$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft File: f9b1a11d-20ed-494f-a473-5ebece521a34.mft (raw, json) Hash identifier: 1p3sDg+zk0OFympgeNCysyYkvZp3+DDYLB6I1+on4Kg= Subject key identifier: 97:A5:F1:38:D7:3E:85:48:FB:82:30:2F:60:EC:D0:B1:4A:1D:31:40 Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29 Certificate issuer: /CN=f9b1a11d-20ed-494f-a473-5ebece521a34 Certificate serial: 010D0C9F4328584B9659EB98C41246B6B130D680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft Manifest number: 010D0C9F43285841C86050978DC5184846F6B61B Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (hash: NDa+oVE+H0o3ct2K47knsps1xeAT/HMmQLxAWDsi3dI=) 2: f9b1a11d-20ed-494f-a473-5ebece521a34.crl (hash: WqhUiNSDTOEZ450tBuACUekfIfDPt1j2jt42mnl0OVs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:eb:98:c4:12:46:b6:b1:30:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=d09ceb90-aae4-419f-a609-c4f0adb901c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f7:db:e4:6f:39:db:5d:9e:f5:0d:6c:dd:11: 03:3e:bc:3b:5e:2f:7a:98:6a:16:64:fb:6d:a4:aa: 8f:40:0e:34:9b:9d:39:31:8f:44:eb:d9:2e:28:d4: ec:9e:0d:07:fa:07:76:ad:90:17:43:cb:d3:ee:73: c5:d1:48:dd:3b:ec:7e:31:d2:43:13:35:af:b5:92: 9f:ea:13:e4:86:82:8d:b0:61:41:ab:66:41:95:0c: 6f:97:ea:ce:28:91:c0:2b:cc:27:2e:5a:60:00:89: 05:58:29:91:c0:e1:85:d9:b6:6d:8f:ad:5f:67:83: ca:a7:80:fb:06:51:bd:53:25:71:81:63:6f:0d:17: 05:cc:06:a9:74:21:6b:2a:cb:47:cb:e9:96:65:28: de:d9:59:7b:63:e7:10:7d:75:7d:bb:4e:ae:cd:fc: 28:a5:5e:1c:5c:2d:f6:be:4c:bc:bd:b8:48:b7:b1: 65:96:88:29:9f:b8:2a:b1:be:bf:24:bf:ef:38:77: 39:96:8c:af:b4:ae:03:dd:60:51:f2:70:22:fd:13: 08:23:d1:7f:5b:a4:51:6b:4a:11:75:1f:40:52:5e: 38:f4:fe:f9:61:cd:fc:70:90:e9:cd:01:8a:f9:3e: 0f:94:b0:13:c2:c5:77:9c:f0:96:39:8b:c7:15:f9: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:F1:38:D7:3E:85:48:FB:82:30:2F:60:EC:D0:B1:4A:1D:31:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl X509v3 Authority Key Identifier: keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d8:90:4f:df:fb:88:64:ca:96:29:d3:51:8a:a8:6d:d3:28: 17:17:5e:9b:84:cc:b1:1b:74:1e:d7:b4:2b:74:35:9b:95:8f: 13:85:84:b2:5c:ec:f4:48:fd:fa:10:bb:43:db:7f:44:d7:13: 8d:6a:5c:da:67:99:e6:03:7d:30:06:e8:f7:18:8e:81:55:e4: e3:85:c1:f3:a0:73:20:27:ec:08:44:e9:34:7b:f8:d5:36:b1: d5:2d:23:08:7a:fe:0f:3d:44:b8:df:3a:18:71:1d:8e:00:e9: 09:96:72:9e:7c:8c:06:a2:16:34:a2:62:6b:9b:58:f2:ac:93: 01:a4:84:45:35:59:d4:3b:9c:1c:ac:f5:fe:87:cd:44:24:f2: cf:fa:8d:78:51:59:84:05:32:c1:64:f9:10:d4:3f:5e:ed:00: 32:11:6b:6d:6f:2a:a2:21:24:d2:b6:9b:33:ea:7e:63:75:73: 7e:c2:89:01:62:ff:43:21:71:3b:7e:e4:05:07:0d:a7:3f:18: 85:4a:15:6f:31:be:cd:99:9e:25:e2:c1:75:91:4f:f7:d6:ad: c8:62:f8:9a:a8:d3:41:16:49:18:56:51:00:6e:85:c7:4f:24: d9:19:e0:c6:fb:49:96:67:08:78:2e:bc:c4:12:6a:b5:4a:30: 2b:80:a4:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWeuYxBJGtrEw1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjliMWExMWQtMjBlZC00OTRmLWE0NzMtNWViZWNlNTIx YTM0MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk ZDA5Y2ViOTAtYWFlNC00MTlmLWE2MDktYzRmMGFkYjkwMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pfb5G85212e9Q1s3REDPrw7Xi96mGoWZPtt pKqPQA40m505MY9E69kuKNTsng0H+gd2rZAXQ8vT7nPF0UjdO+x+MdJDEzWvtZKf 6hPkhoKNsGFBq2ZBlQxvl+rOKJHAK8wnLlpgAIkFWCmRwOGF2bZtj61fZ4PKp4D7 BlG9UyVxgWNvDRcFzAapdCFrKstHy+mWZSje2Vl7Y+cQfXV9u06uzfwopV4cXC32 vky8vbhIt7Fllogpn7gqsb6/JL/vOHc5loyvtK4D3WBR8nAi/RMII9F/W6RRa0oR dR9AUl449P75Yc38cJDpzQGK+T4PlLATwsV3nPCWOYvHFfldlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJel8TjXPoVI+4IwL2Ds0LFKHTFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mOWIx YTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJlY2U1MjFhMzQvZjliMWExMWQtMjBlZC00 OTRmLWE0NzMtNWViZWNlNTIxYTM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjliMWExMWQtMjBlZC00OTRmLWE0 NzMtNWViZWNlNTIxYTM0L2Y5YjFhMTFkLTIwZWQtNDk0Zi1hNDczLTVlYmVjZTUy MWEzNC5jcmwwHwYDVR0jBBgwFoAUM3Ap6qPwRNfY5cusn9w05FAktSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mOWIxYTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJl Y2U1MjFhMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB82JBP3/uIZMqWKdNRiqht 0ygXF16bhMyxG3Qe17QrdDWblY8ThYSyXOz0SP36ELtD239E1xONalzaZ5nmA30w Buj3GI6BVeTjhcHzoHMgJ+wIROk0e/jVNrHVLSMIev4PPUS43zoYcR2OAOkJlnKe fIwGohY0omJrm1jyrJMBpIRFNVnUO5wcrPX+h81EJPLP+o14UVmEBTLBZPkQ1D9e 7QAyEWttbyqiISTStpsz6n5jdXN+wokBYv9DIXE7fuQFBw2nPxiFShVvMb7NmZ4l 4sF1kU/31q3IYviaqNNBFkkYVlEAboXHTyTZGeDG+0mWZwh4LrzEEmq1SjArgKRQ -----END CERTIFICATE-----Generated at Tue Oct 21 15:19:00 2025 by rpki-client