$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft File: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft (raw, json) Hash identifier: kSoUrgWB9dDrQAilWfeQy2O9UfA7S4DFNebdDNPJdSg= Subject key identifier: 83:12:27:E1:8C:B5:33:B2:2C:0A:6F:C6:0B:9A:04:37:F7:F7:80:00 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584B954DF3606AA61930C1BB6F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft Manifest number: 010D0C9F4328584073A84E8087935899AC514FB0 Signing time: Mon 20 Oct 2025 10:00:09 +0000 Manifest this update: Mon 20 Oct 2025 10:00:09 +0000 Manifest next update: Thu 23 Oct 2025 10:00:00 +0000 Files and hashes: 1: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (hash: mWsb2ofHvCzgm1R0lP7mTeY5iXtvDQCEYyGAnQxOjog=) 2: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (hash: YhUzLtOjAGsxSZ2ZkgnY/FO7Mgiaf+mI2nMDu0Wr3N8=) 3: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (hash: m9Afm8wSkFBN0xnMSzbrIIoPAHh8JKM+86sq0CWzTxg=) 4: cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl (hash: 1mBdlf8vqpedeHZUjb7VHhhVTuYo5tJX75V3H7K3bz0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:4d:f3:60:6a:a6:19:30:c1:bb:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Oct 20 10:00:09 2025 GMT Not After : Oct 23 10:00:00 2025 GMT Subject: CN=f8fb248b-a903-441b-bc33-9b1800e1257e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:3d:b2:84:a8:d6:aa:a1:47:23:be:e0:09: 2e:4d:9d:5d:9b:89:f9:8e:e7:05:82:b1:c2:33:9d: c0:2c:95:c4:d5:73:67:15:c7:1a:e7:99:dd:6b:55: d1:85:61:5c:77:7f:bc:ba:47:0c:1e:cb:f0:10:5f: c9:39:f9:ae:81:91:f3:f0:78:d2:ba:18:55:5c:11: 0a:3d:46:13:9c:fa:dc:65:66:42:b1:5e:4c:a1:5d: 88:13:74:1d:9a:22:81:79:eb:c0:4a:79:e1:5c:6e: 67:da:64:db:87:47:1d:20:cb:ec:6e:91:cc:9c:22: 7d:d6:f8:be:ba:b2:55:11:fb:78:d1:7a:94:fb:2e: 24:eb:2d:94:44:ca:37:4e:fc:cb:41:b7:27:3b:f5: d0:dc:51:77:cc:00:98:4b:29:ef:d1:d6:43:10:14: b3:b1:26:24:7f:1f:3d:d0:e4:9f:d0:37:ef:f4:8c: f5:45:d2:02:c5:5e:89:0d:66:58:50:ed:a8:90:05: 63:01:3f:0e:bb:4c:6c:77:a1:3a:96:1d:59:01:b9: 92:95:6d:c8:31:7c:8f:9c:50:64:22:36:71:79:c3: fc:7d:09:c1:28:c3:2b:ad:a9:ad:8a:a7:45:1f:7e: bf:07:22:75:f6:c4:22:2f:17:68:a1:39:65:b8:36: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:27:E1:8C:B5:33:B2:2C:0A:6F:C6:0B:9A:04:37:F7:F7:80:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:79:65:ae:91:57:db:67:15:a9:61:8c:29:c6:7d:4b:8d:f0: 50:ca:15:68:de:d2:4b:97:fa:da:8d:0b:41:17:af:54:4c:1e: 86:34:33:dc:86:f1:c9:cf:8f:d1:15:45:56:bb:3a:9a:f5:12: d0:4e:03:88:bd:02:ab:37:b7:97:69:05:dc:e8:98:4c:38:ff: c9:94:b1:cf:f9:fe:a5:97:f9:06:dd:fd:32:e7:d4:26:38:ba: d0:38:e6:4a:44:ec:a5:2e:5b:8f:2f:ba:5e:fa:f2:88:ee:85: 2e:97:c3:9c:1e:14:c8:95:35:fb:e7:31:4c:52:88:d2:7b:02: 54:20:96:71:74:39:6a:b8:88:b6:01:c0:33:47:96:48:5b:57: 78:c3:bb:c7:6c:c1:a0:56:e9:19:71:07:00:46:aa:94:8c:4e: 20:ae:75:29:e2:0e:4a:60:f0:eb:eb:ed:04:f3:49:8b:48:fb: c6:8a:2b:18:b6:24:ef:99:7d:b2:f4:fe:de:86:d0:0b:1d:de: 58:68:40:69:db:70:6c:7e:ce:f0:be:ba:eb:73:67:2d:84:1b: 22:c4:b2:64:d9:04:ed:a8:e5:94:1b:e4:39:d2:96:36:a0:f3: 57:2e:29:f5:1d:f7:11:ad:c0:ba:e9:0d:5c:d5:79:de:10:4b: 85:11:63:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVTfNgaqYZMMG7b0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MTAyMDEwMDAwOVoXDTI1MTAyMzEwMDAwMFowLzEtMCsGA1UEAxMk ZjhmYjI0OGItYTkwMy00NDFiLWJjMzMtOWIxODAwZTEyNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTk9soSo1qqhRyO+4AkuTZ1dm4n5jucFgrHC M53ALJXE1XNnFcca55nda1XRhWFcd3+8ukcMHsvwEF/JOfmugZHz8HjSuhhVXBEK PUYTnPrcZWZCsV5MoV2IE3QdmiKBeevASnnhXG5n2mTbh0cdIMvsbpHMnCJ91vi+ urJVEft40XqU+y4k6y2URMo3TvzLQbcnO/XQ3FF3zACYSynv0dZDEBSzsSYkfx89 0OSf0Dfv9Iz1RdICxV6JDWZYUO2okAVjAT8Ou0xsd6E6lh1ZAbmSlW3IMXyPnFBk IjZxecP8fQnBKMMrramtiqdFH36/ByJ19sQiLxdooTlluDZlCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIMSJ+GMtTOyLApvxguaBDf394AAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvY2QxOThkYTQtZGJjYy00 YmVjLWExYTAtMzFkNjFkNWNjYzcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+eWWukVfbZxWpYYwpxn1L jfBQyhVo3tJLl/rajQtBF69UTB6GNDPchvHJz4/RFUVWuzqa9RLQTgOIvQKrN7eX aQXc6JhMOP/JlLHP+f6ll/kG3f0y59QmOLrQOOZKROylLluPL7pe+vKI7oUul8Oc HhTIlTX75zFMUojSewJUIJZxdDlquIi2AcAzR5ZIW1d4w7vHbMGgVukZcQcARqqU jE4grnUp4g5KYPDr6+0E80mLSPvGiisYtiTvmX2y9P7ehtALHd5YaEBp23Bsfs7w vrrrc2cthBsixLJk2QTtqOWUG+Q50pY2oPNXLin1HfcRrcC66Q1c1XneEEuFEWPR -----END CERTIFICATE-----Generated at Mon Oct 20 13:14:29 2025 by rpki-client