$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft File: d3196482-9a63-48b1-828c-a6de96f0caff.mft (raw, json) Hash identifier: 2eIlwsgvuj5rCWk6b9HvCWlmcfYWx+hFhUEH7f/8cl4= Subject key identifier: FE:AB:DE:4D:35:A0:32:AC:E0:BF:35:FF:AA:91:C5:0D:13:2C:47:D1 Authority key identifier: 71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8 Certificate issuer: /CN=d3196482-9a63-48b1-828c-a6de96f0caff Certificate serial: 010D0C9F4328584B974823B48F8FB604893A8A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft Manifest number: 010D0C9F4328584A26DEA6A08DAF85D1BF0B1E0A Signing time: Tue 21 Oct 2025 03:00:03 +0000 Manifest this update: Tue 21 Oct 2025 03:00:03 +0000 Manifest next update: Fri 24 Oct 2025 03:00:00 +0000 Files and hashes: 1: 86f55d44-ae15-32b3-90fc-b80be13a02a8.roa (hash: EKj862pWkZxPU8fWuYRBW/7MZZMEpDY6K65K1m5sulM=) 2: d3196482-9a63-48b1-828c-a6de96f0caff.crl (hash: HiTJPEAUVS7ZNaG1yFhc3KxcOmyIDLdYCtnvsWJfb84=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:48:23:b4:8f:8f:b6:04:89:3a:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3196482-9a63-48b1-828c-a6de96f0caff Validity Not Before: Oct 21 03:00:03 2025 GMT Not After : Oct 24 03:00:00 2025 GMT Subject: CN=68513af3-1704-4deb-89a4-0b4654e12d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:f9:d8:8c:dd:66:2d:40:c2:09:fb:4c:a1: 8d:1a:05:ee:a8:d6:0a:11:8c:ed:a9:c2:fc:b4:98: aa:49:05:74:79:64:be:3e:ff:9c:2e:6b:ca:ac:14: e1:97:ac:e0:50:42:5f:cd:95:eb:25:c8:88:44:16: b4:b2:5e:89:d7:e3:98:6e:56:ca:9a:7c:39:67:5e: 97:16:cb:f7:da:2e:ae:70:0c:41:d3:bb:f7:01:90: c2:5c:92:7e:f9:67:09:26:a2:9b:ae:a1:75:c5:a2: 1e:96:7d:aa:46:aa:e4:35:5c:33:8c:b4:35:a6:4d: 9e:2a:40:e6:f4:42:ba:7d:51:5d:b2:0c:00:1e:7f: 95:f0:b9:f1:d5:f0:8d:20:75:13:a4:de:50:4f:7c: 9f:87:70:dc:12:46:e6:df:a3:92:26:21:0a:c9:1f: 7a:3a:f8:a5:ed:9e:41:80:81:2f:d6:94:d3:fb:90: 38:22:01:65:4a:05:5a:ca:dd:e8:d9:a8:e8:cc:fa: 37:22:5c:7b:83:96:d9:f6:15:90:c3:5d:5b:cd:23: db:b7:2f:56:2d:bf:f4:05:3c:e8:2d:94:74:f3:4f: ed:7c:d6:ea:46:6f:79:95:5c:9d:ce:ef:2a:c4:df: 44:f4:da:47:64:1f:86:7b:b6:c0:a0:45:98:97:69: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:DE:4D:35:A0:32:AC:E0:BF:35:FF:AA:91:C5:0D:13:2C:47:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl X509v3 Authority Key Identifier: keyid:71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:db:b5:de:a6:03:a6:69:b1:ca:5b:ba:a5:de:c6:8f:48:34: 