$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: rIbk+i7EfbeBrDjjou5aUMrGCvztwui9i+fEvBjZjQ8= Subject key identifier: AB:49:BE:62:39:40:C2:18:15:ED:0B:D4:5D:62:D9:09:CB:99:B2:C0 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584B9335ED3C4B6669C2FA2A3100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFF9E1 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: 1fAz2KGWDpZyLl1V6R/u/2B7j1ktl/NhRQK+tR+f+70=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: NIdfOERyyfSk8ShdRUYT+N9/dXvQJvFmIrd8o9BDa4A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:ed:3c:4b:66:69:c2:fa:2a:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=73351193-99dd-4bf0-a49e-e2eef6e956aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:ac:cf:ff:45:79:a4:3b:dd:2a:b3:8f:05: c1:5c:db:46:71:a5:f7:28:8b:e9:e9:32:83:5c:4a: e7:71:ad:5e:78:55:2f:90:d7:f2:d8:e0:dd:80:f9: eb:61:1e:d8:2e:71:53:50:33:13:02:0d:db:2f:32: d2:a1:30:db:fe:4e:6e:ec:20:84:ab:dd:79:bc:8f: dd:a3:04:b2:17:54:87:3f:d5:1d:05:14:48:e3:5e: 85:f1:0a:bb:d2:e6:73:1d:2e:08:67:32:45:eb:4d: 3c:5c:93:f8:42:ed:62:22:40:95:12:a7:1c:56:e6: de:45:53:84:00:b0:af:b6:9f:84:4c:d9:67:c6:b6: 40:92:76:ec:3b:51:cb:08:f5:29:26:b4:ef:37:61: 3c:24:d9:ae:2a:d4:95:52:32:77:4c:81:36:da:de: 48:92:d2:b3:68:49:42:6b:cf:66:a2:eb:dd:b9:04: 65:ba:1d:1a:20:fa:06:fb:f6:76:3d:73:d9:7c:f7: 9e:9b:60:eb:b0:7f:ce:e9:f2:8f:fa:18:d1:92:f9: 56:d1:f2:9c:f2:51:82:be:38:be:6b:30:d1:45:9d: 15:96:6d:89:2a:b1:8b:e8:b9:8b:b9:e5:e3:2f:75: 87:44:66:e9:45:8f:47:87:2c:b8:53:4c:26:df:13: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:BE:62:39:40:C2:18:15:ED:0B:D4:5D:62:D9:09:CB:99:B2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fb:a5:cc:e7:de:33:f6:bd:af:1a:bc:95:19:d7:86:0e:af: c3:83:d0:c9:f4:36:fd:12:53:7e:46:fb:99:7b:6d:d9:3f:25: dd:ac:97:86:46:55:84:64:cf:94:df:d4:e8:b6:6d:e3:07:93: d3:ea:27:9a:4a:e7:ad:84:23:b1:7a:2a:3d:7b:da:c8:ce:17: 81:1d:57:6b:d2:59:0b:1f:70:da:b9:ea:62:0a:d7:d2:5d:ae: e0:a1:6d:f2:ff:36:b4:2a:7f:c1:33:57:88:1e:23:6c:1d:b0: fa:40:9a:64:f7:f0:ff:fa:41:10:d6:d5:6f:c4:94:53:cd:b6: 47:7f:4f:07:89:11:db:d5:54:74:a5:f9:7b:9b:b0:4d:a9:a0: a8:0d:73:68:4c:10:b4:62:d4:aa:25:a8:20:27:d0:7d:0b:4c: de:61:bd:fd:b7:52:21:92:9f:15:cf:81:97:e4:9e:e7:25:35: b9:09:11:57:6b:e1:34:d3:f8:1a:82:17:11:95:dd:a3:c0:a5: 44:01:46:ac:55:98:d7:cc:65:ba:c9:9b:15:97:c0:fd:f7:3d: ee:dd:8e:16:e4:d0:7f:eb:46:fd:b2:7f:45:a6:86:09:db:56: 5c:34:53:ce:89:31:01:ad:0a:62:14:61:5d:20:40:40:bb:ec: 18:90:2c:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNe08S2ZpwvoqMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk NzMzNTExOTMtOTlkZC00YmYwLWE0OWUtZTJlZWY2ZTk1NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv+sz/9FeaQ73SqzjwXBXNtGcaX3KIvp6TKD XErnca1eeFUvkNfy2ODdgPnrYR7YLnFTUDMTAg3bLzLSoTDb/k5u7CCEq915vI/d owSyF1SHP9UdBRRI416F8Qq70uZzHS4IZzJF6008XJP4Qu1iIkCVEqccVubeRVOE ALCvtp+ETNlnxrZAknbsO1HLCPUpJrTvN2E8JNmuKtSVUjJ3TIE22t5IktKzaElC a89mouvduQRluh0aIPoG+/Z2PXPZfPeem2DrsH/O6fKP+hjRkvlW0fKc8lGCvji+ azDRRZ0Vlm2JKrGL6LmLueXjL3WHRGbpRY9Hhyy4U0wm3xNM/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKtJvmI5QMIYFe0L1F1i2QnLmbLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW+6XM594z9r2vGryVGdeG Dq/Dg9DJ9Db9ElN+RvuZe23ZPyXdrJeGRlWEZM+U39Totm3jB5PT6ieaSuethCOx eio9e9rIzheBHVdr0lkLH3DauepiCtfSXa7goW3y/za0Kn/BM1eIHiNsHbD6QJpk 9/D/+kEQ1tVvxJRTzbZHf08HiRHb1VR0pfl7m7BNqaCoDXNoTBC0YtSqJaggJ9B9 C0zeYb39t1Ihkp8Vz4GX5J7nJTW5CRFXa+E00/gaghcRld2jwKVEAUasVZjXzGW6 yZsVl8D99z3u3Y4W5NB/60b9sn9FpoYJ21ZcNFPOiTEBrQpiFGFdIEBAu+wYkCzB -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:17 2025 by rpki-client