$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft File: 5cab4920-f916-4f6e-89be-328cbbe66f94.mft (raw, json) Hash identifier: vHFzHh4RU9iOsn8defunTm04I8VL0Q6F4TULey48lLY= Subject key identifier: 58:C5:5F:A6:8E:06:72:55:55:94:68:09:DB:88:1E:59:5B:FB:B6:87 Authority key identifier: EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16 Certificate issuer: /CN=5cab4920-f916-4f6e-89be-328cbbe66f94 Certificate serial: 010D0C9F4328584B95A73E8DAAC69C239DE67140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft Manifest number: 010D0C9F432858449B0A4015E173972293FC8C0F Signing time: Mon 20 Oct 2025 13:00:03 +0000 Manifest this update: Mon 20 Oct 2025 13:00:03 +0000 Manifest next update: Thu 23 Oct 2025 13:00:00 +0000 Files and hashes: 1: 41dcca07-860f-381f-8c2a-e453ea6881d3.roa (hash: VBH07rvpIm7vOoYkAbp5xIcfTbonQu8cwFTa6+n5gQ0=) 2: 5cab4920-f916-4f6e-89be-328cbbe66f94.crl (hash: Cu/FKudU6n4QehWyg2b9Yi22wHpJYz7DsYzGJAgQ8HA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:3e:8d:aa:c6:9c:23:9d:e6:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cab4920-f916-4f6e-89be-328cbbe66f94 Validity Not Before: Oct 20 13:00:03 2025 GMT Not After : Oct 23 13:00:00 2025 GMT Subject: CN=8eb6f9f8-cbea-41bb-b108-21d0c5c30b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:c7:db:ac:8c:ff:0c:8d:21:ed:7d:54:b1: b7:40:25:e0:94:a7:f9:35:a3:ae:63:8c:26:92:03: c6:91:71:c4:99:5b:4f:9b:78:ca:df:d7:e1:52:92: 30:c8:1d:47:a0:90:53:af:86:ea:3f:00:51:27:81: f5:29:e2:2c:dc:8f:42:de:47:e9:16:d1:3e:80:6b: 2d:3d:e9:c0:42:41:7f:b6:dc:4d:60:46:0e:9e:23: a0:a0:0b:46:91:b8:87:bb:10:d4:f2:6d:1f:13:ee: 33:27:85:73:fa:44:f4:d6:9e:01:59:10:8a:ad:ed: c8:43:fa:3c:a9:f4:4e:7f:cc:53:15:56:86:59:05: 00:fa:22:54:ce:be:7d:b3:86:e9:f5:3d:6d:cd:8f: db:52:40:8a:81:a6:95:82:9d:9e:90:0b:f9:dd:be: df:f9:86:60:db:5e:0e:fe:7b:03:75:ff:84:cc:f5: a0:39:8e:5d:b1:0e:c1:63:9d:6a:8f:e1:b3:81:5d: 65:55:ea:1d:60:07:46:47:ae:7b:6f:0b:93:e0:1e: 40:45:91:56:97:6d:4f:4b:5d:f3:1f:9d:bf:23:4d: dd:f5:7b:a8:ca:07:5b:e2:26:b3:16:ec:5d:1a:a7: 36:50:f7:bf:65:45:fc:64:a9:61:c5:09:8c:a0:82: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C5:5F:A6:8E:06:72:55:55:94:68:09:DB:88:1E:59:5B:FB:B6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl X509v3 Authority Key Identifier: keyid:EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1a:05:36:6f:80:fd:49:cc:1a:d4:e1:ab:6b:f1:98:61:62: 