$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft File: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft (raw, json) Hash identifier: OCiTE/ouyR2L8zXYwDB5Mk/G98L5CKQF7Qlq7pGGN/c= Subject key identifier: 3C:AC:F9:AC:2C:E1:48:8D:82:A7:16:D8:84:7B:B7:A0:71:6A:11:BD Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F4328584B9283430EAA9A3083C52DEA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft Manifest number: 010D0C9F4328584073A84E30D430488252D86313 Signing time: Sun 19 Oct 2025 10:00:09 +0000 Manifest this update: Sun 19 Oct 2025 10:00:09 +0000 Manifest next update: Tue 21 Oct 2025 10:00:00 +0000 Files and hashes: 1: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl (hash: HJiyKTxXAiYFhywTHcLdau99gs8usk6kZvmFX2vwwpg=) 2: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (hash: 2FE+W0Zho1ltZGVo0cTR7h/f1XgZ5XAGjCpLIqwg5VE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:83:43:0e:aa:9a:30:83:c5:2d:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: Oct 19 10:00:09 2025 GMT Not After : Oct 21 10:00:00 2025 GMT Subject: CN=acfe2c18-bf5d-4418-8efd-5a2ba79342f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:98:08:55:1f:94:0f:e1:77:3f:a9:8b:76: a9:8f:5d:59:df:74:25:97:4d:2f:1b:89:df:f1:32: 4c:be:bf:ab:06:a0:56:4c:70:a7:0a:b7:bb:c1:41: c9:0d:e3:5c:86:c0:2c:82:90:c2:42:1e:d7:e9:50: 72:0b:4c:3c:6d:a2:81:09:78:1a:98:d9:67:4a:4e: 5b:f6:72:6e:28:2b:62:2b:18:fb:7e:23:e5:5e:01: 35:cf:62:bc:d5:cb:54:4f:5f:20:10:23:dd:1c:a4: 17:3b:70:5d:37:af:3b:d4:42:a6:72:69:8c:f0:9e: 55:77:1a:b4:84:5b:76:48:fd:04:47:83:9a:16:45: 8b:8e:61:96:8d:0e:94:3b:88:2c:31:40:18:83:ec: 0c:35:e3:58:dd:af:89:97:ab:94:c7:25:32:be:81: 0f:68:0a:4e:97:a9:1e:99:be:07:f5:cf:c8:48:dd: 01:16:09:c9:42:9c:53:30:b7:e4:5c:8f:cb:0e:57: 28:3d:d0:17:00:b5:00:83:be:9a:d5:18:d3:7a:b4: fd:e0:11:17:5c:c0:3d:92:5a:f9:db:67:6c:50:6e: 8f:75:d1:7f:69:06:16:0c:48:e5:54:29:af:90:54: 55:2b:ab:b8:87:d5:78:6c:83:e9:b2:0b:c9:5b:46: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:F9:AC:2C:E1:48:8D:82:A7:16:D8:84:7B:B7:A0:71:6A:11:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:98:dc:9f:7f:e5:fa:66:c8:14:b7:9d:30:34:f6:80:ba:1d: 73:03:f7:58:91:8a:bb:9a:20:45:16:b4:bf:f6:3b:00:9a:38: 6f:3e:dd:f9:d6:ba:ef:e6:fd:cd:fa:8f:d4:f8:ff:63:ef:b9: 9a:52:5f:d2:cb:1e:ca:bf:05:74:d8:30:c6:4a:7d:63:f0:78: 3f:c8:8c:d8:97:c6:14:68:1b:ee:04:a1:54:d0:fc:08:ca:6a: 6d:31:56:2b:ee:d9:df:de:27:7e:8a:fd:de:7f:52:7a:fe:54: f4:d4:14:84:23:5a:26:45:cf:48:c5:10:07:5e:51:2c:fc:60: fe:fd:56:35:30:82:98:9a:46:6c:70:dc:0f:bc:94:48:9c:5a: dd:65:4d:be:83:7c:94:57:20:70:54:18:08:bf:ed:53:51:69: a4:9b:e3:a1:29:49:0a:84:9e:e5:57:4d:83:53:b3:5f:55:a3: 78:13:ef:8a:24:15:37:09:4f:1a:e3:a0:b0:53:24:db:69:dd: 66:46:ce:27:b0:b1:a0:19:d2:d0:4f:e0:03:c2:f9:5b:b0:ac: 74:f2:1f:88:43:f9:b4:d2:ad:b0:de:98:25:1d:3a:d6:ca:42: 49:a7:79:b9:1b:15:13:df:f7:ea:45:06:5c:c9:a4:cb:fc:b1: 8b:f4:a2:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSg0MOqpowg8Ut6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MTAxOTEwMDAwOVoXDTI1MTAyMTEwMDAwMFowLzEtMCsGA1UEAxMk YWNmZTJjMTgtYmY1ZC00NDE4LThlZmQtNWEyYmE3OTM0MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgOYCFUflA/hdz+pi3apj11Z33Qll00vG4nf 8TJMvr+rBqBWTHCnCre7wUHJDeNchsAsgpDCQh7X6VByC0w8baKBCXgamNlnSk5b 9nJuKCtiKxj7fiPlXgE1z2K81ctUT18gECPdHKQXO3BdN6871EKmcmmM8J5Vdxq0 hFt2SP0ER4OaFkWLjmGWjQ6UO4gsMUAYg+wMNeNY3a+Jl6uUxyUyvoEPaApOl6ke mb4H9c/ISN0BFgnJQpxTMLfkXI/LDlcoPdAXALUAg76a1RjTerT94BEXXMA9klr5 22dsUG6PddF/aQYWDEjlVCmvkFRVK6u4h9V4bIPpsgvJW0bogwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDys+aws4UiNgqcW2IR7t6BxahG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvMWU1ZjhmZjgtNzdhMC00 N2U5LWJhNzktY2NhZjE0N2EyMDcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjmNyff+X6ZsgUt50wNPaA uh1zA/dYkYq7miBFFrS/9jsAmjhvPt351rrv5v3N+o/U+P9j77maUl/Syx7KvwV0 2DDGSn1j8Hg/yIzYl8YUaBvuBKFU0PwIymptMVYr7tnf3id+iv3ef1J6/lT01BSE I1omRc9IxRAHXlEs/GD+/VY1MIKYmkZscNwPvJRInFrdZU2+g3yUVyBwVBgIv+1T UWmkm+OhKUkKhJ7lV02DU7NfVaN4E++KJBU3CU8a46CwUyTbad1mRs4nsLGgGdLQ T+ADwvlbsKx08h+IQ/m00q2w3pglHTrWykJJp3m5GxUT3/fqRQZcyaTL/LGL9KJK -----END CERTIFICATE-----Generated at Mon Oct 20 04:14:55 2025 by rpki-client