$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft File: c9f645ac-84aa-42e3-b85a-7af9688898a6.mft (raw, json) Hash identifier: KaEiwdUPKDAYjmPdVUtFOYL/CJxVxiDnnQqNoAXYEvU= Subject key identifier: 22:F7:CB:69:67:1F:DF:01:7B:71:C2:75:A2:40:9B:2E:CF:21:01:7F Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F4328584B9677B3CDCD2D2970EB92A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft Manifest number: 010D0C9F43285844C004D6D7C16ABFA97D8A7882 Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (hash: sMQiXF60jTVx6puYS1XYX1i6xR0+Ewp7nypxZwuwhFg=) 2: c9f645ac-84aa-42e3-b85a-7af9688898a6.crl (hash: HOeFcM7Rx2T1Y6onym69aFy/akFZ6go4YfORvICHy2I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b3:cd:cd:2d:29:70:eb:92:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=3473ba63-49b2-4fd8-9942-a98afc10e06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:44:ff:e8:03:63:a4:8b:69:92:4a:7e:1d: a7:15:0f:51:f7:0d:fc:52:ef:91:ad:b6:d4:3f:e3: 63:0d:09:5a:37:ba:a7:18:06:b9:8e:79:c6:bd:2c: 14:01:83:c9:ae:67:46:d0:e0:fb:cd:bc:7f:82:b8: d5:8a:94:83:4e:de:c8:a0:ca:dc:4f:9c:96:8d:3c: 60:37:84:09:97:cf:e8:03:47:b4:d2:ca:8b:1f:63: a7:d5:23:bf:57:78:e4:f4:5c:ec:00:2a:d6:59:2c: 07:c3:92:9c:8b:d8:c5:be:f4:4b:35:b9:da:82:58: 9f:92:6c:ce:ae:00:a2:eb:a7:ab:87:5b:b6:70:6b: 3d:ea:be:cc:7a:0b:c6:a3:04:07:2c:16:b5:7c:db: b3:08:13:9d:8e:28:98:cc:1d:ae:85:ab:a2:cf:33: 8b:48:c5:c5:c3:c1:51:7e:37:23:81:af:2f:68:b8: 39:b1:d9:71:95:5f:02:65:61:f3:05:7c:31:fb:b6: 9f:6b:b7:8d:97:a5:e7:93:90:33:11:ee:2a:7b:21: 60:50:91:f6:a0:a7:be:63:bc:a9:f7:b6:0b:10:f1: 8f:1e:f1:c5:73:e5:fb:8a:28:bf:29:47:b3:23:50: 61:dc:f1:4d:e3:0c:13:72:78:f2:e9:ab:9f:c3:26: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F7:CB:69:67:1F:DF:01:7B:71:C2:75:A2:40:9B:2E:CF:21:01:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0d:34:47:94:34:5f:3b:2a:65:79:58:fe:e4:00:b0:d3:f1: c9:c0:7a:24:19:c8:c4:20:ea:4f:b5:a1:ab:0c:59:fa:3c:d9: 8f:ee:df:5f:c5:5a:05:f8:39:a7:d9:58:9f:a2:b5:ce:9e:10: d2:e8:2f:4b:be:0a:1c:92:0c:1f:e1:ee:78:0f:6e:5a:f2:c4: 49:b9:4f:61:24:ac:8d:19:6b:26:8a:90:01:8c:e5:1f:92:a8: 50:e2:71:32:77:97:96:71:77:90:3f:f5:4f:3c:e5:f3:2f:78: 53:a5:c6:5c:32:20:ed:7d:2c:28:5a:ae:ca:e7:ce:b9:eb:cf: de:fe:13:6d:1d:a8:a7:8a:7a:4c:01:34:2e:60:f3:97:82:ab: a5:94:c3:2a:0b:17:3d:29:76:e1:f6:d3:12:6d:fc:28:92:a8: 50:2f:f4:73:c2:85:e5:cd:83:5b:39:3e:13:e9:c4:20:de:f1: 13:37:af:b0:25:0f:de:20:b6:95:5a:33:09:10:aa:c6:d5:55: 92:11:5a:e0:64:57:8a:5c:63:16:9e:05:40:5e:99:45:93:95: 20:2d:2f:51:29:5d:41:12:19:9f:c2:68:7d:58:b1:a3:14:35: 78:7b:39:26:e2:fc:24:fc:41:35:4c:ac:73:93:56:13:7f:d3: ed:4f:d1:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7PNzS0pcOuSpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk MzQ3M2JhNjMtNDliMi00ZmQ4LTk5NDItYTk4YWZjMTBlMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZlE/+gDY6SLaZJKfh2nFQ9R9w38Uu+RrbbU P+NjDQlaN7qnGAa5jnnGvSwUAYPJrmdG0OD7zbx/grjVipSDTt7IoMrcT5yWjTxg N4QJl8/oA0e00sqLH2On1SO/V3jk9FzsACrWWSwHw5Kci9jFvvRLNbnaglifkmzO rgCi66erh1u2cGs96r7MegvGowQHLBa1fNuzCBOdjiiYzB2uhauizzOLSMXFw8FR fjcjga8vaLg5sdlxlV8CZWHzBXwx+7afa7eNl6Xnk5AzEe4qeyFgUJH2oKe+Y7yp 97YLEPGPHvHFc+X7iii/KUezI1Bh3PFN4wwTcnjy6aufwyYUBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCL3y2lnH98Be3HCdaJAmy7PIQF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvYzlmNjQ1YWMtODRhYS00 MmUzLWI4NWEtN2FmOTY4ODg5OGE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATDTRHlDRfOypleVj+5ACw 0/HJwHokGcjEIOpPtaGrDFn6PNmP7t9fxVoF+Dmn2ViforXOnhDS6C9Lvgockgwf 4e54D25a8sRJuU9hJKyNGWsmipABjOUfkqhQ4nEyd5eWcXeQP/VPPOXzL3hTpcZc MiDtfSwoWq7K586568/e/hNtHaininpMATQuYPOXgqullMMqCxc9KXbh9tMSbfwo kqhQL/RzwoXlzYNbOT4T6cQg3vETN6+wJQ/eILaVWjMJEKrG1VWSEVrgZFeKXGMW ngVAXplFk5UgLS9RKV1BEhmfwmh9WLGjFDV4ezkm4vwk/EE1TKxzk1YTf9PtT9Gz -----END CERTIFICATE-----Generated at Tue Oct 21 15:42:25 2025 by rpki-client