$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft File: 4bfec383-87a2-4429-93ae-a407c690a4e0.mft (raw, json) Hash identifier: lJYSMxhkueclvgKjZw3Zigr0dIXbJLLu4RHibiA6D5U= Subject key identifier: 00:E2:5B:6C:98:40:75:49:CD:2D:0A:F3:19:75:BA:8A:E4:D3:7A:41 Authority key identifier: 9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 Certificate issuer: /CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Certificate serial: 010D0C9F4328584B91B2D17FF36113C7BFFEDE10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft Manifest number: 010D0C9F4328584073A83875C8D861E24EA26688 Signing time: Sun 19 Oct 2025 03:00:08 +0000 Manifest this update: Sun 19 Oct 2025 03:00:08 +0000 Manifest next update: Tue 21 Oct 2025 03:00:00 +0000 Files and hashes: 1: 4bfec383-87a2-4429-93ae-a407c690a4e0.crl (hash: NZpDVDWcRnl4p2dtAOWlS8UaIBZkPOqqJx6ITCUooA4=) 2: a820aa84-3b7e-3422-a459-12296d3fef75.roa (hash: DBW+ScdFLeV5RH52c/wj/Gi/ueOrB1aFVxiGKXI48S0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:b2:d1:7f:f3:61:13:c7:bf:fe:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Validity Not Before: Oct 19 03:00:08 2025 GMT Not After : Oct 21 03:00:00 2025 GMT Subject: CN=1e2ea622-442f-45e6-b515-46d80952fb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:51:ce:61:84:16:90:48:5c:ca:4a:9e:85: dc:30:5e:fd:3e:df:16:29:93:c1:14:46:3c:c0:49: 8f:6a:0e:36:eb:f8:5c:da:84:73:8d:56:34:6f:f2: 53:24:da:08:03:26:a7:56:3d:32:e1:1c:90:d4:1d: 61:4f:64:dd:69:96:87:d5:e7:ae:d3:ea:47:8e:69: dd:02:90:16:c3:ba:b4:75:33:60:13:88:af:d3:d9: f9:40:8d:33:9d:7d:27:7d:8b:b9:77:ed:78:bc:f3: 01:32:ef:25:05:36:68:61:52:02:dd:ba:22:af:f5: 3e:46:e8:2c:22:6c:07:c0:60:5e:87:f1:67:b5:63: 66:ea:77:11:97:aa:4e:a4:77:62:52:ad:11:85:61: 98:d3:34:bb:c4:bf:47:03:ef:0d:d4:41:c6:4e:5d: 7e:8c:3c:8a:80:25:0c:27:dd:8e:a1:15:79:d3:38: 01:cd:d4:f1:2a:d1:c7:68:68:52:7f:57:91:47:bf: cf:10:56:2c:4b:93:82:a9:03:c7:e6:bc:49:d5:f3: 95:85:60:31:2c:f9:24:1d:fa:46:42:b2:74:7b:55: 4c:ca:74:26:78:0c:e0:ef:49:bb:cd:29:61:f9:d7: 68:9c:cf:67:16:33:d1:8f:ba:40:83:07:62:c6:d6: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:5B:6C:98:40:75:49:CD:2D:0A:F3:19:75:BA:8A:E4:D3:7A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl X509v3 Authority Key Identifier: keyid:9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ee:b0:9f:42:2c:3a:ab:91:87:cd:7b:ae:48:e8:b4:ce:4e: 