$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft File: b558fe83-60e3-423a-b823-c3c24b9a60dd.mft (raw, json) Hash identifier: EXfUNiE2ddvpanC0b1QDZGSVG6Zcjg8uKyZu14Xpky4= Subject key identifier: 16:B5:06:C5:6F:66:88:5D:25:B8:81:E2:D4:55:0B:B6:61:DA:E0:90 Authority key identifier: 7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC Certificate issuer: /CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Certificate serial: 010D0C9F4328584B92FA56588188FEA997A12760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft Manifest number: 010D0C9F4328584073A859718A5913EBADD0EA13 Signing time: Sun 19 Oct 2025 14:00:03 +0000 Manifest this update: Sun 19 Oct 2025 14:00:03 +0000 Manifest next update: Tue 21 Oct 2025 14:00:00 +0000 Files and hashes: 1: afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa (hash: tKm/ihFCxXdy50hNcmcoAP/lqEjbR3BjyQWxp1JHE40=) 2: b558fe83-60e3-423a-b823-c3c24b9a60dd.crl (hash: aOkHDt75UemcUgU2K/KjYuQ/YBmhyaQMZro1CwPrBKQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:fa:56:58:81:88:fe:a9:97:a1:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Validity Not Before: Oct 19 14:00:03 2025 GMT Not After : Oct 21 14:00:00 2025 GMT Subject: CN=6fd15ff1-0273-4518-9792-a7ecd58941fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0c:20:af:be:31:5a:cd:b3:54:41:9b:96:b0: 59:47:f1:5d:ab:2c:d7:09:3b:84:bb:df:2b:92:6d: 2b:15:34:ae:03:bc:8f:68:50:ef:49:23:d3:20:6d: 08:b8:b6:1f:55:d2:3a:c1:4d:da:86:6c:a1:23:57: b1:ba:90:ea:72:c9:52:e8:49:be:f1:cd:c5:d7:ea: 9e:c8:4d:49:36:bf:e4:30:9c:d7:67:0a:0b:3e:2a: 95:e8:3b:ff:7f:32:d3:6f:06:2e:a1:52:c4:53:b3: 33:8d:52:e3:f7:cb:d5:5e:b7:7d:a8:ac:46:29:17: bc:e4:63:a7:ca:09:c7:bb:1b:86:4f:5f:57:29:87: f7:86:19:27:2c:a0:f3:bc:78:60:79:e3:17:c8:4d: cf:ca:f1:65:0f:d6:f3:32:85:02:9b:eb:e3:db:5b: 6c:cc:b0:cd:9c:d9:4b:b0:e0:7b:09:f0:8a:bf:d6: 87:e6:fa:5d:c1:1c:a2:d0:ed:44:66:fb:33:77:de: 58:be:cb:8c:f8:33:47:1d:bc:c3:1b:11:c3:e1:02: f3:fe:72:00:6d:e4:b5:49:d4:ab:d0:fd:02:93:4e: d4:ef:c0:ef:1e:4d:f5:f7:b4:3f:41:5d:f7:97:29: c7:09:bc:12:42:da:f8:1f:7a:63:5d:5c:f0:29:3d: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:06:C5:6F:66:88:5D:25:B8:81:E2:D4:55:0B:B6:61:DA:E0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl X509v3 Authority Key Identifier: keyid:7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:21:25:5f:7d:a9:22:73:a2:2a:17:fd:4f:a0:00:60:a9:55: