$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft File: 971a94fb-9c36-412b-ae91-2ddb520de93f.mft (raw, json) Hash identifier: NwR3ItM5O7EEpaJXTohW1nstA9am6IwwC+JmtiEyAss= Subject key identifier: 5A:B8:70:60:AB:2C:31:C3:03:28:0E:F6:3F:BC:82:58:74:54:1B:4C Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED Certificate issuer: /CN=971a94fb-9c36-412b-ae91-2ddb520de93f Certificate serial: 010D0C9F4328584B95A73F04E7C995232B94A190 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft Manifest number: 010D0C9F43285843B073F057FFA88B763CEA0CA3 Signing time: Mon 20 Oct 2025 13:00:03 +0000 Manifest this update: Mon 20 Oct 2025 13:00:03 +0000 Manifest next update: Thu 23 Oct 2025 13:00:00 +0000 Files and hashes: 1: 8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (hash: HhBJgeU0JCJfiQE9aPPj0nfimIC9e8rW45ElBoGTZ0A=) 2: 971a94fb-9c36-412b-ae91-2ddb520de93f.crl (hash: FhojM/+GAAwG5F7ln/U/WavJViayY2L5yjPLNp0GfWc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:3f:04:e7:c9:95:23:2b:94:a1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f Validity Not Before: Oct 20 13:00:03 2025 GMT Not After : Oct 23 13:00:00 2025 GMT Subject: CN=3241ed24-73e7-4d92-9f67-8bb913107427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:70:eb:6c:18:37:39:7c:34:e0:55:16:40: 42:c0:d5:37:dd:e7:45:29:99:5c:77:6c:f8:65:b1: a4:09:25:d7:80:e1:0a:3e:32:2c:1b:15:30:2a:1d: 63:d9:6d:f3:e0:80:fb:e1:12:0e:73:1d:6d:d3:21: d7:67:fa:b5:04:c8:5a:1c:dc:a6:77:a6:dd:67:30: 8d:bf:33:1b:55:db:3a:8a:3c:0c:54:6d:e0:a3:f4: 18:57:70:13:9b:b7:5e:69:a4:40:b0:1c:01:ec:f5: f9:9d:05:c1:d0:73:d7:d5:7e:5e:80:80:97:b6:f6: ce:5c:2f:e6:e7:9d:f8:64:a3:72:3b:e2:b2:ed:b7: 97:c5:35:c7:78:f2:9e:a9:00:a6:df:d2:b2:78:c5: 44:b0:9f:96:e0:d8:41:23:aa:91:33:ef:5f:cb:5f: f6:5f:5e:82:63:01:2f:61:ef:22:6a:ba:2c:3f:27: b3:ad:b2:06:84:b5:de:1a:a5:3c:a2:8a:05:94:db: 95:33:cc:c0:c8:fd:41:50:6e:05:c7:11:04:bd:c6: 69:40:b6:09:50:e9:97:aa:74:dd:f6:ce:4c:97:6f: 9f:54:80:b6:99:91:da:ee:01:68:c6:3a:90:7c:f7: 4f:ad:aa:27:4a:91:85:d0:c8:df:fb:a1:3e:9d:d0: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:70:60:AB:2C:31:C3:03:28:0E:F6:3F:BC:82:58:74:54:1B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl X509v3 Authority Key Identifier: keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:1e:44:65:74:7b:aa:da:a9:99:d6:a9:cd:f6:e5:bb:65:46: 62:c6:c4:76:e0:90:a6:20:c0:33:c3:a0:a2:d1:11:54:a2:d0: