$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft File: 957017f9-0b2d-451e-bee3-85f42c50dde4.mft (raw, json) Hash identifier: Z0N073lHrt/gNThcKDU2b+cF0AjtwGVN9sNmqZndnAw= Subject key identifier: 30:FA:F3:38:76:19:FE:6A:DE:D7:3E:DC:F1:99:E6:0C:14:41:D8:49 Authority key identifier: 9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB Certificate issuer: /CN=957017f9-0b2d-451e-bee3-85f42c50dde4 Certificate serial: 010D0C9F4328584B95C503A907228EB913555B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft Manifest number: 010D0C9F43285843467FB24EAE22D23EF48FD40D Signing time: Mon 20 Oct 2025 14:00:03 +0000 Manifest this update: Mon 20 Oct 2025 14:00:03 +0000 Manifest next update: Thu 23 Oct 2025 14:00:00 +0000 Files and hashes: 1: 90515db8-59ce-37d1-abe9-cc772ea2cc7f.roa (hash: UYVR5fxaftK1L8JAnejs5ouafa3OntsviL4tYAgI69I=) 2: 957017f9-0b2d-451e-bee3-85f42c50dde4.crl (hash: DYoOpdM+WhwXU/lx4O8aZsa9AuIVo1NUmsVzsY62eVU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:c5:03:a9:07:22:8e:b9:13:55:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957017f9-0b2d-451e-bee3-85f42c50dde4 Validity Not Before: Oct 20 14:00:03 2025 GMT Not After : Oct 23 14:00:00 2025 GMT Subject: CN=fb96f8a9-5a8b-4703-8bcf-edd0938b72a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:ca:6c:16:9c:55:83:57:f4:2d:ee:d5:9c: 81:af:35:c8:a9:4c:96:6f:39:2a:3d:3e:e5:4e:76: cd:04:d0:68:6e:21:a0:e2:a3:3d:03:e2:f6:d2:07: 1e:22:28:f1:cd:fd:92:eb:6b:f0:aa:48:3b:9b:f6: ba:ea:34:62:bf:db:25:0b:5b:1b:aa:0e:eb:85:c2: af:2f:27:65:c2:0c:77:e0:c4:f2:eb:a7:47:78:48: ee:8d:4a:a6:32:76:68:ca:9c:6c:78:fd:26:27:72: e4:77:35:75:4f:46:d3:48:75:5d:82:a4:0b:4b:8b: b2:e2:94:ab:79:7a:62:66:0c:d4:81:a2:9c:8b:1e: 4c:3b:e9:47:05:7a:8c:e9:8a:a4:b8:10:1b:10:27: bc:15:54:06:df:72:6b:0e:ce:5d:72:1d:dd:e2:58: ae:ef:92:7a:13:84:de:cd:d5:49:9a:92:76:2e:52: c4:c0:0b:b1:ea:d8:03:93:d4:4a:72:d7:85:23:2d: ee:f8:db:32:4d:6f:c6:cf:55:cc:6f:1b:d6:a8:f0: 46:11:47:37:a1:0f:05:fa:57:c1:1a:64:cb:f9:5f: ae:f6:be:18:ac:ce:dc:62:34:76:57:36:ac:f6:45: f8:79:0d:1e:47:61:ff:e0:ae:83:42:fe:98:24:1e: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FA:F3:38:76:19:FE:6A:DE:D7:3E:DC:F1:99:E6:0C:14:41:D8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.crl X509v3 Authority Key Identifier: keyid:9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:87:fb:cf:a5:75:87:ed:79:d2:06:5f:4c:b0:9d:2e:82:cf: c8:aa:86:9f:72:e8:5f:6c:78:71:2d:06:ba:6a:c1:3c:2b:3f: 57:9e:cd:8d:60:8c:8a:3d:eb:91:12:6b:23:82:89:73:bc:79: 00:1e:f0:9d:01:85:95:40:95:b5:7f:36:c1:cd:81:10:f8:15: cf:61:85:d9:03:71:32:3d:2e:83:a9:62:d5:c2:43:f9:f8:30: c3:79:0c:dc:56:09:eb:bb:77:3c:79:86:a5:c3:95:5e:b3:b8: ff:d1:62:87:aa:d9:b2:91:0a:fb:6d:d7:cd:59:45:00:60:28: 68:9f:c9:87:ed:6b:56:52:8a:d7:66:3d:5c:9e:e5:4f:dc:28: ff:7f:47:70:e8:6d:f9:74:7f:45:be:2c:a2:2a:10:16:1a:e1: bc:e2:c3:c2:67:25:8a:7a:06:8e:fb:7a:5d:da:de:e4:c6:5b: 8f:cc:b9:cb:37:a7:91:ae:16:94:02:a3:e6:c5:98:36:3e:19: f5:30:34:07:49:12:ae:4d:aa:8f:30:95:6f:64:a5:bb:a8:e6: 8a:a0:f7:80:8c:05:42:74:39:97:5a:a8:30:f8:cd:09:13:a1: 12:0d:4f:bd:7c:d7:6c:bf:e4:26:58:34:a5:ed:98:ca:99:18: d9:eb:43:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVxQOpByKOuRNVW2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3MDE3ZjktMGIyZC00NTFlLWJlZTMtODVmNDJjNTBk ZGU0MB4XDTI1MTAyMDE0MDAwM1oXDTI1MTAyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZmI5NmY4YTktNWE4Yi00NzAzLThiY2YtZWRkMDkzOGI3MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbvKbBacVYNX9C3u1ZyBrzXIqUyWbzkqPT7l TnbNBNBobiGg4qM9A+L20gceIijxzf2S62vwqkg7m/a66jRiv9slC1sbqg7rhcKv Lydlwgx34MTy66dHeEjujUqmMnZoypxseP0mJ3LkdzV1T0bTSHVdgqQLS4uy4pSr eXpiZgzUgaKcix5MO+lHBXqM6YqkuBAbECe8FVQG33JrDs5dch3d4liu75J6E4Te zdVJmpJ2LlLEwAux6tgDk9RKcteFIy3u+NsyTW/Gz1XMbxvWqPBGEUc3oQ8F+lfB GmTL+V+u9r4YrM7cYjR2Vzas9kX4eQ0eR2H/4K6DQv6YJB5IvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDD68zh2Gf5q3tc+3PGZ5gwUQdhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTcw MTdmOS0wYjJkLTQ1MWUtYmVlMy04NWY0MmM1MGRkZTQvOTU3MDE3ZjktMGIyZC00 NTFlLWJlZTMtODVmNDJjNTBkZGU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTU3MDE3ZjktMGIyZC00NTFlLWJl ZTMtODVmNDJjNTBkZGU0Lzk1NzAxN2Y5LTBiMmQtNDUxZS1iZWUzLTg1ZjQyYzUw ZGRlNC5jcmwwHwYDVR0jBBgwFoAUnf5xoB+dKqlb92uDFnZeE5A1LcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTcwMTdmOS0wYjJkLTQ1MWUtYmVlMy04NWY0 MmM1MGRkZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOh/vPpXWH7XnSBl9MsJ0u gs/IqoafcuhfbHhxLQa6asE8Kz9Xns2NYIyKPeuREmsjgolzvHkAHvCdAYWVQJW1 fzbBzYEQ+BXPYYXZA3EyPS6DqWLVwkP5+DDDeQzcVgnru3c8eYalw5Ves7j/0WKH qtmykQr7bdfNWUUAYChon8mH7WtWUorXZj1cnuVP3Cj/f0dw6G35dH9FviyiKhAW GuG84sPCZyWKegaO+3pd2t7kxluPzLnLN6eRrhaUAqPmxZg2Phn1MDQHSRKuTaqP MJVvZKW7qOaKoPeAjAVCdDmXWqgw+M0JE6ESDU+9fNdsv+QmWDSl7ZjKmRjZ60NJ -----END CERTIFICATE-----Generated at Mon Oct 20 18:42:44 2025 by rpki-client