d9:d6:92:71:dd:10:31:a5:dc:20:d8:5e:0b:2d:a3:5f:2e:a1: c6:f3:ed:5e:ba:e1:0d:22:ec:22:ad:66:13:81:8c:0c:54:c7: 57:7c:85:3d:b0:95:76:41:1f:ee:3c:5c:68:c4:d4:37:39:0b: 0a:a6:81:f1:7d:73:35:ad:02:b4:5d:9a:5b:aa:5f:88:1c:f1: fc:f2:d7:51:13:bf:c6:c7:62:76:69:45:06:ab:ef:3e:cd:3d: 50:70:bc:72:1b:dc:6d:d1:82:df:17:86:ba:ca:60:bf:1f:13: 3c:ea:a8:5f:b7:10:68:93:11:0e:54:1e:6d:a0:18:fe:37:46: 37:9b:0a:fe:7d:76:68:72:35:44:f9:42:00:02:05:ab:45:61: 9d:5a:9d:23:f0:27:27:ec:a7:19:33:d2:c1:22:f9:91:56:08: 01:d9:1b:b4:f9:47:2b:4b:e6:bd:df:a8:c7:f0:0c:4e:c2:00: 8c:b7:ac:5d:02:65:6a:f0:24:79:0e:52:e9:e5:47:75:3d:4f: 70:e9:ce:7a:be:eb:3e:67:ac:3c:01:7a:27:f0:8d:a2:d3:e7: 77:24:e1:43:8b:ac:b8:dc:8f:28:89:19:d2:8b:39:64:38:4b: 89:cc:3d:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS+lZYgYj+qZehJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU1OGZlODMtNjBlMy00MjNhLWI4MjMtYzNjMjRiOWE2 MGRkMB4XDTI1MTAxOTE0MDAwM1oXDTI1MTAyMTE0MDAwMFowLzEtMCsGA1UEAxMk NmZkMTVmZjEtMDI3My00NTE4LTk3OTItYTdlY2Q1ODk0MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAwgr74xWs2zVEGblrBZR/FdqyzXCTuEu98r km0rFTSuA7yPaFDvSSPTIG0IuLYfVdI6wU3ahmyhI1exupDqcslS6Em+8c3F1+qe yE1JNr/kMJzXZwoLPiqV6Dv/fzLTbwYuoVLEU7MzjVLj98vVXrd9qKxGKRe85GOn ygnHuxuGT19XKYf3hhknLKDzvHhgeeMXyE3PyvFlD9bzMoUCm+vj21tszLDNnNlL sOB7CfCKv9aH5vpdwRyi0O1EZvszd95YvsuM+DNHHbzDGxHD4QLz/nIAbeS1SdSr 0P0Ck07U78DvHk3197Q/QV33lynHCbwSQtr4H3pjXVzwKT1yyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBa1BsVvZohdJbiB4tRVC7Zh2uCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4 ZmU4My02MGUzLTQyM2EtYjgyMy1jM2MyNGI5YTYwZGQvYjU1OGZlODMtNjBlMy00 MjNhLWI4MjMtYzNjMjRiOWE2MGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU1OGZlODMtNjBlMy00MjNhLWI4 MjMtYzNjMjRiOWE2MGRkL2I1NThmZTgzLTYwZTMtNDIzYS1iODIzLWMzYzI0Yjlh NjBkZC5jcmwwHwYDVR0jBBgwFoAUfNuurgigkqgxUlUmvivhB0Plm8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4ZmU4My02MGUzLTQyM2EtYjgyMy1jM2My NGI5YTYwZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZISVffakic6IqF/1PoABg qVXZ1pJx3RAxpdwg2F4LLaNfLqHG8+1euuENIuwirWYTgYwMVMdXfIU9sJV2QR/u PFxoxNQ3OQsKpoHxfXM1rQK0XZpbql+IHPH88tdRE7/Gx2J2aUUGq+8+zT1QcLxy G9xt0YLfF4a6ymC/HxM86qhftxBokxEOVB5toBj+N0Y3mwr+fXZocjVE+UIAAgWr RWGdWp0j8Ccn7KcZM9LBIvmRVggB2Ru0+UcrS+a936jH8AxOwgCMt6xdAmVq8CR5 DlLp5Ud1PU9w6c56vus+Z6w8AXon8I2i0+d3JOFDi6y43I8oiRnSizlkOEuJzD3F -----END CERTIFICATE-----Generated at Mon Oct 20 00:00:09 2025 by rpki-client