2b:0b:01:7b:77:9d:cd:ce:78:ff:c8:d9:3e:a9:4b:a1:e1:6b: b3:76:96:c5:aa:7b:f6:8c:33:34:67:2b:04:bc:7e:bf:76:d1: d1:83:8a:2b:86:a8:c6:a1:a6:c1:fa:99:d9:cc:3f:21:ba:b7: 8d:53:2d:86:e5:a2:99:99:98:1d:35:17:2b:8b:64:4c:30:6e: 0c:13:46:23:92:0e:41:c3:11:0c:11:7e:41:82:a5:cb:83:a6: 11:72:3d:a2:0b:51:6c:c2:6a:bd:57:77:5d:f8:d1:1e:2e:07: 25:c8:83:e7:2f:df:ce:48:75:68:9b:55:57:32:23:53:cf:56: 65:78:6f:f9:5e:65:fe:0a:ac:ff:92:d8:a1:37:9f:40:fc:86: d2:75:a1:40:b7:ce:d7:83:f6:3a:73:dd:07:d8:fb:02:d6:1a: a7:6d:ea:cf:c1:4b:c5:78:b8:69:61:f3:c3:21:45:0d:dc:57: 94:67:cc:3b:a8:d3:1f:9d:ee:83:df:f8:85:a8:c6:79:67:f6: 7a:a8:8c:ce:31:17:6f:5c:66:b7:1f:90:44:f3:dd:9b:a9:e7: 7e:c6:fb:88:77:2f:58:55:a5:68:95:8f:4c:69:8e:2d:13:69: bc:02:e4:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRstF/82ETx7/+3hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmZWMzODMtODdhMi00NDI5LTkzYWUtYTQwN2M2OTBh NGUwMB4XDTI1MTAxOTAzMDAwOFoXDTI1MTAyMTAzMDAwMFowLzEtMCsGA1UEAxMk MWUyZWE2MjItNDQyZi00NWU2LWI1MTUtNDZkODA5NTJmYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqExRzmGEFpBIXMpKnoXcMF79Pt8WKZPBFEY8 wEmPag426/hc2oRzjVY0b/JTJNoIAyanVj0y4RyQ1B1hT2TdaZaH1eeu0+pHjmnd ApAWw7q0dTNgE4iv09n5QI0znX0nfYu5d+14vPMBMu8lBTZoYVIC3boir/U+Rugs ImwHwGBeh/FntWNm6ncRl6pOpHdiUq0RhWGY0zS7xL9HA+8N1EHGTl1+jDyKgCUM J92OoRV50zgBzdTxKtHHaGhSf1eRR7/PEFYsS5OCqQPH5rxJ1fOVhWAxLPkkHfpG QrJ0e1VMynQmeAzg70m7zSlh+ddonM9nFjPRj7pAgwdixtaaIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFADiW2yYQHVJzS0K8xl1uork03pBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmZl YzM4My04N2EyLTQ0MjktOTNhZS1hNDA3YzY5MGE0ZTAvNGJmZWMzODMtODdhMi00 NDI5LTkzYWUtYTQwN2M2OTBhNGUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJmZWMzODMtODdhMi00NDI5LTkz YWUtYTQwN2M2OTBhNGUwLzRiZmVjMzgzLTg3YTItNDQyOS05M2FlLWE0MDdjNjkw YTRlMC5jcmwwHwYDVR0jBBgwFoAUnzi76BLH2dRniIyhM513fN0fICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmZlYzM4My04N2EyLTQ0MjktOTNhZS1hNDA3 YzY5MGE0ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA47rCfQiw6q5GHzXuuSOi0 zk4rCwF7d53Nznj/yNk+qUuh4WuzdpbFqnv2jDM0ZysEvH6/dtHRg4orhqjGoabB +pnZzD8hureNUy2G5aKZmZgdNRcri2RMMG4ME0Yjkg5BwxEMEX5BgqXLg6YRcj2i C1Fswmq9V3dd+NEeLgclyIPnL9/OSHVom1VXMiNTz1ZleG/5XmX+Cqz/ktihN59A /IbSdaFAt87Xg/Y6c90H2PsC1hqnberPwUvFeLhpYfPDIUUN3FeUZ8w7qNMfne6D 3/iFqMZ5Z/Z6qIzOMRdvXGa3H5BE892bqed+xvuIdy9YVaVolY9MaY4tE2m8AuQr -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:49 2025 by rpki-client