$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft File: 4680d191-3a38-4cef-89dd-c84240e3a1cf.mft (raw, json) Hash identifier: g/opdzGC6NyeFoStvofc9HnvUDUG1ZQ3ye2hVkAacaU= Subject key identifier: 77:8B:99:FC:9F:98:76:BD:2D:80:06:73:CA:4D:AE:E0:4D:5A:D3:33 Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584B93181E7E61F8C32C9D60F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft Manifest number: 010D0C9F43285849276F14CDE0AA3B404E68EFE4 Signing time: Sun 19 Oct 2025 15:00:03 +0000 Manifest this update: Sun 19 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 4680d191-3a38-4cef-89dd-c84240e3a1cf.crl (hash: qbGjHRxPazsE6I6XEQqbVdLwBvmz8WoSj9aoHkgMyZk=) 2: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (hash: h+uJh2oa35LfnRQW/yt80keQUbHJ0nHBBZ89OXHFxF4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:18:1e:7e:61:f8:c3:2c:9d:60:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Oct 19 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=1c909ed2-74d4-428f-b97f-f60dbe195aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2a:df:1a:d0:cd:8f:9f:f7:7e:09:05:f8:9e: 2b:1c:50:3e:a9:be:5f:6e:7e:6a:be:07:cb:eb:48: cd:8c:a3:79:e5:28:d6:1b:a8:31:08:4f:1c:c6:14: 4b:4d:c3:0b:47:2e:19:20:88:10:56:c9:d8:a7:53: 57:57:22:41:26:3b:e6:e8:1c:2e:80:65:72:0f:04: 75:9c:ea:d7:d6:09:59:af:e0:64:c2:4e:1e:62:73: aa:2c:6b:9e:e2:95:c9:20:bb:79:e4:4d:73:79:70: 78:09:cd:87:fa:62:df:8c:1a:d8:51:8d:90:3b:97: 64:34:4e:5c:1a:ea:e2:e2:0a:4c:2f:c2:e9:b9:62: e0:e8:b6:45:eb:4a:e9:17:aa:76:ad:44:57:d2:b4: 97:5e:dd:c8:ae:20:48:11:24:ee:5b:3b:44:ae:e5: 08:fd:10:38:84:d6:bf:d7:5e:e6:5f:a4:89:65:8b: 5e:7f:86:6e:cc:a3:7c:65:62:2e:0d:e7:96:61:94: 30:51:c5:ae:4e:7e:39:c9:a2:bb:48:a5:92:fb:cb: fc:e0:9d:37:17:ea:b5:24:20:73:9d:2b:c1:ca:8c: d8:dd:d3:99:eb:7c:9b:6e:f7:ec:81:f6:4c:18:5c: 20:28:31:f3:ea:bf:9d:fe:d0:9e:84:23:16:ad:d1: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8B:99:FC:9F:98:76:BD:2D:80:06:73:CA:4D:AE:E0:4D:5A:D3:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9d:3b:2a:e6:a8:bb:e7:58:89:c9:07:17:1e:38:6d:98:9f: 03:98:c2:70:0a:09:89:c9:b2:b7:19:6c:e7:df:a8:30:df:b4: 9d:9d:f8:7a:9c:0d:23:78:ee:b8:f2:41:8e:b4:b0:48:29:82: 36:e1:dd:66:5d:96:8c:cb:39:75:6d:4d:2f:61:55:5e:95:11: 59:80:3e:0e:95:ad:7d:62:cf:60:52:0a:7a:5c:a7:c8:c6:98: 2c:3d:ac:b4:84:8c:15:ba:41:83:af:0c:52:20:c5:08:6b:98: 35:19:d7:c3:ad:c2:d9:f6:7e:0c:2f:ab:31:d7:0e:5b:24:c3: 68:84:e0:13:7b:cb:17:f3:e3:b5:42:0c:3e:0b:ad:18:9f:2f: 28:17:84:d0:d1:b2:d7:4d:45:6d:b0:2a:93:21:2e:0f:62:65: 59:b7:6f:06:1f:65:0d:27:f0:1b:a1:35:e5:e6:68:43:5b:ba: 18:34:5c:2d:c8:79:83:9f:e2:46:27:c2:c8:1b:df:c6:f4:b8: ea:1c:d5:17:1a:ac:b1:37:70:d6:2d:31:fd:fa:26:d1:cc:dc: 03:dc:5b:56:74:21:86:01:b8:a8:97:b7:17:47:e2:53:8c:27: 93:73:d8:47:59:f2:5b:13:af:bd:93:8a:33:e6:01:a8:89:65: ce:f0:1e:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTGB5+YfjDLJ1g9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI1MTAxOTE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk MWM5MDllZDItNzRkNC00MjhmLWI5N2YtZjYwZGJlMTk1YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkirfGtDNj5/3fgkF+J4rHFA+qb5fbn5qvgfL 60jNjKN55SjWG6gxCE8cxhRLTcMLRy4ZIIgQVsnYp1NXVyJBJjvm6BwugGVyDwR1 nOrX1glZr+Bkwk4eYnOqLGue4pXJILt55E1zeXB4Cc2H+mLfjBrYUY2QO5dkNE5c Guri4gpML8LpuWLg6LZF60rpF6p2rURX0rSXXt3IriBIESTuWztEruUI/RA4hNa/ 117mX6SJZYtef4ZuzKN8ZWIuDeeWYZQwUcWuTn45yaK7SKWS+8v84J03F+q1JCBz nSvByozY3dOZ63ybbvfsgfZMGFwgKDHz6r+d/tCehCMWrdExowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHeLmfyfmHa9LYAGc8pNruBNWtMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvNDY4MGQxOTEtM2EzOC00 Y2VmLTg5ZGQtYzg0MjQwZTNhMWNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAInTsq5qi751iJyQcXHjht mJ8DmMJwCgmJybK3GWzn36gw37Sdnfh6nA0jeO648kGOtLBIKYI24d1mXZaMyzl1 bU0vYVVelRFZgD4Ola19Ys9gUgp6XKfIxpgsPay0hIwVukGDrwxSIMUIa5g1GdfD rcLZ9n4ML6sx1w5bJMNohOATe8sX8+O1Qgw+C60Yny8oF4TQ0bLXTUVtsCqTIS4P YmVZt28GH2UNJ/AboTXl5mhDW7oYNFwtyHmDn+JGJ8LIG9/G9LjqHNUXGqyxN3DW LTH9+ibRzNwD3FtWdCGGAbiol7cXR+JTjCeTc9hHWfJbE6+9k4oz5gGoiWXO8B5r -----END CERTIFICATE-----Generated at Mon Oct 20 13:28:00 2025 by rpki-client