$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft File: 961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft (raw, json) Hash identifier: s5nFXD0nTit/Nq4uBwbd7961M7iAP2V5H4dVJRpdvb8= Subject key identifier: 03:4C:69:C1:BF:01:F2:ED:4B:36:0A:E0:58:E7:3E:B2:DB:C4:4B:52 Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Certificate issuer: /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Certificate serial: 010D0C9F4328584B94242A5F09CD45AAF2FC0600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft Manifest number: 010D0C9F4328584B381F54C516847A56C399E9EB Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Wed 22 Oct 2025 00:00:00 +0000 Files and hashes: 1: 0f5eb37d-0715-3678-aaf1-023715a24565.roa (hash: zUFCB3VumHXdhKr8BsSIU3CjWS25itNxGEcDuNb+a7o=) 2: 961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl (hash: dQ9Q99RZ0Xe2IgvR275NVnFASgocVrzHUFxU/8QLp+Q=) 3: fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa (hash: 2BOI4PuCBWkTmxQvvzIjrYjl66zRoLCgY9SQqAfMl1w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:2a:5f:09:cd:45:aa:f2:fc:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 22 00:00:00 2025 GMT Subject: CN=2f8d4cb5-2f5f-480c-870b-375cde335559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:64:ce:a7:47:4c:9f:b5:9c:fe:11:7b:f8: 2a:f0:4a:46:0f:61:e9:49:b3:33:c4:3b:a0:a4:05: 14:97:63:ac:0f:79:0c:5f:dd:92:bd:0c:95:33:0a: 19:3c:fd:90:d9:a6:5d:0a:75:56:61:a5:f4:3c:0d: c0:cb:0d:fd:d6:87:ea:12:0b:f0:83:a7:f3:30:5e: f1:d3:7b:fa:16:cf:bb:67:a4:e5:65:0f:0b:a1:e8: ad:cc:9f:e4:7a:6d:60:8d:ce:ab:78:e5:34:15:c1: 25:96:8c:79:be:19:15:95:71:78:3c:32:db:02:f5: 0a:c9:7c:03:da:5a:84:a8:c6:f9:6f:ea:01:e3:b1: 67:78:35:3b:a4:93:32:1c:21:50:e4:f9:6d:78:18: 8e:c1:bc:06:f0:03:31:b0:09:ff:19:1c:a8:d9:0a: 5e:3e:6f:31:6a:12:6c:44:4a:24:1b:96:fe:e6:7c: 8c:7e:3b:45:a1:f9:0a:c8:a8:c4:ed:ba:23:8d:1c: de:a5:25:01:0c:c2:45:ad:04:f8:46:32:e0:16:bb: 29:4b:90:9f:4a:a6:0a:e1:9d:5c:d7:b4:7e:e0:ee: c5:d2:ca:9f:c5:30:a8:5c:b2:22:bb:b5:76:90:05: e5:da:12:9b:b6:4c:32:84:8c:0e:86:17:17:62:79: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:69:C1:BF:01:F2:ED:4B:36:0A:E0:58:E7:3E:B2:DB:C4:4B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl X509v3 Authority Key Identifier: keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b6:44:eb:fa:b1:f4:d8:48:23:6b:ef:b4:2a:20:c8:f7:f0: 72:73:fe:d0:5b:4d:45:33:14:16:68:06:15:23:81:a9:98:61: c8:75:50:29:52:8b:73:e9:6e:1a:00:20:35:6c:46:9a:8c:21: e4:e2:27:0c:07:cb:d1:ff:29:c3:2d:7d:60:31:a0:16:5d:ee: a8:65:d0:21:04:f2:45:61:12:7b:a8:47:f2:07:de:18:19:43: 78:9b:e9:98:5b:b1:94:a8:6b:d1:35:2d:dc:e2:d7:20:78:f4: 64:26:54:98:aa:f6:16:29:f9:44:9a:02:e9:c8:53:36:10:4d: 68:88:a7:ab:21:cf:6b:87:ec:65:72:f9:b5:d1:80:28:37:9e: 23:46:7e:14:d7:94:89:19:e3:d2:67:50:ce:e5:c7:d1:a3:c6: ea:1b:1f:f5:b9:f2:97:cc:73:3a:7f:c9:16:04:f2:04:37:63: 43:a8:22:a2:a5:fd:d5:eb:4a:7f:2d:5f:2d:e2:87:34:3d:ea: 46:14:77:9b:35:d1:03:a0:71:d8:93:f8:ac:25:fc:f2:1d:56: 83:4a:ba:d6:e1:d0:14:d0:bf:aa:d4:92:b1:f8:f3:1f:81:23: a6:e3:f9:0c:cd:23:f1:cc:2f:ce:29:5f:8f:5e:1f:d0:f6:c9: 65:77:2b:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCpfCc1FqvL8BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2Ez ZTcyMB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMjAwMDAwMFowLzEtMCsGA1UEAxMk MmY4ZDRjYjUtMmY1Zi00ODBjLTg3MGItMzc1Y2RlMzM1NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTdkzqdHTJ+1nP4Re/gq8EpGD2HpSbMzxDug pAUUl2OsD3kMX92SvQyVMwoZPP2Q2aZdCnVWYaX0PA3Ayw391ofqEgvwg6fzMF7x 03v6Fs+7Z6TlZQ8LoeitzJ/kem1gjc6reOU0FcEllox5vhkVlXF4PDLbAvUKyXwD 2lqEqMb5b+oB47FneDU7pJMyHCFQ5PlteBiOwbwG8AMxsAn/GRyo2QpePm8xahJs REokG5b+5nyMfjtFofkKyKjE7bojjRzepSUBDMJFrQT4RjLgFrspS5CfSqYK4Z1c 17R+4O7F0sqfxTCoXLIiu7V2kAXl2hKbtkwyhIwOhhcXYnlngQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFANMacG/AfLtSzYK4FjnPrLbxEtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NjFj MGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvOTYxYzBlYzgtNjRhOS00 YzUxLWJkNzctYjI4ZTY5M2EzZTcyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTYxYzBlYzgtNjRhOS00YzUxLWJk NzctYjI4ZTY5M2EzZTcyLzk2MWMwZWM4LTY0YTktNGM1MS1iZDc3LWIyOGU2OTNh M2U3Mi5jcmwwHwYDVR0jBBgwFoAUgr/tJi5XV5QT3YvMVzRT2EbNguQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhl NjkzYTNlNzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAktkTr+rH02Egja++0KiDI 9/Byc/7QW01FMxQWaAYVI4GpmGHIdVApUotz6W4aACA1bEaajCHk4icMB8vR/ynD LX1gMaAWXe6oZdAhBPJFYRJ7qEfyB94YGUN4m+mYW7GUqGvRNS3c4tcgePRkJlSY qvYWKflEmgLpyFM2EE1oiKerIc9rh+xlcvm10YAoN54jRn4U15SJGePSZ1DO5cfR o8bqGx/1ufKXzHM6f8kWBPIEN2NDqCKipf3V60p/LV8t4oc0PepGFHebNdEDoHHY k/isJfzyHVaDSrrW4dAU0L+q1JKx+PMfgSOm4/kMzSPxzC/OKV+PXh/Q9slldys5 -----END CERTIFICATE-----Generated at Mon Oct 20 14:54:36 2025 by rpki-client