$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft File: c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft (raw, json) Hash identifier: D0c8IVn1Fj2zBlCTNBkRboHGKet4F4Sh8NDJCfWosBE= Subject key identifier: C1:08:54:F8:28:49:73:7F:8C:5C:D6:A1:D5:6D:D3:76:93:B9:71:FB Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F4328584B947D80CBE887BCF6B4B3F480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft Manifest number: 010D0C9F432858436C5C98624A18C626B8CFE3F7 Signing time: Mon 20 Oct 2025 03:00:09 +0000 Manifest this update: Mon 20 Oct 2025 03:00:09 +0000 Manifest next update: Thu 23 Oct 2025 03:00:00 +0000 Files and hashes: 1: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (hash: cQjzgOzgo+1KFPCYuuyJTXHWV598DDvH04F39fTy9hw=) 2: c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl (hash: IwCfM+6WJAQo9voN9vp1jGYUvs5kApIPcbHFZerI97s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:7d:80:cb:e8:87:bc:f6:b4:b3:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Oct 20 03:00:09 2025 GMT Not After : Oct 23 03:00:00 2025 GMT Subject: CN=144aaf61-3606-42fa-b94f-4605d0a3df9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:be:7c:38:1b:13:af:5d:93:ce:eb:38:a5: aa:7c:e8:70:65:23:44:81:d7:67:83:44:9e:ba:d6: ea:4d:8a:0e:08:42:29:a9:d0:6a:30:22:c4:62:fb: 2f:82:67:f7:56:6f:ee:e1:c0:d6:c3:5c:8a:ae:25: 98:1c:5e:c2:e6:cc:88:0d:c4:13:21:1b:26:b1:63: 9c:ff:3f:94:ea:73:a5:17:4a:48:20:bc:0e:2e:7f: a8:93:d4:53:40:9b:e7:13:8a:3b:43:3b:2b:2b:ba: d1:03:ad:29:94:d2:71:e5:b2:10:24:bb:75:d3:3d: cc:7e:43:71:03:00:9a:c8:5a:9f:30:b2:f0:fc:cc: d4:55:84:6e:63:6f:ff:df:e8:e7:6b:8c:72:4d:e4: f0:e0:04:19:ff:40:31:c2:10:73:58:d8:c4:be:38: e4:7b:9f:db:2f:e4:6d:b0:e5:09:74:b1:55:e7:2e: 0b:ce:81:46:49:95:8f:7c:8c:f7:84:c1:33:2d:59: b6:7b:6e:e5:d3:ca:4c:ee:13:19:af:bc:30:f1:e4: 98:fb:fc:26:24:00:dd:a3:05:fe:07:c3:54:c5:50: 83:eb:48:d6:b0:0c:38:8c:63:19:50:07:37:d4:30: ea:ac:0f:1c:5a:95:e6:ef:94:08:76:ca:b9:0f:da: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:08:54:F8:28:49:73:7F:8C:5C:D6:A1:D5:6D:D3:76:93:B9:71:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:36:80:c6:3f:15:ca:04:04:bd:fb:bc:e0:55:ba:2a:4c:b2: 1e:c6:00:94:0b:bd:df:a3:31:ba:f9:f9:f5:81:66:fe:2c:b6: ab:16:a0:b1:f0:a0:56:6b:04:b2:d7:c5:ea:f9:d9:75:94:9e: 78:0a:18:c6:8f:1b:89:f3:e2:d5:6b:11:d1:30:0a:3d:7d:e2: a3:e0:b7:74:99:12:0f:e1:ca:19:84:d5:95:7f:b3:e5:23:19: 4d:27:5a:4d:7a:8c:c5:30:d7:32:9a:38:5d:3d:f5:bb:21:f2: a9:9b:dc:a5:31:ab:0e:6b:8a:9f:e1:95:fd:76:8b:19:d6:42: 63:24:67:0f:b3:e1:32:7e:e0:2d:8b:a0:9e:fb:fc:dd:4b:4f: 6f:e7:44:03:c9:b6:a6:0b:c0:2a:a3:3b:4e:6f:b0:d6:f5:93: de:18:3c:25:6e:a8:da:e7:a2:22:39:d2:69:ca:2d:39:2a:0a: 24:87:3d:b9:79:7e:11:08:2f:85:94:91:7a:6f:6f:ac:5a:ea: 4b:61:87:53:6c:36:f3:1d:72:99:dc:37:fe:bc:d0:38:79:db: cb:ad:74:63:b5:fa:8e:7a:9f:26:06:f5:88:cf:ca:db:76:d4: e6:15:0f:9c:1e:d0:aa:34:35:2d:31:ea:bd:9a:ca:db:43:37: 9c:25:32:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUfYDL6Ie89rSz9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI1MTAyMDAzMDAwOVoXDTI1MTAyMzAzMDAwMFowLzEtMCsGA1UEAxMk MTQ0YWFmNjEtMzYwNi00MmZhLWI5NGYtNDYwNWQwYTNkZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbu+fDgbE69dk87rOKWqfOhwZSNEgddng0Se utbqTYoOCEIpqdBqMCLEYvsvgmf3Vm/u4cDWw1yKriWYHF7C5syIDcQTIRsmsWOc /z+U6nOlF0pIILwOLn+ok9RTQJvnE4o7QzsrK7rRA60plNJx5bIQJLt10z3MfkNx AwCayFqfMLLw/MzUVYRuY2//3+jna4xyTeTw4AQZ/0AxwhBzWNjEvjjke5/bL+Rt sOUJdLFV5y4LzoFGSZWPfIz3hMEzLVm2e27l08pM7hMZr7ww8eSY+/wmJADdowX+ B8NUxVCD60jWsAw4jGMZUAc31DDqrA8cWpXm75QIdsq5D9rk4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMEIVPgoSXN/jFzWodVt03aTuXH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvYzg5MGVlZmItMWM1NS00 Y2Q4LWFkYjYtZTYxMmM4ZDBmOTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBINoDGPxXKBAS9+7zgVboq TLIexgCUC73fozG6+fn1gWb+LLarFqCx8KBWawSy18Xq+dl1lJ54ChjGjxuJ8+LV axHRMAo9feKj4Ld0mRIP4coZhNWVf7PlIxlNJ1pNeozFMNcymjhdPfW7IfKpm9yl MasOa4qf4ZX9dosZ1kJjJGcPs+EyfuAti6Ce+/zdS09v50QDybamC8AqoztOb7DW 9ZPeGDwlbqja56IiOdJpyi05Kgokhz25eX4RCC+FlJF6b2+sWupLYYdTbDbzHXKZ 3Df+vNA4edvLrXRjtfqOep8mBvWIz8rbdtTmFQ+cHtCqNDUtMeq9msrbQzecJTLt -----END CERTIFICATE-----Generated at Tue Oct 21 04:23:37 2025 by rpki-client