$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: 5zykKT5xogJERya2/0UBI3TOhH6rnIiSx+z4e38gfm8= Subject key identifier: 50:49:9D:E5:45:FE:A4:3E:C5:5A:4B:D4:62:45:96:08:DF:50:B2:14 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584B963C2DD083ABAB2A18706FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD91E Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: 2iN58G3AZvVlOrxEKyf5r6DukcCF7lIPW8iPw4fx9YA=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: hxpWiuux6VAa9t8DHvQQGZbnX5WHIskv/dd+piTuSBo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2d:d0:83:ab:ab:2a:18:70:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=0fb28a87-666a-480a-9fd7-7fdf74008a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:3d:f2:f9:24:b3:ff:e0:be:02:5d:da:25: 81:4c:dc:df:e4:11:0a:5a:9a:27:f8:43:c5:58:16: 12:93:8e:86:07:c0:60:f3:ed:f6:5e:c2:72:2a:02: dc:02:74:0c:a1:93:40:6d:a8:d0:ff:1f:fc:47:1e: 92:8c:be:90:3b:c9:7c:03:24:23:73:6a:6e:6b:23: 1a:b4:58:91:c2:98:dd:2f:b1:b8:91:91:9b:b7:c2: 64:03:52:19:c3:15:b0:86:b5:11:99:5f:cf:4a:a9: b7:14:95:0f:81:c1:ae:f0:1c:ba:ea:0e:7f:f4:de: bb:41:0c:85:43:48:2f:18:69:a4:b1:57:2e:3f:2a: 21:60:71:fe:54:08:96:14:14:54:d0:49:e8:30:10: 94:20:f7:5d:83:8f:65:25:2b:9d:ab:1a:6d:62:8b: 19:4a:50:5d:fb:c3:7a:60:b8:47:e8:db:84:05:9f: cf:7c:bc:80:ff:86:84:00:2a:42:29:0a:e0:9b:a2: 8a:31:7d:9a:47:6e:83:c0:91:4e:4b:40:1b:13:58: 28:2d:a2:b7:2b:26:cb:80:c9:01:3f:e0:e3:1a:68: 7b:45:34:e1:09:1e:b3:60:2b:36:17:8e:26:5a:46: d4:7d:20:3f:d2:35:b7:29:f6:a4:49:9a:ad:c5:dc: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:9D:E5:45:FE:A4:3E:C5:5A:4B:D4:62:45:96:08:DF:50:B2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e3:db:5f:78:b2:48:d2:35:08:08:b6:6c:b2:e4:38:00:9b: 52:b1:df:ed:65:35:b3:a7:72:a1:46:f2:47:bf:a8:99:26:90: 16:c5:6b:29:16:e8:50:43:04:77:76:5c:6f:ab:b2:59:bb:35: 80:19:69:cd:19:46:29:13:04:97:6b:64:4c:72:f2:2b:06:50: 95:1b:f9:5e:f0:2c:a8:37:de:a6:9d:e7:2a:8a:28:07:d0:70: 3b:41:da:41:f4:c5:cc:36:ad:64:ec:8a:13:6f:35:03:31:a2: 00:a7:bd:89:05:55:e5:60:a1:b4:9c:f2:83:c2:20:17:0d:f5: d8:e1:46:29:fa:70:49:08:7f:09:c3:ad:10:32:28:fc:ea:c1: 48:ba:99:c1:42:e5:8a:75:dd:84:70:38:98:f8:1c:11:ba:33: 31:27:43:0d:9f:c9:de:df:32:b0:6e:2f:0a:81:82:6e:03:dd: 20:29:fd:e7:64:74:c1:3a:63:b6:ca:b9:bd:88:34:4d:18:50: 17:97:24:fd:ac:2d:8e:49:7c:f2:43:38:e5:9b:3b:01:c0:f4: 7a:dc:a4:36:38:ac:d5:72:84:8a:c0:c7:77:93:a6:d6:83:f1: 1f:80:11:8e:d4:8e:83:bd:ac:e2:60:75:3e:c8:3a:e9:c5:39: c0:81:54:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPC3Qg6urKhhwb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk MGZiMjhhODctNjY2YS00ODBhLTlmZDctN2ZkZjc0MDA4YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFQ98vkks//gvgJd2iWBTNzf5BEKWpon+EPF WBYSk46GB8Bg8+32XsJyKgLcAnQMoZNAbajQ/x/8Rx6SjL6QO8l8AyQjc2puayMa tFiRwpjdL7G4kZGbt8JkA1IZwxWwhrURmV/PSqm3FJUPgcGu8By66g5/9N67QQyF Q0gvGGmksVcuPyohYHH+VAiWFBRU0EnoMBCUIPddg49lJSudqxptYosZSlBd+8N6 YLhH6NuEBZ/PfLyA/4aEACpCKQrgm6KKMX2aR26DwJFOS0AbE1goLaK3KybLgMkB P+DjGmh7RTThCR6zYCs2F44mWkbUfSA/0jW3KfakSZqtxdznjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFBJneVF/qQ+xVpL1GJFlgjfULIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa49tfeLJI0jUICLZssuQ4 AJtSsd/tZTWzp3KhRvJHv6iZJpAWxWspFuhQQwR3dlxvq7JZuzWAGWnNGUYpEwSX a2RMcvIrBlCVG/le8CyoN96mnecqiigH0HA7QdpB9MXMNq1k7IoTbzUDMaIAp72J BVXlYKG0nPKDwiAXDfXY4UYp+nBJCH8Jw60QMij86sFIupnBQuWKdd2EcDiY+BwR ujMxJ0MNn8ne3zKwbi8KgYJuA90gKf3nZHTBOmO2yrm9iDRNGFAXlyT9rC2OSXzy QzjlmzsBwPR63KQ2OKzVcoSKwMd3k6bWg/EfgBGO1I6DvaziYHU+yDrpxTnAgVQZ -----END CERTIFICATE-----Generated at Tue Oct 21 15:25:10 2025 by rpki-client