$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft File: 025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft (raw, json) Hash identifier: m5jiUQgR112+PxtLtvM9Pb22UiXgzmGifGya3CAlxt4= Subject key identifier: 2A:AB:01:00:5C:97:63:E8:01:BC:ED:D6:DF:0D:93:53:89:E3:67:13 Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B Certificate issuer: /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Certificate serial: 010D0C9F4328584B92BEC7AB077EA86DFB53BB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft Manifest number: 010D0C9F4328584073A8534B491C0FD497F7CC13 Signing time: Sun 19 Oct 2025 12:00:03 +0000 Manifest this update: Sun 19 Oct 2025 12:00:03 +0000 Manifest next update: Tue 21 Oct 2025 12:00:00 +0000 Files and hashes: 1: 025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl (hash: uEu45Lf5AKMa5yHgkj/2fI8/R+jmH4wjGyB0UJRJWh0=) 2: 5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (hash: kLSsHkHR3qljNVPyig8HX4ECwjl2QqpH+Z4ESM6LRGc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:be:c7:ab:07:7e:a8:6d:fb:53:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Validity Not Before: Oct 19 12:00:03 2025 GMT Not After : Oct 21 12:00:00 2025 GMT Subject: CN=e401a819-69f1-4fe1-a424-6bd10a77312a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:1f:67:aa:c6:92:b3:f7:09:91:8f:72:17: a9:8e:a2:95:f8:31:e2:59:75:e5:00:47:7d:45:c8: da:2c:89:ec:d3:70:e3:b9:47:50:6a:6d:38:65:d2: 0d:ca:fc:97:a0:59:53:2d:24:1d:be:f3:7b:c5:98: 6b:cd:6b:41:0b:d2:48:74:ec:93:14:15:5b:cb:a0: 07:7a:f0:b1:74:1b:d8:40:27:52:44:ab:ec:41:85: 26:3a:b8:89:ad:6b:a6:a2:e2:06:60:c8:2f:7d:c9: 5e:10:f4:3a:bd:82:0c:8b:27:69:2b:22:d3:85:56: b4:8a:bd:b8:b8:c4:e5:ac:c2:ac:73:71:6d:6b:c0: 8e:44:ae:31:e2:c6:11:9e:ef:e9:3a:ae:ea:31:ca: 0f:68:f1:87:6c:8d:be:fb:44:61:ff:c1:3f:32:31: de:40:d6:dc:04:84:a7:38:4e:29:c3:0e:ad:e0:4f: 6e:17:d1:0b:66:a4:e1:98:ad:83:d7:a0:95:98:3d: 47:28:13:5e:ac:20:fd:94:ec:26:bf:1a:0d:a0:b3: ee:42:1c:47:8f:a9:fc:a3:60:4c:67:a9:7f:ef:1a: 9b:df:ee:39:bf:44:6a:51:9f:27:5a:19:22:a0:1d: 28:03:89:a4:89:07:f8:82:fd:8f:2f:f5:97:77:34: 26:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:01:00:5C:97:63:E8:01:BC:ED:D6:DF:0D:93:53:89:E3:67:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl X509v3 Authority Key Identifier: keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8e:e3:45:17:0a:74:d6:e2:ab:48:85:13:1d:d7:de:e2:46: