$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft File: 5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft (raw, json) Hash identifier: iwW3IF12A8jbY1/+WT/G6eLltUlV5v5QMQDiXSp/W5E= Subject key identifier: 7A:96:43:90:10:A5:53:95:FB:AB:9F:5F:CB:77:AF:42:FD:B3:F9:E0 Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F4328584B95E2CE5967E16B0B2E5DCE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft Manifest number: 010D0C9F43285840FC52DDAE61C894CB22D41F85 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl (hash: 0ildKFVz5j2NR7GuJChudJwGbCP0mTau2I341Wf7o1A=) 2: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (hash: RQH0NElxUB8TJRzHyBN2SyyyTeSu8bIeJRAMfqoCPBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:ce:59:67:e1:6b:0b:2e:5d:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=83e8de72-157d-4d1b-843c-9c4b069e20cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:02:ce:38:50:93:0e:69:51:83:77:fb:ee: a7:37:85:e8:b9:dc:7f:6b:19:88:43:17:a6:36:00: a6:6b:04:a4:43:ee:42:f1:a0:8e:ae:7d:3f:9b:d1: 27:c4:d0:00:76:be:1c:ff:0a:74:c4:fd:b5:fd:9c: 63:2a:0e:ba:df:10:2c:61:54:7c:ea:32:3e:5e:1d: 3e:c9:c2:12:96:4f:83:34:75:4f:18:dd:86:dd:f5: cc:0c:b1:9f:41:fa:0d:07:20:b2:08:97:30:ac:40: 0d:29:7f:d3:be:66:20:79:82:a5:06:90:96:13:38: 96:36:87:4b:72:2d:ce:db:18:c7:14:4e:de:97:51: 51:c6:76:a9:46:a8:eb:6e:e1:30:cc:75:0e:c8:1b: 0c:5f:b7:f9:2f:19:f6:c7:63:88:43:c9:45:e4:97: 22:1e:28:40:27:e3:ae:94:5d:d5:6c:89:ba:39:92: a2:a2:8f:c6:cd:05:98:9d:dd:d9:f0:43:a9:ca:a6: be:7d:cd:ab:5f:9d:1b:db:32:56:28:b0:89:e5:d4: e1:bf:b8:67:ec:a3:f5:80:8b:85:cf:2e:24:0f:b8: 59:6d:5f:c7:de:16:5d:7e:4c:f5:98:cb:56:e1:15: 1f:40:93:9a:2c:ea:14:1e:d4:b8:aa:b1:76:cf:b1: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:96:43:90:10:A5:53:95:FB:AB:9F:5F:CB:77:AF:42:FD:B3:F9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a1:af:11:79:e3:47:b5:14:07:a0:37:f1:a6:36:0c:22:5b: da:da:a6:68:8a:7f:d5:e9:d8:37:d9:be:f9:8e:ba:94:1c:0c: f3:c1:05:f2:90:74:10:0b:0e:7a:90:3f:16:53:bc:a2:b1:6f: 35:60:78:96:f0:ab:3d:69:24:1a:d7:71:4a:f9:6c:1d:63:c2: 7e:43:88:2d:ea:fc:fd:26:5f:e7:34:04:e5:62:87:9c:73:fe: f8:db:b9:d5:65:af:ad:32:27:de:d4:e6:e7:58:85:18:e9:90: af:d2:28:3b:a1:c6:19:c2:65:5f:73:97:46:d1:ec:ca:a7:db: 1a:fc:30:ef:dc:9b:9d:b4:8d:b6:b4:d5:ff:55:45:5c:74:77: bc:a9:0c:ad:f8:8f:f0:6a:22:5c:3d:06:5e:44:49:ce:de:d2: 86:54:62:59:be:05:6b:c6:81:25:80:1c:7e:f1:81:ad:bf:f4: 42:20:d0:d0:e4:3d:a5:aa:ee:13:9d:07:68:bd:61:d0:81:57: 76:88:20:61:1f:4d:7b:c8:19:d7:ae:38:31:4a:31:c7:a7:16: 39:bd:74:f3:e7:1b:25:cb:d1:59:19:a9:24:0f:c3:2f:33:98: cf:91:99:07:98:51:8d:05:98:35:d0:fe:0f:a4:92:3a:0d:5b: 2f:b9:bc:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s5ZZ+FrCy5dzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk ODNlOGRlNzItMTU3ZC00ZDFiLTg0M2MtOWM0YjA2OWUyMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHMCzjhQkw5pUYN3++6nN4Xoudx/axmIQxem NgCmawSkQ+5C8aCOrn0/m9EnxNAAdr4c/wp0xP21/ZxjKg663xAsYVR86jI+Xh0+ ycISlk+DNHVPGN2G3fXMDLGfQfoNByCyCJcwrEANKX/TvmYgeYKlBpCWEziWNodL ci3O2xjHFE7el1FRxnapRqjrbuEwzHUOyBsMX7f5Lxn2x2OIQ8lF5JciHihAJ+Ou lF3VbIm6OZKioo/GzQWYnd3Z8EOpyqa+fc2rX50b2zJWKLCJ5dThv7hn7KP1gIuF zy4kD7hZbV/H3hZdfkz1mMtW4RUfQJOaLOoUHtS4qrF2z7FsuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHqWQ5AQpVOV+6ufX8t3r0L9s/ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvNWExYzNiMWEtZDExZS00 NmYyLWI4YmEtMTk3NGI0NGM4NGIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgoa8ReeNHtRQHoDfxpjYM Ilva2qZoin/V6dg32b75jrqUHAzzwQXykHQQCw56kD8WU7yisW81YHiW8Ks9aSQa 13FK+WwdY8J+Q4gt6vz9Jl/nNATlYoecc/7427nVZa+tMife1ObnWIUY6ZCv0ig7 ocYZwmVfc5dG0ezKp9sa/DDv3JudtI22tNX/VUVcdHe8qQyt+I/waiJcPQZeREnO 3tKGVGJZvgVrxoElgBx+8YGtv/RCINDQ5D2lqu4TnQdovWHQgVd2iCBhH017yBnX rjgxSjHHpxY5vXTz5xsly9FZGakkD8MvM5jPkZkHmFGNBZg10P4PpJI6DVsvubzf -----END CERTIFICATE-----Generated at Tue Oct 21 15:17:49 2025 by rpki-client