$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft File: d47a94a4-ac39-4383-91f3-389070353c6d.mft (raw, json) Hash identifier: AtZviv4UPofkam16WLHXS3D/73ztmfgj2Y6lHn5iAH4= Subject key identifier: D7:BE:EC:AB:F7:DC:B7:6B:99:61:D5:4F:C1:91:D1:AC:46:4D:3F:A9 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F4328584B961E6822CA0C789B53CEA980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft Manifest number: 010D0C9F43285840D2B61A936326539069E09069 Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:00 +0000 Files and hashes: 1: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (hash: zJxCwfOPp1JsmGlS4nP0SLOsL3ux3ZamPefgh7vEmWc=) 2: d47a94a4-ac39-4383-91f3-389070353c6d.crl (hash: fFUNEccdConeQ3L+V+Wf1nFxG65lZJiKNbH18ww4xaU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:68:22:ca:0c:78:9b:53:ce:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 22 17:00:00 2025 GMT Subject: CN=b565d87a-80e9-4d5d-afdb-a2c7b84ce33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:ea:bf:dc:3b:aa:eb:6e:ac:2e:81:0b:27: dd:ba:17:9e:ef:57:7f:65:e7:88:46:8a:ec:13:aa: 26:cb:42:f6:02:cd:d6:b9:0d:ec:0c:ad:19:82:de: ac:62:0d:de:5e:d4:62:15:a1:f8:c6:70:ae:ee:83: db:9e:23:bf:6d:47:96:82:bd:a2:9a:bd:a6:4d:4b: f9:c7:60:19:ea:b0:0f:72:e0:a7:36:a6:d3:22:6f: 68:1e:7c:88:66:f2:98:ae:51:5a:59:63:4c:b0:07: c5:c7:bb:4a:f8:9b:f3:d2:c3:d5:85:9b:36:06:74: 21:70:81:bc:3b:01:64:a9:f8:1b:e5:54:5a:99:65: 78:a9:a3:e3:44:0b:8a:2f:64:3c:04:d5:b2:32:e8: 8a:43:c3:f8:00:83:36:6c:3a:9c:d0:9a:97:2f:ea: 33:57:ff:bf:b0:07:16:da:d0:fd:5c:b0:80:44:32: e3:be:62:7c:71:a5:1c:fe:ce:5c:45:26:f2:41:f6: 6b:d7:2d:88:54:71:d6:a6:f5:9f:ca:a0:3c:18:f4: 32:15:7f:e4:83:a5:05:2c:1e:f2:a2:e7:1b:93:36: 1c:14:c9:82:c3:9a:6a:bc:a1:91:5d:e6:65:8b:a2: bc:f4:7f:df:e2:b1:d9:db:64:61:93:e5:71:9a:50: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BE:EC:AB:F7:DC:B7:6B:99:61:D5:4F:C1:91:D1:AC:46:4D:3F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:60:f3:95:94:81:f2:c3:8d:17:d9:4f:ec:ce:37:bd:50:2f: 23:f9:e4:12:d7:2a:84:80:e8:c3:9c:f8:7e:96:12:5d:ce:17: 7e:f5:c1:f8:3c:bc:34:af:91:0e:0a:99:43:d6:3b:79:13:6e: 92:e8:9d:14:d2:0d:a9:91:f9:ad:63:79:71:d3:01:78:21:a3: 6c:fd:05:fa:ca:91:3a:29:90:73:83:b1:93:65:7b:d7:2f:ca: 9e:74:ab:90:fd:2c:9a:f9:ce:6b:54:c8:68:ec:ac:68:38:eb: 0e:7d:e9:b2:e1:cf:6b:65:88:9e:b8:be:5f:62:ce:b7:bb:23: f0:38:e1:75:04:ca:60:e2:bb:c9:d4:98:9c:fe:f9:62:41:e0: 50:e5:3e:29:0c:c1:c2:4d:e6:72:ef:b0:d0:55:17:ee:a2:1c: 93:9e:6c:fb:3a:d4:51:7e:08:ae:67:1e:33:92:f5:cb:62:e1: 2c:73:1f:3b:6d:52:0e:2a:3a:ee:b3:32:25:c7:ee:cb:08:7d: 86:ce:22:90:fe:77:a3:42:84:d3:39:2f:57:bb:44:5c:1e:25: 33:c5:a6:84:62:0a:03:40:54:f3:af:3f:64:b6:0e:a6:8e:1b: 8b:a6:a3:91:a6:08:4f:e7:2f:57:a3:9e:b3:55:5e:fa:59:90: b7:cb:88:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmgiygx4m1POqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMjE3MDAwMFowLzEtMCsGA1UEAxMk YjU2NWQ4N2EtODBlOS00ZDVkLWFmZGItYTJjN2I4NGNlMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsrqv9w7quturC6BCyfduhee71d/ZeeIRors E6omy0L2As3WuQ3sDK0Zgt6sYg3eXtRiFaH4xnCu7oPbniO/bUeWgr2imr2mTUv5 x2AZ6rAPcuCnNqbTIm9oHnyIZvKYrlFaWWNMsAfFx7tK+Jvz0sPVhZs2BnQhcIG8 OwFkqfgb5VRamWV4qaPjRAuKL2Q8BNWyMuiKQ8P4AIM2bDqc0JqXL+ozV/+/sAcW 2tD9XLCARDLjvmJ8caUc/s5cRSbyQfZr1y2IVHHWpvWfyqA8GPQyFX/kg6UFLB7y oucbkzYcFMmCw5pqvKGRXeZli6K89H/f4rHZ22Rhk+VxmlCcXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNe+7Kv33LdrmWHVT8GR0axGTT+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvZDQ3YTk0YTQtYWMzOS00 MzgzLTkxZjMtMzg5MDcwMzUzYzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoYPOVlIHyw40X2U/szje9 UC8j+eQS1yqEgOjDnPh+lhJdzhd+9cH4PLw0r5EOCplD1jt5E26S6J0U0g2pkfmt Y3lx0wF4IaNs/QX6ypE6KZBzg7GTZXvXL8qedKuQ/Sya+c5rVMho7KxoOOsOfemy 4c9rZYieuL5fYs63uyPwOOF1BMpg4rvJ1Jic/vliQeBQ5T4pDMHCTeZy77DQVRfu ohyTnmz7OtRRfgiuZx4zkvXLYuEscx87bVIOKjruszIlx+7LCH2GziKQ/nejQoTT OS9Xu0RcHiUzxaaEYgoDQFTzrz9ktg6mjhuLpqORpghP5y9Xo56zVV76WZC3y4jC -----END CERTIFICATE-----Generated at Tue Oct 21 09:08:28 2025 by rpki-client