$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: KylZRbZZCbLmLMKA87nmPV8IBXeA01u6Z3RdCk9hYU8= Subject key identifier: B3:FD:C1:38:7B:0B:DD:2B:CE:09:51:15:AD:AF:A8:8A:2E:1E:C6:A0 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584B969585E184FBBD842292C1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD0799F8 Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Thu 23 Oct 2025 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: lOTUVMG+6w1DHIEuMHRBDNYQqqJDZiyJtDW9DTMRCXU=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: cQ9RsZSqLz+7oCsoX8xRPcA1ut8lrLrb6NNGKr+awlU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:85:e1:84:fb:bd:84:22:92:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 23 21:00:00 2025 GMT Subject: CN=7124bb6f-c790-4ba6-a205-30713c9fcdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:1e:f3:4d:e6:17:a2:5a:91:6a:b0:8d:7c: d1:31:f0:a7:7b:4b:d9:6b:18:3a:37:e2:d1:6c:dd: 32:bc:73:c9:bc:81:8e:2d:d3:ed:7c:4a:31:70:22: 59:58:8c:49:d9:ae:e2:8a:c7:ea:a9:fd:7e:9b:40: 51:02:e0:c2:cc:a4:9e:63:54:06:08:bb:32:0b:1c: d0:a2:d8:da:24:af:71:bd:96:43:36:64:08:df:34: cd:4f:96:89:63:37:34:dc:d8:ce:44:12:83:0e:13: 66:24:8c:bf:ea:b3:93:30:52:1f:cb:79:18:30:3f: a4:4a:70:a4:cf:ff:e0:9c:d3:26:a7:8f:73:37:9a: 31:7c:79:d3:8b:4a:59:76:85:d7:fb:8c:1f:4a:f9: b9:06:5b:9d:3b:78:30:be:83:a1:52:3f:05:ff:e7: 69:34:08:f7:d0:ee:c9:eb:d9:9e:78:44:36:98:59: e4:66:a8:21:38:a3:a8:bb:53:32:bd:9d:68:48:43: 2c:ba:81:9a:4b:b3:2b:63:27:ae:0e:10:cb:e8:d7: cd:b0:e6:5b:d4:31:28:48:8e:37:8c:85:94:f2:a6: e9:0b:bc:14:ef:e8:c4:38:73:4e:5b:61:1f:76:52: 51:30:0b:e7:a8:a0:09:f2:ae:12:1b:97:3a:b0:8b: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FD:C1:38:7B:0B:DD:2B:CE:09:51:15:AD:AF:A8:8A:2E:1E:C6:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e3:a5:30:38:df:96:19:96:8a:8d:aa:29:70:c7:79:6e:78: 29:31:2b:ba:0d:a5:57:81:3e:76:54:21:55:e9:ca:ba:88:ab: dc:f1:1a:37:d0:03:9d:f0:d7:c4:f5:0f:cd:3d:54:c2:91:5e: 9a:be:c8:05:fb:5c:94:18:83:28:b7:82:97:ba:2b:3d:eb:94: ee:a0:02:82:f1:fe:df:e6:f7:78:9b:81:9e:cb:c5:68:e8:7b: be:af:d7:1c:25:4e:ad:7f:7f:fc:5e:8d:48:75:0e:7a:6d:b3: 48:d6:f6:df:5e:cf:40:7c:b4:b1:ed:2f:09:6d:ee:6b:ee:1d: 9b:a4:5b:b6:0b:1d:d6:e1:10:9e:1d:6f:8c:c6:36:68:ab:d8: 5d:a4:1a:1f:21:99:80:71:ba:e5:9c:e9:1d:a6:cc:05:0a:c1: c3:7d:2c:d8:d1:99:ac:cc:9c:ab:97:87:fd:ab:a8:63:ba:d2: 50:af:48:e2:25:7c:fc:24:8e:d3:9b:01:1e:07:99:13:30:b6: 02:71:bd:60:88:92:f0:7d:e9:b9:db:82:51:61:6e:61:4d:08: 5f:03:c8:22:f7:b8:e6:e7:38:98:93:9b:a7:dc:db:63:e5:79: 44:c1:0c:f0:30:59:18:78:11:aa:74:1c:9e:da:91:fc:d9:7a: d5:31:1a:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYXhhPu9hCKSwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMzIxMDAwMFowLzEtMCsGA1UEAxMk NzEyNGJiNmYtYzc5MC00YmE2LWEyMDUtMzA3MTNjOWZjZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEMe803mF6JakWqwjXzRMfCne0vZaxg6N+LR bN0yvHPJvIGOLdPtfEoxcCJZWIxJ2a7iisfqqf1+m0BRAuDCzKSeY1QGCLsyCxzQ otjaJK9xvZZDNmQI3zTNT5aJYzc03NjORBKDDhNmJIy/6rOTMFIfy3kYMD+kSnCk z//gnNMmp49zN5oxfHnTi0pZdoXX+4wfSvm5BludO3gwvoOhUj8F/+dpNAj30O7J 69meeEQ2mFnkZqghOKOou1MyvZ1oSEMsuoGaS7MrYyeuDhDL6NfNsOZb1DEoSI43 jIWU8qbpC7wU7+jEOHNOW2EfdlJRMAvnqKAJ8q4SG5c6sIuq2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLP9wTh7C90rzglRFa2vqIouHsagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA546UwON+WGZaKjaopcMd5 bngpMSu6DaVXgT52VCFV6cq6iKvc8Ro30AOd8NfE9Q/NPVTCkV6avsgF+1yUGIMo t4KXuis965TuoAKC8f7f5vd4m4Gey8Vo6Hu+r9ccJU6tf3/8Xo1IdQ56bbNI1vbf Xs9AfLSx7S8Jbe5r7h2bpFu2Cx3W4RCeHW+MxjZoq9hdpBofIZmAcbrlnOkdpswF CsHDfSzY0ZmszJyrl4f9q6hjutJQr0jiJXz8JI7TmwEeB5kTMLYCcb1giJLwfem5 24JRYW5hTQhfA8gi97jm5ziYk5un3Ntj5XlEwQzwMFkYeBGqdBye2pH82XrVMRog -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:13 2025 by rpki-client