$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft File: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft (raw, json) Hash identifier: y27NkapabL7WVRVzKwkHFHzipFa3NoKHq3Wtjy/ueN8= Subject key identifier: CA:B3:63:73:53:A6:6D:7B:1B:A9:FF:9D:59:43:87:29:8B:0F:79:A6 Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Certificate issuer: /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Certificate serial: 010D0C9F4328584B9659EAD3FE25DC8CAB072200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft Manifest number: 010D0C9F43285840F1B61272025108BE12B50F79 Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Thu 23 Oct 2025 19:00:00 +0000 Files and hashes: 1: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl (hash: 3Ym72tbBx3YPWDTZMB+DIKpXGLcWYObcv6KUoIN32BA=) 2: fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (hash: MvvFESaQNY/CGoqclmc28wWW77qDUvvteV1AnLTWAPE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:ea:d3:fe:25:dc:8c:ab:07:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 23 19:00:00 2025 GMT Subject: CN=8e5e5039-e024-4e16-8b1c-9d7d030af154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:2a:64:7e:90:09:e3:0f:29:d7:76:af:7b: be:86:77:67:97:0c:22:a7:b0:fd:e0:92:e3:9f:07: aa:4f:ba:2e:9c:3f:1a:02:a1:c7:a7:6b:17:bc:3e: 26:47:b3:30:7d:56:92:0b:4a:e6:d4:ab:d7:cc:27: 83:4a:99:df:e3:93:44:b7:1d:be:37:63:c7:78:1f: c9:2f:0b:2a:76:75:b3:d9:e2:b2:ec:41:3a:2a:5b: 86:a1:fc:39:3c:af:bc:03:dd:ad:7b:92:6d:55:13: 21:d7:3b:9e:53:6f:19:fa:de:70:8b:65:a1:bb:4b: da:b6:b7:0b:81:5b:02:94:3a:f4:69:6d:c8:cd:b7: 99:6e:3b:ff:5c:c9:0c:7f:82:42:17:bb:14:d7:09: 7a:c7:40:09:d4:80:f7:fc:36:c3:a3:5d:59:73:dc: 9a:62:dd:90:01:b9:3d:09:d1:b1:27:d6:5f:09:e4: b9:ef:75:a5:e5:5f:4a:50:da:15:18:4c:f0:e4:c9: b3:14:e4:b8:4d:30:55:85:19:6a:49:df:ee:79:37: 9b:3b:ef:7a:81:89:56:a5:78:69:57:47:53:8d:cb: 83:57:3b:6f:06:60:c0:54:e1:76:39:15:a5:ac:74: 60:8f:12:3c:14:52:d4:34:b5:ff:44:6c:2e:09:32: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:63:73:53:A6:6D:7B:1B:A9:FF:9D:59:43:87:29:8B:0F:79:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl X509v3 Authority Key Identifier: keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3d:36:2f:c3:47:04:6f:6f:5f:9d:08:c8:57:dc:1f:86:ca: 71:3b:01:89:19:c3:2a:72:bb:38:57:56:6d:48:06:8e:51:08: 6d:13:af:6a:13:b0:1b:08:7f:fa:77:be:d3:55:63:46:23:36: 18:d8:34:b9:ac:82:0b:b6:23:7d:42:dc:3f:c2:8b:65:8d:d1: bf:b6:65:b0:11:1d:70:f4:63:09:93:e1:fb:43:68:3a:12:90: c3:0d:fe:b2:cb:f8:0d:98:cb:89:24:f6:6c:d2:97:74:6e:e4: 1f:92:a0:23:2b:14:ab:a8:b0:0a:f3:17:f7:13:91:49:31:91: 72:29:66:03:0a:54:98:c6:4f:d5:e6:b5:ec:cf:c4:06:a2:fe: 5c:d6:62:6a:ca:9b:5c:4d:d0:58:34:4e:3d:be:8f:08:45:dc: ce:43:11:7a:23:80:04:7d:fe:4d:04:53:95:d8:ab:82:ab:47: d0:21:70:07:d0:d2:6d:30:a8:2c:ba:5e:18:a0:cc:f5:50:c3: db:fe:1b:52:d7:fd:8d:fd:cb:26:9e:7d:e5:af:04:79:ca:cc: 76:42:07:c9:1a:0d:4a:98:4a:9f:93:aa:1c:91:ff:ea:9d:c5: d2:7e:9b:51:6b:fd:ed:2f:79:b6:29:a1:49:e8:f6:1d:ea:e0: ba:bb:d8:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWerT/iXcjKsHIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFi NmY5MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMzE5MDAwMFowLzEtMCsGA1UEAxMk OGU1ZTUwMzktZTAyNC00ZTE2LThiMWMtOWQ3ZDAzMGFmMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+EqZH6QCeMPKdd2r3u+hndnlwwip7D94JLj nweqT7ounD8aAqHHp2sXvD4mR7MwfVaSC0rm1KvXzCeDSpnf45NEtx2+N2PHeB/J LwsqdnWz2eKy7EE6KluGofw5PK+8A92te5JtVRMh1zueU28Z+t5wi2Whu0vatrcL gVsClDr0aW3IzbeZbjv/XMkMf4JCF7sU1wl6x0AJ1ID3/DbDo11Zc9yaYt2QAbk9 CdGxJ9ZfCeS573Wl5V9KUNoVGEzw5MmzFOS4TTBVhRlqSd/ueTebO+96gYlWpXhp V0dTjcuDVztvBmDAVOF2ORWlrHRgjxI8FFLUNLX/RGwuCTKFIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMqzY3NTpm17G6n/nVlDhymLD3mmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iZTkw ODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvYmU5MDg5NWEtM2M0My00 YjM4LWE1YWEtYjFlYmMyNjFiNmY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmU5MDg5NWEtM2M0My00YjM4LWE1 YWEtYjFlYmMyNjFiNmY5L2JlOTA4OTVhLTNjNDMtNGIzOC1hNWFhLWIxZWJjMjYx YjZmOS5jcmwwHwYDVR0jBBgwFoAU8VVqNlvNKrthwKWsN7V+4tbW7gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWVi YzI2MWI2ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzPTYvw0cEb29fnQjIV9wf hspxOwGJGcMqcrs4V1ZtSAaOUQhtE69qE7AbCH/6d77TVWNGIzYY2DS5rIILtiN9 Qtw/wotljdG/tmWwER1w9GMJk+H7Q2g6EpDDDf6yy/gNmMuJJPZs0pd0buQfkqAj KxSrqLAK8xf3E5FJMZFyKWYDClSYxk/V5rXsz8QGov5c1mJqyptcTdBYNE49vo8I RdzOQxF6I4AEff5NBFOV2KuCq0fQIXAH0NJtMKgsul4YoMz1UMPb/htS1/2N/csm nn3lrwR5ysx2QgfJGg1KmEqfk6ockf/qncXSfptRa/3tL3m2KaFJ6PYd6uC6u9hN -----END CERTIFICATE-----Generated at Tue Oct 21 15:23:55 2025 by rpki-client