$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.mft (raw, json) Hash identifier: 9F5ZxjHoz0lwkGGMIhPNVHKIrh0RHcmPEuRrObBwnP4= Subject key identifier: 97:93:27:7A:EB:39:B3:14:05:74:59:3D:18:62:43:78:5A:41:7D:34 Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584B9247B3D99F70D20B9B6D4580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft Manifest number: 010D0C9F4328584073A8468DFCDC747631CA8E13 Signing time: Sun 19 Oct 2025 08:00:09 +0000 Manifest this update: Sun 19 Oct 2025 08:00:09 +0000 Manifest next update: Tue 21 Oct 2025 08:00:00 +0000 Files and hashes: 1: 604dd155-d846-413d-9d18-9c6d0f03ee8c.crl (hash: 9v6lDmfmMUCA2MIv26L71/ehd3K1hlarpKuvWx3iIMU=) 2: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (hash: rZf13vt1xJMBlZPWtm02czjn4ya1CBKJwe8yy0cBVys=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:47:b3:d9:9f:70:d2:0b:9b:6d:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Oct 19 08:00:09 2025 GMT Not After : Oct 21 08:00:00 2025 GMT Subject: CN=e5dd7937-72c8-46e2-874e-6ce4bef9e952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:ee:4b:ac:68:61:b4:fa:a6:bf:cd:01:87: 37:5e:4e:b5:f0:68:54:27:bc:af:33:83:56:2f:89: 34:37:c7:15:b8:94:85:0e:d9:f6:27:61:d5:f3:d1: 38:4a:28:07:0d:5b:1c:13:a5:1f:b5:55:b2:02:e1: 5c:c3:99:c8:15:88:74:6c:f9:0e:5d:69:99:b7:79: 8b:fc:c7:54:b4:29:b4:c9:24:6c:44:fe:4b:ed:fa: 71:29:02:84:c3:c7:7b:3c:71:ca:57:d0:25:9c:8f: e1:75:f1:49:35:aa:cb:54:d0:2b:a8:00:2e:c6:0f: a1:df:94:ee:06:d2:db:12:79:03:1c:9d:5e:c8:2e: 5e:b8:13:c2:1c:7c:5a:dc:39:82:1f:07:38:d3:45: a4:dd:24:dc:de:da:d4:68:58:0d:39:ac:e2:56:26: 42:3b:7d:96:ec:4d:7b:ab:ad:f1:eb:df:e1:db:de: 3f:c4:cd:84:ee:26:40:7f:da:c8:a0:e5:7b:97:bb: 64:59:87:42:5f:47:12:59:da:b0:08:6d:98:e6:ff: a7:75:1d:d1:8a:a9:19:66:e0:61:29:23:db:8c:b5: 5c:95:50:da:1e:74:41:f2:46:f7:72:ab:92:ad:a4: d3:1d:09:c6:47:3f:61:54:0f:d3:ab:59:78:cc:8c: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:27:7A:EB:39:B3:14:05:74:59:3D:18:62:43:78:5A:41:7D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a6:70:6a:f1:8b:2f:8b:5a:e3:66:4b:14:ed:9a:0e:12:30: ad:cd:c1:1b:64:16:49:15:4c:cf:21:a0:cc:97:43:db:0f:75: a5:29:c3:d6:98:be:d4:dc:2a:77:cc:40:58:bf:77:c3:5e:37: d6:a2:09:d3:10:c3:aa:64:cd:45:e9:3c:6a:21:1f:72:db:51: 2b:a8:c3:67:f0:b1:7f:7f:23:2b:14:ce:52:a8:4a:e4:dc:88: 41:c3:7d:45:9f:81:74:a2:15:cd:fc:7e:bf:45:af:f7:1f:14: c2:23:8f:73:c5:c3:b5:88:4f:9f:54:7e:3f:d3:f6:9e:0f:af: 77:24:60:d8:27:e3:ac:c1:b3:a7:41:8d:7e:50:e8:cf:10:39: 3d:4e:95:9a:6a:41:5c:ee:be:8b:0e:8b:9a:46:6d:2c:b7:c8: 7c:57:97:ec:15:17:c6:21:32:16:3b:d5:7e:b9:03:f7:14:03: c5:ca:07:89:15:e3:b0:06:19:e2:ad:ca:fe:8d:bc:64:41:f6: d1:6b:41:34:1d:0d:50:10:c0:47:5e:bf:ce:76:77:48:60:e2: d3:00:34:86:44:74:48:a4:f8:a1:7f:fd:f0:8e:36:04:48:7a: 24:08:8e:b8:72:96:be:6e:ff:dd:f8:b9:24:71:51:d3:00:c2: 21:be:1f:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSR7PZn3DSC5ttRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI1MTAxOTA4MDAwOVoXDTI1MTAyMTA4MDAwMFowLzEtMCsGA1UEAxMk ZTVkZDc5MzctNzJjOC00NmUyLTg3NGUtNmNlNGJlZjllOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S/uS6xoYbT6pr/NAYc3Xk618GhUJ7yvM4NW L4k0N8cVuJSFDtn2J2HV89E4SigHDVscE6UftVWyAuFcw5nIFYh0bPkOXWmZt3mL /MdUtCm0ySRsRP5L7fpxKQKEw8d7PHHKV9AlnI/hdfFJNarLVNArqAAuxg+h35Tu BtLbEnkDHJ1eyC5euBPCHHxa3DmCHwc400Wk3STc3trUaFgNOaziViZCO32W7E17 q63x69/h294/xM2E7iZAf9rIoOV7l7tkWYdCX0cSWdqwCG2Y5v+ndR3RiqkZZuBh KSPbjLVclVDaHnRB8kb3cquSraTTHQnGRz9hVA/Tq1l4zIyQrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJeTJ3rrObMUBXRZPRhiQ3haQX00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvNjA0ZGQxNTUtZDg0Ni00 MTNkLTlkMTgtOWM2ZDBmMDNlZThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALpnBq8Ysvi1rjZksU7ZoO EjCtzcEbZBZJFUzPIaDMl0PbD3WlKcPWmL7U3Cp3zEBYv3fDXjfWognTEMOqZM1F 6TxqIR9y21ErqMNn8LF/fyMrFM5SqErk3IhBw31Fn4F0ohXN/H6/Ra/3HxTCI49z xcO1iE+fVH4/0/aeD693JGDYJ+OswbOnQY1+UOjPEDk9TpWaakFc7r6LDouaRm0s t8h8V5fsFRfGITIWO9V+uQP3FAPFygeJFeOwBhnircr+jbxkQfbRa0E0HQ1QEMBH Xr/OdndIYOLTADSGRHRIpPihf/3wjjYESHokCI64cpa+bv/d+LkkcVHTAMIhvh/4 -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:49 2025 by rpki-client