$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft File: a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json) Hash identifier: VFGxj8tMaQKmzVkeul2xhmqQppZuod2s2ovD60lRWUM= Subject key identifier: 08:3B:CC:B3:84:10:1F:92:AE:F6:D4:F0:8C:35:5F:1A:0C:F1:5A:E7 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584B96B34A0640096C3BFE7B3EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft Manifest number: 010D0C9F432858496598AC39FE13BB942B9EDF8E Signing time: Mon 20 Oct 2025 22:00:09 +0000 Manifest this update: Mon 20 Oct 2025 22:00:09 +0000 Manifest next update: Wed 22 Oct 2025 22:00:00 +0000 Files and hashes: 1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: /T4eh2bliCSbSZMcnAdws45RScjElSctU98gkFNngzg=) 2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: dNJTOyckDoKFmWflQslnNPR+zLJprpObBjyMEAA4+mo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:b3:4a:06:40:09:6c:3b:fe:7b:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Oct 20 22:00:09 2025 GMT Not After : Oct 22 22:00:00 2025 GMT Subject: CN=ad58ee91-6c44-463f-8f6a-eb3ee96c5551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:70:de:8b:de:c8:ed:76:6f:9d:6e:2e:3a: 8c:c6:6b:78:f7:aa:ed:3e:5e:43:dc:45:e7:0c:21: e8:df:be:17:e5:59:38:a3:5f:85:1a:e0:ef:01:8f: 79:05:3b:28:0b:32:29:f8:3f:aa:4b:f7:6b:60:25: 16:53:4b:81:d8:42:84:cb:e8:76:1f:d0:e4:6b:05: e3:8c:8a:81:f6:50:16:ac:1a:a3:39:bd:6a:44:81: 7b:fc:0f:83:1f:66:1e:c7:5f:6b:90:98:45:60:c8: f2:61:a0:61:01:c7:34:17:a0:68:0c:be:03:42:77: 56:c5:f0:3c:10:30:28:f1:b1:cb:34:ff:98:fd:14: 7e:30:8f:9c:ac:6f:94:25:e5:91:7d:da:45:b9:d2: e6:3a:96:c7:55:f4:17:97:89:6f:66:49:e7:37:2e: ff:b0:2f:1b:f4:75:0b:5a:23:c8:73:84:cf:2d:0a: 2d:a6:b6:ee:de:8a:c3:81:7e:b0:59:18:a5:49:58: 25:95:d5:3f:b9:d6:e5:b3:ca:7d:59:1a:b9:af:a5: c3:85:1d:78:88:aa:37:3a:09:af:a8:66:60:16:28: d2:85:06:c7:aa:e1:26:54:bf:13:cc:1d:4c:95:59: d1:9f:6b:b3:6a:60:78:6d:d3:b2:ab:96:10:29:a6: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:CC:B3:84:10:1F:92:AE:F6:D4:F0:8C:35:5F:1A:0C:F1:5A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7a:71:9d:2f:38:41:41:c8:bb:24:85:0d:14:8a:2b:e4:d4: bf:76:bc:79:d7:0a:26:db:88:77:8b:d4:50:1b:f8:36:c4:3e: 80:e2:b8:dc:ff:26:94:10:ce:9a:e0:7b:3d:ea:f8:70:9f:c5: 28:7a:d5:66:49:95:39:22:82:36:74:c3:48:d3:f3:a0:9f:75: 45:67:32:f3:fe:66:ab:7d:c6:b3:e4:53:11:92:11:f1:38:5b: aa:fd:3c:77:e4:20:42:e8:0c:98:19:c0:0e:ff:9a:c5:b7:6a: ea:a9:79:c1:e3:67:50:e9:c7:83:7b:b1:ea:15:57:41:bb:4a: 22:58:27:85:c6:2c:07:3e:03:8f:6a:d5:89:94:f0:28:82:77: c9:ba:fb:63:b3:e3:cf:7c:a1:dc:36:a1:15:85:33:da:ae:63: bd:d2:2b:43:02:8a:ae:1e:87:e5:f4:16:43:ab:00:1e:61:f7: 19:67:97:97:df:f7:0d:c3:01:97:f2:bb:79:ae:94:a9:25:5c: 1b:bb:a9:24:ac:32:3b:fb:92:11:15:63:69:0f:14:6f:07:84: a8:1e:49:36:7c:9b:e1:df:5f:c7:b0:3a:aa:08:fd:ce:ba:7e: 9a:ef:1d:cb:cf:07:a2:83:d2:5d:ef:e3:70:3b:65:ca:d1:ee: 64:a1:6f:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWs0oGQAlsO/57PsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MTAyMDIyMDAwOVoXDTI1MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk YWQ1OGVlOTEtNmM0NC00NjNmLThmNmEtZWIzZWU5NmM1NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluVw3oveyO12b51uLjqMxmt496rtPl5D3EXn DCHo374X5Vk4o1+FGuDvAY95BTsoCzIp+D+qS/drYCUWU0uB2EKEy+h2H9DkawXj jIqB9lAWrBqjOb1qRIF7/A+DH2Yex19rkJhFYMjyYaBhAcc0F6BoDL4DQndWxfA8 EDAo8bHLNP+Y/RR+MI+crG+UJeWRfdpFudLmOpbHVfQXl4lvZknnNy7/sC8b9HUL WiPIc4TPLQotprbu3orDgX6wWRilSVglldU/udbls8p9WRq5r6XDhR14iKo3Ogmv qGZgFijShQbHquEmVL8TzB1MlVnRn2uzamB4bdOyq5YQKaY70QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAg7zLOEEB+SrvbU8Iw1XxoM8VrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk4N2M0NDYtNWZjMi00 NGIwLTlhNDEtNjUyOTZkOTBkMGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEenGdLzhBQci7JIUNFIor 5NS/drx51wom24h3i9RQG/g2xD6A4rjc/yaUEM6a4Hs96vhwn8UoetVmSZU5IoI2 dMNI0/Ogn3VFZzLz/marfcaz5FMRkhHxOFuq/Tx35CBC6AyYGcAO/5rFt2rqqXnB 42dQ6ceDe7HqFVdBu0oiWCeFxiwHPgOPatWJlPAognfJuvtjs+PPfKHcNqEVhTPa rmO90itDAoquHofl9BZDqwAeYfcZZ5eX3/cNwwGX8rt5rpSpJVwbu6kkrDI7+5IR FWNpDxRvB4SoHkk2fJvh31/HsDqqCP3Oun6a7x3Lzweig9Jd7+NwO2XK0e5koW+X -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:21 2025 by rpki-client