$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: R7vWbMgUN6rjLsnR00d2k98Rq6LpPNp7iG5rqif5q3M= Subject key identifier: A7:CE:71:67:01:32:00:AE:B5:3D:70:60:E7:84:00:E3:87:64:27:F4 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584BB226FAEEBE9E78B6A8020B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F913 Signing time: Thu 30 Oct 2025 18:00:03 +0000 Manifest this update: Thu 30 Oct 2025 18:00:03 +0000 Manifest next update: Sun 02 Nov 2025 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: iZya/rn9QN7hYp3DpOTNjSVf0LMit5uMKTP6Em+CUhI=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: qlBWgQVHIokIjDb6QASxIynORN+xy8Kc7Lulq2B7wKg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:26:fa:ee:be:9e:78:b6:a8:02:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Oct 30 18:00:03 2025 GMT Not After : Nov 2 18:00:00 2025 GMT Subject: CN=c4e9e854-e936-4240-8828-ff0dccfe7421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:75:7a:50:85:fb:a8:68:41:c0:f9:73:8a: 9f:9f:3d:d9:6d:c4:40:28:09:7c:6b:5c:80:24:4c: 6a:98:18:a6:5b:c9:dd:11:69:03:d9:0a:1f:0d:99: 9e:47:81:68:cc:01:a8:66:e8:8b:02:6d:4d:d5:e4: d3:9d:21:45:31:fd:4f:8d:44:94:db:fe:7d:f6:86: 0d:1f:6b:2d:1b:21:c4:8f:7f:77:40:cc:86:ac:c2: 4b:8c:ce:71:f2:10:3c:4a:f6:67:7e:f1:29:9a:de: a5:e0:64:42:d2:74:89:4a:c7:57:fe:5f:52:6f:93: 34:11:57:15:d3:d6:46:a2:aa:04:ba:28:20:5a:a8: b8:f6:77:d3:43:ba:13:83:6b:c9:7d:eb:ef:f0:3d: 87:16:69:e1:eb:3a:d1:bd:10:d4:c7:8c:95:b9:17: f9:b2:ed:32:3a:e6:6b:b5:9c:27:19:22:78:40:76: 9a:27:8e:8b:31:15:59:8b:2c:fa:50:45:41:fa:7d: 42:3b:1a:f3:45:37:a5:6f:89:58:c2:df:f5:db:01: 4e:e9:80:01:96:f5:70:da:aa:63:b4:b7:9b:b0:fa: fa:83:a1:71:5d:54:f7:31:e2:ff:b5:34:96:d6:10: f2:ac:20:a7:bb:86:3f:cf:cb:d7:b1:92:ff:ea:ef: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CE:71:67:01:32:00:AE:B5:3D:70:60:E7:84:00:E3:87:64:27:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:64:f0:df:02:cc:64:31:e8:50:91:93:24:7b:ab:99:22:01: e5:ad:b6:6e:71:08:85:1a:3a:45:a2:0e:71:7d:70:0e:fe:6c: 49:36:49:f0:d9:c6:45:4a:3b:2d:30:50:7d:ec:d9:1b:64:21: 55:e7:19:14:63:3b:6b:78:87:48:1a:02:55:ea:66:57:3a:0e: c8:5d:d8:be:7b:7a:58:3a:bb:b8:e7:03:c9:74:62:9c:d1:9b: 8d:1b:3e:e2:38:06:09:81:cd:28:df:ec:29:b5:63:06:65:e0: 35:b9:73:32:ad:ca:c2:95:10:aa:27:ea:3f:48:5b:ec:7c:2c: eb:c5:a3:98:91:f7:32:dd:27:54:56:81:47:93:05:f4:c9:81: 14:48:96:f8:b7:9f:a2:b7:62:8d:27:9f:56:10:13:13:bf:50: 42:24:e9:61:b0:41:5b:64:cb:54:1c:0b:3b:02:b7:a4:c9:3c: 93:d1:5d:77:13:9c:c7:92:54:85:b7:b4:17:c0:8a:c6:44:c7: 81:6a:4e:a5:8e:01:c3:73:7d:de:e8:9a:6a:a9:f1:6c:ae:18: b8:f6:6c:29:b6:cd:52:8a:4a:9f:97:7f:67:39:d5:2a:b5:2e: f1:59:ea:97:ab:36:ed:db:01:83:42:8e:ec:e6:71:4f:6c:b5: 8e:b1:11:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuyJvruvp54tqgCCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MTAzMDE4MDAwM1oXDTI1MTEwMjE4MDAwMFowLzEtMCsGA1UEAxMk YzRlOWU4NTQtZTkzNi00MjQwLTg4MjgtZmYwZGNjZmU3NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhB1elCF+6hoQcD5c4qfnz3ZbcRAKAl8a1yA JExqmBimW8ndEWkD2QofDZmeR4FozAGoZuiLAm1N1eTTnSFFMf1PjUSU2/599oYN H2stGyHEj393QMyGrMJLjM5x8hA8SvZnfvEpmt6l4GRC0nSJSsdX/l9Sb5M0EVcV 09ZGoqoEuiggWqi49nfTQ7oTg2vJfevv8D2HFmnh6zrRvRDUx4yVuRf5su0yOuZr tZwnGSJ4QHaaJ46LMRVZiyz6UEVB+n1COxrzRTelb4lYwt/12wFO6YABlvVw2qpj tLebsPr6g6FxXVT3MeL/tTSW1hDyrCCnu4Y/z8vXsZL/6u9ZawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKfOcWcBMgCutT1wYOeEAOOHZCf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQZPDfAsxkMehQkZMke6uZ IgHlrbZucQiFGjpFog5xfXAO/mxJNknw2cZFSjstMFB97NkbZCFV5xkUYztreIdI GgJV6mZXOg7IXdi+e3pYOru45wPJdGKc0ZuNGz7iOAYJgc0o3+wptWMGZeA1uXMy rcrClRCqJ+o/SFvsfCzrxaOYkfcy3SdUVoFHkwX0yYEUSJb4t5+it2KNJ59WEBMT v1BCJOlhsEFbZMtUHAs7ArekyTyT0V13E5zHklSFt7QXwIrGRMeBak6ljgHDc33e 6JpqqfFsrhi49mwpts1Sikqfl39nOdUqtS7xWeqXqzbt2wGDQo7s5nFPbLWOsRG8 -----END CERTIFICATE-----Generated at Thu Oct 30 21:42:46 2025 by rpki-client