$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.mft File: 10a08293-f811-4992-99bc-b944a4121d2e.mft (raw, json) Hash identifier: CXuGMf4QvOiCyV95teRDxEavROhM0CRP/wQVzfTOZPE= Subject key identifier: 43:6A:3F:47:77:B4:FB:E3:6F:76:21:D9:D9:6B:0A:E2:AE:44:06:42 Authority key identifier: EB:15:01:BB:8E:FC:CA:05:D8:EF:94:7F:43:6B:29:6D:10:D7:0D:12 Certificate issuer: /CN=10a08293-f811-4992-99bc-b944a4121d2e Certificate serial: 010D0C9F4328584B96B34969930FF48A1C01D240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.mft Manifest number: 010D0C9F43285844FDCC33C3CEAE044E8DACDA3D Signing time: Mon 20 Oct 2025 22:00:09 +0000 Manifest this update: Mon 20 Oct 2025 22:00:09 +0000 Manifest next update: Wed 22 Oct 2025 22:00:00 +0000 Files and hashes: 1: 10a08293-f811-4992-99bc-b944a4121d2e.crl (hash: WQYyZ/UYi0OTI+3OCyXZRdOE0cCsAbbL9R1CzZgB56M=) 2: f5a8ea48-d01d-30a8-9219-e7ab4ba15afd.roa (hash: zGwDwI55CYQdUmN5CSqY7MrxJqfojIyCdqRi4lR7Ouc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:b3:49:69:93:0f:f4:8a:1c:01:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a08293-f811-4992-99bc-b944a4121d2e Validity Not Before: Oct 20 22:00:09 2025 GMT Not After : Oct 22 22:00:00 2025 GMT Subject: CN=f8547231-1426-4132-ae2b-eea148811c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:a1:1d:68:0a:49:cf:55:db:e9:25:18:bd: 74:aa:6a:4e:99:15:4f:6a:8b:5e:d7:46:0e:ba:fc: 88:a7:04:ee:dc:af:b0:fd:35:58:ee:34:1a:e7:12: 40:ff:d8:71:96:d1:83:77:ba:d5:df:11:03:6e:f2: 42:e8:92:6b:8b:5c:ac:c8:06:1c:47:46:e9:5b:d6: c3:40:8a:96:b5:e9:f9:93:5b:66:76:ca:29:9f:dd: 6b:0b:78:a3:8c:24:d8:e5:3d:04:82:5e:7a:ce:bd: df:7e:37:18:61:41:98:6c:be:77:b2:a8:4b:3f:3f: ee:42:9e:5a:de:7f:58:60:32:18:35:49:b4:93:2a: 20:56:75:e4:d9:60:f7:ce:55:00:1c:59:42:c8:98: a9:53:0a:cf:b8:8c:57:ba:81:5f:2c:a4:c0:b4:6c: f7:3e:54:59:bf:f2:73:59:7d:44:c3:70:68:1c:a4: 5c:72:99:39:01:f9:18:6e:a0:97:20:f7:26:3d:a5: 13:cf:6a:d5:bc:d1:26:04:57:0e:04:75:ae:e2:ac: 62:be:7c:61:d2:e7:9d:86:09:a6:f8:3c:3d:05:65: f5:e1:b9:35:f2:bf:83:39:8f:5e:eb:65:44:42:a0: 90:61:dc:7e:e4:44:07:dc:a7:2e:66:70:49:1d:73: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6A:3F:47:77:B4:FB:E3:6F:76:21:D9:D9:6B:0A:E2:AE:44:06:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e/10a08293-f811-4992-99bc-b944a4121d2e.crl X509v3 Authority Key Identifier: keyid:EB:15:01:BB:8E:FC:CA:05:D8:EF:94:7F:43:6B:29:6D:10:D7:0D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10a08293-f811-4992-99bc-b944a4121d2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2b:2b:0d:0e:39:b5:df:55:3c:a4:c5:99:bd:79:8e:fb:89: 