$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft File: 0898210d-7002-43b6-b05b-c27550a29b39.mft (raw, json) Hash identifier: zM9U4YgEH2FlNyGlyifMroSxTeVIEpur+MucU3cNSMI= Subject key identifier: 93:30:BC:82:F4:D5:FE:4E:E0:C3:9D:2B:F9:3E:D0:73:3D:83:D9:8D Authority key identifier: B1:9D:9D:8B:49:A1:10:E2:CC:EE:37:1F:5C:EE:04:0D:74:BA:9F:06 Certificate issuer: /CN=0898210d-7002-43b6-b05b-c27550a29b39 Certificate serial: 010D0C9F4328584B926570CEFE5FB729DC4FCEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft Manifest number: 010D0C9F4328584073A84B09117F27FF3FA39E3B Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:03 +0000 Manifest next update: Tue 21 Oct 2025 09:00:00 +0000 Files and hashes: 1: 0898210d-7002-43b6-b05b-c27550a29b39.crl (hash: Ix3TFN3sh+vzMkAepA8zpsuGst1SuCCHWH/bgI0I3GQ=) 2: 7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer (hash: b1xgCGQmWhSRLn++3VsiY9/rnhgXJj72eMGyZkVRr6k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:65:70:ce:fe:5f:b7:29:dc:4f:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0898210d-7002-43b6-b05b-c27550a29b39 Validity Not Before: Oct 19 09:00:03 2025 GMT Not After : Oct 21 09:00:00 2025 GMT Subject: CN=7f9cae60-7ab8-4d53-98c4-378d57c02a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:8f:3b:c5:0e:70:7c:40:af:85:3a:1a:de: a5:ef:8a:36:32:6d:cf:a7:d6:ca:30:da:19:62:d3: e2:3f:9f:39:16:16:49:76:9a:01:b4:70:69:0b:5e: 84:22:2c:94:5c:38:5c:fb:db:4f:06:34:55:04:81: da:e9:cd:ec:6f:99:bf:35:1e:3b:0e:80:4c:d8:fd: d9:02:98:45:4e:ed:df:d2:51:f1:99:05:ea:13:0f: 81:7f:a5:87:d1:3a:83:1b:4c:e2:c9:89:3d:39:d6: 82:e8:f1:10:79:94:50:3f:ff:4b:9a:88:0e:e3:78: 62:a4:29:a0:6c:2e:e5:17:5b:9b:75:87:83:7a:98: a9:d2:17:93:c9:ab:39:0a:8a:10:44:df:9c:d5:f5: 3d:f0:53:73:fd:2b:5c:a3:af:d3:b9:88:55:01:ba: d0:48:ff:41:e4:fb:7d:d9:6e:03:f1:dd:ae:81:c3: 37:e0:f6:1e:ac:59:1f:56:51:64:6d:4a:e6:fd:91: 29:ae:d4:12:0f:d0:39:74:d5:91:c2:4d:fa:88:2e: 5e:38:f2:96:0c:b8:89:a9:35:0e:41:ed:98:60:17: 74:73:94:50:16:46:8c:01:1d:57:50:61:96:23:1d: 3b:16:8f:ca:54:25:59:69:69:29:83:69:44:a4:ad: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:BC:82:F4:D5:FE:4E:E0:C3:9D:2B:F9:3E:D0:73:3D:83:D9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl X509v3 Authority Key Identifier: keyid:B1:9D:9D:8B:49:A1:10:E2:CC:EE:37:1F:5C:EE:04:0D:74:BA:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9f:17:25:5a:ab:23:ad:5d:64:81:52:93:34:22:6e:04:49: