$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b/4933cdc6-7680-4beb-a70e-04db8b2ab76b.mft File: 4933cdc6-7680-4beb-a70e-04db8b2ab76b.mft (raw, json) Hash identifier: gH0tYS2E3D4cMgaDW3Gtjv3GMZXjtxrBbgpLjLQ3PuI= Subject key identifier: 02:20:8A:51:9D:3F:83:B1:7A:91:EA:E3:54:86:08:08:A4:64:AB:82 Authority key identifier: 51:EA:27:7F:3F:FD:0C:C6:5A:E9:DC:89:8D:EE:3F:49:0A:EC:47:20 Certificate issuer: /CN=4933cdc6-7680-4beb-a70e-04db8b2ab76b Certificate serial: 010D0C9F4328584BCB0BA315412696265B64E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b/4933cdc6-7680-4beb-a70e-04db8b2ab76b.mft Manifest number: 010D0C9F432858494BD0CDDA070DABCC1614626A Signing time: Sat 08 Nov 2025 16:00:09 +0000 Manifest this update: Sat 08 Nov 2025 16:00:09 +0000 Manifest next update: Mon 10 Nov 2025 16:00:00 +0000 Files and hashes: 1: 4933cdc6-7680-4beb-a70e-04db8b2ab76b.crl (hash: wVG5w0oucJ+Z6rBAB9WSiOj2UwdzQSsd/nDYVloFWZ8=) 2: 92f4cc48-71fa-32e8-9da7-04692a6f1a05.roa (hash: u4W9Hn5Fj7/coZp7U8BJIDSD4axpPEHJhE/inwxXp7s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b/4933cdc6-7680-4beb-a70e-04db8b2ab76b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b/4933cdc6-7680-4beb-a70e-04db8b2ab76b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cb:0b:a3:15:41:26:96:26:5b:64:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4933cdc6-7680-4beb-a70e-04db8b2ab76b Validity Not Before: Nov 8 16:00:09 2025 GMT Not After : Nov 10 16:00:00 2025 GMT Subject: CN=fe8fff09-b243-4fc7-8ef5-e7aa168928a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:35:50:39:97:1a:40:80:90:7e:23:a0:af: 34:a4:08:cd:95:82:28:84:92:cb:bd:8b:15:be:8b: 72:b2:61:58:97:46:63:84:66:d5:aa:a1:31:84:32: e2:e3:ad:5b:0e:a9:d6:10:25:a1:b0:27:59:de:c2: 07:dc:0b:ff:bf:a2:28:e7:d2:30:ed:1b:23:60:f7: b5:64:a2:6a:17:44:ba:6f:97:a9:3f:42:1a:f9:65: 43:5e:9a:82:d4:4c:28:3d:a8:35:14:44:25:e3:09: f7:08:14:6f:73:80:c8:74:bc:7c:fa:16:5b:58:7f: 6f:11:9c:5b:f1:ef:a8:d6:f9:71:01:40:23:87:94: ef:d9:51:73:a8:e6:41:fe:b7:17:47:67:7a:98:e3: f2:d3:57:c9:47:de:a8:ea:fd:cd:48:8f:f3:71:c5: bb:a5:75:a4:b0:25:ac:36:66:25:69:7c:c2:b5:34: 92:e6:8a:c9:b4:43:2c:b2:0d:18:9b:9b:7f:81:1d: 2d:4f:65:28:90:6a:64:13:72:47:e7:53:73:a4:50: f5:5d:6d:90:37:70:d0:f5:6f:33:c0:ac:aa:47:0c: 51:2e:29:96:6d:4c:b9:82:5f:92:ad:09:0e:dd:39: 69:c2:1b:d5:42:09:4f:09:21:61:df:45:fb:0d:a0: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:8A:51:9D:3F:83:B1:7A:91:EA:E3:54:86:08:08:A4:64:AB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b/4933cdc6-7680-4beb-a70e-04db8b2ab76b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b/4933cdc6-7680-4beb-a70e-04db8b2ab76b.crl X509v3 Authority Key Identifier: