$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft File: a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft (raw, json) Hash identifier: hJwBTiBCpXuGd6JQsXLxPTIqiOHT1FfCwmPPSSFqh9U= Subject key identifier: AF:22:C6:9F:96:46:BB:C0:32:E8:5E:3E:59:5F:C5:36:8B:70:F9:17 Authority key identifier: D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6 Certificate issuer: /CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5 Certificate serial: 010D0C9F4328584B9695866F90A51CB762472F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft Manifest number: 010D0C9F4328584073A828A2A618C79889DFC496 Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Wed 22 Oct 2025 21:00:00 +0000 Files and hashes: 1: 83ddce50-be55-3d3a-bc5d-6548146ba65c.roa (hash: bRYiTvDeszKmqhRtLLmzUu0xxGnzSP+MRfahiROVFyg=) 2: a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl (hash: 3pmxeRxOQsZGb0eK9CHtJy90jKBdPgVHXJIplcJ9j4o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:86:6f:90:a5:1c:b7:62:47:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5 Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 22 21:00:00 2025 GMT Subject: CN=8e33a2f1-3e17-411c-8c17-8e557ef96bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:2c:a8:3a:55:f6:01:af:8a:4a:2c:c5:08: f5:f0:aa:08:af:95:f8:7e:6a:75:92:be:05:dc:ba: 68:92:80:74:2e:13:93:c3:46:db:02:cf:dc:3c:46: 9c:03:58:bb:a9:81:8a:37:5d:73:6a:8e:01:02:85: 07:6b:c4:59:f9:16:c2:60:ff:f2:c5:3b:55:9d:6d: f4:61:0f:53:77:ca:fd:30:80:e5:27:7a:3d:1c:36: fc:1d:4c:45:2e:a3:0e:90:99:fd:e4:28:72:ed:ba: 3a:ae:b6:7a:4c:ee:f0:e3:17:de:46:56:4b:bf:25: 26:d6:24:04:db:45:08:a9:1f:b9:8d:a0:df:39:0a: 19:f1:36:98:6b:ac:26:8f:41:a7:35:90:49:06:9d: ea:47:ec:fc:fb:60:61:2d:6e:11:59:67:a3:aa:30: 05:73:08:d6:5b:e8:79:06:c0:43:cc:23:fd:e9:d1: 17:58:c7:ce:46:42:bb:68:78:07:5a:c0:b2:05:b0: a6:21:99:c7:8c:51:a5:8d:6f:45:66:1a:c4:ac:eb: 0f:56:24:00:c1:8a:74:b7:ed:17:35:5d:60:2c:0a: d0:f5:e8:99:35:e9:d3:38:35:dd:a5:6b:f9:79:ec: 25:4e:e4:a4:4e:54:b5:8b:cf:2c:ea:01:fd:7b:c6: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:22:C6:9F:96:46:BB:C0:32:E8:5E:3E:59:5F:C5:36:8B:70:F9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl X509v3 Authority Key Identifier: keyid:D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:06:c6:8a:36:ed:5e:1a:52:1b:93:bd:c9:78:42:60:9a:2d: 04:95:e8:ab:0d:71:97:0f:37:8f:91:ec:44:ba:e9:5e:84:7d: 20:dd:49:c4:24:c4:54:e8:32:e9:28:91:52:5e:a6:3f:3a:55: 8e:9f:13:f8:d6:f2:e9:59:77:92:2d:09:b3:f1:76:96:73:79: ea:73:a2:54:0a:a9:b9:3f:07:7c:e5:dd:69:c6:e5:fb:5d:ce: 52:66:5a:c4:82:89:89:b6:03:11:15:38:c7:c3:3c:65:47:58: 78:4f:ed:d8:fb:fd:c1:3c:23:a3:49:53:2a:eb:44:4f:97:08: 40:23:73:5b:ff:7f:48:51:4a:77:3b:36:a7:a2:37:a8:b4:65: 05:c5:13:9a:aa:3a:1b:61:8f:7d:d1:99:ad:4f:49:dd:d0:7a: 9d:17:38:42:87:95:99:08:d6:ee:ad:fe:0e:88:9b:37:69:84: d6:9c:81:9e:c3:4d:c2:1d:9c:fb:97:5c:87:2c:66:88:c5:61: 36:f5:44:15:c5:1c:1a:52:d2:dc:f5:29:82:15:42:35:32:f9: b8:03:40:2d:4b:64:80:07:fd:34:f0:c0:fa:a5:86:e5:2d:03: 11:00:94:d7:d9:83:bb:88:0b:9b:cf:d5:2f:c6:8a:3c:da:bd: d3:d5:9b:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYZvkKUct2JHLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzZmRjOTUtYzhjOS00OGMzLTkwMTAtY2MxZjJkMzc2 ZWQ1MB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMjIxMDAwMFowLzEtMCsGA1UEAxMk OGUzM2EyZjEtM2UxNy00MTFjLThjMTctOGU1NTdlZjk2YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVwsqDpV9gGvikosxQj18KoIr5X4fmp1kr4F 3LpokoB0LhOTw0bbAs/cPEacA1i7qYGKN11zao4BAoUHa8RZ+RbCYP/yxTtVnW30 YQ9Td8r9MIDlJ3o9HDb8HUxFLqMOkJn95Chy7bo6rrZ6TO7w4xfeRlZLvyUm1iQE 20UIqR+5jaDfOQoZ8TaYa6wmj0GnNZBJBp3qR+z8+2BhLW4RWWejqjAFcwjWW+h5 BsBDzCP96dEXWMfORkK7aHgHWsCyBbCmIZnHjFGljW9FZhrErOsPViQAwYp0t+0X NV1gLArQ9eiZNenTODXdpWv5eewlTuSkTlS1i88s6gH9e8bR8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK8ixp+WRrvAMuhePllfxTaLcPkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNTNm ZGM5NS1jOGM5LTQ4YzMtOTAxMC1jYzFmMmQzNzZlZDUvYTUzZmRjOTUtYzhjOS00 OGMzLTkwMTAtY2MxZjJkMzc2ZWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTUzZmRjOTUtYzhjOS00OGMzLTkw MTAtY2MxZjJkMzc2ZWQ1L2E1M2ZkYzk1LWM4YzktNDhjMy05MDEwLWNjMWYyZDM3 NmVkNS5jcmwwHwYDVR0jBBgwFoAU0IEq3Qsb0yncd9gc8bmiIoQ2zfYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNTNmZGM5NS1jOGM5LTQ4YzMtOTAxMC1jYzFm MmQzNzZlZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLBsaKNu1eGlIbk73JeEJg mi0EleirDXGXDzePkexEuulehH0g3UnEJMRU6DLpKJFSXqY/OlWOnxP41vLpWXeS LQmz8XaWc3nqc6JUCqm5Pwd85d1pxuX7Xc5SZlrEgomJtgMRFTjHwzxlR1h4T+3Y +/3BPCOjSVMq60RPlwhAI3Nb/39IUUp3OzanojeotGUFxROaqjobYY990ZmtT0nd 0HqdFzhCh5WZCNburf4OiJs3aYTWnIGew03CHZz7l1yHLGaIxWE29UQVxRwaUtLc 9SmCFUI1Mvm4A0AtS2SAB/008MD6pYblLQMRAJTX2YO7iAubz9Uvxoo82r3T1ZtH -----END CERTIFICATE-----Generated at Tue Oct 21 15:17:53 2025 by rpki-client