$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft File: 95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft (raw, json) Hash identifier: LBaTRTSBiepyDAPTRaAmaPN0kSUh0GsiRDLRJIckLQA= Subject key identifier: EE:92:DA:A8:DB:49:29:0C:F7:7F:FF:43:CF:33:79:34:A3:36:6B:2B Authority key identifier: 04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97 Certificate issuer: /CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e Certificate serial: 010D0C9F4328584B93CAC83C4BE3EAA450656C20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft Manifest number: 010D0C9F4328584665D4A8296363DE1908824966 Signing time: Sun 19 Oct 2025 21:00:03 +0000 Manifest this update: Sun 19 Oct 2025 21:00:03 +0000 Manifest next update: Tue 21 Oct 2025 21:00:00 +0000 Files and hashes: 1: 95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl (hash: LFiDDw6miXciXnz3X3SM38okj5BlVjiweUrBd5JZLvw=) 2: a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa (hash: OBFjtVXpoYmAx/Lqfml6VCkMmnmPpPJtgxpFpQZpg7k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ca:c8:3c:4b:e3:ea:a4:50:65:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e Validity Not Before: Oct 19 21:00:03 2025 GMT Not After : Oct 21 21:00:00 2025 GMT Subject: CN=3a598c40-0927-4148-b5d3-3a8442781a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:0e:3b:fb:12:df:50:81:ba:8e:18:d3:59: a1:fe:73:ad:a2:fa:47:8a:d0:f1:68:ab:b3:af:6c: 19:fb:a2:7f:47:c5:70:f7:60:8a:96:4b:73:01:69: 41:42:5f:24:80:98:48:f8:12:bb:01:4f:65:a6:3b: 52:71:4f:f6:0c:5e:db:cb:39:05:9e:b7:2e:02:04: 6c:f7:82:aa:65:14:b9:9f:e9:de:92:3d:1f:85:90: 99:15:8d:4e:8b:29:88:4b:3f:10:8c:37:fe:21:9a: 8f:0a:91:64:8f:19:fd:6f:21:c2:50:6b:a2:37:44: 33:28:27:3c:43:44:c5:c8:6c:d2:2f:9a:d9:8a:84: 02:34:ea:e4:35:17:28:3b:48:88:b1:e8:b9:2e:cb: 97:63:e0:24:03:6b:71:88:cb:0d:d5:ea:5f:5b:0e: 7f:15:e4:5f:44:b6:ea:45:d1:6b:ca:72:24:0f:42: 3c:d7:69:a1:5f:b1:30:42:74:32:2c:a7:10:61:8f: f8:c3:90:7d:43:67:f3:57:62:76:ee:29:cd:ca:eb: d8:8a:b3:d4:d4:84:bb:58:d9:cb:bd:52:70:40:21: c4:d6:1e:30:29:a4:c0:e5:d1:0f:7c:81:03:cf:9e: 35:15:9a:86:4a:77:26:be:b6:51:1e:8b:00:d4:a5: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:92:DA:A8:DB:49:29:0C:F7:7F:FF:43:CF:33:79:34:A3:36:6B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl X509v3 Authority Key Identifier: keyid:04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:54:32:c0:f0:50:f7:e4:86:33:21:80:3b:f4:e5:0f:1a:48: 31:f9:2f:7b:08:17:fa:ee:e2:48:a5:83:3b:0e:22:fa:5e:2d: 9c:98:0e:90:bd:7e:fd:7b:b6:2f:27:85:0d:44:ae:62:0f:9f: cf:3b:68:8e:89:b1:36:fd:eb:86:2a:5d:34:fd:91:cf:23:7c: 3f:46:ef:90:3c:39:f9:33:d6:3d:ff:16:0b:47:c0:a0:53:17: 36:47:44:ae:5d:00:9f:3d:f9:09:a2:78:cf:bb:6f:0d:20:1e: 5e:1f:75:a8:f3:27:dc:0b:8c:db:e7:67:3d:82:fd:a4:6d:e7: f4:6b:c5:14:c7:ba:fa:dc:dc:f9:f6:9a:15:9e:19:12:27:44: b8:f2:21:fe:ea:e4:94:f9:32:a6:82:23:12:84:f8:35:9d:7e: b9:fe:a7:9d:37:cf:07:48:2c:ed:4a:07:e9:98:60:39:65:0a: 16:12:c2:bb:ba:99:87:b7:af:57:d6:f9:38:03:aa:88:34:4b: b5:75:aa:e4:20:f0:51:34:6d:e8:d7:07:15:14:fa:07:cb:ba: 1c:f1:f3:68:4b:87:0f:96:e0:8c:09:ad:18:5f:34:62:f6:9e: 54:c0:9e:fd:95:b2:31:05:de:35:67:20:ac:cd:74:d2:32:5a: 06:65:96:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTysg8S+PqpFBlbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNWE4NmYtNzA2YS00NWI2LWJhZjItZGE0ZDRlNjJi MTBlMB4XDTI1MTAxOTIxMDAwM1oXDTI1MTAyMTIxMDAwMFowLzEtMCsGA1UEAxMk M2E1OThjNDAtMDkyNy00MTQ4LWI1ZDMtM2E4NDQyNzgxYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQwOO/sS31CBuo4Y01mh/nOtovpHitDxaKuz r2wZ+6J/R8Vw92CKlktzAWlBQl8kgJhI+BK7AU9lpjtScU/2DF7byzkFnrcuAgRs 94KqZRS5n+nekj0fhZCZFY1OiymISz8QjDf+IZqPCpFkjxn9byHCUGuiN0QzKCc8 Q0TFyGzSL5rZioQCNOrkNRcoO0iIsei5LsuXY+AkA2txiMsN1epfWw5/FeRfRLbq RdFrynIkD0I812mhX7EwQnQyLKcQYY/4w5B9Q2fzV2J27inNyuvYirPU1IS7WNnL vVJwQCHE1h4wKaTA5dEPfIEDz541FZqGSncmvrZRHosA1KXM6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6S2qjbSSkM93//Q88zeTSjNmsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NWE1 YTg2Zi03MDZhLTQ1YjYtYmFmMi1kYTRkNGU2MmIxMGUvOTVhNWE4NmYtNzA2YS00 NWI2LWJhZjItZGE0ZDRlNjJiMTBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTVhNWE4NmYtNzA2YS00NWI2LWJh ZjItZGE0ZDRlNjJiMTBlLzk1YTVhODZmLTcwNmEtNDViNi1iYWYyLWRhNGQ0ZTYy YjEwZS5jcmwwHwYDVR0jBBgwFoAUBJCFBu1HN82xwzzXOtn1WciFNZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NWE1YTg2Zi03MDZhLTQ1YjYtYmFmMi1kYTRk NGU2MmIxMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3VDLA8FD35IYzIYA79OUP Gkgx+S97CBf67uJIpYM7DiL6Xi2cmA6QvX79e7YvJ4UNRK5iD5/PO2iOibE2/euG Kl00/ZHPI3w/Ru+QPDn5M9Y9/xYLR8CgUxc2R0SuXQCfPfkJonjPu28NIB5eH3Wo 8yfcC4zb52c9gv2kbef0a8UUx7r63Nz59poVnhkSJ0S48iH+6uSU+TKmgiMShPg1 nX65/qedN88HSCztSgfpmGA5ZQoWEsK7upmHt69X1vk4A6qINEu1darkIPBRNG3o 1wcVFPoHy7oc8fNoS4cPluCMCa0YXzRi9p5UwJ79lbIxBd41ZyCszXTSMloGZZad -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:32 2025 by rpki-client