c8:e5:42:12:bd:83:8b:3d:f3:0d:f3:4f:60:5a:6c:66:68:af: b8:12:a9:31:ba:5d:2b:2f:30:10:b2:4a:37:8b:8b:d4:6f:6e: 8a:74:ac:c9:75:18:08:58:e8:ee:dd:35:ec:58:fe:a8:ec:f4: 3b:10:b9:f0:c4:90:5d:4c:85:88:83:f8:43:ac:15:aa:c8:3e: 46:55:9b:34:2a:8b:a9:f3:a6:0a:db:a7:b7:b8:31:29:5d:a3: 0e:b0:b9:0b:56:50:9a:9b:45:f5:20:11:04:e5:6d:24:61:e0: 55:2c:a4:e1:37:42:7e:b6:b8:4c:ea:6b:bb:9e:d4:4b:c4:43: 9c:cc:bc:82:52:0e:f2:b1:e8:8b:64:ef:57:64:68:fd:3e:a2: e8:2d:21:a7:4d:32:a6:9f:3a:b7:e6:88:3b:82:69:a6:f2:29: 19:42:53:07:c0:9c:50:85:81:25:43:1f:dd:59:c8:70:ce:17: af:e5:bf:4b:e8:a4:42:11:07:34:8c:9c:9e:52:b8:51:c4:c1: 8c:af:99:73:37:3a:fb:8a:f4:c4:57:2e:cd:ab:c4:f2:e5:1d: 26:14:d4:03:db:b8:bd:36:1c:75:7b:ce:5a:08:fa:c6:d2:50: 4c:40:d0:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSvserB36obftTuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1ZjZjZjgtMWVmOC00NDJiLWEyM2QtNDNjZjc5ZWQ1 ZDNmMB4XDTI1MTAxOTEyMDAwM1oXDTI1MTAyMTEyMDAwMFowLzEtMCsGA1UEAxMk ZTQwMWE4MTktNjlmMS00ZmUxLWE0MjQtNmJkMTBhNzczMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5EfZ6rGkrP3CZGPchepjqKV+DHiWXXlAEd9 RcjaLIns03DjuUdQam04ZdINyvyXoFlTLSQdvvN7xZhrzWtBC9JIdOyTFBVby6AH evCxdBvYQCdSRKvsQYUmOriJrWumouIGYMgvfcleEPQ6vYIMiydpKyLThVa0ir24 uMTlrMKsc3Fta8CORK4x4sYRnu/pOq7qMcoPaPGHbI2++0Rh/8E/MjHeQNbcBISn OE4pww6t4E9uF9ELZqThmK2D16CVmD1HKBNerCD9lOwmvxoNoLPuQhxHj6n8o2BM Z6l/7xqb3+45v0RqUZ8nWhkioB0oA4mkiQf4gv2PL/WXdzQm+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqrAQBcl2PoAbzt1t8Nk1OJ42cTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVm NmNmOC0xZWY4LTQ0MmItYTIzZC00M2NmNzllZDVkM2YvMDI1ZjZjZjgtMWVmOC00 NDJiLWEyM2QtNDNjZjc5ZWQ1ZDNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDI1ZjZjZjgtMWVmOC00NDJiLWEy M2QtNDNjZjc5ZWQ1ZDNmLzAyNWY2Y2Y4LTFlZjgtNDQyYi1hMjNkLTQzY2Y3OWVk NWQzZi5jcmwwHwYDVR0jBBgwFoAUaD1Gqlk7+gSlHA4BIDF4Ax1XUWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVmNmNmOC0xZWY4LTQ0MmItYTIzZC00M2Nm NzllZDVkM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqjuNFFwp01uKrSIUTHdfe 4kbI5UISvYOLPfMN809gWmxmaK+4Eqkxul0rLzAQsko3i4vUb26KdKzJdRgIWOju 3TXsWP6o7PQ7ELnwxJBdTIWIg/hDrBWqyD5GVZs0Koup86YK26e3uDEpXaMOsLkL VlCam0X1IBEE5W0kYeBVLKThN0J+trhM6mu7ntRLxEOczLyCUg7yseiLZO9XZGj9 PqLoLSGnTTKmnzq35og7gmmm8ikZQlMHwJxQhYElQx/dWchwzhev5b9L6KRCEQc0 jJyeUrhRxMGMr5lzNzr7ivTEVy7Nq8Ty5R0mFNQD27i9Nhx1e85aCPrG0lBMQNA8 -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:14 2025 by rpki-client