xsilEUG5iCij2y4JL6edrxcU7TmgxV2TPgLLxSAhSKw=) 2: 4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa (hash: iDxUVPjEm2C9ozQVU27EkGRELaW21KlEvqSfrzjvx24=) 3: 4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl (hash: 4Fc3O1tdyW/yS8FiOZXiJel+Bb0vIM85x7GBKW+7t+4=) 4: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (hash: 7v58SZc4mHdokypD9oQy+hoQNXq4wfANgn3y+Ff1NzA=) 5: c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa (hash: 4Iz6W46SbDEcUTDPG5w9Nzimno5Yrazb5GJ6EknGmJw=) 6: e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa (hash: ktHdqrjp4WgbCQ+j3iygT2TiS1VUKgy8cQKDE9xEsHQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d5:ae:ab:76:f2:a9:6e:3d:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=3eb77198-8802-467b-ba9d-e4757acfd43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:56:54:f3:63:72:6d:8b:fc:e0:9e:13:92: 22:28:63:11:bc:c1:f8:48:91:3b:7d:d3:a7:66:00: 2e:72:08:58:1d:76:b0:de:45:35:91:7b:20:8c:0c: 30:5b:22:a8:63:12:56:42:48:04:6c:7e:b0:da:0a: ec:99:bf:0c:99:a6:6a:ff:ea:b9:7b:c6:72:ed:ab: a5:a0:72:56:b9:14:fb:ce:52:d9:78:af:10:36:b1: 5b:f4:1b:36:a4:a8:58:89:17:95:30:a1:a2:ea:03: f7:fd:23:77:6f:48:23:be:19:81:eb:7b:2a:94:d1: 69:b3:de:88:ec:96:fd:8b:a5:ed:52:f9:26:cf:8f: d3:9a:39:7b:b9:0b:de:f8:84:2a:1b:27:3e:b0:f8: a6:df:08:07:0a:76:1d:3b:bf:2c:c3:9f:f7:30:f7: 17:2a:39:0d:44:e3:c8:f1:85:1d:a0:63:c7:5f:49: 58:a9:50:35:e3:dd:f4:aa:3a:24:65:b8:41:9d:04: 52:fb:64:52:75:6e:83:f4:47:73:f7:d2:0b:3d:21: 9f:4e:41:2b:c8:28:dc:17:2e:58:07:ad:57:76:1f: 7d:60:0f:da:28:e0:d0:ff:ca:bc:d2:f7:f8:4a:8d: 38:df:8d:6e:45:50:ec:2e:be:2b:ae:f5:59:8f:37: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FE:CD:96:E5:9B:23:58:CA:C2:71:98:5B:95:15:68:9F:C6:F1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:31:cd:7b:c6:92:7f:59:8a:6b:28:d6:76:1e:4b:ee:70:bf: e3:48:34:16:34:b7:1a:bd:75:9e:f4:00:ce:b2:49:2a:e4:db: 6c:aa:bd:e5:38:fc:f4:e3:bd:be:3e:60:30:ec:41:6a:be:fe: a3:27:b6:be:5e:d8:40:7b:06:ad:8a:13:8d:78:93:a2:74:f0: 42:e6:e5:7d:da:33:07:76:e3:1b:c2:3f:bf:7b:3e:e8:6c:a7: df:4e:87:44:44:07:04:ed:ac:88:44:d6:d8:ca:a0:7a:44:fa: eb:80:bd:00:fb:dd:06:b2:2a:97:8b:12:52:7f:40:b8:08:53: ea:28:04:b8:79:6c:4b:fd:d6:c2:85:cb:c5:5a:df:33:fd:dc: 81:9b:88:29:79:1d:cb:32:16:97:ae:f1:09:d5:13:70:a2:04: 1c:1b:b8:7c:6f:30:d2:b9:f8:c9:36:47:44:f4:67:b0:37:d9: 9d:c6:0e:31:8f:8b:61:9b:fe:2b:02:79:f6:d2:c6:dd:04:10: 48:a5:fd:06:64:17:f4:81:82:84:07:6b:b9:9d:0b:92:dc:5e: 44:1d:3f:76:47:ab:0a:06:48:ed:75:82:24:b9:5a:30:85:ae: 31:42:cd:cf:90:84:b0:10:a6:fe:7e:02:46:44:39:24:03:68: 3a:b7:21:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NWuq3byqW49cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk M2ViNzcxOTgtODgwMi00NjdiLWJhOWQtZTQ3NTdhY2ZkNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhANWVPNjcm2L/OCeE5IiKGMRvMH4SJE7fdOn ZgAucghYHXaw3kU1kXsgjAwwWyKoYxJWQkgEbH6w2grsmb8MmaZq/+q5e8Zy7aul oHJWuRT7zlLZeK8QNrFb9Bs2pKhYiReVMKGi6gP3/SN3b0gjvhmB63sqlNFps96I 7Jb9i6XtUvkmz4/Tmjl7uQve+IQqGyc+sPim3wgHCnYdO78sw5/3MPcXKjkNROPI 8YUdoGPHX0lYqVA14930qjokZbhBnQRS+2RSdW6D9Edz99ILPSGfTkEryCjcFy5Y B61Xdh99YA/aKODQ/8q80vf4So04341uRVDsLr4rrvVZjzdOBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFj+zZblmyNYysJxmFuVFWifxvGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNGU4N2MwYjMtMzgzYS00 MzhjLWFhNDUtMWU1ZGYwZDBlMDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmMc17xpJ/WYprKNZ2Hkvu cL/jSDQWNLcavXWe9ADOskkq5Ntsqr3lOPz0472+PmAw7EFqvv6jJ7a+XthAewat ihONeJOidPBC5uV92jMHduMbwj+/ez7obKffTodERAcE7ayIRNbYyqB6RPrrgL0A +90GsiqXixJSf0C4CFPqKAS4eWxL/dbChcvFWt8z/dyBm4gpeR3LMhaXrvEJ1RNw ogQcG7h8bzDSufjJNkdE9GewN9mdxg4xj4thm/4rAnn20sbdBBBIpf0GZBf0gYKE B2u5nQuS3F5EHT92R6sKBkjtdYIkuVowha4xQs3PkISwEKb+fgJGRDkkA2g6tyHV -----END CERTIFICATE-----Generated at Wed Nov 5 02:13:52 2025 by rpki-client