$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft File: cd8deff7-6be9-4d16-8349-9f6439775b0a.mft (raw, json) Hash identifier: H6Un6qsAeqZk+3fnBKEW1Bg5mNtITyFgRy+IHH1nhr0= Subject key identifier: 9A:CF:7D:9B:1A:64:E1:90:5B:DB:D7:BE:10:2E:89:B9:E3:4E:8F:7C Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F4328584B956BADBC176DB5EF589C0600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft Manifest number: 010D0C9F432858455B71E226BA6E1C5A8869454D Signing time: Mon 20 Oct 2025 11:00:03 +0000 Manifest this update: Mon 20 Oct 2025 11:00:03 +0000 Manifest next update: Wed 22 Oct 2025 11:00:00 +0000 Files and hashes: 1: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (hash: Nb26YBMdRQasVIIgOaLXbXoyvUsfpOk9v1OP8TYxHpQ=) 2: 92ecd3af-616b-30b8-8f04-b100fd223035.roa (hash: 7MQ+S6ZXNlGxJulRXULGCMITsUMpjZkDOCW/g9HGSuY=) 3: cd8deff7-6be9-4d16-8349-9f6439775b0a.crl (hash: MzAi3iFbXPY+Dk8dnDcQzQR5NBUp9go/0OrP+FKSHIY=) 4: d294f045-3323-3f7a-bd57-473408d74726.roa (hash: gd8cz3tJ8wrIxEIM8ESD6MEkepFvYwBLsvkdjsMbLdE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:6b:ad:bc:17:6d:b5:ef:58:9c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Oct 20 11:00:03 2025 GMT Not After : Oct 22 11:00:00 2025 GMT Subject: CN=c5dfa0df-b724-4ac4-89ab-a75151d71344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:9f:82:5c:5e:e3:8c:d8:78:f5:a9:f9:09: f0:0c:18:81:f0:7b:05:57:29:42:6e:e0:c5:4f:6b: c4:a3:39:e5:f9:21:79:cc:e7:a9:99:d6:e0:80:62: 0b:7e:bf:81:6e:08:33:fa:1f:92:71:8a:3f:ea:eb: 5f:ff:9f:ac:ba:3e:04:99:9e:c2:a9:7a:0b:34:ab: c4:1c:6e:db:23:35:37:24:77:7e:f3:25:6e:6d:34: 63:6f:45:c4:09:6f:85:0d:e9:c9:cf:a2:35:d4:f0: 8c:1c:96:a3:55:e4:00:fa:f1:21:f8:3b:97:7a:e8: ca:91:54:e0:24:cc:0b:9c:34:17:db:68:14:03:0d: 1d:cc:f1:f8:3b:76:52:1f:f3:d0:6a:1d:e2:8b:22: 1b:3c:49:02:76:e6:eb:75:1f:a7:cb:f9:6e:b0:59: ae:31:02:d3:0f:e5:2f:d3:08:0a:48:18:77:a3:58: 9a:1d:b9:3c:11:c5:93:6f:a9:9a:01:cf:f1:ae:ad: 89:94:1d:f7:48:b9:6c:76:2c:3d:a4:23:e6:01:21: 19:02:5b:9b:7c:66:75:77:83:35:c3:e8:ac:30:ee: 4c:11:1c:24:74:36:81:38:9a:72:57:0b:a9:a8:dc: ef:31:fa:31:fa:cd:fe:ac:7f:09:37:d7:b1:f6:ec: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:7D:9B:1A:64:E1:90:5B:DB:D7:BE:10:2E:89:B9:E3:4E:8F:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e1:5e:8d:56:79:1e:34:96:df:52:5c:7a:6c:d0:05:13:25: 95:51:e7:42:cd:75:4d:c3:1b:a2:36:d8:33:35:db:b5:53:85: 27:b4:5a:20:d2:d2:8d:42:e3:17:41:30:db:11:41:af:ea:5b: 72:aa:f8:bc:df:9d:7f:d3:1a:d2:b9:23:51:ea:08:de:d8:ac: 07:d5:a8:83:07:c1:5e:21:ae:19:4d:2a:b2:3f:64:fc:14:f0: 10:8b:43:85:4c:74:20:78:35:e4:d9:49:8b:6a:ec:06:9d:cf: c6:e6:00:3c:2d:be:a8:9e:f3:11:6a:4d:2b:96:d0:5b:b6:f7: f4:60:9d:2d:76:36:ef:25:89:7f:2f:32:db:84:48:00:25:b9: f3:d7:cd:7a:83:5d:08:1b:99:6e:9e:a7:e6:d5:fa:d8:71:13: c4:d4:82:61:75:a4:9c:cc:f6:2e:55:c9:27:13:a0:a9:fe:f3: fb:c3:3f:72:32:b6:27:a7:20:0e:89:7e:0e:fc:cc:bf:42:9c: 72:9e:1a:4f:a3:74:33:2d:06:36:50:fd:ee:d8:33:24:fa:80: df:59:74:84:6e:d3:ae:c4:b6:3f:25:24:bb:c8:4d:72:36:cc: c2:af:01:61:0f:b9:c7:80:72:73:21:c5:ba:e4:74:18:12:da: 81:59:f0:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVa628F22171icBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI1MTAyMDExMDAwM1oXDTI1MTAyMjExMDAwMFowLzEtMCsGA1UEAxMk YzVkZmEwZGYtYjcyNC00YWM0LTg5YWItYTc1MTUxZDcxMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZqfglxe44zYePWp+QnwDBiB8HsFVylCbuDF T2vEoznl+SF5zOepmdbggGILfr+Bbggz+h+ScYo/6utf/5+suj4EmZ7CqXoLNKvE HG7bIzU3JHd+8yVubTRjb0XECW+FDenJz6I11PCMHJajVeQA+vEh+DuXeujKkVTg JMwLnDQX22gUAw0dzPH4O3ZSH/PQah3iiyIbPEkCdubrdR+ny/lusFmuMQLTD+Uv 0wgKSBh3o1iaHbk8EcWTb6maAc/xrq2JlB33SLlsdiw9pCPmASEZAlubfGZ1d4M1 w+isMO5MERwkdDaBOJpyVwupqNzvMfox+s3+rH8JN9ex9uzc5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJrPfZsaZOGQW9vXvhAuibnjTo98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvY2Q4ZGVmZjctNmJlOS00 ZDE2LTgzNDktOWY2NDM5Nzc1YjBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk4V6NVnkeNJbfUlx6bNAF EyWVUedCzXVNwxuiNtgzNdu1U4UntFog0tKNQuMXQTDbEUGv6ltyqvi8351/0xrS uSNR6gje2KwH1aiDB8FeIa4ZTSqyP2T8FPAQi0OFTHQgeDXk2UmLauwGnc/G5gA8 Lb6onvMRak0rltBbtvf0YJ0tdjbvJYl/LzLbhEgAJbnz1816g10IG5lunqfm1frY cRPE1IJhdaSczPYuVcknE6Cp/vP7wz9yMrYnpyAOiX4O/My/QpxynhpPo3QzLQY2 UP3u2DMk+oDfWXSEbtOuxLY/JSS7yE1yNszCrwFhD7nHgHJzIcW65HQYEtqBWfCm -----END CERTIFICATE-----Generated at Tue Oct 21 09:36:34 2025 by rpki-client