$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft File: 9401ced7-d880-490d-9b0d-7674db71191c.mft (raw, json) Hash identifier: +KhR5N/nklmorIhPsOagCvNSTvyM4sSWGI3QPKJV4KI= Subject key identifier: A5:84:52:35:7F:7A:08:2D:F7:F3:A1:CD:02:DB:A8:56:61:5C:E7:2D Authority key identifier: A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02 Certificate issuer: /CN=9401ced7-d880-490d-9b0d-7674db71191c Certificate serial: 010D0C9F4328584B911DE9833CE981740D67FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft Manifest number: 010D0C9F4328584073A82D6BC9A9945D1EC91973 Signing time: Sat 18 Oct 2025 22:00:08 +0000 Manifest this update: Sat 18 Oct 2025 22:00:08 +0000 Manifest next update: Mon 20 Oct 2025 22:00:00 +0000 Files and hashes: 1: 4499818c-8cc6-3d80-8388-c8d455da417c.roa (hash: H61NcPtQl+ogueu5b53f30YljDTPf9+bAYC1g6I82mQ=) 2: 9401ced7-d880-490d-9b0d-7674db71191c.crl (hash: iXpqNxciIus/3odUEqP098Z3si6rHAl2LkOqiQMG5FU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:1d:e9:83:3c:e9:81:74:0d:67:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9401ced7-d880-490d-9b0d-7674db71191c Validity Not Before: Oct 18 22:00:08 2025 GMT Not After : Oct 20 22:00:00 2025 GMT Subject: CN=3d847308-77e3-4582-9371-5abe137567a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:54:69:ab:f0:bf:ee:22:f6:69:cc:16:46: a5:cb:32:e3:c4:77:31:7c:99:5a:85:06:73:d9:cc: 3b:77:fc:ea:2e:69:20:7c:8f:cc:35:ff:9e:65:53: c0:db:37:76:f2:e7:f7:52:f4:82:bd:89:97:96:1f: db:23:97:9f:cf:0d:20:dc:0b:c2:7f:dd:f9:c9:f6: 9f:ee:f5:01:57:a0:7c:10:63:2c:14:ab:ee:a9:3d: 2b:f1:d6:4f:44:da:a4:5e:e2:c3:5b:28:9a:b2:8d: 75:5f:05:65:d6:c7:e8:51:8b:99:65:2c:7c:cd:fd: 02:22:53:f9:ea:8a:89:79:c6:32:87:3b:d5:8a:02: ea:8e:19:64:70:12:46:28:98:d8:49:2c:64:43:5c: 90:ee:2f:31:ce:c1:7f:ab:ec:ef:46:f5:d4:5d:d8: d1:18:e1:31:de:df:79:2d:c1:12:af:b5:91:0d:49: 16:63:d7:b5:48:7c:52:de:1e:f1:75:28:f9:cf:46: 83:9d:52:8f:10:6f:ae:06:eb:f7:a3:29:f7:54:f2: 81:b2:fc:91:05:3a:9a:08:3f:30:cb:f4:57:3f:3a: 70:ce:af:27:bc:b1:27:0f:40:83:be:17:a7:14:e0: c7:ca:cd:89:35:12:b9:a0:e7:77:15:de:24:f1:12: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:52:35:7F:7A:08:2D:F7:F3:A1:CD:02:DB:A8:56:61:5C:E7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl X509v3 Authority Key Identifier: keyid:A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:51:e4:15:91:dd:ae:97:6c:a7:08:f6:77:44:cf:4e:60:28: 