0d:3d:57:b0:87:e7:9f:ce:a3:7b:4d:8c:06:e4:af:90:1c:2e: 1e:4a:06:34:4d:4b:db:ab:6c:1d:84:05:b5:7b:99:6e:c1:83: 53:2c:90:8d:aa:ff:ba:61:4f:63:bb:b5:fc:76:58:1a:c7:73: 6c:c2:d5:88:3d:1a:d9:64:57:e7:cc:e5:f6:9e:88:a2:a2:28: aa:c4:87:7c:bd:fd:b2:ad:51:56:67:48:7c:7e:f4:3d:63:20: 38:b1:65:05:a3:5b:f3:2f:6b:95:71:0e:8a:e0:6b:62:37:1a: 6b:27:03:4c:f7:d7:00:ac:7f:4f:2c:70:cb:cb:18:cc:5c:10: 54:42:b6:61:cb:34:3f:37:4f:c1:68:fa:77:22:4a:13:7c:13: b1:9c:0a:ca:28:49:dd:df:be:3d:35:81:ae:d9:cc:ff:d2:4c: ac:6d:21:6e:ea:95:6e:06:c7:35:91:4b:e8:58:37:3f:d3:d5: dc:d0:87:f9:76:57:05:16:a1:70:5c:fc:a4:da:7d:74:31:8f: de:77:92:05:46:9b:2a:22:8c:89:32:0e:34:f1:19:92:b0:c1: 43:49:ce:d0:4f:f9:47:9d:2f:dc:3b:b7:01:82:9a:5c:2b:31: 26:1d:d5:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVpz6NqsacI53mcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhYjQ5MjAtZjkxNi00ZjZlLTg5YmUtMzI4Y2JiZTY2 Zjk0MB4XDTI1MTAyMDEzMDAwM1oXDTI1MTAyMzEzMDAwMFowLzEtMCsGA1UEAxMk OGViNmY5ZjgtY2JlYS00MWJiLWIxMDgtMjFkMGM1YzMwYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN7H26yM/wyNIe19VLG3QCXglKf5NaOuY4wm kgPGkXHEmVtPm3jK39fhUpIwyB1HoJBTr4bqPwBRJ4H1KeIs3I9C3kfpFtE+gGst PenAQkF/ttxNYEYOniOgoAtGkbiHuxDU8m0fE+4zJ4Vz+kT01p4BWRCKre3IQ/o8 qfROf8xTFVaGWQUA+iJUzr59s4bp9T1tzY/bUkCKgaaVgp2ekAv53b7f+YZg214O /nsDdf+EzPWgOY5dsQ7BY51qj+GzgV1lVeodYAdGR657bwuT4B5ARZFWl21PS13z H52/I03d9Xuoygdb4iazFuxdGqc2UPe/ZUX8ZKlhxQmMoILGUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFjFX6aOBnJVVZRoCduIHllb+7aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Fi NDkyMC1mOTE2LTRmNmUtODliZS0zMjhjYmJlNjZmOTQvNWNhYjQ5MjAtZjkxNi00 ZjZlLTg5YmUtMzI4Y2JiZTY2Zjk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNhYjQ5MjAtZjkxNi00ZjZlLTg5 YmUtMzI4Y2JiZTY2Zjk0LzVjYWI0OTIwLWY5MTYtNGY2ZS04OWJlLTMyOGNiYmU2 NmY5NC5jcmwwHwYDVR0jBBgwFoAU607OeNfdcGN4vMRXxIsGXwoyZhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2FiNDkyMC1mOTE2LTRmNmUtODliZS0zMjhj YmJlNjZmOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARGgU2b4D9Scwa1OGra/GY YWINPVewh+efzqN7TYwG5K+QHC4eSgY0TUvbq2wdhAW1e5luwYNTLJCNqv+6YU9j u7X8dlgax3NswtWIPRrZZFfnzOX2noiioiiqxId8vf2yrVFWZ0h8fvQ9YyA4sWUF o1vzL2uVcQ6K4GtiNxprJwNM99cArH9PLHDLyxjMXBBUQrZhyzQ/N0/BaPp3IkoT fBOxnArKKEnd3749NYGu2cz/0kysbSFu6pVuBsc1kUvoWDc/09Xc0If5dlcFFqFw XPyk2n10MY/ed5IFRpsqIoyJMg408RmSsMFDSc7QT/lHnS/cO7cBgppcKzEmHdUh -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:20 2025 by rpki-client