$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft File: 06324afb-8064-4731-9562-bf44e53b8c45.mft (raw, json) Hash identifier: 3IESTBSsjA5exrpDSAfJxj9m15AO01P7ZjLjeEZZw9g= Subject key identifier: 12:0B:C6:42:62:A6:D4:F4:C5:15:00:28:4C:DE:17:43:CB:54:B1:87 Authority key identifier: 12:6D:E8:A1:5C:01:62:14:84:0B:39:B9:62:68:EE:E0:F1:09:19:BE Certificate issuer: /CN=06324afb-8064-4731-9562-bf44e53b8c45 Certificate serial: 010D0C9F4328584B958976F06D54D0FA20C248A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft Manifest number: 010D0C9F43285849AD02B172992E170D60A45494 Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Wed 22 Oct 2025 12:00:00 +0000 Files and hashes: 1: 06324afb-8064-4731-9562-bf44e53b8c45.crl (hash: WCCXTEs9swZOPWDUmhsRY29Ot8PsPj0okBzZXWpdmZ0=) 2: 1d8dd2e0-97c5-3ce6-9354-3c67d662f210.roa (hash: Qppen7hQAxq+2LIIMtPgNPk+fh0oArpS58l0RVJTEcQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:76:f0:6d:54:d0:fa:20:c2:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06324afb-8064-4731-9562-bf44e53b8c45 Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 22 12:00:00 2025 GMT Subject: CN=202f637e-e69b-4735-b72e-c777bab18df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:a7:ee:fe:01:a7:f9:ad:87:49:a2:58:01: bf:a1:95:93:7a:07:01:03:ea:14:35:94:85:fb:82: 9c:85:a4:6d:d0:04:d2:ee:76:59:0a:2d:23:89:1b: e9:ae:b0:28:2d:de:65:1b:c2:50:ff:44:83:93:0b: 38:6c:5a:a3:70:eb:2b:a0:41:ad:8d:e1:bd:7f:ae: 77:47:b3:15:75:4e:c5:69:ea:d6:76:8b:40:aa:f4: 27:f1:ac:a8:5f:84:e8:be:be:1e:c0:87:00:3c:4e: 84:a5:9c:8c:bf:8d:39:60:7b:ac:ee:f0:ca:48:79: 20:d2:7a:50:99:3f:42:bb:51:5c:a9:bd:91:98:6c: 8a:89:cf:78:fe:5f:30:cd:6a:af:39:80:d8:c8:d2: 28:5a:7a:38:be:9a:84:36:0c:82:5e:35:19:26:a2: 96:f8:41:0d:36:0a:17:e6:ae:78:65:5c:32:45:6d: 18:cc:78:05:6b:4f:b6:14:1e:e2:ed:6c:7e:db:f5: 7e:64:5d:77:91:94:e4:3e:d8:f5:04:1c:de:63:7a: c7:f9:a1:63:3f:e3:c1:28:40:8c:03:11:52:c0:5f: 63:ce:e9:27:d9:22:58:fd:dd:20:a2:ad:4f:bc:d2: fd:53:fc:8f:e4:79:60:7b:02:56:07:15:0e:cf:48: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0B:C6:42:62:A6:D4:F4:C5:15:00:28:4C:DE:17:43:CB:54:B1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.crl X509v3 Authority Key Identifier: keyid:12:6D:E8:A1:5C:01:62:14:84:0B:39:B9:62:68:EE:E0:F1:09:19:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8b:ef:ca:d2:25:eb:1b:7c:d0:50:e2:df:72:27:05:5d:a1: 60:05:01:e7:fe:45:d1:c3:e8:fc:c6:6d:11:a6:b8:ba:a9:24: