$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft (raw, json) Hash identifier: y+VqJZ5/iFyKTy1mHj77G7ZAuOCQH7spwWg1h4NYZbE= Subject key identifier: 76:09:5C:96:BA:67:A8:69:07:98:91:64:D6:A8:B9:2A:88:55:3C:03 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584B9441E58D014DA8D819AC8A68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft Manifest number: 010D0C9F4328584073A8338FE8C46476050B2193 Signing time: Mon 20 Oct 2025 01:00:03 +0000 Manifest this update: Mon 20 Oct 2025 01:00:03 +0000 Manifest next update: Thu 23 Oct 2025 01:00:00 +0000 Files and hashes: 1: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl (hash: xLs16QRDmykybxLU8YdsdTiR8jbadWuURb+z3fIglUs=) 2: af0a8e4a-42b9-3667-8ce3-865564983774.roa (hash: pfjLqlnkzK+pgHYxCd/m8dZiuh9x1rq3Zr5XDVdvIdM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:41:e5:8d:01:4d:a8:d8:19:ac:8a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Oct 20 01:00:03 2025 GMT Not After : Oct 23 01:00:00 2025 GMT Subject: CN=a8dcff73-b285-445a-b054-bdf9814bcbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:01:13:03:65:67:50:92:2e:54:32:9c:0d: 42:42:a4:7f:5e:f5:51:7f:ee:9f:e6:ec:0d:b2:6d: a4:12:63:1a:f6:aa:d7:10:00:00:0d:e4:ca:e6:9e: 09:94:e2:89:88:7b:65:ce:a8:4a:fe:d3:87:d2:80: 55:0e:7b:74:e5:79:fb:1c:f4:68:07:e2:04:96:91: cc:3e:6e:97:53:38:1d:87:27:10:0d:7c:8b:80:f2: ac:93:52:5b:14:b9:4e:db:20:ab:90:ad:e8:8c:50: 10:dd:6a:ec:ea:c8:13:28:bc:48:b7:11:7a:f6:88: b1:c7:a2:29:ea:4a:59:8f:aa:e0:fe:6b:f6:b2:a6: 26:54:31:d5:d3:2e:83:82:e2:19:4d:79:35:63:50: d9:87:c5:7e:b5:94:60:e8:1c:ba:3b:86:bf:0a:ff: 49:43:97:c6:0e:63:48:14:bf:8f:de:2b:f9:f1:12: 1b:cd:cf:50:7f:81:4c:8a:e9:07:57:93:b3:c2:1d: b7:92:fb:e3:4d:36:3a:d3:eb:12:7d:c7:b2:96:00: a7:c4:dc:72:01:e3:61:91:a1:e1:4e:ae:54:99:28: be:ce:4c:56:e2:5d:d3:83:bd:db:1f:92:ac:75:dc: 2b:39:ec:2f:60:8d:ba:f5:67:19:1b:6c:01:0c:0a: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:09:5C:96:BA:67:A8:69:07:98:91:64:D6:A8:B9:2A:88:55:3C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:86:16:b8:18:be:f7:be:f7:b8:4a:f1:c2:35:7a:70:1a:3e: 11:bf:8b:9f:e1:b6:48:f2:64:23:11:2d:1d:4e:44:ee:c0:3d: 42:85:d3:cc:22:66:2d:21:b0:70:43:38:76:21:22:d6:54:5a: f6:21:91:a3:9f:3e:98:ab:40:ac:8a:7e:5a:de:55:13:84:27: b6:14:65:35:b9:c1:51:71:2a:43:e0:8b:e4:2b:79:2e:5c:31: 9b:08:32:20:08:0a:3c:54:aa:59:e3:c1:94:26:4a:e7:f2:cb: 4e:26:15:23:8d:47:57:3d:65:84:50:04:c1:8d:80:69:fe:0c: 2a:58:64:be:56:31:8e:a2:25:25:af:ca:da:54:7d:97:cd:81: c2:a2:41:4d:3f:28:e2:89:be:cc:b8:b0:2b:49:44:5f:df:c3: 95:eb:95:31:a1:36:77:16:4f:ab:5d:76:7b:83:9a:5b:22:40: ca:f6:ec:4d:a5:88:53:e4:3b:a9:f3:7b:f2:8c:89:17:5b:06: 30:e8:60:9e:38:78:65:1c:41:7f:e3:17:bf:70:f8:aa:a9:da: 96:0c:e1:42:ec:ce:01:d7:c5:25:50:f6:a3:52:de:96:2e:4f: ad:51:8c:9f:58:dd:18:4f:a0:ab:1f:d2:26:4c:d5:29:d0:e9: 48:0e:ce:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUQeWNAU2o2BmsimgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MTAyMDAxMDAwM1oXDTI1MTAyMzAxMDAwMFowLzEtMCsGA1UEAxMk YThkY2ZmNzMtYjI4NS00NDVhLWIwNTQtYmRmOTgxNGJjYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUUBEwNlZ1CSLlQynA1CQqR/XvVRf+6f5uwN sm2kEmMa9qrXEAAADeTK5p4JlOKJiHtlzqhK/tOH0oBVDnt05Xn7HPRoB+IElpHM Pm6XUzgdhycQDXyLgPKsk1JbFLlO2yCrkK3ojFAQ3Wrs6sgTKLxItxF69oixx6Ip 6kpZj6rg/mv2sqYmVDHV0y6DguIZTXk1Y1DZh8V+tZRg6By6O4a/Cv9JQ5fGDmNI FL+P3iv58RIbzc9Qf4FMiukHV5Ozwh23kvvjTTY60+sSfceylgCnxNxyAeNhkaHh Tq5UmSi+zkxW4l3Tg73bH5KsddwrOewvYI269WcZG2wBDArJlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHYJXJa6Z6hpB5iRZNaouSqIVTwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvNjRhNjAwOWQtMTJiOC00 YjM0LTk1ZjktZDI2MTgwZDhiZjRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRhha4GL73vve4SvHCNXpw Gj4Rv4uf4bZI8mQjES0dTkTuwD1ChdPMImYtIbBwQzh2ISLWVFr2IZGjnz6Yq0Cs in5a3lUThCe2FGU1ucFRcSpD4IvkK3kuXDGbCDIgCAo8VKpZ48GUJkrn8stOJhUj jUdXPWWEUATBjYBp/gwqWGS+VjGOoiUlr8raVH2XzYHCokFNPyjiib7MuLArSURf 38OV65UxoTZ3Fk+rXXZ7g5pbIkDK9uxNpYhT5Dup83vyjIkXWwYw6GCeOHhlHEF/ 4xe/cPiqqdqWDOFC7M4B18UlUPajUt6WLk+tUYyfWN0YT6CrH9ImTNUp0OlIDs6m -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:29 2025 by rpki-client