$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft File: 654e0ef8-ac77-456b-9a63-98fdb228488b.mft (raw, json) Hash identifier: r3e30cNRZMQogis5Ru/nKCQY9YdoDier64F9qNGECEY= Subject key identifier: 24:D7:84:35:83:DA:54:C3:84:78:A1:22:33:6A:51:67:CD:5D:1D:E1 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F4328584B9677B2CB32EA19675574DA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft Manifest number: 010D0C9F4328584381CCC6CCB558A47BF9178A9F Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 654e0ef8-ac77-456b-9a63-98fdb228488b.crl (hash: GXdn0xjmdVOk+x1Kotno2FOfoQ8GVobarsKmcu8YL74=) 2: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (hash: 2uQc8c57y5XFD7AlLLVnbCij/hfAwfPd1m+5V47TUIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b2:cb:32:ea:19:67:55:74:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=b24e1226-d87f-4a86-bbbd-1ff112dc5d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:06:b9:ff:07:13:7d:2a:ca:98:ad:68:c7: 2f:6d:e5:ed:00:56:c0:3a:09:81:3d:77:d5:51:30: 12:aa:91:60:ae:28:3a:8e:ab:33:74:84:1b:08:78: bb:37:19:3c:fd:61:cf:d8:1d:5e:ef:04:89:78:0d: 4a:39:f8:0a:23:ef:77:09:00:ee:46:f2:b5:34:3b: 70:72:eb:41:9f:d1:55:52:10:a3:43:23:78:0c:32: bc:5e:23:7f:d1:80:68:bb:18:f4:06:1e:a0:7e:92: 51:75:3a:df:8b:b4:56:83:62:8c:e9:42:f7:7b:d8: a8:ac:27:de:ac:9a:a7:68:00:2f:92:c0:95:3b:f3: 32:f9:82:18:b4:6b:fb:ef:d3:b1:0a:74:aa:f8:b6: 00:e2:ea:1e:b0:aa:0d:fc:4e:eb:88:2b:0e:e7:f2: f5:3f:4b:8e:14:e2:bd:2d:6b:bf:5c:1a:c6:47:1a: 38:f4:14:2b:7c:60:c0:a9:d9:f7:2e:d1:28:3b:54: 59:7d:0b:67:79:1a:b7:53:b4:6d:43:f7:d6:1d:6c: 02:3a:0f:d9:50:b6:97:1d:7c:2c:75:f5:d5:bf:25: b9:b6:5c:f6:5b:89:d3:64:35:06:0e:4a:98:ce:73: 26:53:5b:11:62:ce:ae:1d:25:52:f1:fe:df:0a:4f: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:84:35:83:DA:54:C3:84:78:A1:22:33:6A:51:67:CD:5D:1D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:69:58:97:0d:ff:1d:f5:39:b4:72:c2:a1:9e:a9:d2:fb:a7: 92:7b:c1:9a:a7:23:1e:5f:9c:0f:10:a4:40:ca:73:c8:f6:1d: a4:2e:c3:f4:25:48:70:c5:ee:82:57:c7:19:9c:d7:d0:48:a2: 0d:9a:45:82:68:ff:3d:f9:3f:86:3f:13:ae:82:3e:41:aa:12: 82:27:05:32:42:0b:86:01:c5:38:53:fd:23:ba:39:09:4a:9f: cf:59:aa:86:e6:3f:8e:7f:90:60:cf:fe:b9:ec:1d:b9:9d:25: cf:30:1e:f2:04:ca:23:fd:c3:07:5c:fc:de:7b:79:18:6c:11: 31:f9:6b:8c:da:57:30:89:1d:a1:eb:bd:35:16:bf:c2:f6:95: 66:e9:57:42:b9:84:8e:4e:d6:61:6e:bf:c8:60:12:91:a0:5c: 56:7a:61:88:c2:15:44:ef:18:bf:89:1d:2f:ab:c8:41:d7:c6: df:c0:73:69:88:6a:94:70:5c:f2:31:c1:88:11:7c:2b:77:fe: f7:a5:01:cc:7d:c5:08:b0:0f:72:4b:ca:4f:ef:6c:47:3f:39: fe:8f:a5:6c:87:f1:0b:3e:70:07:a1:42:42:1d:c5:1b:af:81: 3a:03:56:61:a4:7d:be:2f:20:e3:48:db:a7:78:00:26:60:bd: b6:fe:f3:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7LLMuoZZ1V02kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk YjI0ZTEyMjYtZDg3Zi00YTg2LWJiYmQtMWZmMTEyZGM1ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs0Guf8HE30qypitaMcvbeXtAFbAOgmBPXfV UTASqpFgrig6jqszdIQbCHi7Nxk8/WHP2B1e7wSJeA1KOfgKI+93CQDuRvK1NDtw cutBn9FVUhCjQyN4DDK8XiN/0YBouxj0Bh6gfpJRdTrfi7RWg2KM6UL3e9iorCfe rJqnaAAvksCVO/My+YIYtGv779OxCnSq+LYA4uoesKoN/E7riCsO5/L1P0uOFOK9 LWu/XBrGRxo49BQrfGDAqdn3LtEoO1RZfQtneRq3U7RtQ/fWHWwCOg/ZULaXHXws dfXVvyW5tlz2W4nTZDUGDkqYznMmU1sRYs6uHSVS8f7fCk/w8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCTXhDWD2lTDhHihIjNqUWfNXR3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvNjU0ZTBlZjgtYWM3Ny00 NTZiLTlhNjMtOThmZGIyMjg0ODhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKaViXDf8d9Tm0csKhnqnS +6eSe8GapyMeX5wPEKRAynPI9h2kLsP0JUhwxe6CV8cZnNfQSKINmkWCaP89+T+G PxOugj5BqhKCJwUyQguGAcU4U/0jujkJSp/PWaqG5j+Of5Bgz/657B25nSXPMB7y BMoj/cMHXPzee3kYbBEx+WuM2lcwiR2h6701Fr/C9pVm6VdCuYSOTtZhbr/IYBKR oFxWemGIwhVE7xi/iR0vq8hB18bfwHNpiGqUcFzyMcGIEXwrd/73pQHMfcUIsA9y S8pP72xHPzn+j6Vsh/ELPnAHoUJCHcUbr4E6A1ZhpH2+LyDjSNuneAAmYL22/vMk -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:39 2025 by rpki-client