$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: wszT+VUNRjmOEscssoSh7XLyI0owAGDz/eCQ2GhtD9Q= Subject key identifier: A5:CD:25:C6:75:43:CD:DC:CA:80:86:E7:3B:60:4C:E9:D5:D1:09:AD Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584B904D7A8E3C09F35957147A50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697F32 Signing time: Sat 18 Oct 2025 15:00:08 +0000 Manifest this update: Sat 18 Oct 2025 15:00:08 +0000 Manifest next update: Tue 21 Oct 2025 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: 5HKNzpyJCixqoQ/1VKiGvhHszEtlPfaDiZnAt4foTaQ=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: rzSTWg0nZqyUt253r/b7cEdATCeW2mlDv3M7lwCEnWM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:4d:7a:8e:3c:09:f3:59:57:14:7a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Oct 18 15:00:08 2025 GMT Not After : Oct 21 15:00:00 2025 GMT Subject: CN=7fe7f593-fb12-4ab7-9e87-09e294743c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:a3:84:0c:79:fe:21:25:97:06:8e:c3:ce: fa:17:9e:35:b8:b5:fd:e6:c0:fd:16:97:09:25:32: 58:21:90:bf:f3:4a:6c:c6:91:ff:05:01:4f:5b:62: e1:26:59:59:3d:28:3e:bf:01:62:87:33:b2:68:d7: 13:09:10:8f:e0:6a:66:18:98:b8:f6:97:5d:ba:2f: 33:94:5c:d7:d4:48:d3:9e:6f:57:5e:c8:f6:0f:25: 08:0d:af:77:6c:fe:78:1d:28:fa:00:9f:6e:8f:95: bd:23:8c:f6:fd:97:bb:4b:25:20:3f:41:68:f0:bb: 72:51:24:26:0f:b7:5d:19:68:19:a0:95:c1:c1:d3: 31:88:53:70:f5:5d:88:44:66:dc:16:4e:cb:93:80: 2b:e2:c7:b1:5c:be:56:ed:6a:cb:ed:7a:49:dc:72: 58:20:71:1d:73:c3:41:49:ef:10:b0:17:4a:95:e4: f2:fb:73:4b:99:cd:e1:a3:2d:ea:35:7e:2e:b8:58: 6f:9a:6c:c1:54:ec:ee:cf:5a:82:fd:73:62:39:04: ab:3a:86:de:a5:83:ee:1c:55:d9:53:9c:f1:a2:0b: 45:6b:4f:6d:29:d6:6b:1d:92:dc:8b:0f:ee:b1:88: 67:53:e5:2a:a8:ac:25:22:f4:d4:6c:17:aa:c7:53: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:25:C6:75:43:CD:DC:CA:80:86:E7:3B:60:4C:E9:D5:D1:09:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:85:28:cf:27:30:fc:1c:92:04:ed:c9:e3:9b:97:52:20:5d: 09:9e:10:ee:68:6e:16:6a:54:a0:36:c6:dc:eb:50:f0:23:07: 65:6f:7e:31:b0:33:ab:f7:7f:dc:f1:06:9b:f2:f8:d3:f7:2b: d8:91:ae:a2:fb:96:4f:63:3e:e3:7a:1d:04:ed:5d:41:f8:77: bc:6e:ff:11:a7:fe:c4:84:b4:4a:87:43:79:ca:57:86:aa:58: 2b:3d:51:ec:4b:63:17:d8:0f:3a:89:a0:5b:6e:73:3c:9a:a8: f0:cb:46:cf:37:ac:2f:72:1e:f9:5e:a1:6a:fa:c3:54:f8:1c: 5c:ae:d1:75:50:6c:74:44:8d:22:56:b1:8a:15:07:c5:3e:72: be:36:58:61:84:3f:b0:3b:1b:47:bf:7c:05:94:6e:33:41:0d: ba:7c:fb:02:75:42:59:b3:92:79:37:81:00:cf:1d:8b:f3:34: 59:ea:6e:5c:aa:69:0f:fb:49:33:6c:b7:4b:47:10:3d:3d:e3: 22:fd:e9:a3:6b:9d:23:01:d0:9a:5b:a5:37:f3:77:0b:5d:ae: 5e:16:68:7b:70:b7:70:a6:e0:3f:11:d0:6e:c1:0e:8f:44:9f: 7c:06:09:3e:e5:66:03:e4:b7:fb:b2:5f:d4:1c:23:c7:b7:90: 82:13:7d:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuQTXqOPAnzWVcUelAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MTAxODE1MDAwOFoXDTI1MTAyMTE1MDAwMFowLzEtMCsGA1UEAxMk N2ZlN2Y1OTMtZmIxMi00YWI3LTllODctMDllMjk0NzQzYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkACjhAx5/iEllwaOw876F541uLX95sD9FpcJ JTJYIZC/80psxpH/BQFPW2LhJllZPSg+vwFihzOyaNcTCRCP4GpmGJi49pddui8z lFzX1EjTnm9XXsj2DyUIDa93bP54HSj6AJ9uj5W9I4z2/Ze7SyUgP0Fo8LtyUSQm D7ddGWgZoJXBwdMxiFNw9V2IRGbcFk7Lk4Ar4sexXL5W7WrL7XpJ3HJYIHEdc8NB Se8QsBdKleTy+3NLmc3hoy3qNX4uuFhvmmzBVOzuz1qC/XNiOQSrOobepYPuHFXZ U5zxogtFa09tKdZrHZLciw/usYhnU+UqqKwlIvTUbBeqx1PDzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKXNJcZ1Q83cyoCG5ztgTOnV0QmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbhSjPJzD8HJIE7cnjm5dS IF0JnhDuaG4WalSgNsbc61DwIwdlb34xsDOr93/c8Qab8vjT9yvYka6i+5ZPYz7j eh0E7V1B+He8bv8Rp/7EhLRKh0N5yleGqlgrPVHsS2MX2A86iaBbbnM8mqjwy0bP N6wvch75XqFq+sNU+BxcrtF1UGx0RI0iVrGKFQfFPnK+NlhhhD+wOxtHv3wFlG4z QQ26fPsCdUJZs5J5N4EAzx2L8zRZ6m5cqmkP+0kzbLdLRxA9PeMi/emja50jAdCa W6U383cLXa5eFmh7cLdwpuA/EdBuwQ6PRJ98Bgk+5WYD5Lf7sl/UHCPHt5CCE328 -----END CERTIFICATE-----Generated at Sun Oct 19 14:43:32 2025 by rpki-client