$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft File: 85460c0f-52ac-44dc-a2ba-1250555dba1f.mft (raw, json) Hash identifier: +RWYxgsYnOyV9QI8CAwnVLeSURJrceUxJPKTUsvnz74= Subject key identifier: F3:70:65:A0:AC:53:5B:31:F4:95:D7:61:F2:AD:91:FA:E7:C6:5B:6A Authority key identifier: 03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B Certificate issuer: /CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Certificate serial: 010D0C9F4328584B95AC312F73F3388A973ED380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft Manifest number: 010D0C9F4328584B95AA35876582C94BF4B27602 Signing time: Mon 20 Oct 2025 13:10:03 +0000 Manifest this update: Mon 20 Oct 2025 13:10:03 +0000 Manifest next update: Thu 23 Oct 2025 13:00:00 +0000 Files and hashes: 1: 85460c0f-52ac-44dc-a2ba-1250555dba1f.crl (hash: 27dNxrfHPEU3WJKoTYxfdCglSWXHG6Aqx/Vy2svWpL0=) 2: 87493802-e09d-3695-9aa7-f2c300bd01a4.roa (hash: TbtLeApTESKINU59umDhvK9HDXaL9USxYNbHHBWpta0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ac:31:2f:73:f3:38:8a:97:3e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Validity Not Before: Oct 20 13:10:03 2025 GMT Not After : Oct 23 13:00:00 2025 GMT Subject: CN=d23c5ffe-29f8-4c41-9591-673d799869f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:99:45:64:ee:ee:83:53:2c:44:2c:3d:db: 28:25:5d:dd:ca:9c:2b:8f:1c:fa:4f:37:01:b5:fb: db:19:40:b0:e9:60:d7:49:59:35:5c:00:f8:09:cf: 51:0e:d2:74:31:2c:55:2a:73:c1:02:bb:b9:d0:ff: 6c:7c:b9:31:f5:ef:d2:11:be:25:14:c8:ff:c1:37: 0a:1e:8c:7d:25:8d:34:85:ee:95:c7:88:f7:36:b8: ba:73:af:4c:13:56:0d:6b:6f:8d:fd:2d:ba:6d:34: df:07:8d:17:83:03:64:4a:26:93:21:13:cb:46:7a: 14:a9:10:43:98:a7:1b:41:6e:7f:83:27:fc:35:4a: 8b:57:94:11:ac:23:b8:11:1b:4c:8d:c4:7d:3d:45: 15:6b:5b:78:15:18:6f:e7:47:96:87:3d:dd:7d:e6: 68:9d:d5:3c:c1:5a:0c:8c:87:2e:2c:43:44:b8:ef: 52:45:25:4d:c0:0e:58:58:24:4a:1f:c2:7f:ba:68: a8:c5:24:75:a8:79:87:29:58:d4:9e:c2:e9:13:81: 47:df:bf:7d:43:2c:c9:0a:53:4e:a6:3c:c6:47:90: 86:30:92:33:c5:4f:f4:5f:1b:00:e5:55:f3:ea:c3: c8:f3:91:a3:77:df:08:ef:58:f4:c4:5a:95:ee:34: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:70:65:A0:AC:53:5B:31:F4:95:D7:61:F2:AD:91:FA:E7:C6:5B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl X509v3 Authority Key Identifier: keyid:03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:51:8c:5a:ea:24:a9:57:7a:80:76:4d:97:68:bd:cd:5c:f8: 