$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: /LZwEaOaSjfbIcff3HP62FLP4/xuVjXNI9lwLQZob6c= Subject key identifier: 7D:6E:08:47:2C:76:E3:20:A0:1A:2B:23:2C:B5:ED:16:AA:EE:58:BD Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584B9677B19EDE26A0089CA82B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3C3D Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Thu 23 Oct 2025 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: FYnXO5KmOj3VwfjtsHkJRupBf6VqIGxF7YHUp1RBQT0=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: t9Uo79paPEOneFBkBSzRllO1kxpjAnHADLYyh7p2vsA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b1:9e:de:26:a0:08:9c:a8:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 23 20:00:00 2025 GMT Subject: CN=550bd10b-b56e-4b91-b55a-7e4fe900b7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:0d:f1:71:1b:04:ee:32:a5:2c:70:2a:e1: 7a:2c:11:98:82:4e:45:7a:a5:f4:44:28:f6:bd:0f: 03:15:f3:aa:8a:f7:8d:64:dd:77:5c:1a:c2:88:57: 83:15:87:02:2d:ef:58:60:8d:11:14:a2:58:b8:e1: 5d:4d:1b:38:09:59:b9:29:07:b4:fe:1b:37:62:9f: 0f:90:37:f9:08:6d:33:29:1b:f0:e4:40:61:fb:42: 7d:6c:9b:91:50:e5:dd:36:05:98:f9:fe:b4:88:f0: 8c:db:7b:1a:c7:cb:09:3b:8a:7f:5c:70:6b:c1:f1: 7e:81:6d:07:6a:18:f7:82:ef:70:47:2d:f8:62:2c: 3f:2e:fd:c3:a7:b2:77:03:4f:9b:e8:d1:70:4f:af: 07:97:0d:7e:fb:9b:4e:67:16:a7:15:24:5f:59:e4: ae:8d:2e:5a:e4:dd:50:27:d3:73:7d:d6:4e:13:37: 47:3b:96:46:35:8a:a5:dd:53:0b:39:29:c4:ee:03: 5a:01:cc:7d:b6:bc:ae:45:a3:84:14:08:73:f2:65: a8:7e:29:29:7d:df:70:ce:e0:4e:29:f6:3a:72:c5: d5:bd:6c:61:80:f8:b6:3d:24:8c:df:c0:fa:14:ce: 0d:64:ca:4b:a2:90:d2:1e:7a:de:69:c1:ec:65:60: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6E:08:47:2C:76:E3:20:A0:1A:2B:23:2C:B5:ED:16:AA:EE:58:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5e:32:df:b5:66:56:bf:b6:39:89:2b:a7:4f:b7:90:23:c6: bd:e0:a1:83:9a:9b:a4:de:e4:de:a6:41:e3:38:fb:32:b3:5e: cc:96:08:c4:61:a1:aa:7c:44:93:ae:f6:e5:3e:f5:13:5a:56: 27:91:04:9e:03:a6:81:59:b3:bb:5c:7c:5d:27:dd:7e:31:85: b6:53:32:26:3a:7e:93:4a:77:1b:b8:aa:ff:86:92:4d:7e:ed: 4c:83:77:31:50:b8:65:25:52:44:99:fd:b4:15:fb:ef:06:96: c8:3a:df:2b:d3:26:58:6d:32:e1:41:e5:5c:cf:c1:24:74:54: 45:92:03:1d:d7:bc:74:73:a3:f6:6a:b6:bf:79:fc:ca:9b:be: 55:37:17:47:b7:ce:43:6e:59:1e:80:f9:26:49:00:31:64:5a: 75:d5:fa:1a:52:c7:fa:a9:cf:a1:32:58:a4:7e:1a:19:ab:56: 1a:75:d6:64:2f:0a:1d:fb:83:c3:2d:81:8c:d1:b6:45:1c:9e: 37:64:a4:07:8c:9f:83:cf:3a:6d:6f:3e:6e:df:f6:5b:80:dc: 3c:2f:53:33:1e:0a:31:65:e2:b0:a6:91:bb:2c:4e:33:ab:7f: 51:96:58:51:0c:d4:20:40:0e:8f:f1:7a:65:31:46:0d:78:77: e1:c8:e4:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7Ge3iagCJyoK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMzIwMDAwMFowLzEtMCsGA1UEAxMk NTUwYmQxMGItYjU2ZS00YjkxLWI1NWEtN2U0ZmU5MDBiN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21EN8XEbBO4ypSxwKuF6LBGYgk5FeqX0RCj2 vQ8DFfOqiveNZN13XBrCiFeDFYcCLe9YYI0RFKJYuOFdTRs4CVm5KQe0/hs3Yp8P kDf5CG0zKRvw5EBh+0J9bJuRUOXdNgWY+f60iPCM23sax8sJO4p/XHBrwfF+gW0H ahj3gu9wRy34Yiw/Lv3Dp7J3A0+b6NFwT68Hlw1++5tOZxanFSRfWeSujS5a5N1Q J9NzfdZOEzdHO5ZGNYql3VMLOSnE7gNaAcx9tryuRaOEFAhz8mWofikpfd9wzuBO KfY6csXVvWxhgPi2PSSM38D6FM4NZMpLopDSHnreacHsZWAZswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH1uCEcsduMgoBorIyy17Raq7li9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbXjLftWZWv7Y5iSunT7eQ I8a94KGDmpuk3uTepkHjOPsys17MlgjEYaGqfESTrvblPvUTWlYnkQSeA6aBWbO7 XHxdJ91+MYW2UzImOn6TSncbuKr/hpJNfu1Mg3cxULhlJVJEmf20FfvvBpbIOt8r 0yZYbTLhQeVcz8EkdFRFkgMd17x0c6P2ara/efzKm75VNxdHt85DblkegPkmSQAx ZFp11foaUsf6qc+hMlikfhoZq1YaddZkLwod+4PDLYGM0bZFHJ43ZKQHjJ+Dzzpt bz5u3/ZbgNw8L1MzHgoxZeKwppG7LE4zq39RllhRDNQgQA6P8XplMUYNeHfhyOTQ -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:39 2025 by rpki-client