$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft File: 325f62aa-b9c8-4315-87d2-409b60e8840d.mft (raw, json) Hash identifier: lsK5GYcCFgmPmU8it1kd58wdgO4rixp1l91heDigvWg= Subject key identifier: 9D:34:DB:D6:FE:3F:86:AD:22:13:9A:B1:ED:41:DD:3E:63:5D:97:08 Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F4328584B95302121D4933BDFCD7F1290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft Manifest number: 010D0C9F432858497A6510E20DC87663E1742106 Signing time: Mon 20 Oct 2025 09:00:03 +0000 Manifest this update: Mon 20 Oct 2025 09:00:03 +0000 Manifest next update: Wed 22 Oct 2025 09:00:00 +0000 Files and hashes: 1: 325f62aa-b9c8-4315-87d2-409b60e8840d.crl (hash: yGE5cxbCIib8MA1KEMkN5uD5igw8uAOXmQTst0PkKwo=) 2: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (hash: f7BwR8nYyjuWfveGHMywUObYXGgC7X0HZ+gPRdUpHCY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:30:21:21:d4:93:3b:df:cd:7f:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Oct 20 09:00:03 2025 GMT Not After : Oct 22 09:00:00 2025 GMT Subject: CN=edca2cf0-0008-4611-ae81-f03308624d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:9c:e9:96:db:ad:b0:61:d3:61:05:96:81: a6:32:f8:94:48:89:ce:f0:1a:b3:10:28:1d:75:ac: 48:27:e7:78:b7:6a:88:3f:8d:61:d0:30:fa:a2:e2: a0:1c:fe:43:8e:fb:5c:be:35:65:4d:c6:ce:d4:70: 38:00:ed:88:f3:62:4b:6b:43:8c:49:bd:59:48:c8: 10:a1:b1:d1:02:10:8f:a4:4c:b6:5e:06:0b:04:fe: 03:7d:b2:be:f9:43:e6:db:31:7f:ca:59:e1:43:84: e7:69:7d:cd:3e:c7:2a:4d:59:66:ae:34:ed:e2:68: 0f:00:5c:ab:4a:22:ab:d0:05:90:0a:af:37:b4:6a: 94:0a:fb:1f:95:ee:60:df:da:25:b7:0d:46:65:37: ac:c4:ad:25:0a:6c:81:7b:56:a4:ee:bd:c0:38:6c: 26:fa:ff:59:79:ef:98:3f:f7:6d:2f:25:94:34:a6: 64:cb:7d:80:32:74:99:4c:fd:e7:47:b3:80:31:8e: 72:e2:a2:2e:35:8c:41:4b:55:22:02:03:38:a0:f0: 2b:a8:29:61:af:14:8f:8e:fb:e3:5d:34:ce:3b:f4: 94:26:ce:93:92:8d:4c:1d:c5:b0:d2:d8:8b:62:90: 9c:80:bd:74:ae:80:0a:68:fb:f1:a9:3c:ba:1e:fa: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:DB:D6:FE:3F:86:AD:22:13:9A:B1:ED:41:DD:3E:63:5D:97:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:90:21:d2:51:e1:1f:d1:e9:ce:d5:f7:b7:f4:6f:97:82:51: 1d:fd:bd:8a:83:35:10:82:a1:e0:b0:08:f4:d2:dd:ec:f7:d7: 8d:f8:9d:cd:64:cf:d0:34:4d:1b:28:b7:17:6a:a8:1c:a4:e7: a9:46:34:85:d7:eb:06:4b:c0:50:0f:c7:06:f6:0e:cc:f1:f0: b7:8c:b9:bf:16:ab:2b:3d:70:8e:fc:eb:4e:0d:8a:1f:fe:0f: e3:30:3c:39:c5:28:b6:c6:3d:de:8f:f9:72:54:34:ee:ca:5c: 9b:16:8b:f8:10:f1:33:ae:38:72:43:02:2b:d0:29:91:e3:d8: 47:1f:c6:31:33:37:0f:8a:69:77:f8:ff:87:07:ae:ee:75:c5: 86:bb:84:60:92:02:82:7b:08:e8:76:d8:68:67:f9:99:02:45: 89:10:be:da:81:2d:d9:19:a9:d1:77:59:6e:b5:2a:0a:d3:0d: c0:f1:7f:b1:4c:be:94:c1:d0:1f:9d:83:d9:ff:8e:25:af:18: 15:7d:37:42:b8:12:9e:32:fb:35:e7:6c:73:67:38:19:c2:85: 3a:e8:4a:b9:bf:33:ac:cc:6c:a7:9d:de:7e:dc:89:0b:37:ed: bd:f2:06:ff:aa:8c:5a:32:b7:f7:4d:5c:cd:3f:9b:6d:17:26: 4b:f5:1f:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVMCEh1JM7381/EpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI1MTAyMDA5MDAwM1oXDTI1MTAyMjA5MDAwMFowLzEtMCsGA1UEAxMk ZWRjYTJjZjAtMDAwOC00NjExLWFlODEtZjAzMzA4NjI0ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9yc6ZbbrbBh02EFloGmMviUSInO8BqzECgd daxIJ+d4t2qIP41h0DD6ouKgHP5DjvtcvjVlTcbO1HA4AO2I82JLa0OMSb1ZSMgQ obHRAhCPpEy2XgYLBP4DfbK++UPm2zF/ylnhQ4TnaX3NPscqTVlmrjTt4mgPAFyr SiKr0AWQCq83tGqUCvsfle5g39oltw1GZTesxK0lCmyBe1ak7r3AOGwm+v9Zee+Y P/dtLyWUNKZky32AMnSZTP3nR7OAMY5y4qIuNYxBS1UiAgM4oPArqClhrxSPjvvj XTTOO/SUJs6Tko1MHcWw0tiLYpCcgL10roAKaPvxqTy6HvpIvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ0029b+P4atIhOase1B3T5jXZcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvMzI1ZjYyYWEtYjljOC00 MzE1LTg3ZDItNDA5YjYwZTg4NDBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDkCHSUeEf0enO1fe39G+X glEd/b2KgzUQgqHgsAj00t3s99eN+J3NZM/QNE0bKLcXaqgcpOepRjSF1+sGS8BQ D8cG9g7M8fC3jLm/FqsrPXCO/OtODYof/g/jMDw5xSi2xj3ej/lyVDTuylybFov4 EPEzrjhyQwIr0CmR49hHH8YxMzcPiml3+P+HB67udcWGu4RgkgKCewjodthoZ/mZ AkWJEL7agS3ZGanRd1lutSoK0w3A8X+xTL6UwdAfnYPZ/44lrxgVfTdCuBKeMvs1 52xzZzgZwoU66Eq5vzOszGynnd5+3IkLN+298gb/qoxaMrf3TVzNP5ttFyZL9R/D -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:39 2025 by rpki-client