$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft File: a295a695-e91a-4c5a-8a31-a920a42ea44d.mft (raw, json) Hash identifier: swusVwYeA8Ch5h/X/UqById6jDqCV4dVEsANUJhsOgg= Subject key identifier: C2:2C:69:0E:A2:AF:F8:D8:0B:25:14:65:12:A9:7D:86:09:B1:11:D9 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584B9441E46FE26C1A23B94EE180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft Manifest number: 010D0C9F43285849ABC8124D60A5EBB8636DE0C8 Signing time: Mon 20 Oct 2025 01:00:03 +0000 Manifest this update: Mon 20 Oct 2025 01:00:03 +0000 Manifest next update: Wed 22 Oct 2025 01:00:00 +0000 Files and hashes: 1: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (hash: 2S8Q2ryTuIijVtftlVCM0+TwBpb+ZbCXoZjfDFmdFqE=) 2: a295a695-e91a-4c5a-8a31-a920a42ea44d.crl (hash: of4isv8GeEaJLqCq+E2YN7twQ6IORXh6FikWtLHI7ko=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:41:e4:6f:e2:6c:1a:23:b9:4e:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Oct 20 01:00:03 2025 GMT Not After : Oct 22 01:00:00 2025 GMT Subject: CN=8b622881-a977-4d63-8487-aee77077476b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6f:10:9d:11:25:e3:e8:72:74:66:8d:28:b4: 03:58:50:49:e4:3f:c2:e4:e7:98:06:3e:9f:ba:d6: e7:77:c9:fc:6e:2a:a7:51:f3:fb:ec:4f:0b:de:33: 02:9d:c6:1c:af:f4:b0:e0:00:c6:48:c6:bc:d7:a9: 8c:a9:1c:a1:3b:46:f3:3c:74:19:5f:7b:81:31:21: 82:42:71:75:58:75:47:51:60:c3:2f:b6:1b:d1:8a: 8e:2c:d3:62:3f:56:29:b2:fb:8f:7b:52:c0:8b:36: a6:b2:18:78:69:25:9a:16:05:db:69:6c:eb:5e:e1: 06:24:c9:1d:bc:e8:d4:d6:57:43:ee:c0:7b:52:8a: d2:70:95:90:3b:7d:d9:1a:06:53:32:6c:b8:9e:3c: eb:f9:ad:74:af:b9:ee:df:02:9c:d4:dd:98:a8:2b: dd:be:a0:a1:e1:ab:37:57:65:a5:b7:41:12:f7:cf: 3d:80:9c:5f:a7:f0:b7:ca:c9:69:c3:89:90:35:f8: c7:11:71:80:bd:38:87:e8:9e:c1:63:0d:da:63:5c: f2:8f:02:53:9e:6f:73:a8:e0:08:9b:1c:cb:bd:71: 88:65:fc:b3:6c:b2:67:7b:fd:0d:f4:56:6d:fd:82: fb:da:55:68:63:8b:0d:0e:f3:2c:bc:b2:b3:f6:16: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:69:0E:A2:AF:F8:D8:0B:25:14:65:12:A9:7D:86:09:B1:11:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:29:79:51:a5:07:67:34:2a:8c:56:ce:db:f3:7a:48:01:7a: 19:29:fd:1b:01:a5:3b:7a:8e:51:72:22:21:93:18:0e:71:09: 18:32:ad:2b:4a:fc:ae:2a:ba:1b:3b:5c:fa:e1:ab:24:18:cc: 3c:b0:fb:23:df:e3:0e:6c:d5:70:b1:ba:c4:a6:da:90:f7:d8: 81:bb:0f:86:06:02:9a:9a:56:99:61:91:4b:a7:f0:f7:c1:a3: a7:5f:d7:a3:67:4f:8e:17:1d:6b:8e:f1:1e:51:11:20:d6:cd: 6c:fd:f1:bd:c5:4e:93:9c:94:ed:f2:32:4f:ca:c6:9f:a5:c7: e8:d9:0c:24:94:bf:47:4c:5f:5b:f5:b4:ab:7f:b9:ed:4c:8d: b5:39:2e:bf:03:29:82:8a:14:7e:9f:73:e5:18:c1:52:67:56: 92:7a:aa:b7:23:d6:30:8c:21:20:f2:6e:8e:c1:fb:11:76:00: e6:fd:1e:b8:86:10:0f:cd:e0:75:a4:a1:2b:2f:58:c2:57:1c: 98:78:04:86:0f:73:06:9c:b6:9b:69:bb:d1:56:aa:72:aa:c4: 41:d5:39:3f:b2:dd:46:7a:13:01:91:91:00:c6:d0:99:41:2a: 32:60:6c:c5:ca:b1:47:21:ba:b1:92:c4:8b:42:98:53:49:55: 52:fd:46:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUQeRv4mwaI7lO4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MTAyMDAxMDAwM1oXDTI1MTAyMjAxMDAwMFowLzEtMCsGA1UEAxMk OGI2MjI4ODEtYTk3Ny00ZDYzLTg0ODctYWVlNzcwNzc0NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW8QnREl4+hydGaNKLQDWFBJ5D/C5OeYBj6f utbnd8n8biqnUfP77E8L3jMCncYcr/Sw4ADGSMa816mMqRyhO0bzPHQZX3uBMSGC QnF1WHVHUWDDL7Yb0YqOLNNiP1YpsvuPe1LAizamshh4aSWaFgXbaWzrXuEGJMkd vOjU1ldD7sB7UorScJWQO33ZGgZTMmy4njzr+a10r7nu3wKc1N2YqCvdvqCh4as3 V2Wlt0ES9889gJxfp/C3yslpw4mQNfjHEXGAvTiH6J7BYw3aY1zyjwJTnm9zqOAI mxzLvXGIZfyzbLJne/0N9FZt/YL72lVoY4sNDvMsvLKz9hYaYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMIsaQ6ir/jYCyUUZRKpfYYJsRHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvYTI5NWE2OTUtZTkxYS00 YzVhLThhMzEtYTkyMGE0MmVhNDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgKXlRpQdnNCqMVs7b83pI AXoZKf0bAaU7eo5RciIhkxgOcQkYMq0rSvyuKrobO1z64askGMw8sPsj3+MObNVw sbrEptqQ99iBuw+GBgKamlaZYZFLp/D3waOnX9ejZ0+OFx1rjvEeUREg1s1s/fG9 xU6TnJTt8jJPysafpcfo2QwklL9HTF9b9bSrf7ntTI21OS6/AymCihR+n3PlGMFS Z1aSeqq3I9YwjCEg8m6OwfsRdgDm/R64hhAPzeB1pKErL1jCVxyYeASGD3MGnLab abvRVqpyqsRB1Tk/st1GehMBkZEAxtCZQSoyYGzFyrFHIbqxksSLQphTSVVS/UaG -----END CERTIFICATE-----Generated at Mon Oct 20 04:41:14 2025 by rpki-client