$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: tguKeZWRCyw7onQqj94ccj5cTK2uJd1gyTsiu8Rnh+Q= Subject key identifier: 63:08:EC:09:FA:74:CB:39:64:45:3F:D6:24:96:EB:9B:8E:9F:C6:54 Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584B960093B17BBCE9F3EB19AFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E207 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Thu 23 Oct 2025 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: Yh3gM56QVsftO8INSnsWwzHmNzNXuzXJj9m9WN4JOkU=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: oOACxzOBF0UqkHFW4LYQDkrkpijdQUoGWEIwpBVT+o8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:93:b1:7b:bc:e9:f3:eb:19:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 23 16:00:00 2025 GMT Subject: CN=287bbfca-6ded-4096-b315-c736c2d7a311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:ce:8a:4a:66:f8:8b:4b:3a:84:2f:51:98: 61:e7:43:f9:e2:55:eb:d7:86:cb:23:da:4b:9e:5f: 6e:96:d7:9a:6b:f5:a5:de:c3:dd:63:e3:1d:45:c2: 51:bd:2a:cd:26:22:e3:8c:af:af:41:aa:92:20:f6: 04:30:ca:b8:b5:f3:e7:d0:0b:0c:36:6f:43:f7:49: f0:0f:33:36:c0:02:f2:9f:49:0e:63:69:cf:07:6e: 65:33:62:74:ed:6b:4f:27:24:b1:73:6e:64:6a:61: 24:e4:0a:aa:30:88:55:31:1f:f6:99:27:22:8d:de: 2b:9b:cc:c1:dc:f1:c4:37:05:d0:3e:6f:67:95:ac: b2:b9:2e:ba:fa:2f:77:44:2c:ca:c5:de:dc:36:46: 81:64:01:4b:40:7f:a0:dd:95:93:44:55:ce:43:e3: 32:45:73:78:f3:6b:cd:42:4d:e8:6f:c2:da:2b:ff: 4b:40:0a:0f:c3:b6:cd:54:52:af:13:52:55:0c:41: ba:74:72:07:99:53:7b:56:75:88:05:7d:68:ba:73: 21:a7:38:35:fc:7e:44:dc:dd:73:ac:c1:5b:38:58: 6b:5f:0f:8d:31:8e:69:9f:92:3a:dd:a7:66:4e:a0: fa:85:73:75:82:4c:a9:be:15:52:c6:1d:cf:11:d2: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:EC:09:FA:74:CB:39:64:45:3F:D6:24:96:EB:9B:8E:9F:C6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2b:74:43:b6:dc:46:f3:8a:1c:d6:d8:8a:f2:f2:e5:83:2e: f6:4d:0a:59:3b:c3:bb:1f:e8:3b:73:59:44:1a:4c:2a:66:1f: 26:10:9a:97:92:ce:83:08:5c:93:e7:29:da:30:4f:61:f6:1c: 09:1a:79:53:58:03:e6:d7:52:03:49:5b:4b:cb:de:8e:3e:31: a5:5c:98:f2:25:58:dd:62:a3:93:9b:70:77:45:1e:63:30:16: 45:22:82:90:b6:1a:2a:a0:34:09:52:62:8e:f4:b8:fc:44:05: 76:e0:ff:b5:5b:a8:55:e9:82:6e:c3:ba:c3:f5:bb:53:c4:86: 92:cd:92:05:5a:76:79:40:9b:cf:63:67:2b:53:7c:a0:0c:50: 61:66:16:84:50:3b:b9:01:72:7f:22:d2:fb:c4:4e:95:41:13: 40:c9:36:c9:4b:37:e2:df:4b:37:87:8b:a8:f1:8f:8d:45:d4: e1:96:c6:ad:60:fe:2f:a5:f7:7b:23:3d:18:d2:ca:4c:73:11: c4:0e:03:3b:75:2b:94:a5:aa:ec:11:a7:ea:48:28:da:53:9f: 7b:af:86:d0:10:8e:9e:e8:00:96:c9:fc:70:d4:0e:1a:e8:b9: c5:06:c1:6b:4e:5d:09:89:50:61:c4:d2:0e:16:8a:53:e8:38: 47:42:cd:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJOxe7zp8+sZr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMzE2MDAwMFowLzEtMCsGA1UEAxMk Mjg3YmJmY2EtNmRlZC00MDk2LWIzMTUtYzczNmMyZDdhMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZLOikpm+ItLOoQvUZhh50P54lXr14bLI9pL nl9ulteaa/Wl3sPdY+MdRcJRvSrNJiLjjK+vQaqSIPYEMMq4tfPn0AsMNm9D90nw DzM2wALyn0kOY2nPB25lM2J07WtPJySxc25kamEk5AqqMIhVMR/2mScijd4rm8zB 3PHENwXQPm9nlayyuS66+i93RCzKxd7cNkaBZAFLQH+g3ZWTRFXOQ+MyRXN482vN Qk3ob8LaK/9LQAoPw7bNVFKvE1JVDEG6dHIHmVN7VnWIBX1ounMhpzg1/H5E3N1z rMFbOFhrXw+NMY5pn5I63admTqD6hXN1gkypvhVSxh3PEdJUkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGMI7An6dMs5ZEU/1iSW65uOn8ZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJK3RDttxG84oc1tiK8vLl gy72TQpZO8O7H+g7c1lEGkwqZh8mEJqXks6DCFyT5ynaME9h9hwJGnlTWAPm11ID SVtLy96OPjGlXJjyJVjdYqOTm3B3RR5jMBZFIoKQthoqoDQJUmKO9Lj8RAV24P+1 W6hV6YJuw7rD9btTxIaSzZIFWnZ5QJvPY2crU3ygDFBhZhaEUDu5AXJ/ItL7xE6V QRNAyTbJSzfi30s3h4uo8Y+NRdThlsatYP4vpfd7Iz0Y0spMcxHEDgM7dSuUpars EafqSCjaU597r4bQEI6e6ACWyfxw1A4a6LnFBsFrTl0JiVBhxNIOFopT6DhHQs0r -----END CERTIFICATE-----Generated at Mon Oct 20 23:32:11 2025 by rpki-client