$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft File: 4b3d45e3-ef41-40af-afdc-841ce5179b85.mft (raw, json) Hash identifier: qThecyIBETJElQuAyTU1L31Vefc9rPj2cnqxeP2UvHk= Subject key identifier: ED:CA:C7:80:56:12:4E:8A:84:15:E3:8D:CB:50:CB:18:09:48:B4:BD Authority key identifier: F4:73:CA:2D:03:77:26:2D:70:74:73:E5:4A:56:B9:97:0D:F8:27:2D Certificate issuer: /CN=4b3d45e3-ef41-40af-afdc-841ce5179b85 Certificate serial: 010D0C9F4328584BBF69B6B941E0603BD025E7E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft Manifest number: 010D0C9F4328584B369E3F5B705810D63BB846B2 Signing time: Tue 04 Nov 2025 12:00:03 +0000 Manifest this update: Tue 04 Nov 2025 12:00:03 +0000 Manifest next update: Thu 06 Nov 2025 12:00:00 +0000 Files and hashes: 1: 222403e9-7b7e-3e09-b859-cc123c9de5f6.roa (hash: ozLitvEzGV2O2H/BM0x5/LPqY7poSwae6dYpAgU3jdY=) 2: 4b3d45e3-ef41-40af-afdc-841ce5179b85.crl (hash: bmWUFq9UYqUSdLhV8z3MCCdUhKL2HZWQpL7t7fDGrHc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:69:b6:b9:41:e0:60:3b:d0:25:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3d45e3-ef41-40af-afdc-841ce5179b85 Validity Not Before: Nov 4 12:00:03 2025 GMT Not After : Nov 6 12:00:00 2025 GMT Subject: CN=8aa3e143-741c-4a1c-9c5c-53dc36e445a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:38:9f:22:c1:0a:4c:67:15:b9:db:a2:bf: a9:28:0f:be:65:e1:bb:60:33:e1:2e:59:91:6d:86: 44:30:09:59:4d:97:33:04:39:4d:8c:11:7b:7d:9f: 86:69:ae:67:b1:17:18:82:7f:36:bb:42:ec:dd:6b: 3d:94:91:1c:66:13:6a:77:cc:2d:f0:50:07:8a:5c: 36:70:38:ba:4c:ee:01:fa:12:9e:50:55:4b:65:c8: 4b:f7:48:27:b2:af:e9:36:b8:77:57:47:7a:a9:df: 93:49:d4:18:34:13:46:87:52:e5:04:dc:cc:ac:c8: 91:21:60:db:f4:13:14:29:70:80:c3:92:b7:f5:e4: ad:8d:03:54:47:10:b2:22:55:1b:a6:0d:48:23:28: 7a:6f:c3:ca:2c:c4:23:36:5f:ad:16:7a:90:7a:78: cf:b3:59:4d:de:27:6f:53:48:d0:a3:05:78:09:b9: db:46:53:35:25:58:25:9e:21:c0:ae:21:b3:45:ae: 91:b6:35:ac:15:87:aa:19:09:40:70:70:d9:39:6d: 5b:16:60:3a:a1:59:88:2c:25:d1:7a:50:3d:21:2c: 0b:26:be:80:0b:9f:91:a0:97:11:64:93:80:9b:22: d9:61:27:17:66:9b:ff:29:51:d9:64:45:5e:d2:c4: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CA:C7:80:56:12:4E:8A:84:15:E3:8D:CB:50:CB:18:09:48:B4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.crl X509v3 Authority Key Identifier: keyid:F4:73:CA:2D:03:77:26:2D:70:74:73:E5:4A:56:B9:97:0D:F8:27:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:df:2c:0e:76:4a:9e:8f:d4:75:0d:af:91:6c:e8:9f:4f:70: 