$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft File: a202cda7-435d-4f90-a518-9afdbac20cab.mft (raw, json) Hash identifier: NJuzWfllwSzrs7Ms+efhIX7EfoDpWUV4NcV6JF4j2fA= Subject key identifier: 55:58:91:16:39:BA:01:42:79:9F:18:8A:F3:00:9D:69:71:7F:7B:96 Authority key identifier: 55:8B:D5:19:57:B0:AC:92:95:64:00:D1:F4:57:E2:E5:AD:33:4A:02 Certificate issuer: /CN=a202cda7-435d-4f90-a518-9afdbac20cab Certificate serial: 010D0C9F4328584B92A10CE8E7C82D14BCF78000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft Manifest number: 010D0C9F4328584073A84EA783950F6AAC2F6DF0 Signing time: Sun 19 Oct 2025 11:00:08 +0000 Manifest this update: Sun 19 Oct 2025 11:00:08 +0000 Manifest next update: Tue 21 Oct 2025 11:00:00 +0000 Files and hashes: 1: 1e55a371-cc42-38c4-96c5-492eca076568.roa (hash: tGol6vf6jkktaLYue/+lm2H6O4yWKjw46oyoKXpADmA=) 2: a202cda7-435d-4f90-a518-9afdbac20cab.crl (hash: Vxih1c38BYzxLxOhlkV5Yv0T3rKzqwb0MmE6Y7Tidg0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:a1:0c:e8:e7:c8:2d:14:bc:f7:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a202cda7-435d-4f90-a518-9afdbac20cab Validity Not Before: Oct 19 11:00:08 2025 GMT Not After : Oct 21 11:00:00 2025 GMT Subject: CN=8d325a49-6e51-4f43-952e-5b97e1f1f66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:82:28:a5:06:ec:ec:55:02:b7:df:f4:d0: b6:a0:a2:10:e7:a2:a7:58:f9:5f:b6:57:c9:3f:94: 61:54:25:66:78:0c:91:72:ac:fb:ca:7f:ee:6b:03: 78:db:af:ba:1b:c3:51:7e:72:72:20:75:17:f5:57: f7:53:45:4c:da:72:59:0b:38:72:27:35:4b:37:e4: 85:78:6e:17:b6:29:48:f3:8f:9b:20:53:dd:32:02: f4:6a:40:80:c7:68:21:08:77:bb:29:ac:15:0f:94: 86:a5:b7:c4:c1:a2:16:06:d5:62:d1:13:c8:68:14: 6d:bd:e9:af:46:78:3a:bc:0e:4d:83:bb:e7:ac:e6: e5:88:26:e2:45:ce:f4:b4:72:9f:c6:de:3c:91:f9: d6:f5:e1:9f:0f:e6:12:8e:50:1a:08:28:d0:d0:12: a8:5a:5c:ef:19:1d:e8:17:a3:1a:76:7c:7a:36:5b: 79:83:a3:48:8e:b2:f2:e9:a4:68:0e:82:48:b4:ec: e0:82:b3:a7:31:f3:d1:20:81:46:8b:13:73:aa:21: dd:40:3d:bf:0f:aa:04:22:8e:73:8c:92:1f:22:0d: d2:87:79:65:41:c1:08:f7:a8:69:64:b9:ed:3f:78: 2d:e9:23:b2:ef:e8:3c:45:46:1b:0b:5f:57:aa:d7: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:91:16:39:BA:01:42:79:9F:18:8A:F3:00:9D:69:71:7F:7B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.crl X509v3 Authority Key Identifier: keyid:55:8B:D5:19:57:B0:AC:92:95:64:00:D1:F4:57:E2:E5:AD:33:4A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a8:48:0e:89:50:02:c1:5a:41:fa:30:aa:26:97:63:ad:46: 