$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: 47Oqk1XMDZN1BWALaS4GyiqTcJB6vLNpfnb/Qw4F2Y4= Subject key identifier: 4F:54:2D:02:5E:98:98:47:AB:CB:AE:17:A5:C5:01:DD:71:7E:CA:FA Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584B91D08B06117F0BB9994F7D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF5643D2 Signing time: Sun 19 Oct 2025 04:00:03 +0000 Manifest this update: Sun 19 Oct 2025 04:00:03 +0000 Manifest next update: Tue 21 Oct 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 8kTN9u66M6Nsztcy/hQhpR3uLP4Ht7SmYKQ0RACAH6s=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: 6Qp23vkVkSZBwoV7tgc7M6IpCmyr8LLSt3zHB636z8Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:d0:8b:06:11:7f:0b:b9:99:4f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Oct 19 04:00:03 2025 GMT Not After : Oct 21 04:00:00 2025 GMT Subject: CN=5f995229-59ed-44be-bc1d-9d3467fb3383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:a2:31:8e:44:9e:9e:a3:d3:99:fa:e5:64: 28:72:43:78:68:ae:b1:88:28:21:66:a1:0f:4d:b0: 76:66:45:8e:f6:ed:6f:fa:de:e2:2b:73:5f:6e:8b: eb:29:3e:ab:ae:8c:57:57:5d:a5:18:ce:46:28:f1: b4:d1:73:2d:5b:f2:a6:d3:b9:a6:5c:44:3a:4d:88: f5:e0:f0:83:fe:bc:c8:52:be:65:17:e3:c1:1f:1b: 0e:1f:f4:49:68:00:85:c5:e3:1b:b2:bc:f2:8b:ab: 2d:90:04:a2:3c:8a:30:11:9e:eb:c6:fc:d0:38:6d: de:6b:c3:79:9d:a0:62:c5:0c:3f:2b:d9:55:7d:27: 98:28:fe:97:f6:55:a2:d0:b0:50:1e:24:ff:44:8c: cc:26:ff:05:11:8b:77:24:ff:29:2c:d9:e3:98:8e: 72:a2:0e:42:8f:5d:10:70:4d:e5:1d:c3:7c:b9:d8: 92:a2:0a:19:29:5f:7c:17:cd:4c:f7:f4:82:c1:89: 55:6d:b2:71:4b:9e:dd:2c:0e:ad:75:d2:ed:9c:eb: b6:4a:bb:03:a1:42:0b:89:0b:f4:43:2c:9c:0e:3f: 9c:8e:a2:c0:41:16:59:7f:c6:b4:62:bb:56:5a:36: 67:39:bc:a0:64:35:0d:b5:02:6a:8f:79:8f:3d:2b: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:2D:02:5E:98:98:47:AB:CB:AE:17:A5:C5:01:DD:71:7E:CA:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:93:1f:14:ca:f9:ec:d0:ba:f6:10:a7:78:77:ce:a7:f7:29: 11:38:e0:6a:7a:1c:d9:cb:95:2b:15:5a:e8:12:91:e1:9a:31: 89:3f:06:ec:05:a5:1b:96:f4:c7:d9:d0:36:12:74:af:38:a6: 72:b4:c7:83:aa:d4:34:5d:5d:b6:19:5b:c2:bc:06:09:fb:c0: f8:8b:85:3b:ec:98:89:29:a9:bd:1f:1c:6e:6e:d0:ac:5e:6f: 1b:c5:cc:56:68:2d:0f:23:67:53:c1:f7:b1:d2:5f:0e:9e:25: 7a:0d:da:bd:9b:60:ef:66:dc:d4:1d:dd:c2:78:d8:e2:86:79: dd:84:59:42:03:11:c3:de:03:6d:b1:5d:49:0b:b3:18:f5:d2: 9b:aa:62:cb:31:c3:df:82:92:d5:97:0b:2f:3e:32:36:6d:e1: 29:2a:78:f1:0c:f7:0c:ff:b9:50:2f:78:51:5e:d3:d4:6b:ab: 61:1c:d3:f7:ef:34:93:1a:44:b3:07:cc:e8:92:cd:d9:19:20: 7b:72:f2:98:2f:b0:10:a8:53:86:72:cb:08:3a:9a:52:ca:94: c2:3d:12:0c:0b:f2:11:7f:9e:1d:12:fe:0b:e6:e6:53:f0:a0: 9d:ef:a0:b0:62:78:90:8e:a0:18:d5:13:89:34:bf:0f:d9:54: 31:d5:ed:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuR0IsGEX8LuZlPfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MTAxOTA0MDAwM1oXDTI1MTAyMTA0MDAwMFowLzEtMCsGA1UEAxMk NWY5OTUyMjktNTllZC00NGJlLWJjMWQtOWQzNDY3ZmIzMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AaiMY5Enp6j05n65WQockN4aK6xiCghZqEP TbB2ZkWO9u1v+t7iK3NfbovrKT6rroxXV12lGM5GKPG00XMtW/Km07mmXEQ6TYj1 4PCD/rzIUr5lF+PBHxsOH/RJaACFxeMbsrzyi6stkASiPIowEZ7rxvzQOG3ea8N5 naBixQw/K9lVfSeYKP6X9lWi0LBQHiT/RIzMJv8FEYt3JP8pLNnjmI5yog5Cj10Q cE3lHcN8udiSogoZKV98F81M9/SCwYlVbbJxS57dLA6tddLtnOu2SrsDoUILiQv0 QyycDj+cjqLAQRZZf8a0YrtWWjZnObygZDUNtQJqj3mPPSuAFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE9ULQJemJhHq8uuF6XFAd1xfsr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGkx8Uyvns0Lr2EKd4d86n 9ykROOBqehzZy5UrFVroEpHhmjGJPwbsBaUblvTH2dA2EnSvOKZytMeDqtQ0XV22 GVvCvAYJ+8D4i4U77JiJKam9HxxubtCsXm8bxcxWaC0PI2dTwfex0l8OniV6Ddq9 m2DvZtzUHd3CeNjihnndhFlCAxHD3gNtsV1JC7MY9dKbqmLLMcPfgpLVlwsvPjI2 beEpKnjxDPcM/7lQL3hRXtPUa6thHNP37zSTGkSzB8zoks3ZGSB7cvKYL7AQqFOG cssIOppSypTCPRIMC/IRf54dEv4L5uZT8KCd76CwYniQjqAY1ROJNL8P2VQx1e0F -----END CERTIFICATE-----Generated at Sun Oct 19 23:12:23 2025 by rpki-client