$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft File: a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft (raw, json) Hash identifier: 2mAO9gKdWcTFiJWNGn7OXz6nkSKYLpkY9v919glymkA= Subject key identifier: 8C:D4:8D:76:7C:8F:CA:CF:D2:9F:AE:B8:11:A1:21:EA:27:EE:CC:64 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584B92DC8C044EC641DABABB8AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft Manifest number: 010D0C9F4328584234D1D19DE3CDB1A5D85D2AF6 Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Tue 21 Oct 2025 13:00:00 +0000 Files and hashes: 1: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (hash: 6Vt3fi8UiCZE+yJPVtZRBf4U0IsK/kPiBwKvnJE4Lck=) 2: a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl (hash: l1mBSWSP8gKVMN1yzZocUlFwgzZqMEWOo+ZE39a8aMw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8c:04:4e:c6:41:da:ba:bb:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 21 13:00:00 2025 GMT Subject: CN=8b3e12cc-fe5d-47e9-b8db-1668df069f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:6e:f3:e3:ff:08:ca:99:9f:37:22:6a:ae: 80:e4:e6:4f:91:10:b4:43:fe:08:a3:6a:71:ad:21: ac:5a:37:1c:41:bc:4b:fe:0e:ea:8b:18:17:07:ef: 2f:df:c9:03:eb:b2:87:22:b7:9f:4b:03:aa:62:4e: 8f:b1:11:20:9f:dc:89:80:7b:19:59:df:2f:d2:93: 20:58:79:fb:93:aa:e4:03:e5:51:e6:26:db:13:41: ad:95:97:40:1e:f8:43:9e:0a:6a:d0:cd:00:0a:3c: ee:24:db:ff:8d:75:76:71:d0:a5:2d:55:10:4b:7b: 42:45:2a:e4:aa:be:37:9d:24:25:9f:f1:cd:3d:5f: de:ae:70:47:44:53:5b:af:92:0a:96:e8:f8:c7:0c: 0f:95:cf:fb:b4:20:c7:30:0e:19:b6:b5:11:8e:d2: 0f:fd:c1:13:4c:8f:a3:f1:d4:cd:2d:48:8e:a8:c8: 83:fe:6b:1b:4a:6e:b4:4c:28:80:a2:a5:b0:8d:26: f0:55:7a:1d:06:3e:d7:da:d5:bf:66:c7:4b:7b:55: 69:35:1f:80:1c:0f:28:28:f5:81:44:ee:47:4a:85: 67:68:67:36:0a:b6:18:db:ce:ee:d4:21:32:52:78: ce:26:6a:c1:ec:96:01:02:e9:9f:ce:9a:a5:71:b3: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:8D:76:7C:8F:CA:CF:D2:9F:AE:B8:11:A1:21:EA:27:EE:CC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a4:a7:1b:9b:75:28:31:1d:27:59:94:1e:d9:96:f1:05:f8: 35:8c:ab:e8:e7:25:c5:59:09:7b:f4:0a:e1:db:44:36:47:5b: 64:27:cc:2f:e6:bc:e6:f0:fc:c0:e7:fd:9f:3b:86:af:8c:93: 9d:e3:1d:26:7d:3f:98:e9:54:bc:55:7b:d9:90:40:03:4a:95: 49:ca:17:2e:52:9d:f4:f8:08:18:98:7f:5f:3f:ec:57:8c:72: e3:17:8d:67:fa:1c:4b:7b:ff:30:40:ad:87:28:6c:44:92:57: 41:3f:95:65:33:00:06:b1:e4:37:50:8b:2b:98:a3:2c:e8:db: c0:a2:50:91:9b:42:fb:0f:0c:14:3d:54:b4:72:54:b1:a8:a7: a5:5c:13:66:c9:74:92:0d:3e:bd:3e:89:0d:90:65:2b:a8:20: 8b:71:05:99:f4:28:c7:34:5b:f2:8a:45:e8:5b:21:f1:2f:32: 8e:e5:34:b4:20:a4:a7:c2:7e:7e:3d:c4:50:e0:0c:11:34:e8: ec:46:50:09:22:81:71:c5:c9:22:ff:82:fa:7b:fd:14:0e:1e: 6d:1b:89:bb:0e:47:eb:66:85:dd:9c:86:94:26:96:c0:43:9f: 93:2a:09:43:10:09:65:4f:d9:f1:5c:32:69:e2:77:7f:dd:23: 34:b5:dc:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3IwETsZB2rq7isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMTEzMDAwMFowLzEtMCsGA1UEAxMk OGIzZTEyY2MtZmU1ZC00N2U5LWI4ZGItMTY2OGRmMDY5ZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNlu8+P/CMqZnzciaq6A5OZPkRC0Q/4Io2px rSGsWjccQbxL/g7qixgXB+8v38kD67KHIrefSwOqYk6PsREgn9yJgHsZWd8v0pMg WHn7k6rkA+VR5ibbE0GtlZdAHvhDngpq0M0ACjzuJNv/jXV2cdClLVUQS3tCRSrk qr43nSQln/HNPV/ernBHRFNbr5IKluj4xwwPlc/7tCDHMA4ZtrURjtIP/cETTI+j 8dTNLUiOqMiD/msbSm60TCiAoqWwjSbwVXodBj7X2tW/ZsdLe1VpNR+AHA8oKPWB RO5HSoVnaGc2CrYY287u1CEyUnjOJmrB7JYBAumfzpqlcbOovwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIzUjXZ8j8rP0p+uuBGhIeon7sxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvYTk0MzVhMzgtYmI4OS00 ZmNmLTllNWYtN2E2ZTUzYjJkM2JkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRpKcbm3UoMR0nWZQe2Zbx Bfg1jKvo5yXFWQl79Arh20Q2R1tkJ8wv5rzm8PzA5/2fO4avjJOd4x0mfT+Y6VS8 VXvZkEADSpVJyhcuUp30+AgYmH9fP+xXjHLjF41n+hxLe/8wQK2HKGxEkldBP5Vl MwAGseQ3UIsrmKMs6NvAolCRm0L7DwwUPVS0clSxqKelXBNmyXSSDT69PokNkGUr qCCLcQWZ9CjHNFvyikXoWyHxLzKO5TS0IKSnwn5+PcRQ4AwRNOjsRlAJIoFxxcki /4L6e/0UDh5tG4m7DkfrZoXdnIaUJpbAQ5+TKglDEAllT9nxXDJp4nd/3SM0tdxA -----END CERTIFICATE-----Generated at Sun Oct 19 15:07:45 2025 by rpki-client