08:07:c9:55:ec:aa:31:e3:e6:b2:20:9c:e4:4b:23:94:7f:3d: f5:aa:85:44:93:47:9b:72:56:30:1b:42:90:9a:b2:67:71:66: 84:d2:5a:e8:a5:77:ad:79:38:1e:ec:ce:79:46:c6:d1:82:7b: 7d:e8:b5:24:74:9c:eb:0f:4e:14:21:ba:a8:2b:4d:7c:3c:57: ad:40:83:91:4b:b5:75:42:92:63:a6:07:68:2a:e4:4d:05:9e: 38:42:4a:e2:24:6f:32:08:4d:ed:c5:78:00:66:cf:13:8b:29: 1e:a9:1c:d7:eb:cf:57:ed:d6:b8:0a:24:20:db:02:d4:46:73: a7:46:ef:ad:16:37:89:0d:3a:28:0c:76:d2:f7:f7:77:e1:3a: 40:29:dd:d8:d5:80:e6:6e:90:7d:13:b2:e1:25:b9:3a:53:f9: 20:02:03:6d:b6:85:ea:07:cb:af:c4:93:8c:17:0d:4d:5e:16: 1e:4d:78:cc:ae:19:02:a4:f1:a9:db:8d:a5:23:06:58:a1:e1: 02:b7:e0:ea:b1:e9:18:94:05:f7:7d:8a:57:41:d0:59:d5:0a: 5b:2b:18:f8:5e:34:3a:07:70:25:1a:bc:70:33:22:59:62:21: 83:25:6e:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSoQzo58gtFLz3gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMmNkYTctNDM1ZC00ZjkwLWE1MTgtOWFmZGJhYzIw Y2FiMB4XDTI1MTAxOTExMDAwOFoXDTI1MTAyMTExMDAwMFowLzEtMCsGA1UEAxMk OGQzMjVhNDktNmU1MS00ZjQzLTk1MmUtNWI5N2UxZjFmNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24qCKKUG7OxVArff9NC2oKIQ56KnWPlftlfJ P5RhVCVmeAyRcqz7yn/uawN426+6G8NRfnJyIHUX9Vf3U0VM2nJZCzhyJzVLN+SF eG4XtilI84+bIFPdMgL0akCAx2ghCHe7KawVD5SGpbfEwaIWBtVi0RPIaBRtvemv Rng6vA5Ng7vnrObliCbiRc70tHKfxt48kfnW9eGfD+YSjlAaCCjQ0BKoWlzvGR3o F6Madnx6Nlt5g6NIjrLy6aRoDoJItOzggrOnMfPRIIFGixNzqiHdQD2/D6oEIo5z jJIfIg3Sh3llQcEI96hpZLntP3gt6SOy7+g8RUYbC19XqteE0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFVYkRY5ugFCeZ8YivMAnWlxf3uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAy Y2RhNy00MzVkLTRmOTAtYTUxOC05YWZkYmFjMjBjYWIvYTIwMmNkYTctNDM1ZC00 ZjkwLWE1MTgtOWFmZGJhYzIwY2FiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMmNkYTctNDM1ZC00ZjkwLWE1 MTgtOWFmZGJhYzIwY2FiL2EyMDJjZGE3LTQzNWQtNGY5MC1hNTE4LTlhZmRiYWMy MGNhYi5jcmwwHwYDVR0jBBgwFoAUVYvVGVewrJKVZADR9Ffi5a0zSgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAyY2RhNy00MzVkLTRmOTAtYTUxOC05YWZk YmFjMjBjYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5qEgOiVACwVpB+jCqJpdj rUYIB8lV7Kox4+ayIJzkSyOUfz31qoVEk0ebclYwG0KQmrJncWaE0lropXeteTge 7M55RsbRgnt96LUkdJzrD04UIbqoK018PFetQIORS7V1QpJjpgdoKuRNBZ44Qkri JG8yCE3txXgAZs8TiykeqRzX689X7da4CiQg2wLURnOnRu+tFjeJDTooDHbS9/d3 4TpAKd3Y1YDmbpB9E7LhJbk6U/kgAgNttoXqB8uvxJOMFw1NXhYeTXjMrhkCpPGp 242lIwZYoeECt+DqsekYlAX3fYpXQdBZ1QpbKxj4XjQ6B3AlGrxwMyJZYiGDJW4R -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:05 2025 by rpki-client