e4:3d:f5:ed:34:09:b3:09:0c:df:87:37:13:0d:a9:bf:79:fa: cc:46:cb:8c:4a:ea:f7:7a:e3:f9:33:8f:39:67:fe:1b:c9:0f: 21:3a:2d:09:cf:72:ca:16:88:06:29:4e:f9:c4:e4:94:98:92: b9:64:2d:ca:2f:c5:2f:f8:7e:87:a7:68:6c:ee:1e:64:71:c7: 09:bd:28:75:43:4c:4b:32:a5:53:5f:46:b6:5d:bd:c9:99:da: 9c:be:db:91:03:7a:9b:b6:2c:d7:f0:cc:bf:5d:66:b5:23:b5: 5e:c0:89:46:8a:ba:07:b1:f5:63:f7:15:a5:6c:e8:25:8a:d6: 76:d2:58:06:27:9c:05:d5:fc:d5:93:79:49:fc:dd:20:0c:fc: ef:16:96:c3:3f:9e:f0:01:55:58:bd:20:b7:8e:6e:6f:51:01: 78:f1:f2:4e:d8:1a:84:9c:7d:69:f7:d0:60:77:29:7f:35:4f: ca:54:44:7e:b9:3d:8e:5c:ed:e9:0c:cc:76:a7:fc:b4:2c:59: 0f:8c:c1:82:07:31:da:17:0b:a6:30:42:0c:19:2c:a1:6f:a7: be:7a:88:a7:e5:c1:e4:43:a2:e6:4d:08:69:f8:41:53:fe:e0: 55:64:f1:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSZXDO/l+3KdxPzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg5ODIxMGQtNzAwMi00M2I2LWIwNWItYzI3NTUwYTI5 YjM5MB4XDTI1MTAxOTA5MDAwM1oXDTI1MTAyMTA5MDAwMFowLzEtMCsGA1UEAxMk N2Y5Y2FlNjAtN2FiOC00ZDUzLTk4YzQtMzc4ZDU3YzAyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbePO8UOcHxAr4U6Gt6l74o2Mm3Pp9bKMNoZ YtPiP585FhZJdpoBtHBpC16EIiyUXDhc+9tPBjRVBIHa6c3sb5m/NR47DoBM2P3Z AphFTu3f0lHxmQXqEw+Bf6WH0TqDG0ziyYk9OdaC6PEQeZRQP/9LmogO43hipCmg bC7lF1ubdYeDepip0heTyas5CooQRN+c1fU98FNz/Stco6/TuYhVAbrQSP9B5Pt9 2W4D8d2ugcM34PYerFkfVlFkbUrm/ZEprtQSD9A5dNWRwk36iC5eOPKWDLiJqTUO Qe2YYBd0c5RQFkaMAR1XUGGWIx07Fo/KVCVZaWkpg2lEpK2TGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJMwvIL01f5O4MOdK/k+0HM9g9mNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4 MjEwZC03MDAyLTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvMDg5ODIxMGQtNzAwMi00 M2I2LWIwNWItYzI3NTUwYTI5YjM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDg5ODIxMGQtNzAwMi00M2I2LWIw NWItYzI3NTUwYTI5YjM5LzA4OTgyMTBkLTcwMDItNDNiNi1iMDViLWMyNzU1MGEy OWIzOS5jcmwwHwYDVR0jBBgwFoAUsZ2di0mhEOLM7jcfXO4EDXS6nwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAyLTQzYjYtYjA1Yi1jMjc1 NTBhMjliMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnnxclWqsjrV1kgVKTNCJu BEnkPfXtNAmzCQzfhzcTDam/efrMRsuMSur3euP5M485Z/4byQ8hOi0Jz3LKFogG KU75xOSUmJK5ZC3KL8Uv+H6Hp2hs7h5kcccJvSh1Q0xLMqVTX0a2Xb3JmdqcvtuR A3qbtizX8My/XWa1I7VewIlGiroHsfVj9xWlbOglitZ20lgGJ5wF1fzVk3lJ/N0g DPzvFpbDP57wAVVYvSC3jm5vUQF48fJO2BqEnH1p99Bgdyl/NU/KVER+uT2OXO3p DMx2p/y0LFkPjMGCBzHaFwumMEIMGSyhb6e+eoin5cHkQ6LmTQhp+EFT/uBVZPEZ -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:53 2025 by rpki-client