$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: 3WMPDrNVTaKPOcmLm13UiH/73Zlet0cgD0il6Z0EtX8= Subject key identifier: 58:3F:09:A1:B8:23:A9:5C:53:DC:DE:98:D5:13:69:1A:90:17:D8:44 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584B958975F2BE60D8128C08BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1AEE Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Wed 22 Oct 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: zGKSuLT/CGjIQPz6Lr78Hh1yFLkN0ABSJrfsgKsun7A=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: jJ0tmTUIPV8GgW/6E+C1G2NeWJEBzIrYhyAIFIqIM8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:75:f2:be:60:d8:12:8c:08:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 22 12:00:00 2025 GMT Subject: CN=84d586e5-e120-4252-a645-76e6151b8b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:a2:41:70:18:57:38:cc:58:7d:55:a7:89: dd:12:c5:b5:3a:9c:95:0a:e9:5b:28:a6:cb:38:8c: 2a:38:05:36:39:25:24:d6:98:de:66:58:97:de:b6: f0:7b:55:81:dd:19:ed:f6:2b:5b:9b:49:07:40:ba: 3c:2d:51:8b:9c:ac:0a:7f:15:73:07:23:f7:03:74: 3d:e6:cc:76:ad:da:54:3b:e2:5f:cf:23:ed:ff:5b: 19:0a:14:ae:39:81:f3:f3:ec:7a:d8:f0:be:f3:6e: b6:21:57:c3:0c:bd:99:c5:36:0a:c7:47:3b:a9:ca: b6:29:17:cc:10:35:06:cd:6a:a9:e8:52:08:dc:5a: 90:e3:a6:3a:ac:47:da:b4:df:e1:b9:92:42:b4:39: 62:63:2b:5c:c8:6f:78:99:64:35:e6:25:95:b0:27: 29:e0:89:d7:83:52:06:29:84:04:2a:c1:91:85:b2: 14:3e:19:6a:a7:bf:82:2d:b3:36:3b:72:4b:3b:26: 11:23:31:5c:db:a5:a2:12:0d:27:4f:1e:eb:26:f7: 6d:86:33:56:52:c7:1d:08:5b:0e:70:b4:2f:26:d0: 18:f4:55:bf:1f:a3:e1:d1:ac:5c:75:dc:14:05:56: 19:29:00:a9:0d:4c:06:1f:08:20:13:28:4e:04:4d: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3F:09:A1:B8:23:A9:5C:53:DC:DE:98:D5:13:69:1A:90:17:D8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:05:5e:b4:09:a6:fc:02:4d:fa:76:9a:16:f4:dc:c4:d8:b5: d8:4b:5c:31:66:bf:3e:34:a3:81:e3:85:fd:0b:ca:35:02:1c: 9d:07:73:2a:a8:75:c2:cf:86:03:7a:97:77:66:f9:6d:9a:f8: e1:f3:9a:ee:df:07:62:80:70:a6:74:e9:1a:32:db:51:99:d8: bd:13:fc:0d:f6:8b:f7:84:dc:a1:44:cf:b7:b3:44:04:ca:a5: f2:bc:20:0c:59:8b:a7:49:5d:39:d9:b4:dc:02:9e:4a:78:48: 23:4e:92:40:37:09:3b:e2:12:2f:2b:15:3b:f5:35:78:4a:8f: 13:fd:80:cd:87:d8:ef:0c:61:76:be:fb:81:55:c6:c7:b0:25: 60:57:ee:11:88:04:a7:be:6b:99:d3:ff:59:41:6a:1e:ff:12: 65:f7:45:11:d0:c0:75:5f:d5:62:c0:3b:22:5c:0d:d7:8a:70: 53:db:0a:58:d2:f3:df:36:89:a3:cb:86:d4:56:92:76:7c:f9: 6f:dc:fc:32:27:7a:a3:de:88:fa:08:cd:65:6d:26:13:81:af: 8b:1d:4a:9f:2a:be:9b:8c:1b:f9:f7:d2:41:2e:b9:b9:7d:34: f0:ff:5e:f7:07:49:d4:64:dd:a5:e8:bb:83:0d:6d:49:78:74: 74:ba:d3:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXXyvmDYEowIvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMjEyMDAwMFowLzEtMCsGA1UEAxMk ODRkNTg2ZTUtZTEyMC00MjUyLWE2NDUtNzZlNjE1MWI4YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEKiQXAYVzjMWH1Vp4ndEsW1OpyVCulbKKbL OIwqOAU2OSUk1pjeZliX3rbwe1WB3Rnt9itbm0kHQLo8LVGLnKwKfxVzByP3A3Q9 5sx2rdpUO+JfzyPt/1sZChSuOYHz8+x62PC+8262IVfDDL2ZxTYKx0c7qcq2KRfM EDUGzWqp6FII3FqQ46Y6rEfatN/huZJCtDliYytcyG94mWQ15iWVsCcp4InXg1IG KYQEKsGRhbIUPhlqp7+CLbM2O3JLOyYRIzFc26WiEg0nTx7rJvdthjNWUscdCFsO cLQvJtAY9FW/H6Ph0axcddwUBVYZKQCpDUwGHwggEyhOBE3vIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFg/CaG4I6lcU9zemNUTaRqQF9hEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWBV60Cab8Ak36dpoW9NzE 2LXYS1wxZr8+NKOB44X9C8o1AhydB3MqqHXCz4YDepd3Zvltmvjh85ru3wdigHCm dOkaMttRmdi9E/wN9ov3hNyhRM+3s0QEyqXyvCAMWYunSV052bTcAp5KeEgjTpJA Nwk74hIvKxU79TV4So8T/YDNh9jvDGF2vvuBVcbHsCVgV+4RiASnvmuZ0/9ZQWoe /xJl90UR0MB1X9ViwDsiXA3XinBT2wpY0vPfNomjy4bUVpJ2fPlv3PwyJ3qj3oj6 CM1lbSYTga+LHUqfKr6bjBv599JBLrm5fTTw/173B0nUZN2l6LuDDW1JeHR0utNi -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:31 2025 by rpki-client