$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft File: 85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft (raw, json) Hash identifier: nFC+oCZZF3aCDJfv9SdOASiz+cUL/7g0mRtIzuGSAbw= Subject key identifier: 20:07:B9:AE:5F:16:7B:D9:92:D6:D0:5D:92:8F:0B:85:F8:AB:1A:E6 Authority key identifier: 60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 Certificate issuer: /CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Certificate serial: 010D0C9F4328584B95E2CB9706AE616682E50860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft Manifest number: 010D0C9F432858414A7D06492D7B608AFF8DB8BF Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl (hash: tgAAmJyYtXI8fASmnJjff2GFvG/ALLQaXDm0kJzIYmE=) 2: d15da3a2-08ce-3992-8b01-fd2369adaa65.roa (hash: AGEc0Oy2LuJ2YnDb6iJf9ACjsR1dAL6Gv5mPLYbemWg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cb:97:06:ae:61:66:82:e5:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=a7038f61-6d0a-41cf-b21a-1017739abfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:9d:df:bc:58:0f:73:cc:06:ad:2a:b2:5e: 10:c2:ab:8a:c3:bd:b5:99:19:4b:34:43:2b:82:56: a2:cb:26:ff:67:37:38:41:db:74:2e:ee:d2:c4:44: d2:1c:ca:12:ee:a8:fd:1b:a9:8b:7e:02:af:4b:30: 09:16:65:4d:db:a2:91:f2:30:ad:23:73:ef:0d:4f: 68:59:c1:9a:90:ac:05:d1:40:f6:86:f5:46:0c:d3: ec:55:9b:eb:a3:b2:1f:05:91:66:a8:a6:b9:5e:5a: cd:b4:41:a1:b5:39:0d:4d:81:1b:63:5f:3c:55:cd: bf:1c:3e:e3:78:35:88:af:ea:a7:96:24:07:5f:88: f9:a8:a4:ee:8e:ad:38:3c:27:ff:8b:5f:ac:cc:9c: 24:9f:be:54:e7:69:ac:48:f1:d4:3c:f4:4e:ba:21: 3b:5a:3a:21:5e:0a:37:29:2b:87:5a:bb:47:fd:23: 4d:1a:2a:78:8f:2e:c3:73:27:96:bc:2c:93:b0:48: 20:87:eb:95:63:39:e0:e9:4a:ad:b5:f4:e0:68:c1: d2:4f:c0:62:c5:bc:66:a8:ca:95:bb:6c:06:4a:28: a7:3f:cb:29:3d:c9:66:ad:9d:26:25:3d:a1:60:26: 9f:9e:be:16:05:55:c6:0a:0f:ff:54:21:c8:e7:29: 6e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:B9:AE:5F:16:7B:D9:92:D6:D0:5D:92:8F:0B:85:F8:AB:1A:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl X509v3 Authority Key Identifier: keyid:60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cc:af:70:ca:d7:a5:0a:07:d4:19:b1:7c:bf:23:0f:dc:85: 5f:56:d5:d0:4d:0e:79:6c:e0:12:27:cf:ad:51:2e:02:09:ef: 1b:25:94:89:25:de:13:9b:fb:8e:b6:06:ee:23:09:e2:29:ee: dc:63:a1:2d:55:dc:d2:cd:dd:72:d8:3b:cf:8e:8a:b8:18:b7: d2:80:07:fa:5f:31:05:ff:e4:20:59:96:1d:5d:11:8d:5c:3a: d9:9f:5b:bf:52:a5:ca:56:7f:3e:82:b1:04:4e:b4:ab:99:ce: 08:81:54:6c:c3:61:b1:fc:c7:d0:f6:b9:de:f1:bf:9c:eb:1f: b0:4d:22:f5:2e:22:26:a3:aa:ed:f4:2b:e5:8e:5a:62:b4:0f: 8d:67:f1:cf:9e:b1:3e:c8:8b:75:1b:5c:17:de:0d:ec:e8:60: 9a:80:d5:36:4f:40:20:0c:62:f3:cc:95:33:cd:7f:9d:ee:8f: 54:18:6a:dc:4a:eb:db:7e:24:87:e7:55:1f:29:a3:0e:8e:38: a4:25:4e:a4:fa:44:dc:60:29:89:5c:f5:9d:5e:db:f8:f7:64: c8:de:17:26:7b:9f:5e:22:a4:d9:56:f6:75:b1:a7:32:e9:81: 6b:7e:34:b8:b7:51:02:d1:e8:3b:28:5b:8b:f4:16:e1:f2:0e: 70:8f:7c:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4suXBq5hZoLlCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMmM0NjAtOWI0Yi00NTdiLWJiMmMtYTJiMDBmN2Ew ZGQwMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk YTcwMzhmNjEtNmQwYS00MWNmLWIyMWEtMTAxNzczOWFiZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEad37xYD3PMBq0qsl4QwquKw721mRlLNEMr glaiyyb/Zzc4Qdt0Lu7SxETSHMoS7qj9G6mLfgKvSzAJFmVN26KR8jCtI3PvDU9o WcGakKwF0UD2hvVGDNPsVZvro7IfBZFmqKa5XlrNtEGhtTkNTYEbY188Vc2/HD7j eDWIr+qnliQHX4j5qKTujq04PCf/i1+szJwkn75U52msSPHUPPROuiE7WjohXgo3 KSuHWrtH/SNNGip4jy7DcyeWvCyTsEggh+uVYzng6UqttfTgaMHST8BixbxmqMqV u2wGSiinP8spPclmrZ0mJT2hYCafnr4WBVXGCg//VCHI5yluowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCAHua5fFnvZktbQXZKPC4X4qxrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NWUy YzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIwMGY3YTBkZDAvODVlMmM0NjAtOWI0Yi00 NTdiLWJiMmMtYTJiMDBmN2EwZGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODVlMmM0NjAtOWI0Yi00NTdiLWJi MmMtYTJiMDBmN2EwZGQwLzg1ZTJjNDYwLTliNGItNDU3Yi1iYjJjLWEyYjAwZjdh MGRkMC5jcmwwHwYDVR0jBBgwFoAUYF9W4aANeJMViQRIYXPrCPcCPokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NWUyYzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIw MGY3YTBkZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnzK9wytelCgfUGbF8vyMP 3IVfVtXQTQ55bOASJ8+tUS4CCe8bJZSJJd4Tm/uOtgbuIwniKe7cY6EtVdzSzd1y 2DvPjoq4GLfSgAf6XzEF/+QgWZYdXRGNXDrZn1u/UqXKVn8+grEETrSrmc4IgVRs w2Gx/MfQ9rne8b+c6x+wTSL1LiImo6rt9CvljlpitA+NZ/HPnrE+yIt1G1wX3g3s 6GCagNU2T0AgDGLzzJUzzX+d7o9UGGrcSuvbfiSH51UfKaMOjjikJU6k+kTcYCmJ XPWdXtv492TI3hcme59eIqTZVvZ1sacy6YFrfjS4t1EC0eg7KFuL9Bbh8g5wj3wR -----END CERTIFICATE-----Generated at Tue Oct 21 15:49:53 2025 by rpki-client