$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft File: a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft (raw, json) Hash identifier: 4jiojf7PTtPq9qZ/EJ18qfrSCdp6YFXmeP4d9a8ExXU= Subject key identifier: 89:C8:DF:2A:65:18:47:C2:3E:B1:80:1D:65:8D:CA:A2:D3:67:4C:09 Authority key identifier: 12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26 Certificate issuer: /CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6 Certificate serial: 010D0C9F4328584B94242A5F087E869DE4BA7400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft Manifest number: 010D0C9F4328584073A832615F8ACBF3D0910BA9 Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Thu 23 Oct 2025 00:00:00 +0000 Files and hashes: 1: a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl (hash: WVuFsrBbQM5y5SMeA5rB9FU9KAHSvJ+6KWZ8RLszHes=) 2: a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa (hash: 0PaYjxxx7bAZ5NpAD6o2GmIgu4/YY9clQjLR+WAV9/A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:2a:5f:08:7e:86:9d:e4:ba:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6 Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 23 00:00:00 2025 GMT Subject: CN=cbb3352e-70da-4926-a5c0-4deff97ce207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:1e:65:6e:d0:3b:3e:4c:b1:41:14:23:75: 00:30:84:91:4e:ae:f1:6a:38:d5:84:53:04:5b:e7: bf:a7:d3:ce:0a:95:eb:2f:ac:4c:b4:99:f0:75:0a: bf:0d:e4:cc:8b:99:10:d3:66:07:18:c5:d2:25:41: b9:e7:d2:3f:12:f3:e0:00:5d:c8:d7:db:c1:e1:67: 25:da:fc:2c:ce:ca:62:c9:27:ef:a4:16:f1:f5:00: 06:91:e0:17:0c:72:ca:c8:c8:f9:40:c5:d0:b9:52: 80:9a:2c:17:09:b4:0f:c1:af:c5:eb:9e:b4:49:83: 78:da:ee:54:fa:d0:d6:33:20:7e:d7:f7:72:ba:d5: 74:72:33:ee:81:9a:1e:82:22:0b:79:54:1a:0a:5a: 6a:c2:5c:69:a9:2a:65:e1:07:e5:4b:b7:e7:a7:35: a3:69:61:29:14:a7:6d:48:df:1d:27:8d:c1:27:8d: 26:96:5f:79:ed:42:3e:c1:99:15:cb:d1:77:de:20: 47:a8:18:98:84:7a:0e:bf:ad:62:55:50:9f:ce:e4: cf:7e:21:b2:72:85:91:91:81:39:76:b8:c8:60:26: 53:9a:d5:34:4a:4b:98:d1:40:47:5c:cd:31:c9:7c: b9:7d:86:d9:d9:9c:a2:82:58:1b:ea:9a:a9:ea:e8: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:DF:2A:65:18:47:C2:3E:B1:80:1D:65:8D:CA:A2:D3:67:4C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl X509v3 Authority Key Identifier: keyid:12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:4a:f3:55:a6:bf:75:3d:7d:3e:22:8b:23:cf:31:32:c0:23: d0:1f:1b:5e:98:70:fe:f1:2e:67:b9:52:a7:08:ed:37:5d:8a: e7:38:25:67:f4:08:3c:01:3d:9b:ff:ba:2b:1e:ea:96:3f:e2: da:43:56:c0:51:10:cb:3e:01:78:21:3e:8c:df:a9:3a:71:ff: 0c:12:55:05:eb:70:1a:01:8d:1f:2b:1e:7c:12:a7:47:7b:d7: f8:08:20:7e:66:64:24:9b:d3:bf:bb:52:f4:c2:a7:b9:8f:d5: d5:9d:e5:0c:59:8d:1d:1a:46:36:50:0d:ed:31:0e:90:83:23: 03:c5:2d:8d:bf:1a:9b:e8:a5:16:1e:aa:53:d5:29:1f:24:fc: 37:3e:ac:6f:7f:47:0f:2c:69:2d:8e:eb:a1:8b:af:b1:c8:a6: 45:ee:c9:02:51:ed:d2:4a:00:08:70:a7:2e:67:c2:0f:d6:6c: bc:e7:66:bf:e3:5a:26:f7:78:26:1a:c2:71:10:79:08:2b:6d: 49:e7:3d:ec:46:8f:f4:45:ad:56:64:fb:16:27:85:be:41:db: db:b8:32:75:d7:90:93:e4:e8:66:2f:13:4f:86:74:5b:57:92: 87:a5:4b:7a:56:14:8d:e4:b0:3a:c7:9e:b8:b0:4a:b2:d6:72: df:86:7d:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCpfCH6GneS6dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVkMjAyNDAtYTNkZC00ZWI3LWEzNzEtZWRlZjg3ZTc5 YmE2MB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMzAwMDAwMFowLzEtMCsGA1UEAxMk Y2JiMzM1MmUtNzBkYS00OTI2LWE1YzAtNGRlZmY5N2NlMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJEeZW7QOz5MsUEUI3UAMISRTq7xajjVhFME W+e/p9POCpXrL6xMtJnwdQq/DeTMi5kQ02YHGMXSJUG559I/EvPgAF3I19vB4Wcl 2vwszspiySfvpBbx9QAGkeAXDHLKyMj5QMXQuVKAmiwXCbQPwa/F6560SYN42u5U +tDWMyB+1/dyutV0cjPugZoegiILeVQaClpqwlxpqSpl4QflS7fnpzWjaWEpFKdt SN8dJ43BJ40mll957UI+wZkVy9F33iBHqBiYhHoOv61iVVCfzuTPfiGycoWRkYE5 drjIYCZTmtU0SkuY0UBHXM0xyXy5fYbZ2Zyiglgb6pqp6ugAewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFInI3yplGEfCPrGAHWWNyqLTZ0wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQy MDI0MC1hM2RkLTRlYjctYTM3MS1lZGVmODdlNzliYTYvYTVkMjAyNDAtYTNkZC00 ZWI3LWEzNzEtZWRlZjg3ZTc5YmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVkMjAyNDAtYTNkZC00ZWI3LWEz NzEtZWRlZjg3ZTc5YmE2L2E1ZDIwMjQwLWEzZGQtNGViNy1hMzcxLWVkZWY4N2U3 OWJhNi5jcmwwHwYDVR0jBBgwFoAUElcRMo3/G9vmXrOAbUw8Ybv1USYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQyMDI0MC1hM2RkLTRlYjctYTM3MS1lZGVm ODdlNzliYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmSvNVpr91PX0+IosjzzEy wCPQHxtemHD+8S5nuVKnCO03XYrnOCVn9Ag8AT2b/7orHuqWP+LaQ1bAURDLPgF4 IT6M36k6cf8MElUF63AaAY0fKx58EqdHe9f4CCB+ZmQkm9O/u1L0wqe5j9XVneUM WY0dGkY2UA3tMQ6QgyMDxS2Nvxqb6KUWHqpT1SkfJPw3Pqxvf0cPLGktjuuhi6+x yKZF7skCUe3SSgAIcKcuZ8IP1my852a/41om93gmGsJxEHkIK21J5z3sRo/0Ra1W ZPsWJ4W+QdvbuDJ115CT5OhmLxNPhnRbV5KHpUt6VhSN5LA6x564sEqy1nLfhn0q -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:18 2025 by rpki-client