keyid:51:EA:27:7F:3F:FD:0C:C6:5A:E9:DC:89:8D:EE:3F:49:0A:EC:47:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4933cdc6-7680-4beb-a70e-04db8b2ab76b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:91:ce:cd:bd:b6:2f:bc:eb:45:2f:be:74:b9:58:51:bf:86: f5:24:a5:22:cb:e5:d6:84:be:9a:1e:6d:40:98:06:15:fb:56: 9b:88:38:30:54:38:fd:15:b4:34:cc:6a:be:ba:e8:dc:63:6a: 3c:08:9b:49:e8:aa:0b:fe:8c:1b:a3:2c:3e:9e:00:fd:f4:ce: 4f:00:bb:44:15:02:f2:10:fe:b4:e6:0a:6d:46:94:48:0d:44: 82:47:2f:19:ab:f0:e7:b0:31:6f:66:52:ab:22:aa:74:cb:7e: 8f:9f:dd:fb:62:b4:27:8c:00:9d:30:e8:8e:a8:f6:9a:b7:14: 12:72:2d:37:32:ae:80:dc:a8:87:f2:f6:30:ff:2f:d3:b3:67: 36:e2:19:3b:93:df:c8:3e:2b:e4:ce:06:c9:d0:fa:b7:a0:3b: 3b:c3:cb:6c:93:24:14:52:f9:ff:19:6b:ee:63:f7:1f:e2:fb: ea:a2:bb:57:00:aa:3c:91:0d:5b:95:a2:96:42:0e:da:26:6d: f6:8d:87:73:d2:f1:38:6d:14:8f:3e:06:1d:3e:42:88:78:2f: f9:e1:bc:00:4c:89:cb:ce:77:62:06:31:f1:f9:2a:39:1a:ae: 5f:c4:86:7c:55:f3:13:1e:50:8b:09:0c:8b:7b:b7:6d:6c:52: bd:60:e9:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvLC6MVQSaWJltk5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkzM2NkYzYtNzY4MC00YmViLWE3MGUtMDRkYjhiMmFi NzZiMB4XDTI1MTEwODE2MDAwOVoXDTI1MTExMDE2MDAwMFowLzEtMCsGA1UEAxMk ZmU4ZmZmMDktYjI0My00ZmM3LThlZjUtZTdhYTE2ODkyOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3I1UDmXGkCAkH4joK80pAjNlYIohJLLvYsV votysmFYl0ZjhGbVqqExhDLi461bDqnWECWhsCdZ3sIH3Av/v6Io59Iw7RsjYPe1 ZKJqF0S6b5epP0Ia+WVDXpqC1EwoPag1FEQl4wn3CBRvc4DIdLx8+hZbWH9vEZxb 8e+o1vlxAUAjh5Tv2VFzqOZB/rcXR2d6mOPy01fJR96o6v3NSI/zccW7pXWksCWs NmYlaXzCtTSS5orJtEMssg0Ym5t/gR0tT2UokGpkE3JH51NzpFD1XW2QN3DQ9W8z wKyqRwxRLimWbUy5gl+SrQkO3TlpwhvVQglPCSFh30X7DaCbBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAIgilGdP4OxepHq41SGCAikZKuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OTMz Y2RjNi03NjgwLTRiZWItYTcwZS0wNGRiOGIyYWI3NmIvNDkzM2NkYzYtNzY4MC00 YmViLWE3MGUtMDRkYjhiMmFiNzZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDkzM2NkYzYtNzY4MC00YmViLWE3 MGUtMDRkYjhiMmFiNzZiLzQ5MzNjZGM2LTc2ODAtNGJlYi1hNzBlLTA0ZGI4YjJh Yjc2Yi5jcmwwHwYDVR0jBBgwFoAUUeonfz/9DMZa6dyJje4/SQrsRyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OTMzY2RjNi03NjgwLTRiZWItYTcwZS0wNGRi OGIyYWI3NmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCekc7NvbYvvOtFL750uVhR v4b1JKUiy+XWhL6aHm1AmAYV+1abiDgwVDj9FbQ0zGq+uujcY2o8CJtJ6KoL/owb oyw+ngD99M5PALtEFQLyEP605gptRpRIDUSCRy8Zq/DnsDFvZlKrIqp0y36Pn937 YrQnjACdMOiOqPaatxQSci03Mq6A3KiH8vYw/y/Ts2c24hk7k9/IPivkzgbJ0Pq3 oDs7w8tskyQUUvn/GWvuY/cf4vvqortXAKo8kQ1blaKWQg7aJm32jYdz0vE4bRSP PgYdPkKIeC/54bwATInLzndiBjHx+So5Gq5fxIZ8VfMTHlCLCQyLe7dtbFK9YOmB -----END CERTIFICATE-----Generated at Sat Nov 8 19:01:38 2025 by rpki-client