6e:9b:7a:c5:f1:4f:2f:da:0c:25:97:91:b4:2f:d5:07:5b:51: 67:67:6a:4e:99:1b:9b:b4:66:f3:b4:d3:77:3b:11:8d:be:f2: 87:91:5d:f9:cf:9d:e3:ea:e9:38:db:8b:5c:0c:f1:e7:61:c9: 81:60:bd:d6:81:9a:f9:da:7c:7a:e5:19:ff:2b:ba:50:e1:ea: e6:75:f3:90:18:8c:bf:e5:bf:b4:96:cd:47:05:9b:f7:ce:ac: 17:4a:25:92:35:03:99:90:ed:a2:f6:2f:53:2f:a6:e8:dc:06: 64:12:08:cc:12:52:45:6d:79:c5:d3:e5:01:10:ab:02:5d:f6: 38:bf:d4:45:48:31:23:53:0c:c0:a1:27:29:dc:cc:3b:b5:a2: 19:2b:e9:db:96:d5:e0:57:24:d8:f7:ce:47:d3:69:b6:61:54: 62:8a:04:ac:ef:f9:77:6f:5f:f3:46:d4:54:73:e0:f9:54:83: 57:ef:f1:19:fc:92:2e:62:34:a0:2c:45:b4:25:20:42:9e:8d: b9:48:f1:47:24:cd:71:31:3e:ef:71:ef:ae:38:47:c2:74:49: b3:98:ee:2c:20:c6:42:a5:86:f8:18:c6:d0:52:24:c8:ad:bd: 85:fe:7d:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/aba5QeBgO9Al5+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIzZDQ1ZTMtZWY0MS00MGFmLWFmZGMtODQxY2U1MTc5 Yjg1MB4XDTI1MTEwNDEyMDAwM1oXDTI1MTEwNjEyMDAwMFowLzEtMCsGA1UEAxMk OGFhM2UxNDMtNzQxYy00YTFjLTljNWMtNTNkYzM2ZTQ0NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktg4nyLBCkxnFbnbor+pKA++ZeG7YDPhLlmR bYZEMAlZTZczBDlNjBF7fZ+Gaa5nsRcYgn82u0Ls3Ws9lJEcZhNqd8wt8FAHilw2 cDi6TO4B+hKeUFVLZchL90gnsq/pNrh3V0d6qd+TSdQYNBNGh1LlBNzMrMiRIWDb 9BMUKXCAw5K39eStjQNURxCyIlUbpg1IIyh6b8PKLMQjNl+tFnqQenjPs1lN3idv U0jQowV4CbnbRlM1JVglniHAriGzRa6RtjWsFYeqGQlAcHDZOW1bFmA6oVmILCXR elA9ISwLJr6AC5+RoJcRZJOAmyLZYScXZpv/KVHZZEVe0sS1/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO3Kx4BWEk6KhBXjjctQyxgJSLS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YjNk NDVlMy1lZjQxLTQwYWYtYWZkYy04NDFjZTUxNzliODUvNGIzZDQ1ZTMtZWY0MS00 MGFmLWFmZGMtODQxY2U1MTc5Yjg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGIzZDQ1ZTMtZWY0MS00MGFmLWFm ZGMtODQxY2U1MTc5Yjg1LzRiM2Q0NWUzLWVmNDEtNDBhZi1hZmRjLTg0MWNlNTE3 OWI4NS5jcmwwHwYDVR0jBBgwFoAU9HPKLQN3Ji1wdHPlSla5lw34Jy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YjNkNDVlMy1lZjQxLTQwYWYtYWZkYy04NDFj ZTUxNzliODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz3ywOdkqej9R1Da+RbOif T3Bum3rF8U8v2gwll5G0L9UHW1FnZ2pOmRubtGbztNN3OxGNvvKHkV35z53j6uk4 24tcDPHnYcmBYL3WgZr52nx65Rn/K7pQ4ermdfOQGIy/5b+0ls1HBZv3zqwXSiWS NQOZkO2i9i9TL6bo3AZkEgjMElJFbXnF0+UBEKsCXfY4v9RFSDEjUwzAoScp3Mw7 taIZK+nbltXgVyTY985H02m2YVRiigSs7/l3b1/zRtRUc+D5VINX7/EZ/JIuYjSg LEW0JSBCno25SPFHJM1xMT7vce+uOEfCdEmzmO4sIMZCpYb4GMbQUiTIrb2F/n1I -----END CERTIFICATE-----Generated at Tue Nov 4 17:55:07 2025 by rpki-client