$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft File: 904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft (raw, json) Hash identifier: lYt4ZAeyurNnpmtiCacWazPNRDPGT1a+H23dcM9nIOg= Subject key identifier: FE:AF:3C:82:C0:FA:95:F0:DB:12:86:F9:68:67:03:16:52:C8:BB:4C Authority key identifier: 45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34 Certificate issuer: /CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8 Certificate serial: 010D0C9F4328584B9677B190C0EA52A728791760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft Manifest number: 010D0C9F43285840FFC748B9607E90281F391EE4 Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa (hash: v/iUOh+jSr1bEEC6nROAwaP4BhEL+0o6VVVHZJFxQQg=) 2: 904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl (hash: 5Oq6h04w9HkM0QmpmX52SRVGbZbZ6JHylaFJ0a15iI0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b1:90:c0:ea:52:a7:28:79:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8 Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=529d1eb3-6785-42da-8894-84d518b8b2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:04:ba:8f:79:6c:d6:77:10:6b:6b:25:7d: 3d:02:a4:29:e3:ba:25:74:52:09:83:1f:6c:44:28: e7:81:57:6d:93:e1:6c:2b:75:48:b1:9b:aa:13:cb: fd:a8:e7:fe:cc:70:fd:9b:ca:aa:8d:8a:b0:17:61: 94:29:82:fc:e3:85:21:6f:2c:fe:44:98:89:72:7f: bb:6c:cf:c7:9b:3b:a2:42:6e:66:d9:25:c1:26:e3: f9:32:7c:1f:bf:9b:af:5f:9b:ec:1e:21:38:d7:c0: 78:ae:50:d7:84:07:dd:47:5d:52:8b:ad:45:53:c4: bf:a4:88:43:18:c6:14:94:5a:bb:6c:e2:59:e5:77: 7d:19:75:ec:03:34:c2:f3:73:e8:60:ec:ab:d1:24: 1e:56:64:62:3a:98:23:2b:28:2d:d7:48:5c:dc:61: 04:ce:46:4e:46:ec:ff:0c:dc:4c:0f:c8:82:fa:1f: 2a:93:22:c0:76:b5:7f:46:65:b6:4d:3b:37:48:43: 62:8d:7f:fa:a6:63:0c:ed:c1:a2:98:63:86:6f:98: 4a:6b:f9:17:50:35:56:b9:a3:1e:50:06:10:c5:9d: 06:64:58:e1:41:b3:6d:a3:1b:13:68:4d:a7:bb:6d: 7b:06:3a:f7:76:1f:83:38:d3:6b:94:d6:d2:74:d8: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AF:3C:82:C0:FA:95:F0:DB:12:86:F9:68:67:03:16:52:C8:BB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl X509v3 Authority Key Identifier: keyid:45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:76:a2:cb:47:71:36:96:5c:dd:89:5f:27:2b:36:f6:a2:d2: 22:26:53:02:ad:8d:53:f8:98:84:9c:22:aa:47:27:ff:1d:cd: 85:09:9b:31:7d:1e:79:e7:4d:d9:72:84:af:3e:e1:45:04:8c: 30:00:75:6a:f3:29:47:cf:c9:bb:c7:75:e1:a5:73:c0:e0:38: 6c:2d:17:74:57:6f:0e:13:da:87:da:ef:95:0f:1e:16:e4:c4: 19:32:2e:67:69:1a:b6:e0:e0:6b:ab:5a:26:b6:b3:37:d3:75: b5:79:90:96:29:55:d9:a3:e1:9e:7a:e0:b3:93:19:63:98:4a: da:e8:f9:aa:82:60:a4:8b:39:1c:c1:70:b2:61:37:a1:6e:2f: 13:4b:26:49:70:b5:ff:2d:5b:7d:d6:26:ba:8d:ae:4d:b1:ce: 28:36:a3:5c:6e:cb:1f:55:1c:af:ae:93:ba:a2:1f:eb:de:2b: e8:e2:5b:b4:a7:f2:fa:07:1b:cc:84:07:f8:f1:c6:3f:91:ca: f5:23:e3:bc:da:2f:e2:ea:2a:04:89:f8:c6:28:55:cf:98:c6: 66:5d:7a:74:c5:9c:46:b8:3b:8d:53:f3:01:ab:26:38:4c:e1: 80:c3:4a:9a:72:45:cd:d2:c8:12:45:79:14:ec:76:47:20:6b: d3:d0:c7:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7GQwOpSpyh5F2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA0ZDhiNDAtOWNjYi00YWY4LWJiN2QtZjM2YTk2YTM0 M2M4MB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk NTI5ZDFlYjMtNjc4NS00MmRhLTg4OTQtODRkNTE4YjhiMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykQEuo95bNZ3EGtrJX09AqQp47oldFIJgx9s RCjngVdtk+FsK3VIsZuqE8v9qOf+zHD9m8qqjYqwF2GUKYL844Uhbyz+RJiJcn+7 bM/HmzuiQm5m2SXBJuP5Mnwfv5uvX5vsHiE418B4rlDXhAfdR11Si61FU8S/pIhD GMYUlFq7bOJZ5Xd9GXXsAzTC83PoYOyr0SQeVmRiOpgjKygt10hc3GEEzkZORuz/ DNxMD8iC+h8qkyLAdrV/RmW2TTs3SENijX/6pmMM7cGimGOGb5hKa/kXUDVWuaMe UAYQxZ0GZFjhQbNtoxsTaE2nu217Bjr3dh+DONNrlNbSdNg4JQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP6vPILA+pXw2xKG+WhnAxZSyLtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDRk OGI0MC05Y2NiLTRhZjgtYmI3ZC1mMzZhOTZhMzQzYzgvOTA0ZDhiNDAtOWNjYi00 YWY4LWJiN2QtZjM2YTk2YTM0M2M4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA0ZDhiNDAtOWNjYi00YWY4LWJi N2QtZjM2YTk2YTM0M2M4LzkwNGQ4YjQwLTljY2ItNGFmOC1iYjdkLWYzNmE5NmEz NDNjOC5jcmwwHwYDVR0jBBgwFoAURetyI5Yq5UOM5CPV5lhMPtKefzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDRkOGI0MC05Y2NiLTRhZjgtYmI3ZC1mMzZh OTZhMzQzYzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFdqLLR3E2llzdiV8nKzb2 otIiJlMCrY1T+JiEnCKqRyf/Hc2FCZsxfR55503ZcoSvPuFFBIwwAHVq8ylHz8m7 x3XhpXPA4DhsLRd0V28OE9qH2u+VDx4W5MQZMi5naRq24OBrq1omtrM303W1eZCW KVXZo+GeeuCzkxljmEra6PmqgmCkizkcwXCyYTehbi8TSyZJcLX/LVt91ia6ja5N sc4oNqNcbssfVRyvrpO6oh/r3ivo4lu0p/L6BxvMhAf48cY/kcr1I+O82i/i6ioE ifjGKFXPmMZmXXp0xZxGuDuNU/MBqyY4TOGAw0qackXN0sgSRXkU7HZHIGvT0MeL -----END CERTIFICATE-----Generated at Tue Oct 21 15:17:50 2025 by rpki-client