$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft File: 325f62aa-b9c8-4315-87d2-409b60e8840d.mft (raw, json) Hash identifier: JVne461nqKQWitcVyHSZ93iF9E+dPCdUOUeYAhAYamg= Subject key identifier: 42:01:28:54:59:2C:05:32:D0:10:98:18:B4:1B:15:36:4D:AF:7E:EC Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F4328584BBF1063879FEC0CE63054CD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft Manifest number: 010D0C9F432858497A6510E20DC87663E1742115 Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Fri 07 Nov 2025 09:00:00 +0000 Files and hashes: 1: 325f62aa-b9c8-4315-87d2-409b60e8840d.crl (hash: pD6XhSxV1if+QXEWev900Iy4sSe7oFTFOwXvqgIO2UE=) 2: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (hash: f7BwR8nYyjuWfveGHMywUObYXGgC7X0HZ+gPRdUpHCY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:63:87:9f:ec:0c:e6:30:54:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 7 09:00:00 2025 GMT Subject: CN=9fa35944-de18-4be3-8a15-083c932439ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:81:46:f2:bc:9e:70:f2:10:9e:c5:41:7b: 25:da:c8:f9:f3:8d:7b:2f:ea:65:3c:69:b5:56:91: 2c:bf:01:10:28:cc:2a:15:3a:d1:6b:95:25:f7:ec: 18:f0:0c:53:81:07:29:63:a2:de:f3:13:8e:a4:1a: 77:a0:b4:b5:6f:d9:c7:c1:0e:21:5c:5b:25:33:3f: fc:55:ca:36:e0:aa:a7:0c:37:df:eb:e4:ae:3c:30: dd:06:ad:96:e5:dd:fb:37:e4:18:9a:1f:45:83:4e: 0e:8a:3d:1a:ae:bd:38:8f:7e:cd:ab:c3:10:d3:d2: f1:fe:90:81:9f:31:f7:2a:65:4d:b6:78:b7:b2:ef: e8:a1:32:ed:20:e0:30:34:af:39:5f:fb:f6:60:62: 5c:ea:fc:4a:b2:69:d3:6f:f7:c9:c3:22:f8:14:cb: cf:01:f2:f0:8c:a2:4b:9e:be:6c:d6:af:6b:7e:c5: ad:0b:6b:bc:f1:d0:d0:c1:c0:5a:f7:93:83:92:91: 6b:8d:95:c9:ec:27:2a:aa:cc:1f:f4:a7:1c:05:3d: 69:4e:df:06:63:e9:aa:cf:14:fb:16:67:6c:91:45: e5:19:a5:28:84:99:99:f0:75:36:58:dc:38:1c:ec: 0a:2d:ce:3c:62:c3:64:b2:96:c2:00:2b:f8:e7:e8: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:28:54:59:2C:05:32:D0:10:98:18:B4:1B:15:36:4D:AF:7E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7c:91:7e:12:45:5e:ae:23:0e:6a:44:cd:3a:26:9c:73:9c: 47:79:48:3d:7e:30:b7:06:6c:1a:d1:e7:45:6e:98:4b:2d:82: 05:56:11:42:ac:1b:86:9c:f5:50:43:96:3a:b9:86:b1:25:9d: a0:5f:5a:eb:79:49:de:59:14:81:7f:11:e8:76:b9:a1:b4:f2: 89:8b:e1:ae:c0:29:10:4f:2e:21:9d:be:f6:36:f2:5f:67:68: 45:33:c8:ab:3c:b8:99:31:d6:b4:f5:19:d1:b4:d0:62:fe:e0: 4b:34:2d:5b:6f:6a:90:04:69:e2:6e:e1:84:42:35:03:6d:5f: 96:c5:2c:e1:9d:58:c7:69:2a:b2:f1:97:42:14:ff:4f:33:32: 5f:c0:31:85:b1:b7:d5:d1:98:37:d1:78:43:f1:6e:a1:ee:85: ff:85:db:8a:ea:79:c3:72:1f:ed:fb:c5:26:cb:e2:f9:de:8a: d5:cf:25:1d:bf:c7:7e:63:4a:f3:e7:d1:9d:ec:22:98:44:c0: 95:43:14:08:60:ae:9f:53:d2:f6:9f:fd:22:4f:56:da:d4:6d: d9:ab:9f:21:4d:fd:70:85:7a:5e:ef:7d:30:24:21:e4:94:03: 1f:46:aa:20:03:2b:69:3b:be:8e:06:6c:07:d1:7b:57:e9:52: bb:f9:53:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGOHn+wM5jBUzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNzA5MDAwMFowLzEtMCsGA1UEAxMk OWZhMzU5NDQtZGUxOC00YmUzLThhMTUtMDgzYzkzMjQzOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBiBRvK8nnDyEJ7FQXsl2sj58417L+plPGm1 VpEsvwEQKMwqFTrRa5Ul9+wY8AxTgQcpY6Le8xOOpBp3oLS1b9nHwQ4hXFslMz/8 Vco24KqnDDff6+SuPDDdBq2W5d37N+QYmh9Fg04Oij0arr04j37Nq8MQ09Lx/pCB nzH3KmVNtni3su/ooTLtIOAwNK85X/v2YGJc6vxKsmnTb/fJwyL4FMvPAfLwjKJL nr5s1q9rfsWtC2u88dDQwcBa95ODkpFrjZXJ7Ccqqswf9KccBT1pTt8GY+mqzxT7 FmdskUXlGaUohJmZ8HU2WNw4HOwKLc48YsNkspbCACv45+gfDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEIBKFRZLAUy0BCYGLQbFTZNr37sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvMzI1ZjYyYWEtYjljOC00 MzE1LTg3ZDItNDA5YjYwZTg4NDBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTfJF+EkVeriMOakTNOiac c5xHeUg9fjC3Bmwa0edFbphLLYIFVhFCrBuGnPVQQ5Y6uYaxJZ2gX1rreUneWRSB fxHodrmhtPKJi+GuwCkQTy4hnb72NvJfZ2hFM8irPLiZMda09RnRtNBi/uBLNC1b b2qQBGnibuGEQjUDbV+WxSzhnVjHaSqy8ZdCFP9PMzJfwDGFsbfV0Zg30XhD8W6h 7oX/hduK6nnDch/t+8Umy+L53orVzyUdv8d+Y0rz59Gd7CKYRMCVQxQIYK6fU9L2 n/0iT1ba1G3Zq58hTf1whXpe730wJCHklAMfRqogAytpO76OBmwH0XtX6VK7+VN+ -----END CERTIFICATE-----Generated at Tue Nov 4 17:32:26 2025 by rpki-client