$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft File: 7afbb48a-7a41-422c-a27b-4b92e0907153.mft (raw, json) Hash identifier: PIRyWc3c5JO8oz3Dy9ZeywmjIh5xLrG/yaoeGE7ab4E= Subject key identifier: 4E:9A:24:C4:F4:58:66:65:A1:E5:B4:58:F5:61:26:B0:0E:CB:DD:05 Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E Certificate issuer: /CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Certificate serial: 010D0C9F4328584BBE7B7E7AC8B4B9E458C9FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft Manifest number: 010D0C9F432858496EA47549D85836F893509698 Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: 309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (hash: 0zNDEexc/e5gaxHmpQonKCDMux4i+Zq9RVj2jtJ/Apc=) 2: 7afbb48a-7a41-422c-a27b-4b92e0907153.crl (hash: vmEvRmWVuoHOPHovEg6VB6MHh/xaoiSCERct7u+YNCI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:7e:7a:c8:b4:b9:e4:58:c9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=997b12a1-d1f4-4327-87f7-253d006b79a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:11:f8:96:f6:a0:c3:6e:f6:e9:25:83:d9: 2a:78:16:85:e9:08:b8:62:94:1f:d5:cf:e3:75:8c: f6:5f:a6:6c:8f:42:88:a7:f0:af:61:80:fb:0b:6a: 31:53:7c:30:f2:1e:61:d9:e9:ac:d0:fe:8a:a1:71: b2:42:d3:1f:32:ab:1a:2e:c6:39:64:ea:e5:59:bf: d2:1c:df:cf:b3:cb:2c:1b:c8:f7:56:17:f8:7c:a4: bd:7e:56:a1:33:5f:a3:5f:c6:06:5e:aa:22:fb:64: bc:31:ef:25:75:94:1d:0d:e3:43:ee:2d:ad:78:ad: 83:79:fe:d5:b6:9c:76:37:c7:ed:52:1a:b4:b3:66: 85:f8:a1:ed:74:de:34:f9:34:27:7b:04:96:fa:a2: 16:70:74:fc:8b:bb:53:b0:df:de:2e:86:14:bc:9e: 51:18:14:ef:c9:f6:82:23:21:de:e2:71:eb:9f:e4: 9a:7d:18:09:01:63:24:49:c9:84:1f:10:50:88:f8: eb:a7:91:3f:01:6c:42:ec:7a:d4:c5:12:27:20:a0: f3:e2:bc:4b:94:e3:ab:f5:3f:3d:28:ae:19:76:8f: ed:1d:2d:0f:7f:b3:dd:09:81:86:48:70:90:a5:2a: e8:a7:f1:4d:9f:db:59:5c:41:55:89:4e:c8:1d:11: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9A:24:C4:F4:58:66:65:A1:E5:B4:58:F5:61:26:B0:0E:CB:DD:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl X509v3 Authority Key Identifier: keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2c:0e:a9:6e:fb:9c:16:2a:1e:6a:e6:20:a1:17:5d:a1:80: 68:16:bd:53:87:ca:34:f2:d1:69:b6:ff:53:11:98:8d:9f:6d: b1:e1:5c:8d:21:db:c3:5e:f3:49:0e:dd:16:26:ce:be:0e:ba: f5:ae:ea:f2:4d:c3:23:ba:c6:1e:60:b7:45:24:8d:7b:0c:3f: 2e:d8:cc:b9:34:b3:c7:79:8d:1f:55:01:e7:49:10:ed:8b:05: 2c:96:89:ab:f1:d8:07:18:f3:73:21:7a:11:a1:9c:24:4b:98: 63:ac:83:6b:99:1a:ce:45:d9:6a:58:da:ea:6b:e3:ea:37:45: 13:09:4d:9b:56:d0:5b:f3:f8:01:6b:b6:34:06:cd:9f:0c:ce: 43:0a:6b:96:5b:74:87:cc:49:1a:53:23:86:17:b7:16:e2:13: 79:5e:82:e6:18:ca:7e:b8:83:e9:86:3b:66:1b:ce:65:d0:46: d0:7c:4e:30:22:82:2d:c7:19:58:a1:98:07:1c:b0:e9:e6:ae: 47:58:e6:47:b4:f1:0c:59:07:55:d9:57:48:88:31:7a:6d:a0: af:9a:c2:3b:8f:8d:0c:b4:6c:fb:73:53:81:8b:51:86:6f:67: 8a:1b:ea:3f:56:46:27:4b:75:65:ed:2b:b8:bf:00:07:d1:7b: 32:70:89:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e356yLS55FjJ/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYmI0OGEtN2E0MS00MjJjLWEyN2ItNGI5MmUwOTA3 MTUzMB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk OTk3YjEyYTEtZDFmNC00MzI3LTg3ZjctMjUzZDAwNmI3OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYR+Jb2oMNu9uklg9kqeBaF6Qi4YpQf1c/j dYz2X6Zsj0KIp/CvYYD7C2oxU3ww8h5h2ems0P6KoXGyQtMfMqsaLsY5ZOrlWb/S HN/Ps8ssG8j3Vhf4fKS9flahM1+jX8YGXqoi+2S8Me8ldZQdDeND7i2teK2Def7V tpx2N8ftUhq0s2aF+KHtdN40+TQnewSW+qIWcHT8i7tTsN/eLoYUvJ5RGBTvyfaC IyHe4nHrn+SafRgJAWMkScmEHxBQiPjrp5E/AWxC7HrUxRInIKDz4rxLlOOr9T89 KK4Zdo/tHS0Pf7PdCYGGSHCQpSrop/FNn9tZXEFViU7IHRFYaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE6aJMT0WGZloeW0WPVhJrAOy90FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83YWZi YjQ4YS03YTQxLTQyMmMtYTI3Yi00YjkyZTA5MDcxNTMvN2FmYmI0OGEtN2E0MS00 MjJjLWEyN2ItNGI5MmUwOTA3MTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2FmYmI0OGEtN2E0MS00MjJjLWEy N2ItNGI5MmUwOTA3MTUzLzdhZmJiNDhhLTdhNDEtNDIyYy1hMjdiLTRiOTJlMDkw NzE1My5jcmwwHwYDVR0jBBgwFoAUIzJ1MrQ9OnACvnyh5vqZeNyLeY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83YWZiYjQ4YS03YTQxLTQyMmMtYTI3Yi00Yjky ZTA5MDcxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtLA6pbvucFioeauYgoRdd oYBoFr1Th8o08tFptv9TEZiNn22x4VyNIdvDXvNJDt0WJs6+Drr1ruryTcMjusYe YLdFJI17DD8u2My5NLPHeY0fVQHnSRDtiwUslomr8dgHGPNzIXoRoZwkS5hjrINr mRrORdlqWNrqa+PqN0UTCU2bVtBb8/gBa7Y0Bs2fDM5DCmuWW3SHzEkaUyOGF7cW 4hN5XoLmGMp+uIPphjtmG85l0EbQfE4wIoItxxlYoZgHHLDp5q5HWOZHtPEMWQdV 2VdIiDF6baCvmsI7j40MtGz7c1OBi1GGb2eKG+o/VkYnS3Vl7Su4vwAH0XsycIki -----END CERTIFICATE-----Generated at Tue Nov 4 09:30:10 2025 by rpki-client