$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft File: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft (raw, json) Hash identifier: THIfksUjWCcS6teA9LyICTefCeATVbP64/gCNimWOC8= Subject key identifier: 99:C8:1A:F4:0A:6A:39:AD:58:32:DB:1A:F9:6A:28:4D:C2:B9:C3:80 Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Certificate issuer: /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Certificate serial: 010D0C9F4328584BC87C70F8861209E40369FA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft Manifest number: 010D0C9F432858494ED016D77EA200A665D4BCA8 Signing time: Fri 07 Nov 2025 18:00:03 +0000 Manifest this update: Fri 07 Nov 2025 18:00:03 +0000 Manifest next update: Sun 09 Nov 2025 18:00:00 +0000 Files and hashes: 1: 4775f2f1-0661-3006-a1eb-a486c369f840.roa (hash: bMzIwBE9zdc2EtxI9pDaB1rxxDUYl/NzUZ5Dut6cq6E=) 2: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl (hash: BQRL1wTbEMSQIluD9YXcVAkua3SzKL9kh3ISMCNug/U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:7c:70:f8:86:12:09:e4:03:69:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Validity Not Before: Nov 7 18:00:03 2025 GMT Not After : Nov 9 18:00:00 2025 GMT Subject: CN=0536fc2f-0ea8-48a4-b020-975fd3910d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:3f:21:01:d9:dc:6b:1b:81:ed:d4:b5:09: e5:7a:4a:19:19:95:95:72:90:47:0a:11:11:d3:04: 2d:48:83:9d:8b:b6:b3:01:44:e0:2e:3e:89:a4:41: aa:e6:aa:38:c1:91:cc:98:a8:7a:f1:57:d9:52:65: 04:9f:6d:4f:67:a3:2a:5f:ae:86:b4:72:1f:54:f9: ce:84:57:b4:66:76:ae:a5:90:67:b5:e1:c9:da:1a: 6c:50:6e:d1:45:4e:d7:d7:ba:9a:e8:e7:86:43:99: e9:5c:f1:a8:3d:0b:ee:a9:90:46:93:03:50:b5:62: 81:f2:01:5d:56:31:a9:27:9c:bf:2e:74:b1:85:89: cb:86:c6:e2:12:bb:9a:ef:c8:95:80:aa:82:51:91: 93:76:01:cf:f0:e4:6a:e8:55:78:84:45:28:4c:a4: 38:00:b6:65:5d:b6:31:94:98:ee:ac:eb:5c:0f:87: 83:90:cf:9c:c8:f3:05:eb:7d:e0:dd:7f:8e:c7:37: ec:8c:14:b3:ff:e2:5a:28:a3:23:01:e3:4e:7e:59: 50:d6:b8:b4:7a:3c:ac:c6:81:77:73:af:97:4d:88: a5:3e:21:a2:44:13:46:29:73:c8:e8:35:7f:86:5a: 9c:bc:f1:8f:21:35:06:54:14:7f:ec:2b:a5:df:31: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C8:1A:F4:0A:6A:39:AD:58:32:DB:1A:F9:6A:28:4D:C2:B9:C3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl X509v3 Authority Key Identifier: keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4e:f2:56:60:75:d2:0f:65:24:5b:42:40:ab:02:73:d3:e7: 7f:9a:02:26:0b:c0:1e:4c:99:1c:c1:c9:8e:d9:bc:bd:14:98: 85:18:73:9b:82:74:fb:4e:38:5b:d2:00:66:b6:ac:09:e4:e4: 9f:1e:db:fe:79:ce:03:88:bf:e5:3e:fc:77:df:68:86:55:40: e9:1e:20:06:5d:38:b3:df:a3:ad:37:4a:33:9a:47:c2:d4:62: 2e:5d:b6:87:76:29:a0:08:4f:50:e7:2c:43:84:1d:0a:c1:d7: 42:1d:56:ef:82:3d:05:cd:7f:b3:d6:b8:9b:52:09:84:24:23: af:33:46:b8:e3:ed:e1:da:6d:06:c9:4c:cd:ff:3a:a0:63:9e: 1f:0e:1f:2b:05:b6:49:25:94:c7:e9:2a:28:1b:ee:22:ec:02: 6e:47:ca:6d:e8:b9:59:69:81:50:d9:73:80:bc:e7:7b:dd:11: 61:9f:fa:72:72:0b:7d:ae:b1:40:60:82:fe:9c:6b:11:49:15: e6:46:6b:41:72:b1:a5:97:bd:f1:f2:98:6f:44:75:70:26:10: 86:96:4b:22:d5:17:c5:19:6e:56:f1:7c:06:99:f4:e0:d0:92: c6:36:85:55:20:02:5e:67:95:0b:a5:3a:e7:e8:68:c7:80:fb: 1f:8f:49:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvIfHD4hhIJ5ANp+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRh YTdhMB4XDTI1MTEwNzE4MDAwM1oXDTI1MTEwOTE4MDAwMFowLzEtMCsGA1UEAxMk MDUzNmZjMmYtMGVhOC00OGE0LWIwMjAtOTc1ZmQzOTEwZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllA/IQHZ3Gsbge3UtQnlekoZGZWVcpBHChER 0wQtSIOdi7azAUTgLj6JpEGq5qo4wZHMmKh68VfZUmUEn21PZ6MqX66GtHIfVPnO hFe0ZnaupZBnteHJ2hpsUG7RRU7X17qa6OeGQ5npXPGoPQvuqZBGkwNQtWKB8gFd VjGpJ5y/LnSxhYnLhsbiErua78iVgKqCUZGTdgHP8ORq6FV4hEUoTKQ4ALZlXbYx lJjurOtcD4eDkM+cyPMF633g3X+OxzfsjBSz/+JaKKMjAeNOfllQ1ri0ejysxoF3 c6+XTYilPiGiRBNGKXPI6DV/hlqcvPGPITUGVBR/7Cul3zGfFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJnIGvQKajmtWDLbGvlqKE3CucOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1 OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvNzA0NTk1YzMtNmQ5Mi00 ZmMxLWI3YTgtZDhlODFhMDRhYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3 YTgtZDhlODFhMDRhYTdhLzcwNDU5NWMzLTZkOTItNGZjMS1iN2E4LWQ4ZTgxYTA0 YWE3YS5jcmwwHwYDVR0jBBgwFoAURVYIqU8+LjAtaqVcoujlUP1bBBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4 MWEwNGFhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwTvJWYHXSD2UkW0JAqwJz 0+d/mgImC8AeTJkcwcmO2by9FJiFGHObgnT7Tjhb0gBmtqwJ5OSfHtv+ec4DiL/l Pvx332iGVUDpHiAGXTiz36OtN0ozmkfC1GIuXbaHdimgCE9Q5yxDhB0KwddCHVbv gj0FzX+z1ribUgmEJCOvM0a44+3h2m0GyUzN/zqgY54fDh8rBbZJJZTH6SooG+4i 7AJuR8pt6LlZaYFQ2XOAvOd73RFhn/pycgt9rrFAYIL+nGsRSRXmRmtBcrGll73x 8phvRHVwJhCGlksi1RfFGW5W8XwGmfTg0JLGNoVVIAJeZ5ULpTrn6GjHgPsfj0l1 -----END CERTIFICATE-----Generated at Sat Nov 8 18:56:16 2025 by rpki-client