$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft File: 5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft (raw, json) Hash identifier: m7fftHj5XP0uTwNFs44eUXnBShJWW/7ANhWYJsLahuw= Subject key identifier: E9:A5:AE:02:F1:2A:C2:FB:FD:73:47:CF:AD:4D:8A:66:2C:43:B5:CD Authority key identifier: 29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 Certificate issuer: /CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Certificate serial: 010D0C9F4328584B9783B2BE39A219BFDF59A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft Manifest number: 010D0C9F4328584AD6F25F5BDC390FB610364085 Signing time: Tue 21 Oct 2025 05:00:03 +0000 Manifest this update: Tue 21 Oct 2025 05:00:03 +0000 Manifest next update: Thu 23 Oct 2025 05:00:00 +0000 Files and hashes: 1: 5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa (hash: V32TYbnuaJTWBLarR5x1x5wBIWGnXQN0Nk4U6misj+M=) 2: 5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl (hash: j+YY2IEXP3CKf4bl0Ne3cQK/0ypPGTwQ4XSGo7/fIxY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:83:b2:be:39:a2:19:bf:df:59:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Validity Not Before: Oct 21 05:00:03 2025 GMT Not After : Oct 23 05:00:00 2025 GMT Subject: CN=7d6c75a3-e266-4608-b9eb-86865540f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:5c:52:1d:bd:fa:c4:e2:b5:32:ac:58:2b: b0:b8:56:12:83:2f:c7:c1:5d:ce:d7:25:ab:d2:4c: 26:74:8f:56:a4:da:cb:c2:5c:84:d3:82:a2:07:f7: 81:ad:33:ef:58:e5:da:84:28:a6:dc:b8:dc:ae:d8: 62:d7:d4:82:5b:e7:d3:6e:9a:ef:dc:71:ba:2f:8c: fa:a2:48:9d:1e:dd:6f:dc:b9:ab:da:1b:70:37:1f: f4:a7:e5:23:e4:98:1b:50:9e:ca:62:4b:95:0f:a1: 64:f7:09:25:29:b1:e6:3b:c7:35:f9:46:0d:34:3d: 8c:b5:3a:e1:80:5e:cb:6a:79:ea:ec:34:27:ad:16: 0f:bb:11:a3:73:87:6f:7a:d3:21:ac:a1:d0:e0:5d: 7d:b4:f4:5e:44:46:9f:6a:a3:1e:f3:bd:d2:dc:d3: f3:f6:b9:e8:a5:a3:b9:a0:41:fb:55:4c:a8:3c:4a: e0:8b:5c:bf:99:0a:9e:cd:4c:50:c1:7a:67:bc:d8: b0:49:ee:cc:56:e0:8a:dc:d5:22:b1:aa:25:74:59: 3c:af:e5:aa:fa:b9:b8:62:71:88:21:4d:9c:1c:fc: 00:0c:4a:bd:59:72:dd:5a:fa:40:65:0b:cb:95:ca: 21:46:de:3b:87:78:9c:93:96:01:a1:8e:b6:81:08: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A5:AE:02:F1:2A:C2:FB:FD:73:47:CF:AD:4D:8A:66:2C:43:B5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl X509v3 Authority Key Identifier: keyid:29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4e:dc:0c:ce:3f:33:2e:61:66:a0:94:5e:e8:6d:13:e0:85: 16:e7:6a:31:73:59:62:e1:59:4d:7f:be:b8:f1:46:ba:9b:27: 63:de:95:59:f3:f4:83:c6:9b:4c:dd:32:d1:07:dc:ad:66:28: 90:ac:e0:8c:fc:82:a7:01:44:52:fb:d9:64:b3:1f:e7:23:51: 0f:e7:bb:09:85:b5:8b:0c:2b:9c:73:6d:b2:c5:ff:9b:01:65: 98:c3:fb:78:3e:57:ba:9c:ae:81:c7:a0:e3:18:b9:d8:7a:d5: e0:77:8a:f6:fa:30:db:41:04:c2:e7:7b:d4:93:35:04:ee:3e: f0:fb:e8:6f:f0:96:22:25:4c:c1:2e:23:f8:2a:00:13:80:3f: 0a:a0:08:f5:c7:47:2f:63:a2:04:1b:86:50:97:74:8b:e1:a4: 59:60:da:9f:15:17:aa:f3:48:8d:04:5e:40:f1:3c:f2:48:19: d8:8b:41:00:4e:8a:09:79:a6:90:7d:ec:59:c7:88:1e:89:25: 59:03:6d:54:2e:b5:b1:28:e5:1f:42:fa:71:77:25:5a:35:10: 51:b9:06:f4:60:f0:e3:73:36:19:9a:89:ca:2a:98:83:3c:6d: 1f:11:68:1d:b4:eb:04:61:2c:39:df:8f:8e:af:06:5a:fa:b8: 89:ff:c8:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXg7K+OaIZv99ZowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIyYmY4YjMtY2ZmZS00MjJlLWE3OWUtMWMxYWJiZTI1 MWIyMB4XDTI1MTAyMTA1MDAwM1oXDTI1MTAyMzA1MDAwMFowLzEtMCsGA1UEAxMk N2Q2Yzc1YTMtZTI2Ni00NjA4LWI5ZWItODY4NjU1NDBmNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1dcUh29+sTitTKsWCuwuFYSgy/HwV3O1yWr 0kwmdI9WpNrLwlyE04KiB/eBrTPvWOXahCim3Ljcrthi19SCW+fTbprv3HG6L4z6 okidHt1v3Lmr2htwNx/0p+Uj5JgbUJ7KYkuVD6Fk9wklKbHmO8c1+UYNND2MtTrh gF7Lannq7DQnrRYPuxGjc4dvetMhrKHQ4F19tPReREafaqMe873S3NPz9rnopaO5 oEH7VUyoPErgi1y/mQqezUxQwXpnvNiwSe7MVuCK3NUisaoldFk8r+Wq+rm4YnGI IU2cHPwADEq9WXLdWvpAZQvLlcohRt47h3ick5YBoY62gQgzrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOmlrgLxKsL7/XNHz61NimYsQ7XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjJi ZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFhYmJlMjUxYjIvNWIyYmY4YjMtY2ZmZS00 MjJlLWE3OWUtMWMxYWJiZTI1MWIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWIyYmY4YjMtY2ZmZS00MjJlLWE3 OWUtMWMxYWJiZTI1MWIyLzViMmJmOGIzLWNmZmUtNDIyZS1hNzllLTFjMWFiYmUy NTFiMi5jcmwwHwYDVR0jBBgwFoAUKdjXgxehciThZ1nAyNd3x6/51nMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YjJiZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFh YmJlMjUxYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXTtwMzj8zLmFmoJRe6G0T 4IUW52oxc1li4VlNf7648Ua6mydj3pVZ8/SDxptM3TLRB9ytZiiQrOCM/IKnAURS +9lksx/nI1EP57sJhbWLDCucc22yxf+bAWWYw/t4Ple6nK6Bx6DjGLnYetXgd4r2 +jDbQQTC53vUkzUE7j7w++hv8JYiJUzBLiP4KgATgD8KoAj1x0cvY6IEG4ZQl3SL 4aRZYNqfFReq80iNBF5A8TzySBnYi0EATooJeaaQfexZx4geiSVZA21ULrWxKOUf QvpxdyVaNRBRuQb0YPDjczYZmonKKpiDPG0fEWgdtOsEYSw534+OrwZa+riJ/8il -----END CERTIFICATE-----Generated at Tue Oct 21 15:35:53 2025 by rpki-client