$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft File: 5d74f046-ba55-4b61-bccd-7e10e81264d1.mft (raw, json) Hash identifier: 7r4VpdqU/dBqd6m0aqUgTcNXxikhKDVfgRq9Ef/Fny0= Subject key identifier: D7:10:02:6F:98:F7:11:F3:C1:2E:1D:12:46:3C:EE:B5:98:EB:9C:70 Authority key identifier: F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60 Certificate issuer: /CN=5d74f046-ba55-4b61-bccd-7e10e81264d1 Certificate serial: 010D0C9F4328584B95E2CB3F3B291AAA5D523C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft Manifest number: 010D0C9F43285840FF12A11CD56F233FF4DD2624 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 5d74f046-ba55-4b61-bccd-7e10e81264d1.crl (hash: ghtCgUeE2YCOj+QpFLAT0gpWLMglOSJA0SwHYuH9o48=) 2: a41580dd-b7f0-3cec-be2d-a4e9623d6497.roa (hash: CICgjs0NMe8XzXj5TXANRODoAXEmW2kVe1mUWjux+FM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cb:3f:3b:29:1a:aa:5d:52:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d74f046-ba55-4b61-bccd-7e10e81264d1 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=d68e0929-37b2-4e09-855a-d4d1d1801939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:5f:e0:00:39:f0:36:b4:ff:ce:ba:96:77: 37:e1:90:d2:18:3c:6a:70:d4:bf:47:da:6d:ff:16: e4:79:4e:62:16:57:53:03:29:8d:02:01:1d:4d:29: 56:e6:c1:1c:4d:67:e1:f6:c0:1d:1c:1b:5d:98:f0: 2a:43:db:42:52:b3:b0:79:f4:5e:ef:64:09:9f:9d: 43:31:03:1f:f5:03:a8:08:31:fe:6d:dd:14:22:06: fb:21:0a:93:39:db:64:b2:44:cc:64:a6:af:e0:6c: 25:d4:67:45:a1:da:00:b6:f5:2b:a8:11:9d:cf:62: 85:e5:93:af:55:5c:ca:3d:1e:16:09:8f:db:64:73: f0:2d:69:c7:9d:b4:6e:7e:84:a1:18:3e:17:df:c1: 05:66:97:30:21:0d:c9:3c:02:72:0b:a2:f2:06:1e: bf:c9:f5:c1:fa:86:de:9c:bb:e8:90:68:aa:64:39: f6:cf:4d:1b:e1:55:fb:9f:e5:2b:df:8d:f2:c2:3b: 00:5a:af:71:11:ee:ca:34:83:4b:d1:4c:e7:a2:ac: 8e:77:a6:27:67:59:f7:25:8a:e1:e7:60:d9:b3:d3: ff:a1:72:ba:aa:77:05:b4:9f:86:ec:22:87:d9:21: 94:11:c9:05:52:fb:34:0b:aa:35:56:89:be:b6:d7: 9c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:02:6F:98:F7:11:F3:C1:2E:1D:12:46:3C:EE:B5:98:EB:9C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl X509v3 Authority Key Identifier: keyid:F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:29:de:c1:22:be:c9:cb:ef:2a:82:83:e3:cf:05:94:b4: 8e:2e:e6:57:a7:2d:ad:e8:4c:5a:81:b3:57:bb:5f:07:1c:6e: 9d:77:8d:f1:b2:9f:c6:77:a2:a9:3b:a4:17:1a:58:09:91:aa: e8:78:da:b5:ca:28:a6:df:14:3d:c9:ef:c7:73:fd:9b:7b:29: 35:aa:0c:00:8f:ba:aa:17:01:d8:ed:f1:aa:f9:42:3d:80:07: a7:44:99:77:2b:78:83:93:66:50:3d:88:41:bc:59:39:68:e3: 65:85:d5:30:1c:9a:e4:55:41:6f:f2:fc:d2:27:30:b3:f6:8e: 8c:b0:78:5c:de:0a:53:9b:c6:68:3b:83:bf:31:60:a7:ea:ad: 42:bb:da:f2:b2:36:92:56:58:ae:69:73:14:08:c8:69:7c:4b: 1a:a1:c9:60:56:08:1b:64:99:4e:16:8b:64:dc:42:93:04:55: 2f:ea:6a:a6:ff:8b:8e:0e:f6:f9:4a:39:b6:b6:1a:84:c7:a3: 9f:d0:f3:9f:dd:e7:4f:36:a8:cf:26:a9:39:3e:8f:8b:d2:e6: 94:eb:54:2e:a6:dc:4d:4c:37:69:4b:e5:b0:70:b3:cb:06:5c: 3c:b9:78:d6:27:53:e3:d8:63:2c:40:cd:f6:f9:24:ae:9d:d1: 41:6d:e9:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4ss/Oykaql1SPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3NGYwNDYtYmE1NS00YjYxLWJjY2QtN2UxMGU4MTI2 NGQxMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk ZDY4ZTA5MjktMzdiMi00ZTA5LTg1NWEtZDRkMWQxODAxOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7xf4AA58Da0/866lnc34ZDSGDxqcNS/R9pt /xbkeU5iFldTAymNAgEdTSlW5sEcTWfh9sAdHBtdmPAqQ9tCUrOwefRe72QJn51D MQMf9QOoCDH+bd0UIgb7IQqTOdtkskTMZKav4Gwl1GdFodoAtvUrqBGdz2KF5ZOv VVzKPR4WCY/bZHPwLWnHnbRufoShGD4X38EFZpcwIQ3JPAJyC6LyBh6/yfXB+obe nLvokGiqZDn2z00b4VX7n+Ur343ywjsAWq9xEe7KNINL0UznoqyOd6YnZ1n3JYrh 52DZs9P/oXK6qncFtJ+G7CKH2SGUEckFUvs0C6o1Vom+ttecsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNcQAm+Y9xHzwS4dEkY87rWY65xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0 ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEwZTgxMjY0ZDEvNWQ3NGYwNDYtYmE1NS00 YjYxLWJjY2QtN2UxMGU4MTI2NGQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWQ3NGYwNDYtYmE1NS00YjYxLWJj Y2QtN2UxMGU4MTI2NGQxLzVkNzRmMDQ2LWJhNTUtNGI2MS1iY2NkLTdlMTBlODEy NjRkMS5jcmwwHwYDVR0jBBgwFoAU9atyFhgAJGyBd19faOUhKnCXn2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEw ZTgxMjY0ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwKynewSK+ycvvKoKD488F lLSOLuZXpy2t6ExagbNXu18HHG6dd43xsp/Gd6KpO6QXGlgJkaroeNq1yiim3xQ9 ye/Hc/2beyk1qgwAj7qqFwHY7fGq+UI9gAenRJl3K3iDk2ZQPYhBvFk5aONlhdUw HJrkVUFv8vzSJzCz9o6MsHhc3gpTm8ZoO4O/MWCn6q1Cu9rysjaSVliuaXMUCMhp fEsaoclgVggbZJlOFotk3EKTBFUv6mqm/4uODvb5Sjm2thqEx6Of0POf3edPNqjP Jqk5Po+L0uaU61QuptxNTDdpS+WwcLPLBlw8uXjWJ1Pj2GMsQM32+SSundFBbekQ -----END CERTIFICATE-----Generated at Tue Oct 21 15:23:01 2025 by rpki-client