$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft File: a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft (raw, json) Hash identifier: eeduhR/Zwxv/h09UsvQT4C/OOWYCQ05ptstqQCdJlhw= Subject key identifier: 4C:12:F6:23:66:DA:EF:93:0C:4B:31:02:54:10:5F:57:BD:81:C2:F7 Authority key identifier: 39:D9:61:2C:61:AC:B8:5B:95:58:7F:A5:1C:AF:6E:31:87:58:78:BA Certificate issuer: /CN=a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2 Certificate serial: 010D0C9F4328584B961E65B0A9EA877CCCB88980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft Manifest number: 010D0C9F4328584073A81EA3627C88E46E3B3795 Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 2c00b969-31c6-39cf-887a-d4c674d20b23.roa (hash: 3nbq2NQCv7UYbIMg8IxPD9H4K/3aSCf2P3c7EnO//e0=) 2: a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl (hash: XxgW6Zty+taEOHkay1oilT6F6wPM9CtlBTSIJTd7Uzo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:65:b0:a9:ea:87:7c:cc:b8:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2 Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=9bfae0f0-b106-4e2f-9c37-3ffa538f07ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:01:0a:f1:07:30:ce:43:4d:e5:f1:f2:1b: 29:19:fc:24:ba:6a:18:16:d5:5f:48:14:25:fb:ef: ea:b0:0e:5d:df:77:81:92:3e:95:f2:cb:d5:f4:f1: d6:13:bd:d0:54:f3:22:1e:6a:13:7b:7b:1d:08:a7: bd:fd:19:0f:eb:0e:89:86:3a:64:99:a9:75:c8:7d: 8a:8e:cf:dc:90:81:40:76:95:32:78:fb:9f:82:62: 8d:a6:f6:54:41:6b:88:f2:07:bb:f5:1d:ba:e6:f8: b8:8c:65:fc:57:65:4a:93:27:0c:34:56:43:8f:04: 30:71:fe:f4:bc:d8:c1:94:0e:ac:58:84:eb:c8:3b: 9c:4a:54:28:99:f7:3f:28:3a:55:c5:c2:ea:1d:1e: b9:bf:94:65:e4:2f:5d:36:d2:a5:3f:b9:57:33:77: d1:91:20:6c:4f:bc:d1:c3:4a:3e:bd:e7:89:95:7e: 27:00:65:e0:26:6b:d8:1a:28:b1:82:39:76:4b:18: 41:4f:e6:79:52:35:81:c2:af:80:d9:5d:82:90:bb: db:cb:13:15:e7:97:cc:ff:c5:9e:3a:ee:00:b2:a5: 54:7d:52:4c:1f:fd:2c:0b:b6:63:9d:65:35:c2:4f: c0:eb:82:c0:96:3d:59:b5:22:1d:09:09:ae:d5:21: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:F6:23:66:DA:EF:93:0C:4B:31:02:54:10:5F:57:BD:81:C2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl X509v3 Authority Key Identifier: keyid:39:D9:61:2C:61:AC:B8:5B:95:58:7F:A5:1C:AF:6E:31:87:58:78:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:52:3e:4a:c3:25:a0:48:0c:f7:71:ea:9b:47:02:9a:ab:30: 91:f7:e8:21:5f:5a:c4:dc:49:73:6e:58:9e:91:ed:81:6c:c4: 2b:3b:c6:57:b2:24:b7:07:58:b2:31:1a:47:b5:c5:f7:70:85: 37:f8:ec:09:50:c2:5f:7f:4c:9d:7a:3e:86:09:26:ab:4d:cb: 6c:f1:ed:08:47:40:cd:be:a3:d2:91:e5:b6:5d:9c:c9:01:22: 59:21:ae:97:25:de:4b:ad:3b:fe:24:57:bf:9e:a7:34:12:ea: 4d:fc:dd:a7:05:6d:ca:95:25:36:91:0a:73:49:03:59:e7:bf: d7:2d:9e:23:86:a0:77:9d:b9:31:59:07:01:50:89:a4:9c:68: 80:54:c3:64:eb:25:a7:45:c6:f3:47:cb:9c:e2:bb:69:cf:d1: 5f:e1:75:fd:86:0c:1c:88:a9:84:69:6a:9e:67:64:74:6f:5d: 46:d9:26:93:ff:09:e7:5e:2f:65:7f:37:65:1e:43:cf:6a:8e: 42:5b:da:ca:c8:38:58:ee:06:1a:f6:d1:27:af:34:fa:77:76: 7e:80:c1:fa:e1:6c:20:1f:af:2c:ba:19:20:7d:87:ee:28:20: 28:d7:8e:95:96:50:58:11:3f:62:62:5f:a0:ef:0e:75:7c:c5: c2:f8:1f:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmWwqeqHfMy4iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI0MmI4OGMtOGE4ZC00OGVjLWEwZDMtOGE0YWVmNWU0 NmUyMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk OWJmYWUwZjAtYjEwNi00ZTJmLTljMzctM2ZmYTUzOGYwN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkBCvEHMM5DTeXx8hspGfwkumoYFtVfSBQl ++/qsA5d33eBkj6V8svV9PHWE73QVPMiHmoTe3sdCKe9/RkP6w6Jhjpkmal1yH2K js/ckIFAdpUyePufgmKNpvZUQWuI8ge79R265vi4jGX8V2VKkycMNFZDjwQwcf70 vNjBlA6sWITryDucSlQomfc/KDpVxcLqHR65v5Rl5C9dNtKlP7lXM3fRkSBsT7zR w0o+veeJlX4nAGXgJmvYGiixgjl2SxhBT+Z5UjWBwq+A2V2CkLvbyxMV55fM/8We Ou4AsqVUfVJMH/0sC7ZjnWU1wk/A64LAlj1ZtSIdCQmu1SHilwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEwS9iNm2u+TDEsxAlQQX1e9gcL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMjQy Yjg4Yy04YThkLTQ4ZWMtYTBkMy04YTRhZWY1ZTQ2ZTIvYTI0MmI4OGMtOGE4ZC00 OGVjLWEwZDMtOGE0YWVmNWU0NmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTI0MmI4OGMtOGE4ZC00OGVjLWEw ZDMtOGE0YWVmNWU0NmUyL2EyNDJiODhjLThhOGQtNDhlYy1hMGQzLThhNGFlZjVl NDZlMi5jcmwwHwYDVR0jBBgwFoAUOdlhLGGsuFuVWH+lHK9uMYdYeLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMjQyYjg4Yy04YThkLTQ4ZWMtYTBkMy04YTRh ZWY1ZTQ2ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjUj5KwyWgSAz3ceqbRwKa qzCR9+ghX1rE3Elzblieke2BbMQrO8ZXsiS3B1iyMRpHtcX3cIU3+OwJUMJff0yd ej6GCSarTcts8e0IR0DNvqPSkeW2XZzJASJZIa6XJd5LrTv+JFe/nqc0EupN/N2n BW3KlSU2kQpzSQNZ57/XLZ4jhqB3nbkxWQcBUImknGiAVMNk6yWnRcbzR8uc4rtp z9Ff4XX9hgwciKmEaWqeZ2R0b11G2SaT/wnnXi9lfzdlHkPPao5CW9rKyDhY7gYa 9tEnrzT6d3Z+gMH64WwgH68suhkgfYfuKCAo146VllBYET9iYl+g7w51fMXC+B/A -----END CERTIFICATE-----Generated at Mon Oct 20 20:34:59 2025 by rpki-client