$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft File: f08438f2-f343-4b2c-b0be-ac56b734d48d.mft (raw, json) Hash identifier: KHOne5rqOWbprTGv49eSwbn/YXRWBnIT7T/9NFVmF58= Subject key identifier: 60:3C:CF:96:0D:BE:25:D2:F8:49:3B:FE:60:58:A8:D1:FB:9B:57:07 Authority key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 Certificate issuer: /CN=f08438f2-f343-4b2c-b0be-ac56b734d48d Certificate serial: 010D0C9F4328584B960095F1385FB3B6AC0F8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft Manifest number: 010D0C9F432858477987AEF3BFC91110A12AE302 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa (hash: fwk0sZsQtd52UvuyPwlquU6g8OqvPTAscf76/QX/cyQ=) 2: f08438f2-f343-4b2c-b0be-ac56b734d48d.crl (hash: 9JKbxVdXqidJI3p+0rW9STo+Li8lOssJer7tDVPFHok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:95:f1:38:5f:b3:b6:ac:0f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=5fbc1cd4-5502-40a7-af79-efc51ba86783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:c5:28:6c:4d:b0:66:9f:3f:d7:75:1b:05: 7a:36:35:21:fb:f9:85:6a:26:70:a4:ae:ce:22:07: 43:4c:0b:2f:63:20:4a:6e:91:b6:74:78:a6:d6:82: c5:ff:89:a7:49:a3:6a:ce:bb:a9:43:29:e8:a3:74: 69:13:53:a2:62:82:2d:95:cf:02:82:a0:36:9f:70: 3e:29:50:20:c1:8e:90:64:56:97:08:3f:ff:9f:5f: b2:62:d7:b9:c0:a2:0f:f3:fd:2d:8d:a1:c0:d1:a5: 42:0f:71:fd:ab:5c:cd:62:84:6b:be:ec:f2:4c:69: 86:73:08:60:29:94:f1:84:fb:65:9f:2e:72:4c:75: be:b4:58:8f:58:c3:7f:13:41:0f:d2:32:ba:fa:d0: 2c:9b:3b:2a:1b:18:2c:f4:f4:23:ef:b8:af:1f:36: 3e:df:3e:bd:dc:7a:ce:38:da:cb:6e:81:7d:5a:25: f8:59:31:c7:6c:42:c9:1e:a7:a4:2e:a8:5f:ae:42: e9:28:d5:dd:88:4b:65:21:b8:07:0a:0e:a1:22:96: ac:18:43:21:7b:81:86:29:28:9a:1a:ff:b3:63:72: c0:d9:29:18:3b:7b:11:1a:24:e3:96:4f:e1:ce:8b: a7:31:08:61:ae:0f:e1:6c:93:30:0a:f7:ad:80:eb: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3C:CF:96:0D:BE:25:D2:F8:49:3B:FE:60:58:A8:D1:FB:9B:57:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl X509v3 Authority Key Identifier: keyid:0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c5:0e:06:b2:2c:ef:fe:46:9e:8f:68:5c:12:c6:3e:8d:82: 04:7f:e0:b9:28:1b:72:db:e6:1f:03:2d:1d:94:a6:7b:27:da: 50:7f:51:ed:7b:24:08:c4:3b:39:61:c2:57:9d:9a:29:68:7a: 40:1a:95:cb:fd:02:57:10:90:86:be:da:37:f1:8f:f2:ec:38: 97:c1:53:d9:ad:5c:ac:90:8a:5a:a8:44:cb:8a:02:03:a0:da: d2:06:21:09:81:e6:74:93:fb:b2:7f:32:99:3b:ad:20:7d:76: c0:9f:53:f6:8f:c3:b0:4f:d8:19:44:d3:ad:a9:bd:ec:e4:08: 7d:c0:af:42:f9:3b:a7:64:87:2e:7a:0d:06:0a:cd:e5:75:66: ab:d0:a1:93:45:70:64:04:63:ea:a3:54:a1:35:00:9e:34:77: a4:07:4a:dc:0e:7a:16:db:fa:3a:de:4d:b3:3e:b0:e3:e6:dc: f9:09:a6:0f:e8:f7:28:bb:ef:01:68:0c:20:32:f5:64:91:23: 49:bc:47:f7:8c:88:44:9b:55:4b:5e:a9:44:95:cf:51:f2:4d: ca:62:ab:f8:75:89:d1:b6:7f:e2:1e:bf:f1:6e:4a:b3:b4:df: ad:85:0c:e2:17:4b:d0:e4:6e:40:07:7c:1d:fc:e1:65:0f:b1: 6f:64:2d:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJXxOF+ztqwPiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4NDM4ZjItZjM0My00YjJjLWIwYmUtYWM1NmI3MzRk NDhkMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk NWZiYzFjZDQtNTUwMi00MGE3LWFmNzktZWZjNTFiYTg2NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLzFKGxNsGafP9d1GwV6NjUh+/mFaiZwpK7O IgdDTAsvYyBKbpG2dHim1oLF/4mnSaNqzrupQynoo3RpE1OiYoItlc8CgqA2n3A+ KVAgwY6QZFaXCD//n1+yYte5wKIP8/0tjaHA0aVCD3H9q1zNYoRrvuzyTGmGcwhg KZTxhPtlny5yTHW+tFiPWMN/E0EP0jK6+tAsmzsqGxgs9PQj77ivHzY+3z693HrO ONrLboF9WiX4WTHHbELJHqekLqhfrkLpKNXdiEtlIbgHCg6hIpasGEMhe4GGKSia Gv+zY3LA2SkYO3sRGiTjlk/hzounMQhhrg/hbJMwCvetgOtWMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGA8z5YNviXS+Ek7/mBYqNH7m1cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDg0 MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2YjczNGQ0OGQvZjA4NDM4ZjItZjM0My00 YjJjLWIwYmUtYWM1NmI3MzRkNDhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4NDM4ZjItZjM0My00YjJjLWIw YmUtYWM1NmI3MzRkNDhkL2YwODQzOGYyLWYzNDMtNGIyYy1iMGJlLWFjNTZiNzM0 ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUDBm5BxbOG/gkR+AFnALAMJamF2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDg0MzhmMi1mMzQzLTRiMmMtYjBiZS1hYzU2 YjczNGQ0OGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCixQ4Gsizv/kaej2hcEsY+ jYIEf+C5KBty2+YfAy0dlKZ7J9pQf1HteyQIxDs5YcJXnZopaHpAGpXL/QJXEJCG vto38Y/y7DiXwVPZrVyskIpaqETLigIDoNrSBiEJgeZ0k/uyfzKZO60gfXbAn1P2 j8OwT9gZRNOtqb3s5Ah9wK9C+TunZIcueg0GCs3ldWar0KGTRXBkBGPqo1ShNQCe NHekB0rcDnoW2/o63k2zPrDj5tz5CaYP6Pcou+8BaAwgMvVkkSNJvEf3jIhEm1VL XqlElc9R8k3KYqv4dYnRtn/iHr/xbkqztN+thQziF0vQ5G5AB3wd/OFlD7FvZC3L -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:01 2025 by rpki-client