$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd/575471c3-8f75-4e6b-9ac5-4190cfe611cd.mft File: 575471c3-8f75-4e6b-9ac5-4190cfe611cd.mft (raw, json) Hash identifier: oDz4SpcF8Fcpn35+lo5MOg8G4dW0IhpmhUbP1r78sbU= Subject key identifier: BC:6C:1F:EE:70:36:81:30:7E:4A:32:B5:B4:30:25:89:B2:34:40:6D Authority key identifier: 4B:1E:E0:77:95:8E:B0:C6:7F:FB:EE:75:11:26:2C:D8:2E:84:B4:85 Certificate issuer: /CN=575471c3-8f75-4e6b-9ac5-4190cfe611cd Certificate serial: 010D0C9F4328584B928343B3FA2B9FDF05D33B88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd/575471c3-8f75-4e6b-9ac5-4190cfe611cd.mft Manifest number: 010D0C9F4328584073A84C7FAAA3C9E183002F13 Signing time: Sun 19 Oct 2025 10:00:09 +0000 Manifest this update: Sun 19 Oct 2025 10:00:09 +0000 Manifest next update: Tue 21 Oct 2025 10:00:00 +0000 Files and hashes: 1: 575471c3-8f75-4e6b-9ac5-4190cfe611cd.crl (hash: HMhnN94peuq0j8PxFAIAdJ48LaY8nscSlbpnh3apXgc=) 2: 612bba39-bf97-3f58-80f8-12c285f8c74b.roa (hash: RrPSYdQGy3x94hzvr6IrOeLIM0asVTZir4nq36PjO5Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd/575471c3-8f75-4e6b-9ac5-4190cfe611cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd/575471c3-8f75-4e6b-9ac5-4190cfe611cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:83:43:b3:fa:2b:9f:df:05:d3:3b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575471c3-8f75-4e6b-9ac5-4190cfe611cd Validity Not Before: Oct 19 10:00:09 2025 GMT Not After : Oct 21 10:00:00 2025 GMT Subject: CN=85ce235a-c12f-4cf9-a459-fb46a1112c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:8a:9c:ae:c9:cf:21:29:88:72:9d:59:af: 4f:b8:c1:ce:37:04:da:03:ea:c5:a7:99:e7:c2:77: 6d:5c:1b:b4:b5:98:03:98:02:11:9e:02:51:49:a4: e0:f1:78:dc:e9:a1:ae:5a:c0:3b:eb:48:23:b5:ef: 78:43:a9:1d:7e:87:cb:44:7f:aa:ea:f9:4a:a4:fe: 59:f6:b2:99:a5:68:c6:6a:f3:0d:3c:8e:f1:20:d5: 40:70:24:99:97:ae:3b:d2:8e:4b:00:97:af:ab:cf: db:ed:93:a2:64:db:b2:71:04:1f:ec:98:44:47:69: 10:5b:82:d5:18:30:85:4b:e0:07:0e:18:a4:26:4c: 04:4a:98:26:f6:0f:ee:68:53:3f:dc:6b:97:f9:e3: e3:c1:8d:ab:36:16:23:16:72:f9:24:35:2a:bc:24: 7f:5f:60:34:d5:f4:5a:1e:76:46:78:52:d4:66:26: 26:7e:22:7b:69:66:74:35:6b:1e:76:f5:1c:b8:78: 91:12:a9:cf:c2:de:a5:b5:87:95:80:eb:a3:31:09: fd:ba:dd:09:f8:38:18:d0:33:25:7a:4d:1e:42:82: 20:f7:92:df:39:5d:c3:82:fd:3c:ee:62:05:54:9e: 87:b2:0a:6f:86:84:44:b9:cf:d5:59:50:b0:9a:19: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:1F:EE:70:36:81:30:7E:4A:32:B5:B4:30:25:89:B2:34:40:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd/575471c3-8f75-4e6b-9ac5-4190cfe611cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd/575471c3-8f75-4e6b-9ac5-4190cfe611cd.crl X509v3 Authority Key Identifier: