$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: o2tl4+7DtY4O8ycDcUnh7tiSuX9oWQCscRLGt9Aaj84= Subject key identifier: EF:66:F4:45:1A:34:53:03:F0:FD:BC:BA:49:A9:9F:10:ED:0A:F2:FE Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584B95E2CE66EF7A906EF902AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C650 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: 6jgWxKtb7g0H1u32dbxApm06UNma5XQo9xjQOEV3teU=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: BwYU5IOu8H+PJ2bgM6ctshxXNsXTRMgPHBb8yzo71HQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:ce:66:ef:7a:90:6e:f9:02:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=6d5a1b35-c88a-4fe8-85f4-1820c03da519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2e:59:20:24:16:ab:cd:c9:44:68:b0:5f:91: 15:b6:6a:63:a7:ee:73:b7:92:d1:4f:82:b2:c4:87: 61:af:17:6e:91:3a:14:f9:1b:41:c0:6b:46:29:d0: 96:31:5f:a3:7f:62:07:d4:75:77:a7:e6:bb:2c:a3: df:5a:29:a9:85:65:6d:cd:5d:7e:b4:79:fc:6a:6a: 5b:de:e5:2c:f5:ce:44:c5:f3:4e:3e:75:dc:e6:f0: b7:32:b8:46:c6:09:d6:fd:b9:3d:f7:b3:1c:ad:95: bd:e4:60:64:7c:c2:a6:55:cb:09:01:f8:cc:aa:0b: 42:d8:02:f5:ce:0d:de:7b:df:2a:dc:13:8d:3b:38: b3:40:d6:69:8c:0c:2f:6b:31:a8:25:5c:24:01:98: 19:8d:a4:80:22:bf:fe:cd:22:1c:ac:36:b9:e9:92: 2a:d5:6f:85:2c:05:92:7f:a0:21:39:2a:04:23:5e: 30:3f:28:a2:f5:3c:87:79:44:5f:53:a4:2a:fa:8a: 57:5d:4b:57:22:69:85:46:40:d1:5e:24:f9:76:bb: d1:a8:bc:22:7c:5f:4c:19:6e:1e:5a:c3:a6:29:8d: c4:a9:63:ae:cf:d2:bb:38:6a:a2:a6:c2:26:46:92: a5:b8:90:a2:a3:46:bc:f4:03:7b:2c:9b:3b:a7:43: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:F4:45:1A:34:53:03:F0:FD:BC:BA:49:A9:9F:10:ED:0A:F2:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f8:f2:bb:6d:6a:f2:47:4b:e8:83:2e:4e:15:0a:fd:56:dc: 5d:85:67:78:04:a9:fb:9d:b0:6e:41:95:16:5b:0c:bb:ba:ad: e5:bb:68:e9:e4:72:a7:d1:82:56:50:02:eb:3b:64:b8:04:71: 4a:19:6f:85:9a:95:d5:c0:74:63:c3:71:a9:dc:92:9c:ab:42: 4d:16:05:fe:4c:c3:df:b0:6a:77:83:7c:02:b8:a1:20:85:b7: 2f:2d:d0:ae:dd:5a:65:58:20:50:3c:a1:63:eb:12:84:d6:31: f5:78:da:d2:e6:b1:17:72:5d:b2:e3:8b:39:da:68:6b:2b:1c: 51:6f:28:d0:2e:e6:08:e7:fe:58:19:f1:df:38:ee:34:65:01: fa:82:f4:65:b6:76:42:ab:ea:be:7c:d4:13:91:c1:d3:ec:04: f3:4c:bc:c3:99:47:20:b4:09:9e:82:ba:6d:8d:7b:02:90:b5: df:12:d2:f7:83:f5:4f:92:6f:d1:52:d1:bf:3d:d1:29:74:7b: 55:47:ff:96:18:06:f9:ea:f8:7d:a3:56:d3:cd:ee:02:e2:d2: 5c:c0:9e:b3:30:ce:66:bf:8b:cf:ed:6e:3a:38:8a:35:ec:d3: b1:85:05:30:a3:73:a2:b6:8e:9b:49:03:82:27:7a:a6:95:dc: 0d:48:9f:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s5m73qQbvkCrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk NmQ1YTFiMzUtYzg4YS00ZmU4LTg1ZjQtMTgyMGMwM2RhNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS5ZICQWq83JRGiwX5EVtmpjp+5zt5LRT4Ky xIdhrxdukToU+RtBwGtGKdCWMV+jf2IH1HV3p+a7LKPfWimphWVtzV1+tHn8ampb 3uUs9c5ExfNOPnXc5vC3MrhGxgnW/bk997McrZW95GBkfMKmVcsJAfjMqgtC2AL1 zg3ee98q3BONOzizQNZpjAwvazGoJVwkAZgZjaSAIr/+zSIcrDa56ZIq1W+FLAWS f6AhOSoEI14wPyii9TyHeURfU6Qq+opXXUtXImmFRkDRXiT5drvRqLwifF9MGW4e WsOmKY3EqWOuz9K7OGqipsImRpKluJCio0a89AN7LJs7p0NXFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO9m9EUaNFMD8P28ukmpnxDtCvL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3+PK7bWryR0vogy5OFQr9 VtxdhWd4BKn7nbBuQZUWWwy7uq3lu2jp5HKn0YJWUALrO2S4BHFKGW+FmpXVwHRj w3Gp3JKcq0JNFgX+TMPfsGp3g3wCuKEghbcvLdCu3VplWCBQPKFj6xKE1jH1eNrS 5rEXcl2y44s52mhrKxxRbyjQLuYI5/5YGfHfOO40ZQH6gvRltnZCq+q+fNQTkcHT 7ATzTLzDmUcgtAmegrptjXsCkLXfEtL3g/VPkm/RUtG/PdEpdHtVR/+WGAb56vh9 o1bTze4C4tJcwJ6zMM5mv4vP7W46OIo17NOxhQUwo3Oito6bSQOCJ3qmldwNSJ9W -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:02 2025 by rpki-client