$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft File: 4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft (raw, json) Hash identifier: zCEMNooGnPlaXJaBFlHzpb8T6szHxlvfWpbRtVyfdNo= Subject key identifier: 0E:9F:14:5C:A6:9C:F0:15:C2:8F:9A:24:72:AD:7A:3C:C4:33:77:EA Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99 Certificate issuer: /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de Certificate serial: 010D0C9F4328584B970C9698BE4B1B4B8F188180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft Manifest number: 010D0C9F4328584073A8360660C5C8F8D6485432 Signing time: Tue 21 Oct 2025 01:00:03 +0000 Manifest this update: Tue 21 Oct 2025 01:00:03 +0000 Manifest next update: Thu 23 Oct 2025 01:00:00 +0000 Files and hashes: 1: 4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl (hash: mjV79FTL54mb3ENqCQoZtBjfJdsfegJbEYv5vjL5hew=) 2: 7bf082f3-7712-3b6f-9529-66baede8d766.roa (hash: 6wUMKY8rWZ8gW3DRUA+ro6hhWgC/c40SPKcZm4fBW3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:96:98:be:4b:1b:4b:8f:18:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de Validity Not Before: Oct 21 01:00:03 2025 GMT Not After : Oct 23 01:00:00 2025 GMT Subject: CN=32ff849a-e6f1-4c71-b2b7-80cf5bb8a9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:95:c3:e1:0b:f8:28:63:bc:b9:e4:31:53: 82:3e:a7:11:f4:4a:ab:d6:16:94:bb:f9:67:6c:22: f9:7d:40:1a:d7:7c:c4:81:5f:e4:6a:33:36:83:21: d5:00:93:c3:41:be:1c:c3:a0:0d:e8:53:79:35:fb: a4:4c:60:fd:cc:9e:b9:f3:e2:62:b5:01:83:d0:14: b9:39:78:7f:c3:db:fc:77:b6:85:fa:ca:71:d3:d5: c5:2f:65:66:33:0c:bb:54:ab:64:a9:cc:5b:31:7e: 87:54:74:82:ce:c9:54:ca:7c:06:c7:5a:1d:75:71: 9c:da:9e:32:9d:bf:f2:78:70:4f:48:f8:45:d4:67: d7:be:21:61:ac:ea:68:94:56:cc:33:74:63:46:1a: d8:73:4c:f8:7b:66:1d:00:73:f8:b3:67:03:7d:64: e5:1b:f2:ba:c0:f4:02:f9:b4:82:90:70:c3:5f:c9: 90:17:4f:00:9e:c9:19:d6:b6:6d:9f:8f:05:ee:2a: 5c:66:7f:c4:90:30:6c:ab:7e:20:b3:d9:d3:60:6e: 31:c4:8e:e9:fa:98:c0:d4:98:02:d3:a3:1e:8f:2f: bf:f0:2c:6f:fd:e9:71:12:ce:9e:40:d0:ca:27:a4: b8:5e:7a:39:f1:c3:0c:63:3d:17:a3:98:f8:cf:0e: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:14:5C:A6:9C:F0:15:C2:8F:9A:24:72:AD:7A:3C:C4:33:77:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl X509v3 Authority Key Identifier: keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:44:54:b1:c1:42:a2:4d:20:cf:a9:85:20:89:ff:25:41:52: 2b:25:84:81:13:2b:ef:89:42:e2:6d:35:9d:14:65:8d:22:22: c9:a0:22:fa:ed:4d:12:f3:79:b7:1a:3d:cc:87:7b:d3:db:f0: 07:76:2a:48:c2:85:d8:96:cd:b9:20:ec:99:cd:b6:b5:43:2e: 2e:bc:07:17:0c:1c:fd:7a:07:c3:88:53:95:b0:d5:98:76:79: eb:76:6a:f1:fc:18:93:4b:e8:86:0e:d9:59:62:13:b2:a0:71: e3:ce:22:22:5a:d4:58:6b:4c:3d:84:b4:87:14:bb:f8:cc:84: d8:b7:3e:fc:4a:3b:b8:a3:6f:bd:ad:dc:85:f0:97:eb:32:40: d9:51:95:51:e8:7d:72:9b:8c:5c:00:96:66:7a:e2:15:37:51: e2:23:e5:5d:88:a1:bf:96:e3:b4:a2:25:ec:7a:2a:5e:36:eb: 21:bc:8f:f8:52:69:fa:3e:dd:2e:79:87:dd:c3:4a:82:3c:11: ba:df:77:3a:1f:2b:b0:10:ed:cb:bb:0a:b2:7e:60:59:72:5b: 1b:1e:28:b7:e2:33:e9:07:f6:31:f4:fd:45:fd:12:d5:71:ba: 53:04:13:f0:cb:5a:77:53:18:95:1c:63:6b:a4:37:bc:74:62: 75:9f:bb:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXDJaYvksbS48YgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MDExZmEtZjFhZS00NmM2LTk0NDEtMmY0ODZlMDRh NmRlMB4XDTI1MTAyMTAxMDAwM1oXDTI1MTAyMzAxMDAwMFowLzEtMCsGA1UEAxMk MzJmZjg0OWEtZTZmMS00YzcxLWIyYjctODBjZjViYjhhOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPaVw+EL+ChjvLnkMVOCPqcR9Eqr1haUu/ln bCL5fUAa13zEgV/kajM2gyHVAJPDQb4cw6AN6FN5NfukTGD9zJ658+JitQGD0BS5 OXh/w9v8d7aF+spx09XFL2VmMwy7VKtkqcxbMX6HVHSCzslUynwGx1oddXGc2p4y nb/yeHBPSPhF1GfXviFhrOpolFbMM3RjRhrYc0z4e2YdAHP4s2cDfWTlG/K6wPQC +bSCkHDDX8mQF08AnskZ1rZtn48F7ipcZn/EkDBsq34gs9nTYG4xxI7p+pjA1JgC 06Mejy+/8Cxv/elxEs6eQNDKJ6S4Xno58cMMYz0Xo5j4zw5vBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA6fFFymnPAVwo+aJHKtejzEM3fqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgw MTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4NmUwNGE2ZGUvNGQ4MDExZmEtZjFhZS00 NmM2LTk0NDEtMmY0ODZlMDRhNmRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGQ4MDExZmEtZjFhZS00NmM2LTk0 NDEtMmY0ODZlMDRhNmRlLzRkODAxMWZhLWYxYWUtNDZjNi05NDQxLTJmNDg2ZTA0 YTZkZS5jcmwwHwYDVR0jBBgwFoAU54hrAHQubHuwCUVp2sUyljNfs5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgwMTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4 NmUwNGE2ZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiRFSxwUKiTSDPqYUgif8l QVIrJYSBEyvviULibTWdFGWNIiLJoCL67U0S83m3Gj3Mh3vT2/AHdipIwoXYls25 IOyZzba1Qy4uvAcXDBz9egfDiFOVsNWYdnnrdmrx/BiTS+iGDtlZYhOyoHHjziIi WtRYa0w9hLSHFLv4zITYtz78Sju4o2+9rdyF8JfrMkDZUZVR6H1ym4xcAJZmeuIV N1HiI+VdiKG/luO0oiXseipeNushvI/4Umn6Pt0ueYfdw0qCPBG633c6HyuwEO3L uwqyfmBZclsbHii34jPpB/Yx9P1F/RLVcbpTBBPwy1p3UxiVHGNrpDe8dGJ1n7vJ -----END CERTIFICATE-----Generated at Tue Oct 21 15:42:26 2025 by rpki-client