f0:5d:c0:f1:94:46:ff:bb:54:75:7d:99:c5:39:b8:21:ee:a1: 03:c0:27:08:47:58:f4:dd:19:8b:02:44:00:1a:37:d7:1d:d4: 35:61:12:81:9d:70:cb:ea:27:be:2d:c5:e4:2b:95:1a:0b:40: 0e:78:47:1d:92:e6:40:6c:68:b2:0c:42:89:53:40:90:71:d0: 6e:98:1d:15:7d:9c:41:d9:ed:3e:c6:ea:f2:f9:9b:1c:67:de: 13:3e:47:eb:5e:f4:99:5f:d0:3f:64:b0:d5:e5:69:34:fc:59: 57:e8:8e:5a:f2:eb:5f:40:41:e4:d4:89:81:87:fb:6a:f2:63: 73:14:5b:c6:71:46:ee:ea:d9:59:8c:46:64:3d:72:56:80:e5: 34:d4:49:00:a1:0f:0f:b5:b4:e8:66:9b:7a:4e:af:07:32:03: 63:2e:58:16:fa:5f:0d:72:c7:7c:9b:33:4b:7a:ba:ce:8f:77: f8:27:33:96:30:f5:84:ce:31:99:74:dc:48:bc:b2:18:4b:0e: 31:67:89:22:4f:27:cd:8a:c7:18:6a:3e:38:59:a9:4a:6f:b3: 7e:1d:5c:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVpz8E58mVIyuUoZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcxYTk0ZmItOWMzNi00MTJiLWFlOTEtMmRkYjUyMGRl OTNmMB4XDTI1MTAyMDEzMDAwM1oXDTI1MTAyMzEzMDAwMFowLzEtMCsGA1UEAxMk MzI0MWVkMjQtNzNlNy00ZDkyLTlmNjctOGJiOTEzMTA3NDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZw62wYNzl8NOBVFkBCwNU33edFKZlcd2z4 ZbGkCSXXgOEKPjIsGxUwKh1j2W3z4ID74RIOcx1t0yHXZ/q1BMhaHNymd6bdZzCN vzMbVds6ijwMVG3go/QYV3ATm7deaaRAsBwB7PX5nQXB0HPX1X5egICXtvbOXC/m 5534ZKNyO+Ky7beXxTXHePKeqQCm39KyeMVEsJ+W4NhBI6qRM+9fy1/2X16CYwEv Ye8iarosPyezrbIGhLXeGqU8oooFlNuVM8zAyP1BUG4FxxEEvcZpQLYJUOmXqnTd 9s5Ml2+fVIC2mZHa7gFoxjqQfPdPraonSpGF0Mjf+6E+ndA2JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFq4cGCrLDHDAygO9j+8glh0VBtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFh OTRmYi05YzM2LTQxMmItYWU5MS0yZGRiNTIwZGU5M2YvOTcxYTk0ZmItOWMzNi00 MTJiLWFlOTEtMmRkYjUyMGRlOTNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTcxYTk0ZmItOWMzNi00MTJiLWFl OTEtMmRkYjUyMGRlOTNmLzk3MWE5NGZiLTljMzYtNDEyYi1hZTkxLTJkZGI1MjBk ZTkzZi5jcmwwHwYDVR0jBBgwFoAU4CfMngkGAQ+CIBDuSnNsROuGpe0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFhOTRmYi05YzM2LTQxMmItYWU5MS0yZGRi NTIwZGU5M2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5HkRldHuq2qmZ1qnN9uW7 ZUZixsR24JCmIMAzw6Ci0RFUotDwXcDxlEb/u1R1fZnFObgh7qEDwCcIR1j03RmL AkQAGjfXHdQ1YRKBnXDL6ie+LcXkK5UaC0AOeEcdkuZAbGiyDEKJU0CQcdBumB0V fZxB2e0+xury+ZscZ94TPkfrXvSZX9A/ZLDV5Wk0/FlX6I5a8utfQEHk1ImBh/tq 8mNzFFvGcUbu6tlZjEZkPXJWgOU01EkAoQ8PtbToZpt6Tq8HMgNjLlgW+l8Ncsd8 mzNLerrOj3f4JzOWMPWEzjGZdNxIvLIYSw4xZ4kiTyfNiscYaj44WalKb7N+HVzl -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:54 2025 by rpki-client