4c:7a:5f:dd:7e:c6:f3:6a:20:eb:5f:99:d8:24:82:84:51:36: d8:bd:d1:fc:72:b3:f6:52:98:81:ec:cf:c8:5f:b9:70:a1:00: 11:fd:ba:91:6f:11:b4:43:89:df:c3:ce:00:f8:87:73:43:7a: 95:a0:77:4c:50:7e:44:68:e8:8f:f2:d2:b9:6d:83:35:6c:9b: 71:7b:d4:ab:86:60:57:2e:cd:3a:78:bf:45:b5:c8:7d:04:42: 34:d9:fc:d5:52:2f:c6:be:3a:46:6a:6c:b7:06:8e:41:ac:eb: c0:1b:13:0b:1e:6c:8a:6f:b0:21:bd:16:88:4f:0c:ee:39:4a: 81:e8:fa:8e:65:9a:15:2a:ed:0e:b1:c5:83:41:d7:c6:a4:64: 19:cf:e4:26:f7:73:67:cc:7a:80:08:2a:42:5e:fe:be:fb:b1: 3b:46:81:90:cb:e7:ff:ca:22:d4:db:93:c3:4e:0e:35:0f:66: b3:fc:57:c6:8e:a5:1c:1b:a6:2e:5f:de:68:37:cf:57:bb:22: a6:81:b6:c8:f2:8d:07:03:58:5d:98:75:cc:37:63:d2:5d:93: 27:97:10:df:f7:74:28:91:59:7d:7d:e7:3e:e6:f3:86:8a:e1: d2:36:a0:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXSCO0j4+2BIk6ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxOTY0ODItOWE2My00OGIxLTgyOGMtYTZkZTk2ZjBj YWZmMB4XDTI1MTAyMTAzMDAwM1oXDTI1MTAyNDAzMDAwMFowLzEtMCsGA1UEAxMk Njg1MTNhZjMtMTcwNC00ZGViLTg5YTQtMGI0NjU0ZTEyZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkn52IzdZi1Awgn7TKGNGgXuqNYKEYztqcL8 tJiqSQV0eWS+Pv+cLmvKrBThl6zgUEJfzZXrJciIRBa0sl6J1+OYblbKmnw5Z16X Fsv32i6ucAxB07v3AZDCXJJ++WcJJqKbrqF1xaIeln2qRqrkNVwzjLQ1pk2eKkDm 9EK6fVFdsgwAHn+V8Lnx1fCNIHUTpN5QT3yfh3DcEkbm36OSJiEKyR96Ovil7Z5B gIEv1pTT+5A4IgFlSgVayt3o2ajozPo3Ilx7g5bZ9hWQw11bzSPbty9WLb/0BTzo LZR080/tfNbqRm95lVydzu8qxN9E9NpHZB+Ge7bAoEWYl2nGzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP6r3k01oDKs4L81/6qRxQ0TLEfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMzE5 NjQ4Mi05YTYzLTQ4YjEtODI4Yy1hNmRlOTZmMGNhZmYvZDMxOTY0ODItOWE2My00 OGIxLTgyOGMtYTZkZTk2ZjBjYWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDMxOTY0ODItOWE2My00OGIxLTgy OGMtYTZkZTk2ZjBjYWZmL2QzMTk2NDgyLTlhNjMtNDhiMS04MjhjLWE2ZGU5NmYw Y2FmZi5jcmwwHwYDVR0jBBgwFoAUcazbz9oipMk28oQo3Tv9aeU+YfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMzE5NjQ4Mi05YTYzLTQ4YjEtODI4Yy1hNmRl OTZmMGNhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZ27XepgOmabHKW7ql3saP SDRMel/dfsbzaiDrX5nYJIKEUTbYvdH8crP2UpiB7M/IX7lwoQAR/bqRbxG0Q4nf w84A+IdzQ3qVoHdMUH5EaOiP8tK5bYM1bJtxe9SrhmBXLs06eL9Ftch9BEI02fzV Ui/GvjpGamy3Bo5BrOvAGxMLHmyKb7AhvRaITwzuOUqB6PqOZZoVKu0OscWDQdfG pGQZz+Qm93NnzHqACCpCXv6++7E7RoGQy+f/yiLU25PDTg41D2az/FfGjqUcG6Yu X95oN89XuyKmgbbI8o0HA1hdmHXMN2PSXZMnlxDf93QokVl9fec+5vOGiuHSNqAC -----END CERTIFICATE-----Generated at Tue Oct 21 15:38:44 2025 by rpki-client