keyid:4B:1E:E0:77:95:8E:B0:C6:7F:FB:EE:75:11:26:2C:D8:2E:84:B4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/575471c3-8f75-4e6b-9ac5-4190cfe611cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b4:1e:b7:92:17:53:93:42:0e:61:e2:d7:56:a1:29:3c:49: f8:45:0e:00:17:bb:95:c2:36:58:f6:89:4c:07:f9:ed:2f:84: e5:1a:96:e0:47:e8:50:b0:67:fa:99:a2:39:62:e7:de:b9:64: a5:26:16:7f:42:8d:77:f2:2b:5c:0d:16:24:27:a6:5f:54:83: 0b:a6:a1:96:b6:7c:8d:37:53:c1:03:cf:11:ea:3c:5c:a9:a4: 33:77:90:ae:77:9f:28:7b:9b:2b:01:41:cc:fb:82:dd:78:03: 45:d5:8f:69:86:50:b7:45:be:64:89:3c:d9:d5:47:33:3a:26: 3b:63:64:f2:83:50:91:bf:7e:f9:8f:16:80:57:87:77:22:00: de:90:e4:ce:86:c2:de:65:3b:dd:02:cd:7c:33:86:98:1b:a4: b0:58:e2:e5:36:bb:b5:99:68:eb:e6:f4:e5:d4:55:a4:dc:2a: 83:0b:05:51:c1:32:fb:22:06:96:78:e3:7c:73:25:1e:41:71: ee:c7:6d:cd:bc:7a:ce:84:24:8d:e8:3b:59:87:e8:43:d8:66: 12:d1:79:41:2c:be:ad:e2:79:3a:32:a0:8d:dc:e5:aa:fd:7d: 08:26:b6:c6:5b:09:57:05:23:1a:bf:03:00:ec:7a:fd:9c:fb: 1b:15:fc:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSg0Oz+iuf3wXTO4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc1NDcxYzMtOGY3NS00ZTZiLTlhYzUtNDE5MGNmZTYx MWNkMB4XDTI1MTAxOTEwMDAwOVoXDTI1MTAyMTEwMDAwMFowLzEtMCsGA1UEAxMk ODVjZTIzNWEtYzEyZi00Y2Y5LWE0NTktZmI0NmExMTEyYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC2KnK7JzyEpiHKdWa9PuMHONwTaA+rFp5nn wndtXBu0tZgDmAIRngJRSaTg8Xjc6aGuWsA760gjte94Q6kdfofLRH+q6vlKpP5Z 9rKZpWjGavMNPI7xINVAcCSZl6470o5LAJevq8/b7ZOiZNuycQQf7JhER2kQW4LV GDCFS+AHDhikJkwESpgm9g/uaFM/3GuX+ePjwY2rNhYjFnL5JDUqvCR/X2A01fRa HnZGeFLUZiYmfiJ7aWZ0NWsedvUcuHiREqnPwt6ltYeVgOujMQn9ut0J+DgY0DMl ek0eQoIg95LfOV3Dgv087mIFVJ6HsgpvhoREuc/VWVCwmhkfNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLxsH+5wNoEwfkoytbQwJYmyNEBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzU0 NzFjMy04Zjc1LTRlNmItOWFjNS00MTkwY2ZlNjExY2QvNTc1NDcxYzMtOGY3NS00 ZTZiLTlhYzUtNDE5MGNmZTYxMWNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc1NDcxYzMtOGY3NS00ZTZiLTlh YzUtNDE5MGNmZTYxMWNkLzU3NTQ3MWMzLThmNzUtNGU2Yi05YWM1LTQxOTBjZmU2 MTFjZC5jcmwwHwYDVR0jBBgwFoAUSx7gd5WOsMZ/++51ESYs2C6EtIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzU0NzFjMy04Zjc1LTRlNmItOWFjNS00MTkw Y2ZlNjExY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUtB63khdTk0IOYeLXVqEp PEn4RQ4AF7uVwjZY9olMB/ntL4TlGpbgR+hQsGf6maI5YufeuWSlJhZ/Qo138itc DRYkJ6ZfVIMLpqGWtnyNN1PBA88R6jxcqaQzd5Cud58oe5srAUHM+4LdeANF1Y9p hlC3Rb5kiTzZ1UczOiY7Y2Tyg1CRv375jxaAV4d3IgDekOTOhsLeZTvdAs18M4aY G6SwWOLlNru1mWjr5vTl1FWk3CqDCwVRwTL7IgaWeON8cyUeQXHux23NvHrOhCSN 6DtZh+hD2GYS0XlBLL6t4nk6MqCN3OWq/X0IJrbGWwlXBSMavwMA7Hr9nPsbFfxn -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:06 2025 by rpki-client