$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft (raw, json) Hash identifier: mL70Q68RC4OcPNqtmVd94VpyBNM8NJdfL8DzIXH11LY= Subject key identifier: F5:24:49:A3:69:EB:A8:D3:11:5B:9E:15:87:E2:19:A1:81:82:4E:E8 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584B9589746D88492859075DEA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft Manifest number: 010D0C9F43285848DE6E17CAE5012D9C33EA3E6A Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Wed 22 Oct 2025 12:00:00 +0000 Files and hashes: 1: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (hash: 5lWZKS+9bqFCSid2vVWjKQa9taVv/qBRBwyIA8gnhLA=) 2: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl (hash: IlHHXv10iPN1pq0QLLVJ7FHNDVN9+cd3E+IbUEG65Ls=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:74:6d:88:49:28:59:07:5d:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 22 12:00:00 2025 GMT Subject: CN=a60cbe53-a4ef-4549-84e3-a5b459b133df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:dd:ef:30:e1:96:65:bf:fc:62:d2:4c:a1: 2b:87:de:6c:1b:2f:c8:ec:f9:ac:7a:47:b3:72:6d: da:7d:5c:7d:0a:1c:06:b9:b7:41:5d:90:2d:ab:ed: 4a:8c:45:71:c3:01:59:0c:2d:5f:b2:ae:13:51:c5: 33:97:fb:5b:2b:de:2f:2c:3d:e3:fb:e7:91:3b:f6: 25:3c:a3:c6:d3:69:80:20:60:a7:b8:0d:1d:a7:2d: 04:6a:fb:28:c1:46:29:69:d3:f3:08:9a:6c:3d:45: 3d:8e:8f:39:fd:b4:10:25:d8:87:cb:8a:cb:54:e7: b6:fd:52:68:b5:15:20:9a:13:e2:6c:f6:6f:64:97: 55:78:cd:d6:d9:83:12:95:a4:91:ba:ef:f1:42:dd: 13:21:79:34:53:59:fa:06:c8:fb:71:3b:fb:17:6a: ce:1f:90:72:04:2b:4d:6a:4e:74:79:43:a1:4a:1b: 73:97:28:b2:4e:f6:ed:79:8c:60:ce:97:21:dc:02: 5c:b4:45:21:14:b4:11:e8:6f:8a:80:ef:82:35:ad: 10:8c:a2:70:6a:c0:bf:77:b1:f6:3c:0e:ec:28:b8: e2:dc:24:12:47:da:76:85:82:bd:a1:5b:f6:53:7e: 58:f7:d7:97:30:f5:97:13:b2:7e:ef:5d:6c:ec:d8: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:24:49:A3:69:EB:A8:D3:11:5B:9E:15:87:E2:19:A1:81:82:4E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5c:4f:ed:35:e9:ca:dc:d4:7a:d3:bc:e1:bc:cc:9f:41:56: e4:3a:46:fd:29:f7:6a:8b:a8:7a:43:8b:18:e2:ba:7f:f7:25: 38:70:6a:6e:0b:81:a4:df:3b:4f:98:28:58:1f:f3:41:17:1b: f9:bc:e6:05:cc:a8:56:b8:c6:d3:b7:23:27:2c:5b:b4:af:0b: 88:c6:86:e9:76:0e:ee:fd:81:d4:bc:57:73:e1:a9:26:af:6a: e5:0e:86:c3:2a:ab:e9:e6:71:db:6e:6f:06:a9:f7:e7:86:47: 7b:3e:5d:6b:4c:6a:41:de:bb:64:b9:30:e8:2d:05:67:84:85: 1e:9d:84:de:5d:f7:13:2a:7f:c2:a3:72:46:bb:51:89:f8:a5: e7:19:df:34:31:65:ce:39:cd:e0:12:3d:4d:95:30:73:fd:f5: 9a:6e:fb:8e:f3:95:a3:7f:57:89:bb:c7:d7:b7:67:f6:7b:b5: 73:ef:9f:14:4a:ab:4f:a6:5c:72:b8:af:b8:b1:88:46:1b:e0: 15:4c:3d:e5:99:da:ee:6b:f7:03:d3:97:75:30:c9:23:bb:ac: 76:6d:a7:54:4b:a7:5c:48:33:63:80:d3:38:81:7f:3d:a0:e0: bd:ae:25:49:05:59:db:df:71:40:0f:3a:ee:d5:3c:8d:28:0f: a2:83:60:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXRtiEkoWQdd6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMjEyMDAwMFowLzEtMCsGA1UEAxMk YTYwY2JlNTMtYTRlZi00NTQ5LTg0ZTMtYTViNDU5YjEzM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz/d7zDhlmW//GLSTKErh95sGy/I7Pmsekez cm3afVx9ChwGubdBXZAtq+1KjEVxwwFZDC1fsq4TUcUzl/tbK94vLD3j++eRO/Yl PKPG02mAIGCnuA0dpy0EavsowUYpadPzCJpsPUU9jo85/bQQJdiHy4rLVOe2/VJo tRUgmhPibPZvZJdVeM3W2YMSlaSRuu/xQt0TIXk0U1n6Bsj7cTv7F2rOH5ByBCtN ak50eUOhShtzlyiyTvbteYxgzpch3AJctEUhFLQR6G+KgO+CNa0QjKJwasC/d7H2 PA7sKLji3CQSR9p2hYK9oVv2U35Y99eXMPWXE7J+711s7Ng0CwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPUkSaNp66jTEVueFYfiGaGBgk7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvNWYzZmJhZTAtYWQ2Zi00 ZDI3LWJhYmMtZDJjNmFlMTFhMmNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACXE/tNenK3NR607zhvMyf QVbkOkb9Kfdqi6h6Q4sY4rp/9yU4cGpuC4Gk3ztPmChYH/NBFxv5vOYFzKhWuMbT tyMnLFu0rwuIxobpdg7u/YHUvFdz4akmr2rlDobDKqvp5nHbbm8Gqffnhkd7Pl1r TGpB3rtkuTDoLQVnhIUenYTeXfcTKn/Co3JGu1GJ+KXnGd80MWXOOc3gEj1NlTBz /fWabvuO85Wjf1eJu8fXt2f2e7Vz758USqtPplxyuK+4sYhGG+AVTD3lmdrua/cD 05d1MMkju6x2badUS6dcSDNjgNM4gX89oOC9riVJBVnb33FADzru1TyNKA+ig2D+ -----END CERTIFICATE-----Generated at Mon Oct 20 14:56:44 2025 by rpki-client