$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft File: e49f1cd9-302a-4377-9a40-b12c78b69f87.mft (raw, json) Hash identifier: iuZPzOWVi1KKIJx4OHI1yMDuY0xZJnwWRb0BPtkIdqM= Subject key identifier: 59:C9:BD:77:61:6A:C4:C3:1B:7F:72:1C:54:0A:45:C0:21:6F:27:01 Authority key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Certificate issuer: /CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Certificate serial: 010D0C9F4328584BBCF86BF5ACDAC00EDE4CC8BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft Manifest number: 010D0C9F43285841636D8947664456676FDBFB0E Signing time: Mon 03 Nov 2025 15:00:08 +0000 Manifest this update: Mon 03 Nov 2025 15:00:08 +0000 Manifest next update: Wed 05 Nov 2025 15:00:00 +0000 Files and hashes: 1: c4caf089-9ce2-34f3-a0d8-c5663d2a92ac.roa (hash: 2ZPdb0LhBWkwTeXQP9WbVeJ09/Fa7sEwG5S4DhADzBE=) 2: e49f1cd9-302a-4377-9a40-b12c78b69f87.crl (hash: AV8wWHjL5sH4Ksyz3yFQu4uYroz293ZuUDvRpOl74sg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:f8:6b:f5:ac:da:c0:0e:de:4c:c8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Validity Not Before: Nov 3 15:00:08 2025 GMT Not After : Nov 5 15:00:00 2025 GMT Subject: CN=a5539a0a-2e2c-43e3-91e9-e750e767663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:b4:ca:63:cc:4c:f7:a0:23:fb:6d:ec:bc: 62:43:97:24:af:29:45:fd:aa:8e:a2:45:85:3f:6d: 79:d5:a9:32:f0:da:d6:da:d6:64:03:43:b7:e4:a6: 91:6f:ff:68:0b:32:69:ef:7c:96:51:2a:6e:74:d0: 7f:02:35:51:52:9c:89:ed:2c:50:b3:6d:b2:5d:de: 7d:01:da:68:8a:f9:fb:fa:16:00:b1:45:a8:12:96: a3:6a:71:d4:4a:40:06:40:33:60:8b:01:9f:c7:1c: 32:b9:b9:da:ae:58:f7:93:e6:7b:e5:97:b8:c8:a2: 37:db:fa:d8:89:e7:cb:ca:f0:62:1b:2f:de:4a:23: 18:c6:ec:66:23:ea:06:36:67:48:96:4b:d8:34:f4: 62:b5:73:42:61:4d:4a:20:1b:4a:7c:fd:c1:07:e0: 10:6d:7c:7d:ee:66:dd:34:0a:0b:a5:69:70:73:60: b1:3c:8c:33:e1:0b:f5:5b:d4:bf:1a:cd:45:59:d6: 96:c9:03:80:78:b9:4f:bd:78:98:09:80:7a:d8:59: 37:1d:2b:d1:1c:0a:87:0e:bc:3a:45:d8:6e:74:aa: 27:7c:af:81:9f:21:fa:2e:9b:be:1c:81:7a:c5:31: 3a:b6:82:e3:fa:89:bd:f2:dc:34:11:63:d1:46:41: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C9:BD:77:61:6A:C4:C3:1B:7F:72:1C:54:0A:45:C0:21:6F:27:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.crl X509v3 Authority Key Identifier: keyid:E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7a:86:51:98:e9:6b:a8:09:a8:89:65:6b:65:94:67:18:83: 