8d:01:37:ee:b2:8a:bc:9b:c9:3e:50:d5:3e:1c:0e:b8:46:77: 05:0c:06:f4:3e:7e:29:1e:e9:68:e5:12:f1:07:ff:d4:65:70: be:1c:4d:d3:60:0a:c2:f3:92:02:1a:74:e6:b0:26:b2:88:aa: 4f:92:b6:2c:b9:c8:3b:0e:45:a5:3a:a6:02:25:83:ad:4b:3d: 4b:65:8a:80:98:55:a3:95:b0:67:fb:2c:1d:82:19:2a:a5:b8: a5:92:54:fd:f5:df:63:1e:e5:68:c8:3f:be:6a:48:10:61:65: 51:cc:f1:b0:54:66:db:60:32:fe:32:6a:dc:7c:3f:7d:fe:82: 23:15:6f:e6:bb:e4:b6:94:bc:cf:3a:f3:9a:50:8a:b3:8b:c8: f5:13:ef:07:47:bd:57:e6:63:be:5d:bc:f3:1a:47:6e:0e:4f: be:b5:b5:ae:b1:45:e2:5b:72:8f:71:45:aa:21:5b:cb:ee:61: 8d:bf:c4:d9:9b:17:f6:fe:83:04:18:fd:32:6f:e7:99:8c:a3: 5b:1b:11:18:e0:79:b8:56:af:f6:f8:03:5d:cc:fa:56:a2:16: fb:c6:16:f6:d1:31:ff:7f:9a:37:aa:af:32:8d:23:40:cd:37: 7c:1c:19:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWs0lpkw/0ihwB0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhMDgyOTMtZjgxMS00OTkyLTk5YmMtYjk0NGE0MTIx ZDJlMB4XDTI1MTAyMDIyMDAwOVoXDTI1MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk Zjg1NDcyMzEtMTQyNi00MTMyLWFlMmItZWVhMTQ4ODExYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SuhHWgKSc9V2+klGL10qmpOmRVPaote10YO uvyIpwTu3K+w/TVY7jQa5xJA/9hxltGDd7rV3xEDbvJC6JJri1ysyAYcR0bpW9bD QIqWten5k1tmdsopn91rC3ijjCTY5T0Egl56zr3ffjcYYUGYbL53sqhLPz/uQp5a 3n9YYDIYNUm0kyogVnXk2WD3zlUAHFlCyJipUwrPuIxXuoFfLKTAtGz3PlRZv/Jz WX1Ew3BoHKRccpk5AfkYbqCXIPcmPaUTz2rVvNEmBFcOBHWu4qxivnxh0uedhgmm +Dw9BWX14bk18r+DOY9e62VEQqCQYdx+5EQH3KcuZnBJHXO8qQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFENqP0d3tPvjb3Yh2dlrCuKuRAZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xMGEw ODI5My1mODExLTQ5OTItOTliYy1iOTQ0YTQxMjFkMmUvMTBhMDgyOTMtZjgxMS00 OTkyLTk5YmMtYjk0NGE0MTIxZDJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTBhMDgyOTMtZjgxMS00OTkyLTk5 YmMtYjk0NGE0MTIxZDJlLzEwYTA4MjkzLWY4MTEtNDk5Mi05OWJjLWI5NDRhNDEy MWQyZS5jcmwwHwYDVR0jBBgwFoAU6xUBu478ygXY75R/Q2spbRDXDRIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xMGEwODI5My1mODExLTQ5OTItOTliYy1iOTQ0 YTQxMjFkMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJKysNDjm131U8pMWZvXmO +4mNATfusoq8m8k+UNU+HA64RncFDAb0Pn4pHulo5RLxB//UZXC+HE3TYArC85IC GnTmsCayiKpPkrYsucg7DkWlOqYCJYOtSz1LZYqAmFWjlbBn+ywdghkqpbilklT9 9d9jHuVoyD++akgQYWVRzPGwVGbbYDL+MmrcfD99/oIjFW/mu+S2lLzPOvOaUIqz i8j1E+8HR71X5mO+XbzzGkduDk++tbWusUXiW3KPcUWqIVvL7mGNv8TZmxf2/oME GP0yb+eZjKNbGxEY4Hm4Vq/2+ANdzPpWohb7xhb20TH/f5o3qq8yjSNAzTd8HBlF -----END CERTIFICATE-----Generated at Tue Oct 21 15:42:23 2025 by rpki-client