$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft File: 5a456a73-032d-4675-8f0a-2db7b1e58168.mft (raw, json) Hash identifier: yIO0B18Bu8FSwdlWWprg2tml5cvb6gBo4/TFb2QBjOY= Subject key identifier: B9:C3:1A:22:AA:F5:6B:5B:41:C0:22:43:70:54:A0:E7:68:78:3A:8B Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Certificate serial: 010D0C9F4328584B9100184377D8451CC2DFF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft Manifest number: 010D0C9F4328584073A828F8D66B51A563BB3D53 Signing time: Sat 18 Oct 2025 21:00:03 +0000 Manifest this update: Sat 18 Oct 2025 21:00:03 +0000 Manifest next update: Mon 20 Oct 2025 21:00:00 +0000 Files and hashes: 1: 5a456a73-032d-4675-8f0a-2db7b1e58168.crl (hash: tFgpnrGvvYp7K+D09pUwAGuD5A5Z54GNJ/5YjzMOwZo=) 2: 825702a4-e267-3fed-801c-e21c3ef74911.roa (hash: FYzKdzaieZiDZSTtIj8pbP3yT5MY0CD9awst9OBy3mE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:00:18:43:77:d8:45:1c:c2:df:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Validity Not Before: Oct 18 21:00:03 2025 GMT Not After : Oct 20 21:00:00 2025 GMT Subject: CN=f854b75a-5587-4a85-a286-05f6e932a9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:93:99:c6:2b:7b:c7:6c:d2:c5:bb:1d:f9: 3a:be:3b:8f:48:47:d1:35:37:25:8d:b4:a4:9a:dc: cd:2d:51:77:68:aa:be:f1:bc:30:26:87:3a:31:30: 62:ea:7a:23:7d:2e:cc:3a:10:c9:21:82:2a:0b:f0: 9f:10:82:35:a3:fe:08:54:c0:a7:b0:e7:42:43:44: 46:a2:0a:2c:91:c0:2c:84:9d:a4:e0:27:14:0c:f9: d5:ff:2b:75:d8:f1:16:32:a0:47:42:39:68:36:2b: b3:e7:29:96:4c:64:bf:5d:32:47:1b:a5:fd:b2:9b: a2:08:78:69:8f:3b:c7:f3:15:c5:43:82:b9:41:d0: 6d:4e:26:1f:66:cc:f1:c6:59:0d:51:83:29:0e:4d: b4:61:59:50:dc:1d:6a:48:f5:86:66:e5:11:2e:18: d3:ed:b2:49:bd:8d:ca:eb:bd:d0:51:be:a5:52:d3: 16:80:e9:7d:b5:b3:bc:77:57:32:79:be:07:1f:81: 4d:95:18:35:a2:44:43:ed:28:14:ec:0c:b0:ab:0f: 8c:97:23:e2:68:ad:df:2a:df:b2:3b:35:d9:86:58: 3c:eb:f0:4f:e3:88:43:fc:90:8b:47:72:2e:f3:3c: 85:62:a0:43:0a:c7:fa:5a:b2:46:a2:68:af:8c:d6: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C3:1A:22:AA:F5:6B:5B:41:C0:22:43:70:54:A0:E7:68:78:3A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl X509v3 Authority Key Identifier: keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:75:d6:90:8d:82:3f:8f:09:d8:13:47:21:db:c3:53:ee:22: b0:99:f9:6e:b9:1f:4d:c5:50:1b:59:61:31:04:4a:96:f2:e2: 6e:e3:51:f3:71:ff:c2:f7:3b:94:fb:6d:8d:3e:92:86:99:ee: 09:7b:4b:df:19:35:5a:d0:69:9c:35:8d:30:d5:c7:0b:16:8e: 71:5b:29:37:c6:5c:c2:13:a3:df:08:99:60:2f:ed:c4:4b:48: 50:f5:68:ab:da:b9:ed:01:0d:ba:96:25:d6:1a:3c:c2:e6:d8: aa:f6:2e:9e:cd:42:aa:a5:2d:6a:43:b5:ee:2a:ed:40:c8:d7: ad:be:11:57:b7:af:f5:7d:b1:df:d5:ae:ce:8b:c1:a1:b7:62: ed:2e:78:cf:d3:d0:cf:c8:70:ce:5e:6b:77:6d:ee:52:5e:71: 9e:f0:d6:d0:e4:b7:f0:d0:33:71:f6:73:40:58:d1:af:c8:4d: 73:8e:e9:47:24:5a:5c:97:f7:a8:8f:69:41:f6:a3:e9:76:97: c5:12:47:43:77:f5:0f:3e:98:42:68:d7:ee:83:de:d6:4b:30: a5:b9:20:b3:94:71:24:30:d3:4b:ed:b1:1a:a4:04:16:97:56: 86:05:d3:0e:c4:5c:9b:b4:f7:6f:51:a6:b9:19:9e:64:4f:58: de:40:89:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRABhDd9hFHMLf9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4 MTY4MB4XDTI1MTAxODIxMDAwM1oXDTI1MTAyMDIxMDAwMFowLzEtMCsGA1UEAxMk Zjg1NGI3NWEtNTU4Ny00YTg1LWEyODYtMDVmNmU5MzJhOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGCTmcYre8ds0sW7Hfk6vjuPSEfRNTcljbSk mtzNLVF3aKq+8bwwJoc6MTBi6nojfS7MOhDJIYIqC/CfEII1o/4IVMCnsOdCQ0RG ogoskcAshJ2k4CcUDPnV/yt12PEWMqBHQjloNiuz5ymWTGS/XTJHG6X9spuiCHhp jzvH8xXFQ4K5QdBtTiYfZszxxlkNUYMpDk20YVlQ3B1qSPWGZuURLhjT7bJJvY3K 673QUb6lUtMWgOl9tbO8d1cyeb4HH4FNlRg1okRD7SgU7Aywqw+MlyPiaK3fKt+y OzXZhlg86/BP44hD/JCLR3Iu8zyFYqBDCsf6WrJGomivjNa3bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLnDGiKq9WtbQcAiQ3BUoOdoeDqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1 NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvNWE0NTZhNzMtMDMyZC00 Njc1LThmMGEtMmRiN2IxZTU4MTY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWE0NTZhNzMtMDMyZC00Njc1LThm MGEtMmRiN2IxZTU4MTY4LzVhNDU2YTczLTAzMmQtNDY3NS04ZjBhLTJkYjdiMWU1 ODE2OC5jcmwwHwYDVR0jBBgwFoAUhZ809TW+1VPdwe+7fz1JekZVV8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3 YjFlNTgxNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzddaQjYI/jwnYE0ch28NT 7iKwmfluuR9NxVAbWWExBEqW8uJu41Hzcf/C9zuU+22NPpKGme4Je0vfGTVa0Gmc NY0w1ccLFo5xWyk3xlzCE6PfCJlgL+3ES0hQ9Wir2rntAQ26liXWGjzC5tiq9i6e zUKqpS1qQ7XuKu1AyNetvhFXt6/1fbHf1a7Oi8Ght2LtLnjP09DPyHDOXmt3be5S XnGe8NbQ5Lfw0DNx9nNAWNGvyE1zjulHJFpcl/eoj2lB9qPpdpfFEkdDd/UPPphC aNfug97WSzCluSCzlHEkMNNL7bEapAQWl1aGBdMOxFybtPdvUaa5GZ5kT1jeQIlg -----END CERTIFICATE-----Generated at Sun Oct 19 17:39:31 2025 by rpki-client