$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft File: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft (raw, json) Hash identifier: DrXH9e5bCwzuOf6+1uTFxZnz/W1xdEcz8yJZS0xnW7w= Subject key identifier: 75:21:C3:97:36:D6:ED:42:34:80:2E:71:27:97:DE:7B:C1:2B:E4:F7 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F4328584B93E88FFF7BD6A18FC313EDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft Manifest number: 010D0C9F4328584426C89F1535D6ABD56DB6EA25 Signing time: Sun 19 Oct 2025 22:00:03 +0000 Manifest this update: Sun 19 Oct 2025 22:00:03 +0000 Manifest next update: Tue 21 Oct 2025 22:00:00 +0000 Files and hashes: 1: 039bc77e-6087-3093-9191-6772277f3e24.roa (hash: w2TP6awPNYKvqAKChEvo4Law/ANswyBGVu3O3Kbpid8=) 2: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl (hash: kRw5aXaCW/WKOftkE/+VfOJrInXmoyQS7SaNZSupQWk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:e8:8f:ff:7b:d6:a1:8f:c3:13:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: Oct 19 22:00:03 2025 GMT Not After : Oct 21 22:00:00 2025 GMT Subject: CN=c40ffdab-961f-404a-a5b3-82a65b0dba5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:46:58:62:f0:3d:37:a9:0d:f6:6f:67:29: e9:5f:b0:c6:45:0a:e3:5f:54:1c:d4:81:0f:e3:01: 45:7f:dc:32:31:08:8c:20:fa:2d:e4:a2:c7:63:96: d2:86:44:77:1e:db:b5:06:9e:e4:61:77:49:73:02: 03:d9:09:e4:5f:dd:12:57:06:11:72:05:30:6d:a4: 9a:4e:99:9e:10:17:ea:19:26:13:41:c1:fd:4d:37: 88:46:3b:7c:c9:c4:04:cf:be:08:d5:ed:b8:75:eb: 97:29:29:49:71:9f:8a:f9:3f:31:74:b0:7b:76:39: b0:92:f2:a5:98:71:ea:89:a0:b5:56:39:eb:4c:43: 0a:1a:c7:e2:58:b2:b6:9b:92:5a:30:55:67:13:50: b8:4b:ad:fe:a2:e5:e3:4b:68:69:69:70:be:99:c4: 02:35:c0:57:0f:d6:7e:6b:55:df:5c:7e:f0:2b:9c: 35:b8:cc:7a:75:45:36:dd:6b:65:d5:db:a8:ad:ce: 0b:3e:9e:f1:3e:e9:dd:0a:20:d1:71:4a:da:9e:c1: 42:1d:ab:fd:a5:64:00:08:ea:45:d1:1b:ff:1c:39: 87:33:39:6d:80:c7:3b:f1:ba:72:ee:a9:94:19:09: 43:6b:42:92:ca:81:be:ef:23:6b:5f:2f:50:78:05: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:21:C3:97:36:D6:ED:42:34:80:2E:71:27:97:DE:7B:C1:2B:E4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:04:0e:38:26:15:94:a5:2a:ab:40:22:f1:3e:5a:fb:96:72: 68:de:80:16:4a:e7:7d:1a:c9:8c:3e:cb:64:e8:c8:8b:23:ba: d4:e4:08:5e:a7:85:cd:fb:49:65:76:cb:b3:a0:db:1b:12:f7: b9:de:97:82:bd:69:06:0c:fd:af:c9:bd:ae:aa:02:6a:4c:7b: c8:d4:d2:d4:dc:4c:ff:28:c0:6a:02:8e:b5:e1:8d:b5:c5:83: 3a:b9:c8:ae:e1:0d:c6:af:2b:40:ff:66:b5:a6:0e:ef:71:ad: 30:d8:53:20:f1:5f:d5:39:d6:12:e6:ec:3c:75:55:99:4d:6b: 47:60:9b:03:2e:6b:84:0b:b9:bd:6c:23:41:dd:89:04:4e:a9: 60:89:1e:38:0d:c1:b7:8d:7b:17:c7:18:37:8e:12:7e:fe:71: ed:a0:67:80:e6:6e:56:1e:9d:c9:4b:ed:99:9f:27:89:58:3d: 91:34:4b:e3:03:57:e7:5b:0f:2c:64:d7:73:3d:e6:cb:c3:4d: 03:6d:93:27:72:14:4d:3e:56:96:40:bd:5c:f0:24:e8:43:a8: 87:c6:f5:45:9c:6a:77:76:17:a9:da:bf:8d:92:60:34:e7:29: 61:48:72:b2:fb:d4:64:98:6a:a8:b1:f1:4e:6d:16:41:22:78: d0:f5:82:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuT6I//e9ahj8MT7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI1MTAxOTIyMDAwM1oXDTI1MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk YzQwZmZkYWItOTYxZi00MDRhLWE1YjMtODJhNjViMGRiYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRBGWGLwPTepDfZvZynpX7DGRQrjX1Qc1IEP 4wFFf9wyMQiMIPot5KLHY5bShkR3Htu1Bp7kYXdJcwID2QnkX90SVwYRcgUwbaSa TpmeEBfqGSYTQcH9TTeIRjt8ycQEz74I1e24deuXKSlJcZ+K+T8xdLB7djmwkvKl mHHqiaC1VjnrTEMKGsfiWLK2m5JaMFVnE1C4S63+ouXjS2hpaXC+mcQCNcBXD9Z+ a1XfXH7wK5w1uMx6dUU23Wtl1duorc4LPp7xPundCiDRcUransFCHav9pWQACOpF 0Rv/HDmHMzltgMc78bpy7qmUGQlDa0KSyoG+7yNrXy9QeAXyGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHUhw5c21u1CNIAucSeX3nvBK+T3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMTA5YmU3M2ItZTU2OC00 NGI3LWJkNjMtZWJjNGU4ZmU2ZjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaBA44JhWUpSqrQCLxPlr7 lnJo3oAWSud9GsmMPstk6MiLI7rU5Ahep4XN+0lldsuzoNsbEve53peCvWkGDP2v yb2uqgJqTHvI1NLU3Ez/KMBqAo614Y21xYM6uciu4Q3GrytA/2a1pg7vca0w2FMg 8V/VOdYS5uw8dVWZTWtHYJsDLmuEC7m9bCNB3YkETqlgiR44DcG3jXsXxxg3jhJ+ /nHtoGeA5m5WHp3JS+2ZnyeJWD2RNEvjA1fnWw8sZNdzPebLw00DbZMnchRNPlaW QL1c8CToQ6iHxvVFnGp3dhep2r+NkmA05ylhSHKy+9RkmGqosfFObRZBInjQ9YIO -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:51 2025 by rpki-client