$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft File: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft (raw, json) Hash identifier: DiO9Ow+ybIMGk1qyIdC7TIKN72UytdQFT01ENAkad+A= Subject key identifier: 90:42:BF:82:FC:F1:CA:9D:D9:3A:91:60:6E:33:B9:DC:77:13:C2:62 Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F4328584B93CACBF5E14EB970E133F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft Manifest number: 010D0C9F43285844428AC3B86B4E57E2FE15F220 Signing time: Sun 19 Oct 2025 21:00:03 +0000 Manifest this update: Sun 19 Oct 2025 21:00:03 +0000 Manifest next update: Tue 21 Oct 2025 21:00:00 +0000 Files and hashes: 1: 9a56588a-a022-38cf-a593-5622658a6eae.roa (hash: ZuqzyS+15wri5gR3Rg3Bw4RIYt7tLN3u5DFRiSywHaw=) 2: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl (hash: RlKvEIYOyzVrsfmGtAISW5PyQw+Kl1T7V9NMZ5EWbd8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ca:cb:f5:e1:4e:b9:70:e1:33:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Oct 19 21:00:03 2025 GMT Not After : Oct 21 21:00:00 2025 GMT Subject: CN=f96bb6c7-d382-4e6c-bf75-e36816506195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:e5:4f:e8:48:6d:55:f8:ef:56:0c:d7:2d: 5b:00:c6:68:52:04:8f:c1:35:62:bd:6b:3a:76:a2: 86:a1:72:8a:1a:55:a4:ff:33:38:e4:27:84:1c:d2: a0:e6:19:3d:6f:16:8a:8b:f1:e6:40:2b:ff:9d:dd: 1a:24:b9:6c:62:96:4e:c8:5b:98:d3:d0:5f:68:46: a6:a1:1e:b1:02:2b:ee:65:ca:16:1f:60:1b:6f:4b: 88:47:b8:84:56:72:9a:b2:4b:42:62:0b:e2:b0:4a: 2e:97:35:92:ba:4a:cb:d9:da:d0:b2:80:f0:63:c4: 1c:8b:4c:ee:ec:83:e4:3f:00:30:e5:3c:8c:4c:70: a5:67:eb:93:da:e0:6e:c3:c1:f9:3c:e7:44:15:09: d0:4f:15:d2:e6:5b:7d:89:18:2c:97:43:ee:01:b2: 3b:7c:c1:b9:72:fa:99:3d:21:68:a2:36:09:eb:5e: 36:2e:d2:f2:f6:ea:03:66:19:b3:b5:21:fa:af:6b: 9f:0c:71:89:5a:fc:e9:d9:2c:25:2c:eb:1e:0f:b6: 62:3a:be:3b:fe:e4:4d:31:d3:58:6d:d7:d0:62:e5: f9:9e:f2:00:c8:17:7e:52:f2:c1:87:86:df:78:66: 20:02:41:b3:0c:18:9f:5b:db:30:5c:3a:0f:88:79: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:BF:82:FC:F1:CA:9D:D9:3A:91:60:6E:33:B9:DC:77:13:C2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:49:6a:87:01:83:98:7a:61:cb:0d:5e:36:41:a2:38:92:16: 1d:e5:12:44:b1:74:92:95:2c:af:56:14:59:c3:43:c0:7d:91: 0c:8b:d3:c9:01:87:04:aa:8c:39:af:21:49:15:dd:4e:3d:55: dc:fe:62:09:8c:b4:af:15:5a:49:29:8f:51:7b:2c:58:56:d2: 03:45:5e:7f:95:9c:9a:9c:d1:45:88:61:93:26:8e:3c:01:82: 3a:b5:fb:dd:77:89:b3:c7:cf:89:28:ef:8a:9b:f2:40:6a:02: e3:33:8e:1f:39:46:50:4a:89:16:75:ad:33:4b:80:af:0f:01: 37:6e:c8:80:70:29:f8:ac:85:29:b4:a9:2b:70:b2:6f:83:79: 7a:08:a4:ad:98:4d:6e:53:10:08:4d:23:0f:7d:26:d9:4e:cb: ff:f8:31:94:56:ce:bb:ac:ae:f0:4b:52:71:0f:3e:4a:eb:b4: 8e:97:ce:6b:95:9a:78:ef:f2:0a:a4:6f:f9:9d:f9:e0:30:56: 40:fe:73:1d:9c:ca:5f:09:be:d1:b6:0c:f6:12:17:10:aa:87: 2d:b5:89:35:41:09:7d:fe:c7:b9:9b:46:0c:34:eb:cb:f9:dd: 8c:82:14:d3:9d:8f:c1:a9:60:9e:63:1c:c6:14:99:f7:e0:cc: 24:e5:97:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTysv14U65cOEz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI1MTAxOTIxMDAwM1oXDTI1MTAyMTIxMDAwMFowLzEtMCsGA1UEAxMk Zjk2YmI2YzctZDM4Mi00ZTZjLWJmNzUtZTM2ODE2NTA2MTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLlT+hIbVX471YM1y1bAMZoUgSPwTVivWs6 dqKGoXKKGlWk/zM45CeEHNKg5hk9bxaKi/HmQCv/nd0aJLlsYpZOyFuY09BfaEam oR6xAivuZcoWH2Abb0uIR7iEVnKasktCYgvisEoulzWSukrL2drQsoDwY8Qci0zu 7IPkPwAw5TyMTHClZ+uT2uBuw8H5POdEFQnQTxXS5lt9iRgsl0PuAbI7fMG5cvqZ PSFoojYJ6142LtLy9uoDZhmztSH6r2ufDHGJWvzp2SwlLOseD7ZiOr47/uRNMdNY bdfQYuX5nvIAyBd+UvLBh4bfeGYgAkGzDBifW9swXDoPiHkFrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJBCv4L88cqd2TqRYG4zudx3E8JiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvYTUyZjNiNDItMmMxOS00 MTQxLThkOGEtZmE4NGIzZDZhNDllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmSWqHAYOYemHLDV42QaI4 khYd5RJEsXSSlSyvVhRZw0PAfZEMi9PJAYcEqow5ryFJFd1OPVXc/mIJjLSvFVpJ KY9ReyxYVtIDRV5/lZyanNFFiGGTJo48AYI6tfvdd4mzx8+JKO+Km/JAagLjM44f OUZQSokWda0zS4CvDwE3bsiAcCn4rIUptKkrcLJvg3l6CKStmE1uUxAITSMPfSbZ Tsv/+DGUVs67rK7wS1JxDz5K67SOl85rlZp47/IKpG/5nfngMFZA/nMdnMpfCb7R tgz2EhcQqocttYk1QQl9/se5m0YMNOvL+d2MghTTnY/BqWCeYxzGFJn34Mwk5ZdH -----END CERTIFICATE-----Generated at Sun Oct 19 23:25:59 2025 by rpki-client