3c:a2:a5:ba:da:1d:c6:eb:d8:80:bb:6d:b8:2b:4d:41:e8:9a: c4:5f:46:ab:bc:29:41:70:91:ef:64:65:68:db:0f:05:67:52: d1:96:99:16:f3:56:eb:18:42:94:a2:2e:15:05:34:6d:78:24: 20:15:a7:ac:8e:11:cf:40:88:c1:16:2b:79:aa:20:1c:79:67: 26:a0:0f:1f:8f:b0:64:f2:35:aa:9a:53:cb:6a:97:10:d6:c8: f2:fa:59:c0:4a:8e:35:fa:8e:48:c2:25:56:a5:c7:0b:48:e1: 87:e1:ee:cb:1c:f8:a2:1c:d2:b5:ba:dc:ff:9d:eb:68:c5:6d: 0a:d9:5e:07:b4:13:f9:63:9d:57:f7:aa:af:bc:56:b5:14:6c: 99:3f:63:e8:ed:46:56:6c:8c:a2:d2:c4:74:b3:11:c1:28:98: bb:14:fc:28:df:df:55:7e:33:9e:a7:0d:cc:c1:a1:b5:99:9b: ab:0f:f9:35:2b:53:78:7b:ca:b6:8d:f7:a1:6d:18:72:72:e2: b2:3b:32:0c:e7:f8:07:0a:80:7e:b2:cc:37:6f:7a:67:4d:94: c4:a7:4f:e6:73:a3:ee:6e:22:09:ec:ab:9e:bf:7a:00:12:b6: 37:86:5f:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVrDEvc/M4ipc+04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU0NjBjMGYtNTJhYy00NGRjLWEyYmEtMTI1MDU1NWRi YTFmMB4XDTI1MTAyMDEzMTAwM1oXDTI1MTAyMzEzMDAwMFowLzEtMCsGA1UEAxMk ZDIzYzVmZmUtMjlmOC00YzQxLTk1OTEtNjczZDc5OTg2OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMqZRWTu7oNTLEQsPdsoJV3dypwrjxz6TzcB tfvbGUCw6WDXSVk1XAD4Cc9RDtJ0MSxVKnPBAru50P9sfLkx9e/SEb4lFMj/wTcK Hox9JY00he6Vx4j3Nri6c69ME1YNa2+N/S26bTTfB40XgwNkSiaTIRPLRnoUqRBD mKcbQW5/gyf8NUqLV5QRrCO4ERtMjcR9PUUVa1t4FRhv50eWhz3dfeZondU8wVoM jIcuLENEuO9SRSVNwA5YWCRKH8J/umioxSR1qHmHKVjUnsLpE4FH3799QyzJClNO pjzGR5CGMJIzxU/0XxsA5VXz6sPI85Gjd98I71j0xFqV7jSC1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPNwZaCsU1sx9JXXYfKtkfrnxltqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2 MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUwNTU1ZGJhMWYvODU0NjBjMGYtNTJhYy00 NGRjLWEyYmEtMTI1MDU1NWRiYTFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODU0NjBjMGYtNTJhYy00NGRjLWEy YmEtMTI1MDU1NWRiYTFmLzg1NDYwYzBmLTUyYWMtNDRkYy1hMmJhLTEyNTA1NTVk YmExZi5jcmwwHwYDVR0jBBgwFoAUAwiTttenhsGJa3cTLyM2l8RvyQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUw NTU1ZGJhMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAUYxa6iSpV3qAdk2XaL3N XPg8oqW62h3G69iAu224K01B6JrEX0arvClBcJHvZGVo2w8FZ1LRlpkW81brGEKU oi4VBTRteCQgFaesjhHPQIjBFit5qiAceWcmoA8fj7Bk8jWqmlPLapcQ1sjy+lnA So41+o5IwiVWpccLSOGH4e7LHPiiHNK1utz/netoxW0K2V4HtBP5Y51X96qvvFa1 FGyZP2Po7UZWbIyi0sR0sxHBKJi7FPwo399VfjOepw3MwaG1mZurD/k1K1N4e8q2 jfehbRhycuKyOzIM5/gHCoB+ssw3b3pnTZTEp0/mc6PubiIJ7Kuev3oAErY3hl9O -----END CERTIFICATE-----Generated at Tue Oct 21 07:45:03 2025 by rpki-client