91:42:e5:70:28:af:8d:6a:d1:24:fb:e8:48:c3:53:a7:4b:a2: 06:62:75:94:89:98:38:7c:c2:69:52:e7:ae:dc:1f:d1:2b:72: 63:93:2b:bd:63:34:03:2d:c0:4d:f5:64:cf:47:98:da:39:8b: 2d:10:68:b8:5a:c0:8b:04:72:a6:78:35:65:ef:4d:0a:6c:15: 7c:34:34:74:b4:a2:11:8f:8f:df:fa:2f:37:88:81:86:de:03: 57:85:61:16:bb:e4:e1:40:cb:bc:7b:62:4f:7f:60:6f:9a:f3: c1:f1:3b:90:ae:b5:92:48:07:01:c4:ef:dc:4d:69:77:f8:cb: 30:30:a3:4f:63:bd:99:fd:b0:73:e3:43:90:c1:fb:ea:f4:3f: f0:22:1c:48:70:84:48:a8:39:27:ea:3f:cb:b4:98:52:4c:fb: f7:bc:fe:69:c8:69:12:1a:e5:e1:3e:1f:d5:b3:3b:fa:c0:d6: 20:54:5d:9e:81:a3:9a:b9:7c:87:a2:41:b9:60:4a:db:63:7f: 5d:64:b6:46:fb:54:ef:6c:83:f2:e3:3c:0e:69:82:ac:a7:a8: da:8e:b6:71:42:4c:80:7c:4c:46:c6:02:ce:ba:46:ab:88:9e: d0:e3:f6:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu8+Gv1rNrADt5MyLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ5ZjFjZDktMzAyYS00Mzc3LTlhNDAtYjEyYzc4YjY5 Zjg3MB4XDTI1MTEwMzE1MDAwOFoXDTI1MTEwNTE1MDAwMFowLzEtMCsGA1UEAxMk YTU1MzlhMGEtMmUyYy00M2UzLTkxZTktZTc1MGU3Njc2NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcy0ymPMTPegI/tt7LxiQ5ckrylF/aqOokWF P2151aky8NrW2tZkA0O35KaRb/9oCzJp73yWUSpudNB/AjVRUpyJ7SxQs22yXd59 Adpoivn7+hYAsUWoEpajanHUSkAGQDNgiwGfxxwyubnarlj3k+Z75Ze4yKI32/rY iefLyvBiGy/eSiMYxuxmI+oGNmdIlkvYNPRitXNCYU1KIBtKfP3BB+AQbXx97mbd NAoLpWlwc2CxPIwz4Qv1W9S/Gs1FWdaWyQOAeLlPvXiYCYB62Fk3HSvRHAqHDrw6 RdhudKonfK+BnyH6Lpu+HIF6xTE6toLj+om98tw0EWPRRkFARwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFnJvXdhasTDG39yHFQKRcAhbycBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNDlm MWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhiNjlmODcvZTQ5ZjFjZDktMzAyYS00 Mzc3LTlhNDAtYjEyYzc4YjY5Zjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTQ5ZjFjZDktMzAyYS00Mzc3LTlh NDAtYjEyYzc4YjY5Zjg3L2U0OWYxY2Q5LTMwMmEtNDM3Ny05YTQwLWIxMmM3OGI2 OWY4Ny5jcmwwHwYDVR0jBBgwFoAU52APEsECvJc3o/Np0qc8ROVOvN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJj NzhiNjlmODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByeoZRmOlrqAmoiWVrZZRn GIORQuVwKK+NatEk++hIw1OnS6IGYnWUiZg4fMJpUueu3B/RK3Jjkyu9YzQDLcBN 9WTPR5jaOYstEGi4WsCLBHKmeDVl700KbBV8NDR0tKIRj4/f+i83iIGG3gNXhWEW u+ThQMu8e2JPf2BvmvPB8TuQrrWSSAcBxO/cTWl3+MswMKNPY72Z/bBz40OQwfvq 9D/wIhxIcIRIqDkn6j/LtJhSTPv3vP5pyGkSGuXhPh/Vszv6wNYgVF2egaOauXyH okG5YErbY39dZLZG+1TvbIPy4zwOaYKsp6jajrZxQkyAfExGxgLOukariJ7Q4/ZH -----END CERTIFICATE-----Generated at Tue Nov 4 12:49:29 2025 by rpki-client