$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft File: 24664a36-96dd-46d7-9d91-bebf99797af1.mft (raw, json) Hash identifier: OJt1k/w6c91dwtlARiuKWtWIaFXOHgNSh/Gjmb0xq7E= Subject key identifier: AC:8A:A0:5D:9E:7F:BA:11:24:E6:32:8C:17:FD:FF:21:BD:D8:45:89 Authority key identifier: 1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE Certificate issuer: /CN=24664a36-96dd-46d7-9d91-bebf99797af1 Certificate serial: 010D0C9F4328584B970C944C8EFC54F0717BB300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft Manifest number: 010D0C9F43285841F8CB1E126D3898E260ECA29C Signing time: Tue 21 Oct 2025 01:00:03 +0000 Manifest this update: Tue 21 Oct 2025 01:00:03 +0000 Manifest next update: Fri 24 Oct 2025 01:00:00 +0000 Files and hashes: 1: 24664a36-96dd-46d7-9d91-bebf99797af1.crl (hash: vNsmr/6p+DpLv1ICD8Uo0nYAGbP0S6UYy/Df2DTOLnQ=) 2: a17e17bd-2e17-3231-bee0-626c5aa412d3.roa (hash: 7CCcBM/eb5bLzh9WLznSR/GS8/pSaQkt0bXDX5UmUDQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:94:4c:8e:fc:54:f0:71:7b:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24664a36-96dd-46d7-9d91-bebf99797af1 Validity Not Before: Oct 21 01:00:03 2025 GMT Not After : Oct 24 01:00:00 2025 GMT Subject: CN=d09ec522-bdf8-4ea9-8e91-9c421587fd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:ab:19:a3:e0:a8:4a:5c:a0:fd:71:e5:14: c5:73:1c:fd:9b:ba:ce:52:04:b8:20:21:ec:e3:bd: 29:49:89:d4:74:04:8e:d4:9f:51:07:ad:5d:01:ab: 30:a6:77:eb:02:ea:b3:7f:92:ec:9f:dc:53:ca:6b: 29:c6:d8:d1:95:ed:41:a7:46:a4:21:79:e8:21:95: c2:05:ab:97:60:29:9f:ab:80:d6:47:23:5b:7c:f0: f4:07:9f:c1:92:c1:91:0a:8e:04:02:89:34:b6:d6: dc:0e:71:72:e6:d6:ef:b1:2b:1d:29:b8:11:90:e7: 73:58:3b:7b:19:2e:ae:87:66:96:b2:96:6a:b0:07: e8:95:76:22:b9:5c:68:4c:3c:70:ae:cf:b1:a7:08: 2e:d2:82:af:1b:65:4e:12:3c:a1:2e:10:94:1c:7b: 8e:4c:92:d2:85:e0:80:51:d1:c6:8e:ad:f4:c8:84: e4:36:8f:64:77:de:53:84:02:e2:97:b4:76:ab:c2: 5b:43:45:a2:48:0a:9b:82:34:50:6e:99:dd:50:3a: c5:05:5d:ad:f0:fb:fb:3f:a0:8d:98:37:82:82:3a: 49:eb:45:fb:51:7e:40:16:1f:55:36:55:77:80:e1: 99:84:f5:76:10:8e:cd:11:ea:b0:12:8d:f8:f7:59: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8A:A0:5D:9E:7F:BA:11:24:E6:32:8C:17:FD:FF:21:BD:D8:45:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl X509v3 Authority Key Identifier: keyid:1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3d:f8:36:03:5f:d6:74:dd:22:78:68:8a:64:52:19:ac:ad: 