$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: lPRMRlJ5MGxZvOtfSWbtBepxVCyOBDz5AoZ8X5GRBXs= Subject key identifier: 99:CC:75:0D:60:B9:A9:BF:9D:0B:E7:52:E9:92:9D:99:AB:DA:F7:D8 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584B947D805CC42EAD0D2694E640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C0965B Signing time: Mon 20 Oct 2025 03:00:09 +0000 Manifest this update: Mon 20 Oct 2025 03:00:09 +0000 Manifest next update: Thu 23 Oct 2025 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: myE27tjB4YeyvFrGnYExbymrFiz6aC/z0nyx5rrNVQ4=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: LlJ0/f+T6vbS8FwhHW4TE9joTHofC5pejN11knqDxv8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:7d:80:5c:c4:2e:ad:0d:26:94:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Oct 20 03:00:09 2025 GMT Not After : Oct 23 03:00:00 2025 GMT Subject: CN=51d5fa3c-27f2-40c4-b9e3-0d3cb365a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:d8:6c:37:47:d5:3d:c7:c0:b8:e3:8a:63: 0b:3e:55:76:e8:d0:10:09:3a:79:20:d1:a5:47:d3: ef:bf:21:3b:ab:0b:91:36:05:9a:3a:68:40:16:55: b5:8f:fb:75:b5:e5:12:38:16:40:68:b8:76:08:2c: 34:3a:8d:6f:23:1c:1d:71:b5:e1:c8:9f:10:2b:d1: 26:18:7e:e3:b6:ed:71:de:f2:c2:2a:b8:48:72:68: 48:58:89:e6:d4:af:f3:d6:cf:27:f0:17:59:0e:0e: 60:4e:3e:14:2c:2b:24:7a:c7:a6:5f:5b:3c:42:3e: 12:78:2b:25:1f:15:e7:0c:16:9b:74:e3:5e:1e:05: 28:d6:93:27:a5:34:f1:f8:3b:93:a1:25:ac:c4:83: 77:81:cb:1d:d3:be:35:ff:86:19:da:52:c5:c1:18: d7:73:8f:cd:7d:83:ba:8a:55:31:cf:52:e6:38:12: b1:f9:10:22:0a:17:47:32:52:64:72:1e:07:ef:db: 5b:e3:56:f6:f0:ab:55:9e:71:cf:d2:50:6e:79:16: e5:7f:27:55:01:36:b6:d4:d5:03:d3:1a:13:d3:04: ac:28:ef:c8:21:81:59:85:ce:dc:25:0f:13:49:dd: 8d:5b:18:ca:f2:d6:5a:ba:5c:d4:8c:cb:ab:57:b4: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:75:0D:60:B9:A9:BF:9D:0B:E7:52:E9:92:9D:99:AB:DA:F7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d3:e2:36:dd:81:4f:ee:45:9e:76:49:da:13:94:56:a9:ca: 48:18:f8:70:3d:96:5a:16:de:ce:8a:d4:1e:cf:49:51:d0:70: 73:07:c0:29:26:92:01:86:b1:75:af:79:78:6d:eb:38:7b:3f: 7a:0b:64:cb:71:37:b9:6a:1a:c7:4d:e1:7e:92:a7:a3:46:4e: b7:e5:87:19:7f:a7:9c:00:22:30:70:27:50:fc:e1:c3:6f:01: b9:87:7e:ca:af:c5:26:41:b9:83:58:f4:e1:78:fd:7d:51:23: 86:b4:a0:cf:dd:a1:29:88:c4:f3:d4:b1:63:ad:a5:2e:ce:97: 63:6b:fb:48:b8:17:30:b7:64:85:e4:c5:71:a8:06:cc:7a:6a: 99:9f:44:f5:b7:49:da:bf:e1:9b:f9:65:9d:e3:0c:69:7a:5f: ad:cb:b5:6f:48:38:ee:7e:36:a3:d3:a7:e5:13:c7:a7:2a:72: e6:4d:58:60:eb:e9:c5:0f:a2:58:06:09:c1:bf:e2:23:f9:4d: bd:95:b5:33:17:6d:ad:b9:ab:cb:7c:36:c4:d7:dc:8b:4d:00: 15:21:bd:c7:1b:49:f6:e3:60:ea:1d:1b:cb:95:12:43:25:d5: 02:e6:e0:4f:23:aa:20:5f:aa:2b:78:35:39:4d:74:ef:be:65: 4a:94:e1:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUfYBcxC6tDSaU5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI1MTAyMDAzMDAwOVoXDTI1MTAyMzAzMDAwMFowLzEtMCsGA1UEAxMk NTFkNWZhM2MtMjdmMi00MGM0LWI5ZTMtMGQzY2IzNjVhOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhavYbDdH1T3HwLjjimMLPlV26NAQCTp5INGl R9PvvyE7qwuRNgWaOmhAFlW1j/t1teUSOBZAaLh2CCw0Oo1vIxwdcbXhyJ8QK9Em GH7jtu1x3vLCKrhIcmhIWInm1K/z1s8n8BdZDg5gTj4ULCskesemX1s8Qj4SeCsl HxXnDBabdONeHgUo1pMnpTTx+DuToSWsxIN3gcsd0741/4YZ2lLFwRjXc4/NfYO6 ilUxz1LmOBKx+RAiChdHMlJkch4H79tb41b28KtVnnHP0lBueRblfydVATa21NUD 0xoT0wSsKO/IIYFZhc7cJQ8TSd2NWxjK8tZaulzUjMurV7RgTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJnMdQ1guam/nQvnUumSnZmr2vfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCo0+I23YFP7kWedknaE5RW qcpIGPhwPZZaFt7OitQez0lR0HBzB8ApJpIBhrF1r3l4bes4ez96C2TLcTe5ahrH TeF+kqejRk635YcZf6ecACIwcCdQ/OHDbwG5h37Kr8UmQbmDWPTheP19USOGtKDP 3aEpiMTz1LFjraUuzpdja/tIuBcwt2SF5MVxqAbMemqZn0T1t0nav+Gb+WWd4wxp el+ty7VvSDjufjaj06flE8enKnLmTVhg6+nFD6JYBgnBv+Ij+U29lbUzF22tuavL fDbE19yLTQAVIb3HG0n242DqHRvLlRJDJdUC5uBPI6ogX6oreDU5TXTvvmVKlOEU -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:14 2025 by rpki-client