01:ff:29:c1:f0:d4:cb:c5:01:b1:3f:0a:c1:90:63:32:35:f0: 87:86:c8:bb:22:f9:24:c5:6a:c8:99:72:89:9b:24:7d:51:3f: 05:b1:f5:46:a5:8b:56:36:3e:63:4b:a6:28:a5:b1:cd:23:f7: c3:39:79:47:4b:82:5c:77:0a:b4:3b:59:8c:8b:98:04:5e:52: f4:3e:3d:1d:9e:36:7b:ae:96:72:c6:53:6e:fd:d5:18:6a:a7: 18:75:b2:c8:c5:ee:40:34:a4:a0:fc:38:49:22:68:35:98:48: 1c:1b:9d:e5:9a:90:ca:28:51:34:89:e3:6a:a3:80:2f:4f:92: 12:75:82:66:36:c1:21:9e:25:d7:eb:33:d8:68:10:19:79:e7: fb:8e:fb:dd:e2:bb:07:c7:3a:5a:e9:ef:fe:25:05:f2:eb:26: fd:10:2d:ca:bb:20:4f:0d:ad:67:74:4f:7b:ef:e4:26:aa:5f: 3b:f0:22:9c:76:0b:1a:2e:12:b7:a1:1a:0c:5c:3d:23:9c:ae: 1b:9b:54:64:77:af:4c:cd:58:56:b1:95:31:72:eb:ef:ce:c1: c4:de:08:31:ce:38:52:d9:35:fe:be:0c:e8:62:9d:35:16:eb: 70:4c:38:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRHemDPOmBdA1n/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQwMWNlZDctZDg4MC00OTBkLTliMGQtNzY3NGRiNzEx OTFjMB4XDTI1MTAxODIyMDAwOFoXDTI1MTAyMDIyMDAwMFowLzEtMCsGA1UEAxMk M2Q4NDczMDgtNzdlMy00NTgyLTkzNzEtNWFiZTEzNzU2N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCRUaavwv+4i9mnMFkalyzLjxHcxfJlahQZz 2cw7d/zqLmkgfI/MNf+eZVPA2zd28uf3UvSCvYmXlh/bI5efzw0g3AvCf935yfaf 7vUBV6B8EGMsFKvuqT0r8dZPRNqkXuLDWyiaso11XwVl1sfoUYuZZSx8zf0CIlP5 6oqJecYyhzvVigLqjhlkcBJGKJjYSSxkQ1yQ7i8xzsF/q+zvRvXUXdjRGOEx3t95 LcESr7WRDUkWY9e1SHxS3h7xdSj5z0aDnVKPEG+uBuv3oyn3VPKBsvyRBTqaCD8w y/RXPzpwzq8nvLEnD0CDvhenFODHys2JNRK5oOd3Fd4k8RKftQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKWEUjV/eggt9/OhzQLbqFZhXOctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NDAx Y2VkNy1kODgwLTQ5MGQtOWIwZC03Njc0ZGI3MTE5MWMvOTQwMWNlZDctZDg4MC00 OTBkLTliMGQtNzY3NGRiNzExOTFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTQwMWNlZDctZDg4MC00OTBkLTli MGQtNzY3NGRiNzExOTFjLzk0MDFjZWQ3LWQ4ODAtNDkwZC05YjBkLTc2NzRkYjcx MTkxYy5jcmwwHwYDVR0jBBgwFoAUomwl5DpoFf4nc/t5K9piDvOF/QIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NDAxY2VkNy1kODgwLTQ5MGQtOWIwZC03Njc0 ZGI3MTE5MWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJUeQVkd2ul2ynCPZ3RM9O YCgB/ynB8NTLxQGxPwrBkGMyNfCHhsi7IvkkxWrImXKJmyR9UT8FsfVGpYtWNj5j S6YopbHNI/fDOXlHS4Jcdwq0O1mMi5gEXlL0Pj0dnjZ7rpZyxlNu/dUYaqcYdbLI xe5ANKSg/DhJImg1mEgcG53lmpDKKFE0ieNqo4AvT5ISdYJmNsEhniXX6zPYaBAZ eef7jvvd4rsHxzpa6e/+JQXy6yb9EC3KuyBPDa1ndE977+Qmql878CKcdgsaLhK3 oRoMXD0jnK4bm1Rkd69MzVhWsZUxcuvvzsHE3ggxzjhS2TX+vgzoYp01FutwTDio -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:46 2025 by rpki-client