41:d1:ad:d4:06:6d:bb:e8:33:9c:65:7f:32:82:88:fc:4c:1a: 11:a8:90:9c:80:f8:2d:7f:82:56:ae:ce:3d:46:43:84:e2:b0: f3:d1:4b:e1:7f:98:e8:f9:64:f2:77:be:9a:19:38:05:98:3a: 5d:10:42:d5:b8:f8:28:0f:c6:d1:88:8b:cd:a4:82:00:76:82: 1e:7d:a4:f3:b6:74:4a:56:d4:0a:3b:a4:a8:65:7b:24:7e:c4: d4:d0:c9:a7:a3:f9:f6:a1:71:f9:fc:d0:45:a7:38:06:b8:cd: 9f:3c:20:0c:58:5b:ba:cb:34:f6:8f:1a:0c:87:75:76:95:f0: 02:a4:0c:67:81:74:72:dc:70:96:21:ed:68:fd:49:46:05:9f: 69:a9:c5:70:1d:80:ca:80:fa:60:50:4a:a4:ba:bc:3c:cc:22: 7c:46:a0:c0:fe:de:d3:7b:b3:75:c4:54:c9:8e:bd:92:8d:b4: cd:b7:9a:22:39:0d:42:bb:8b:dd:47:8d:c1:d1:1d:33:24:82: 8a:9b:a3:04:62:23:9d:05:7a:9b:2c:08:19:5f:08:88:71:c5: 22:f7:bc:48:7d:f9:31:fc:c3:38:14:69:0e:28:24:5e:c8:38: 29:1f:24:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXDJRMjvxU8HF7swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ2NjRhMzYtOTZkZC00NmQ3LTlkOTEtYmViZjk5Nzk3 YWYxMB4XDTI1MTAyMTAxMDAwM1oXDTI1MTAyNDAxMDAwMFowLzEtMCsGA1UEAxMk ZDA5ZWM1MjItYmRmOC00ZWE5LThlOTEtOWM0MjE1ODdmZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCirGaPgqEpcoP1x5RTFcxz9m7rOUgS4ICHs 470pSYnUdASO1J9RB61dAaswpnfrAuqzf5Lsn9xTymspxtjRle1Bp0akIXnoIZXC BauXYCmfq4DWRyNbfPD0B5/BksGRCo4EAok0ttbcDnFy5tbvsSsdKbgRkOdzWDt7 GS6uh2aWspZqsAfolXYiuVxoTDxwrs+xpwgu0oKvG2VOEjyhLhCUHHuOTJLSheCA UdHGjq30yITkNo9kd95ThALil7R2q8JbQ0WiSAqbgjRQbpndUDrFBV2t8Pv7P6CN mDeCgjpJ60X7UX5AFh9VNlV3gOGZhPV2EI7NEeqwEo3491leQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKyKoF2ef7oRJOYyjBf9/yG92EWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2 NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJmOTk3OTdhZjEvMjQ2NjRhMzYtOTZkZC00 NmQ3LTlkOTEtYmViZjk5Nzk3YWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjQ2NjRhMzYtOTZkZC00NmQ3LTlk OTEtYmViZjk5Nzk3YWYxLzI0NjY0YTM2LTk2ZGQtNDZkNy05ZDkxLWJlYmY5OTc5 N2FmMS5jcmwwHwYDVR0jBBgwFoAUG3IyTZj3zTmW5pbzaSIOApngXa4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJm OTk3OTdhZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6Pfg2A1/WdN0ieGiKZFIZ rK1B0a3UBm276DOcZX8ygoj8TBoRqJCcgPgtf4JWrs49RkOE4rDz0Uvhf5jo+WTy d76aGTgFmDpdEELVuPgoD8bRiIvNpIIAdoIefaTztnRKVtQKO6SoZXskfsTU0Mmn o/n2oXH5/NBFpzgGuM2fPCAMWFu6yzT2jxoMh3V2lfACpAxngXRy3HCWIe1o/UlG BZ9pqcVwHYDKgPpgUEqkurw8zCJ8RqDA/t7Te7N1xFTJjr2SjbTNt5oiOQ1Cu4vd R43B0R0zJIKKm6MEYiOdBXqbLAgZXwiIccUi97xIffkx/MM4FGkOKCReyDgpHyTG -----END CERTIFICATE-----Generated at Tue Oct 21 15:46:32 2025 by rpki-client