fb:f6:58:88:59:2b:5d:e7:fb:74:aa:ab:ff:32:05:f6:f2:a2: 03:f3:d5:fd:45:b6:5d:a8:79:7d:48:06:4f:d5:a8:6e:07:8a: 28:5b:ec:21:3e:a1:06:58:29:0d:52:c4:d6:9b:42:fb:3d:88: 76:8c:f4:8e:c8:de:3d:b0:2d:7f:27:d9:a4:c1:0a:6a:0f:fb: e4:90:3c:c5:be:33:fc:5d:a4:5f:a3:93:a2:df:e7:ee:08:5e: 7f:66:7a:5f:da:9f:b8:bb:fa:0c:93:5f:5d:52:b5:da:f7:03: da:0d:6d:04:a2:88:3c:d4:5b:73:e8:27:2e:6e:59:5f:b3:ce: 8d:48:9c:2e:3a:ba:c5:78:6c:5d:d5:af:35:67:79:6c:7b:ff: 53:60:5c:f7:2d:5d:39:37:cd:57:57:da:84:af:45:f4:e9:18: 41:14:42:79:2e:42:69:79:ac:cd:e3:13:a8:3d:3d:60:77:2e: 60:f2:1a:98:09:cd:67:aa:2e:11:39:ab:3e:19:52:97:da:9a: 39:4c:47:41:7d:bc:c8:e2:25:42:8d:50:10:0c:25:20:f8:3f: 4a:e0:83:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXbwbVTQ+iDCSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzMjRhZmItODA2NC00NzMxLTk1NjItYmY0NGU1M2I4 YzQ1MB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMjEyMDAwMFowLzEtMCsGA1UEAxMk MjAyZjYzN2UtZTY5Yi00NzM1LWI3MmUtYzc3N2JhYjE4ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaKn7v4Bp/mth0miWAG/oZWTegcBA+oUNZSF +4KchaRt0ATS7nZZCi0jiRvprrAoLd5lG8JQ/0SDkws4bFqjcOsroEGtjeG9f653 R7MVdU7FaerWdotAqvQn8ayoX4Tovr4ewIcAPE6EpZyMv405YHus7vDKSHkg0npQ mT9Cu1Fcqb2RmGyKic94/l8wzWqvOYDYyNIoWno4vpqENgyCXjUZJqKW+EENNgoX 5q54ZVwyRW0YzHgFa0+2FB7i7Wx+2/V+ZF13kZTkPtj1BBzeY3rH+aFjP+PBKECM AxFSwF9jzukn2SJY/d0goq1PvNL9U/yP5HlgewJWBxUOz0gXRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBILxkJiptT0xRUAKEzeF0PLVLGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNjMy NGFmYi04MDY0LTQ3MzEtOTU2Mi1iZjQ0ZTUzYjhjNDUvMDYzMjRhZmItODA2NC00 NzMxLTk1NjItYmY0NGU1M2I4YzQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDYzMjRhZmItODA2NC00NzMxLTk1 NjItYmY0NGU1M2I4YzQ1LzA2MzI0YWZiLTgwNjQtNDczMS05NTYyLWJmNDRlNTNi OGM0NS5jcmwwHwYDVR0jBBgwFoAUEm3ooVwBYhSECzm5Ymju4PEJGb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNjMyNGFmYi04MDY0LTQ3MzEtOTU2Mi1iZjQ0 ZTUzYjhjNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9i+/K0iXrG3zQUOLfcicF XaFgBQHn/kXRw+j8xm0Rpri6qST79liIWStd5/t0qqv/MgX28qID89X9RbZdqHl9 SAZP1ahuB4ooW+whPqEGWCkNUsTWm0L7PYh2jPSOyN49sC1/J9mkwQpqD/vkkDzF vjP8XaRfo5Oi3+fuCF5/Znpf2p+4u/oMk19dUrXa9wPaDW0Eoog81Ftz6Ccubllf s86NSJwuOrrFeGxd1a81Z3lse/9TYFz3LV05N81XV9qEr0X06RhBFEJ5LkJpeazN 4xOoPT1gdy5g8hqYCc1nqi4ROas+GVKX2po5TEdBfbzI4iVCjVAQDCUg+D9K4IOc -----END CERTIFICATE-----Generated at Mon Oct 20 17:25:46 2025 by rpki-client