$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft File: d2e35455-e012-4897-80f6-c6386a9f779c.mft (raw, json) Hash identifier: /aiITC2To74u2hFBPOwtdUK40qIFNqyrf0Qpand4M1M= Subject key identifier: 1C:99:0E:7D:6C:3C:A4:51:38:C1:E1:81:43:9F:74:2D:7C:0C:6A:54 Authority key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Certificate issuer: /CN=d2e35455-e012-4897-80f6-c6386a9f779c Certificate serial: 010D0C9F4328584B96B34BCA57A214105AFEF0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft Manifest number: 010D0C9F43285844D6ACB2C19CD62F6FCFCB4AFC Signing time: Mon 20 Oct 2025 22:00:09 +0000 Manifest this update: Mon 20 Oct 2025 22:00:09 +0000 Manifest next update: Wed 22 Oct 2025 22:00:00 +0000 Files and hashes: 1: 932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa (hash: MFdJMp30ICUnwMjZ6SxzrigJPN0XyPObr3feIZ1hgYs=) 2: d2e35455-e012-4897-80f6-c6386a9f779c.crl (hash: T3CGRwc9DJGcV0BFlDZnxhqRjACK2kgUNu0E43CJfEg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:b3:4b:ca:57:a2:14:10:5a:fe:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e35455-e012-4897-80f6-c6386a9f779c Validity Not Before: Oct 20 22:00:09 2025 GMT Not After : Oct 22 22:00:00 2025 GMT Subject: CN=c95827ba-4f93-4b0d-bd46-002b240b1e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:06:db:99:d5:64:46:22:29:50:20:52:a3: 8e:84:fa:34:0d:b7:08:88:2c:8e:38:e2:01:5f:76: 93:1d:2d:19:21:b8:65:ef:cf:21:ad:de:10:11:ca: f3:65:10:c2:d2:dd:4f:4d:cf:de:50:10:98:d7:f0: 84:1a:93:67:cc:e6:6d:0d:b2:87:19:30:b4:66:0e: 80:03:26:dd:3f:3e:64:6a:76:60:9b:d7:a2:c0:71: be:d4:d0:91:37:0d:fe:19:e1:6e:61:59:02:dc:b6: ee:48:76:ac:75:53:bf:4e:f6:58:c8:ea:d3:c9:1e: ea:eb:25:e0:2d:65:25:07:4b:d6:22:df:97:22:e1: ad:0b:ef:f8:f8:3a:37:2c:9a:db:64:65:b6:1b:0f: 33:49:81:0c:f1:62:40:f5:08:82:a3:be:80:00:33: 6b:17:79:fc:b1:7c:d6:b6:01:82:1c:0a:46:2f:4b: 37:c3:9a:02:9f:fe:57:9e:7e:27:c6:24:c3:df:71: 11:92:c9:2a:15:fc:5b:32:67:83:ec:46:73:3b:94: 4f:dc:10:16:8b:fd:6e:52:9e:b7:cf:23:7c:79:4d: 43:d5:0d:11:40:60:00:71:49:56:2a:b2:31:f4:bb: 39:0e:c3:b5:89:99:16:46:d7:1c:96:e2:aa:9a:16: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:99:0E:7D:6C:3C:A4:51:38:C1:E1:81:43:9F:74:2D:7C:0C:6A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl X509v3 Authority Key Identifier: keyid:BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5d:80:28:e8:6e:7b:43:79:e6:89:ab:6e:d4:ce:ed:7e:dc: 2f:81:ac:03:d3:15:68:28:bb:1e:50:0d:1b:7d:5d:39:8e:e0: f6:75:d8:ac:7a:68:9d:a4:fc:ed:e8:46:26:bf:e6:f7:d6:6a: 85:4a:22:4c:0a:35:27:d1:da:77:18:ce:bc:d4:d9:f0:06:fd: 8c:fb:36:1b:75:c1:53:91:de:36:bc:9b:5f:6a:76:f5:09:54: 02:2e:26:85:ef:74:e6:8c:70:a5:27:bc:8f:d0:7a:4a:30:e5: 55:81:95:d6:81:ac:25:c9:3e:5f:c6:15:fb:e7:06:e0:c9:15: 90:ad:97:9a:a3:81:62:1e:2a:6e:47:6c:6f:8a:a6:a4:c7:3b: 62:9a:41:43:b1:83:a5:fb:50:29:37:e1:d1:e9:34:33:fe:8b: ef:5e:f4:d2:96:40:d2:72:de:4d:cd:27:32:02:59:d0:4f:44: 39:47:c0:39:7f:2a:ce:89:99:82:ef:c5:e0:df:93:0e:1e:58: 13:fe:3a:8e:da:70:96:b3:64:1a:4d:fc:d4:c5:8a:5a:8e:07: 66:6a:c1:ec:27:87:ad:6d:c2:06:a7:9d:9e:9d:31:92:e6:af: e2:9a:6b:9d:d2:ac:6d:19:41:98:fa:d7:3b:72:6e:f3:f9:aa: 1c:bc:57:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWs0vKV6IUEFr+8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3 NzljMB4XDTI1MTAyMDIyMDAwOVoXDTI1MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk Yzk1ODI3YmEtNGY5My00YjBkLWJkNDYtMDAyYjI0MGIxZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7cG25nVZEYiKVAgUqOOhPo0DbcIiCyOOOIB X3aTHS0ZIbhl788hrd4QEcrzZRDC0t1PTc/eUBCY1/CEGpNnzOZtDbKHGTC0Zg6A AybdPz5kanZgm9eiwHG+1NCRNw3+GeFuYVkC3LbuSHasdVO/TvZYyOrTyR7q6yXg LWUlB0vWIt+XIuGtC+/4+Do3LJrbZGW2Gw8zSYEM8WJA9QiCo76AADNrF3n8sXzW tgGCHApGL0s3w5oCn/5Xnn4nxiTD33ERkskqFfxbMmeD7EZzO5RP3BAWi/1uUp63 zyN8eU1D1Q0RQGAAcUlWKrIx9Ls5DsO1iZkWRtccluKqmhYZbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFByZDn1sPKRROMHhgUOfdC18DGpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMmUz NTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvZDJlMzU0NTUtZTAxMi00 ODk3LTgwZjYtYzYzODZhOWY3NzljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDJlMzU0NTUtZTAxMi00ODk3LTgw ZjYtYzYzODZhOWY3NzljL2QyZTM1NDU1LWUwMTItNDg5Ny04MGY2LWM2Mzg2YTlm Nzc5Yy5jcmwwHwYDVR0jBBgwFoAUvEWEw2iY1M2b5naDXDNTw2OoF3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4 NmE5Zjc3OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQXYAo6G57Q3nmiatu1M7t ftwvgawD0xVoKLseUA0bfV05juD2ddisemidpPzt6EYmv+b31mqFSiJMCjUn0dp3 GM681NnwBv2M+zYbdcFTkd42vJtfanb1CVQCLiaF73TmjHClJ7yP0HpKMOVVgZXW gawlyT5fxhX75wbgyRWQrZeao4FiHipuR2xviqakxztimkFDsYOl+1ApN+HR6TQz /ovvXvTSlkDSct5NzScyAlnQT0Q5R8A5fyrOiZmC78Xg35MOHlgT/jqO2nCWs2Qa TfzUxYpajgdmasHsJ4etbcIGp52enTGS5q/immud0qxtGUGY+tc7cm7z+aocvFcJ -----END CERTIFICATE-----Generated at Tue Oct 21 15:20:31 2025 by rpki-client