$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft File: 4a06d1f9-0d04-482f-a665-8c270260e2c1.mft (raw, json) Hash identifier: ZwA4iAlHoQW1mdaNoi8u7+TITO3UVh0A2S1HvJU256g= Subject key identifier: D8:EB:32:53:07:1B:68:68:D6:84:1C:D8:5D:49:15:15:38:CC:A0:21 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584B95E2D0A25677DC7B15474300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft Manifest number: 010D0C9F432858412092D640F0B6D0F9EB17C7E7 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 4a06d1f9-0d04-482f-a665-8c270260e2c1.crl (hash: Ga+KOFuu1OhN8pyl0n2rkqnJm1PBT2E3kbXCX2WktX0=) 2: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (hash: vxMF393M9yXfcm2vFhQ8lq8FnfEH+xjDviEkMOm3xsM=) 3: c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa (hash: UIQIeCUJ1WyH9XlNChTNxrxUuyvP/r1ONIj1izjNbq8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:d0:a2:56:77:dc:7b:15:47:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=5c7204ce-45cf-400f-98c5-62ae455ea01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:f6:c8:d0:1b:ef:ac:65:3a:99:fb:39:34: aa:14:e7:b9:8d:04:45:fa:57:97:93:a0:02:5b:dc: 86:5e:e1:1b:dc:db:f2:7a:3a:ef:fa:cd:2d:4d:5c: 9e:76:0b:52:69:78:11:e5:32:14:1c:cb:05:b9:e7: 17:ff:ad:7b:7d:72:ee:8e:29:c0:47:85:f8:5f:4c: 44:19:c6:60:2c:48:1f:e5:e6:24:0f:3c:4d:a0:29: 0b:41:ef:7a:9d:bd:68:2a:15:d2:73:23:9c:2c:73: 30:bb:10:27:0b:ae:a7:d3:22:7f:4c:c4:bc:99:ac: 06:b1:dc:5a:b2:2d:40:88:66:1a:21:60:ed:db:68: 69:be:46:1a:31:2e:99:ef:ae:58:b1:52:53:19:1b: 91:1f:c3:89:61:44:44:3f:a3:08:cb:92:65:bd:c0: 3b:75:5d:39:57:8e:e2:66:69:a6:71:36:b1:f3:6f: 22:93:76:0b:82:2a:2d:fe:c7:28:5b:84:5c:fe:3c: 11:a4:2a:cf:ce:7d:3f:62:1c:71:7e:de:c7:cd:a3: 62:6d:dd:bf:ac:fa:45:28:8b:88:99:fb:14:c3:cd: 5b:0d:93:bb:87:4a:86:95:37:d0:85:47:3b:5c:1a: df:06:17:1a:4e:ea:7f:04:8d:27:b9:1c:7b:16:6e: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EB:32:53:07:1B:68:68:D6:84:1C:D8:5D:49:15:15:38:CC:A0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:87:0f:dc:d1:90:34:3f:07:9a:e7:58:f4:a8:09:85:ae:a3: 83:b3:ac:26:0c:51:12:4d:a0:03:c7:4f:ec:d1:69:f6:c9:56: 63:d0:8b:8b:b3:49:46:51:d1:6d:26:bb:91:af:88:f2:94:a6: d1:2c:1f:72:f5:6c:4a:b2:a4:32:7f:29:1b:83:de:7a:3b:60: ff:23:2f:94:fc:b0:47:1a:36:b9:35:d4:38:11:58:43:6f:44: fc:06:c3:5c:81:10:3b:93:04:92:3b:52:75:d7:ed:25:e6:26: 0f:49:f1:36:3e:dc:23:0b:b6:42:ba:e2:dd:08:85:80:4e:e6: d7:c6:15:33:8d:61:9c:ad:00:7a:dd:b0:73:fc:32:67:2f:21: b9:06:44:f6:86:35:ce:3c:78:ee:cc:d3:6b:cb:9d:e0:a0:f3: f3:87:c7:72:b6:10:2d:77:40:5e:79:d5:bc:4d:77:5c:37:69: ae:b4:16:fc:a8:a1:9c:bc:df:b9:1f:99:28:ba:6c:34:3b:16: 75:a0:8e:a8:27:18:3b:c1:5f:c2:cb:08:56:4d:bb:6f:9f:41: 92:d9:ae:33:e3:a6:30:57:72:a7:6a:8d:4b:15:c2:58:40:96: d3:ab:bc:61:9b:c3:d5:8a:da:00:55:64:01:c1:53:ba:15:1a: 78:29:89:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4tCiVnfcexVHQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk NWM3MjA0Y2UtNDVjZi00MDBmLTk4YzUtNjJhZTQ1NWVhMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4P2yNAb76xlOpn7OTSqFOe5jQRF+leXk6AC W9yGXuEb3Nvyejrv+s0tTVyedgtSaXgR5TIUHMsFuecX/617fXLujinAR4X4X0xE GcZgLEgf5eYkDzxNoCkLQe96nb1oKhXScyOcLHMwuxAnC66n0yJ/TMS8mawGsdxa si1AiGYaIWDt22hpvkYaMS6Z765YsVJTGRuRH8OJYUREP6MIy5JlvcA7dV05V47i ZmmmcTax828ik3YLgiot/scoW4Rc/jwRpCrPzn0/Yhxxft7HzaNibd2/rPpFKIuI mfsUw81bDZO7h0qGlTfQhUc7XBrfBhcaTup/BI0nuRx7Fm4gmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNjrMlMHG2ho1oQc2F1JFRU4zKAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvNGEwNmQxZjktMGQwNC00 ODJmLWE2NjUtOGMyNzAyNjBlMmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAshw/c0ZA0Pwea51j0qAmF rqODs6wmDFESTaADx0/s0Wn2yVZj0IuLs0lGUdFtJruRr4jylKbRLB9y9WxKsqQy fykbg956O2D/Iy+U/LBHGja5NdQ4EVhDb0T8BsNcgRA7kwSSO1J11+0l5iYPSfE2 PtwjC7ZCuuLdCIWATubXxhUzjWGcrQB63bBz/DJnLyG5BkT2hjXOPHjuzNNry53g oPPzh8dythAtd0BeedW8TXdcN2mutBb8qKGcvN+5H5koumw0OxZ1oI6oJxg7wV/C ywhWTbtvn0GS2a4z46YwV3Knao1LFcJYQJbTq7xhm8PVitoAVWQBwVO6FRp4KYlF -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:15 2025 by rpki-client