$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: rd1kE1oMosXkZwTqKRL+6Fy8UvZlupi2+rvbt1me6c4= Subject key identifier: F6:37:18:A8:6F:65:29:62:D6:0A:36:C3:6A:B5:D7:5D:D6:36:51:9A Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584B92657156862F9FE3EC01BB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E1440352 Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:03 +0000 Manifest next update: Tue 21 Oct 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: hP1IWhLwf+B2edNL5gIC8RqE7/VtuBvW2XmAW6qbR4I=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: ffGr4uxp8vkCiGpi9+hqxsLsQDU63DeqGcWpnRiMg1g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:65:71:56:86:2f:9f:e3:ec:01:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Oct 19 09:00:03 2025 GMT Not After : Oct 21 09:00:00 2025 GMT Subject: CN=fb54a773-1900-43bc-9b2e-d3fe423b0904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:95:78:90:cf:e7:7d:5a:7b:e0:2f:b8:60: 8c:37:76:b1:76:05:47:09:57:c5:61:04:d0:75:36: 61:ee:ea:e1:48:42:ec:00:4c:0d:75:e9:91:9c:c3: 9c:de:54:33:0f:8f:a5:26:25:3b:6a:79:7a:c5:08: a0:4f:08:24:90:08:eb:23:10:00:28:12:bf:51:65: d6:ac:82:3b:3f:45:e6:6a:4e:f0:7b:a6:1b:66:17: 28:db:36:d0:26:33:d3:1e:41:6b:14:68:e5:d6:6c: 79:5f:df:fb:87:e4:ec:c4:a6:7c:a5:f5:c0:4b:27: 32:ec:13:33:7f:f4:3c:54:bb:8b:34:f9:e2:10:3f: ae:7e:90:bd:41:12:82:b8:f1:16:db:87:e9:02:92: 94:83:e5:27:a0:7e:8b:bf:7e:f7:f2:08:c6:3e:6e: d9:ac:02:0c:4a:06:82:a7:dd:d9:97:a2:8c:f1:4b: 02:b1:08:70:46:4d:f1:03:8b:7d:87:fb:35:5f:c5: ac:d2:3f:2e:95:37:7d:26:64:76:80:15:57:c4:de: ed:4a:22:66:8e:1f:20:8b:53:63:16:fd:d5:3f:49: b4:4a:14:e2:2c:8c:5d:cc:90:1a:97:1f:e9:21:f0: 65:a4:90:cd:52:3a:04:fe:77:66:b2:35:9c:f4:81: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:37:18:A8:6F:65:29:62:D6:0A:36:C3:6A:B5:D7:5D:D6:36:51:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3d:f3:6b:11:8e:4a:90:45:dd:0d:7a:ec:45:ce:2d:b2:b0: db:3f:6d:ee:e9:d4:01:59:19:5f:f7:96:9b:c2:e4:41:14:91: f2:e7:56:e3:11:8c:95:e9:ab:b1:d0:ec:5d:6e:12:2d:fb:5a: 30:04:f8:c5:46:ea:db:f0:23:18:a0:cf:5d:55:b0:cf:7a:22: 85:65:3f:3c:67:53:b5:59:89:42:06:3e:a6:f8:d4:47:c0:c3: 5f:0e:8f:6a:3a:4a:81:e7:81:fa:01:1b:af:81:39:69:1c:2a: c8:90:33:1d:38:40:7a:dd:39:a8:52:90:c6:73:a3:c5:1a:d8: fb:7d:e6:d3:25:97:1f:a1:68:91:22:9a:5e:ca:fb:ab:85:0d: 44:ce:20:1d:bb:c2:a3:d4:4b:b7:d9:71:a2:57:90:46:93:26: bc:51:59:6b:15:2c:a5:fd:81:e6:f1:f4:8e:02:16:4b:de:ed: 3d:57:a7:19:be:72:e5:98:3f:a4:1a:6d:04:56:d3:45:19:0b: 9b:23:68:4b:5b:14:4b:c7:db:9c:47:68:48:4a:65:67:73:13: 14:0b:5d:16:db:93:ea:d0:1e:f7:70:41:45:dd:e4:20:18:3e: c0:a4:76:7a:a2:3d:cc:00:72:f1:00:12:32:54:f8:71:34:93: a3:af:d8:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSZXFWhi+f4+wBu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MTAxOTA5MDAwM1oXDTI1MTAyMTA5MDAwMFowLzEtMCsGA1UEAxMk ZmI1NGE3NzMtMTkwMC00M2JjLTliMmUtZDNmZTQyM2IwOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeeVeJDP531ae+AvuGCMN3axdgVHCVfFYQTQ dTZh7urhSELsAEwNdemRnMOc3lQzD4+lJiU7anl6xQigTwgkkAjrIxAAKBK/UWXW rII7P0Xmak7we6YbZhco2zbQJjPTHkFrFGjl1mx5X9/7h+TsxKZ8pfXASycy7BMz f/Q8VLuLNPniED+ufpC9QRKCuPEW24fpApKUg+UnoH6Lv3738gjGPm7ZrAIMSgaC p93Zl6KM8UsCsQhwRk3xA4t9h/s1X8Ws0j8ulTd9JmR2gBVXxN7tSiJmjh8gi1Nj Fv3VP0m0ShTiLIxdzJAalx/pIfBlpJDNUjoE/ndmsjWc9IFohQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPY3GKhvZSli1go2w2q1113WNlGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaPfNrEY5KkEXdDXrsRc4t srDbP23u6dQBWRlf95abwuRBFJHy51bjEYyV6aux0OxdbhIt+1owBPjFRurb8CMY oM9dVbDPeiKFZT88Z1O1WYlCBj6m+NRHwMNfDo9qOkqB54H6ARuvgTlpHCrIkDMd OEB63TmoUpDGc6PFGtj7febTJZcfoWiRIppeyvurhQ1EziAdu8Kj1Eu32XGiV5BG kya8UVlrFSyl/YHm8fSOAhZL3u09V6cZvnLlmD+kGm0EVtNFGQubI2hLWxRLx9uc R2hISmVncxMUC10W25Pq0B73cEFF3eQgGD7ApHZ6oj3MAHLxABIyVPhxNJOjr9jc -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:01 2025 by rpki-client