$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft File: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft (raw, json) Hash identifier: GGRUewQajhB+vhN1R69uocl7dxXi9QlQGpsdxZghOFI= Subject key identifier: 34:CB:C7:11:01:2E:A3:70:57:56:1D:41:40:B3:20:F5:41:F9:E4:31 Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 Certificate issuer: /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Certificate serial: 010D0C9F4328584B95E2CB9D8E2CD5D3381FE700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft Manifest number: 010D0C9F4328584073A85A17F676A8EC1A316994 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 796a8503-13ba-3800-8978-3da85e63b13a.roa (hash: MSTPxp+qVAUjJRtkXamClUAkyNc0/+ymoik/yyK8zD8=) 2: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl (hash: kIV9nKzpzQU1CFFXDaNpBBuGFB74crpCp+yoD9R7J4g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cb:9d:8e:2c:d5:d3:38:1f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=648d4275-7adb-49bf-a8ad-5b417fac1877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:b8:d4:15:07:3d:11:18:84:70:97:d9:34: 18:ce:bc:92:99:ed:96:d3:c6:1f:ad:79:e3:8b:23: bd:62:0d:21:dd:be:f8:83:d1:cc:f1:ec:4c:92:0d: 1d:57:41:eb:63:37:c8:9d:44:33:6d:3a:bc:b2:3b: 15:23:54:fd:ab:b9:f1:41:c5:37:77:2d:35:13:ed: b9:e1:11:52:3e:bd:03:f2:6f:71:c4:48:fc:7f:7b: 1c:11:7b:d6:90:73:be:98:4b:02:63:2b:e3:12:60: 08:04:67:aa:a9:a3:04:b4:24:d6:89:94:4c:c6:b3: b1:6d:6a:4b:11:11:c4:73:40:eb:c0:7e:da:9f:0a: 81:29:49:6b:45:0f:ae:c6:85:cd:2b:f7:8a:54:6a: 55:6d:8c:46:19:87:a9:72:fd:60:e5:a5:3c:b7:8d: 50:b0:f4:5a:ff:05:b8:ac:91:70:fb:c0:e8:0b:21: 33:a1:e9:b4:6d:aa:75:6b:43:03:3a:52:cb:08:fd: b5:9c:09:eb:df:42:15:20:05:fc:92:a8:1d:d0:f6: a8:4d:49:bf:ce:13:84:bc:67:6b:5b:f5:14:4b:c4: af:af:ea:cd:46:2b:1a:30:19:0f:ee:5d:ff:73:40: fb:84:0a:73:9d:c9:2d:69:4c:1f:37:6a:32:44:07: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CB:C7:11:01:2E:A3:70:57:56:1D:41:40:B3:20:F5:41:F9:E4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl X509v3 Authority Key Identifier: keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:49:dd:3e:73:a4:8c:5c:8a:62:a6:03:14:f7:14:86:38:7e: 5d:24:b7:aa:b7:98:e6:b0:44:dc:13:36:81:78:1e:7e:30:ce: 38:42:92:50:6d:cc:c7:d9:cf:be:c7:6b:a0:d5:8f:1f:ff:3c: 74:89:e9:3e:31:40:8f:37:9c:99:98:93:51:8d:7a:7f:a3:b3: ce:33:25:f2:37:50:0d:7d:34:c4:55:58:e6:36:16:18:98:de: 2c:99:00:7a:98:fa:75:1c:c9:0d:ac:0d:39:16:aa:42:8a:dd: a6:37:df:a6:90:1f:55:86:70:3c:98:e2:0c:dc:65:ff:ec:b0: 33:71:c7:d0:e0:4f:87:d4:a0:c6:70:67:b8:63:02:e0:54:26: 63:eb:11:7f:a6:89:74:98:09:20:19:63:6f:0f:99:1f:a5:42: 80:b3:9d:61:9e:e3:cd:d8:78:0a:34:fb:c7:23:5e:e5:64:9d: 23:5e:6c:9d:dd:6b:c6:31:0a:a2:80:ee:1e:9f:5d:35:4a:27: 93:dc:ec:98:ee:74:a4:78:d4:f8:fe:00:51:c2:c2:ba:4f:b0: c7:69:89:30:3e:fa:83:18:9c:a8:2d:c6:08:c4:86:5b:68:e7: 15:22:a3:e8:a2:e1:38:a1:2a:b6:2b:c5:3c:42:5d:9f:d6:b6: 68:6f:fd:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4sudjizV0zgf5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYwZmJkMGQtMWUwYS00YjhhLWI0NjctMGI2MTk3ZDhi NWQwMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk NjQ4ZDQyNzUtN2FkYi00OWJmLWE4YWQtNWI0MTdmYWMxODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJe41BUHPREYhHCX2TQYzrySme2W08YfrXnj iyO9Yg0h3b74g9HM8exMkg0dV0HrYzfInUQzbTq8sjsVI1T9q7nxQcU3dy01E+25 4RFSPr0D8m9xxEj8f3scEXvWkHO+mEsCYyvjEmAIBGeqqaMEtCTWiZRMxrOxbWpL ERHEc0DrwH7anwqBKUlrRQ+uxoXNK/eKVGpVbYxGGYepcv1g5aU8t41QsPRa/wW4 rJFw+8DoCyEzoem0bap1a0MDOlLLCP21nAnr30IVIAX8kqgd0PaoTUm/zhOEvGdr W/UUS8Svr+rNRisaMBkP7l3/c0D7hApzncktaUwfN2oyRAdXbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDTLxxEBLqNwV1YdQUCzIPVB+eQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBm YmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYxOTdkOGI1ZDAvYTYwZmJkMGQtMWUwYS00 YjhhLWI0NjctMGI2MTk3ZDhiNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTYwZmJkMGQtMWUwYS00YjhhLWI0 NjctMGI2MTk3ZDhiNWQwL2E2MGZiZDBkLTFlMGEtNGI4YS1iNDY3LTBiNjE5N2Q4 YjVkMC5jcmwwHwYDVR0jBBgwFoAUlQ7z/AkyQbqHL902TDItyhUVPeEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBmYmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYx OTdkOGI1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6Sd0+c6SMXIpipgMU9xSG OH5dJLeqt5jmsETcEzaBeB5+MM44QpJQbczH2c++x2ug1Y8f/zx0iek+MUCPN5yZ mJNRjXp/o7POMyXyN1ANfTTEVVjmNhYYmN4smQB6mPp1HMkNrA05FqpCit2mN9+m kB9VhnA8mOIM3GX/7LAzccfQ4E+H1KDGcGe4YwLgVCZj6xF/pol0mAkgGWNvD5kf pUKAs51hnuPN2HgKNPvHI17lZJ0jXmyd3WvGMQqigO4en101SieT3OyY7nSkeNT4 /gBRwsK6T7DHaYkwPvqDGJyoLcYIxIZbaOcVIqPoouE4oSq2K8U8Ql2f1rZob/3F -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:23 2025 by rpki-client