$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft File: d438c823-e424-41a1-9631-aa3b75aea0c7.mft (raw, json) Hash identifier: 8t2tOr5OivloqEVu3ONIMCHHhwhYKQEnUong6EKm/IA= Subject key identifier: E6:BD:1C:A2:A6:4C:66:FA:77:DA:77:1D:45:98:52:94:40:2C:16:CC Authority key identifier: E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93 Certificate issuer: /CN=d438c823-e424-41a1-9631-aa3b75aea0c7 Certificate serial: 010D0C9F4328584B92DC8C8B5249476D2C0F4080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft Manifest number: 010D0C9F43285849F5C721EFAB492FB836920455 Signing time: Sun 19 Oct 2025 13:00:03 +0000 Manifest this update: Sun 19 Oct 2025 13:00:03 +0000 Manifest next update: Wed 22 Oct 2025 13:00:00 +0000 Files and hashes: 1: c0dd27c0-be49-30c4-aa1b-c4bc6ba84213.roa (hash: QdGzs5w1u/3Bg2YetfuswZhRy4oPX7W4nald9woqO1U=) 2: d438c823-e424-41a1-9631-aa3b75aea0c7.crl (hash: vkCpHQ4o9S4KV0YFonu5+HMQsx25+UCxTBAILdboAVo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:8c:8b:52:49:47:6d:2c:0f:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d438c823-e424-41a1-9631-aa3b75aea0c7 Validity Not Before: Oct 19 13:00:03 2025 GMT Not After : Oct 22 13:00:00 2025 GMT Subject: CN=cbd6e824-81c9-4168-8035-b05d5bf99adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:de:fa:d2:e2:05:c8:69:73:9a:7b:64:2e:fe: d7:45:6a:12:da:7c:6b:de:d3:ac:ab:28:28:ae:28: 4c:fb:61:4b:c8:1f:b3:83:b4:66:e3:eb:05:22:17: 9e:44:51:3b:5f:57:97:51:3c:46:e5:71:08:e9:e4: a1:49:db:a6:c7:06:ca:07:42:d9:b3:07:33:03:a8: 59:d6:3e:12:3b:1e:30:bd:65:cb:cf:b2:12:61:dc: 1d:fa:09:c8:37:e1:15:cc:8f:67:c5:91:ff:0a:ad: c4:a0:4b:3d:ba:e2:e9:7a:5f:4e:3f:fe:03:4c:8e: 37:de:31:63:56:44:e7:29:1b:51:04:e7:91:7b:dc: 46:1b:14:43:0d:6a:c4:aa:76:5f:50:01:1a:c6:25: 4d:4d:65:cd:48:57:11:f4:65:8a:a8:a6:01:2f:f5: b8:32:8b:da:b3:c2:5f:df:02:41:d8:42:85:27:aa: 90:5a:4f:c9:ec:13:30:c8:1c:95:5f:53:34:3b:7f: 25:93:e5:a4:15:78:9e:d3:1c:08:0d:26:d6:9f:74: 1d:e9:e8:7b:b1:f0:0a:62:17:a0:49:e8:10:e9:a7: 6a:b5:c8:a6:e4:01:8b:46:df:fc:a5:9d:2c:62:a0: 7f:f9:59:65:40:04:5b:01:2e:0f:be:83:13:3a:25: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BD:1C:A2:A6:4C:66:FA:77:DA:77:1D:45:98:52:94:40:2C:16:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl X509v3 Authority Key Identifier: keyid:E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bd:6a:54:c2:ff:3f:b8:7c:6c:b5:03:40:d5:4b:62:6e:48: 73:ac:82:bd:9b:a4:bf:1e:f6:18:aa:bf:b5:b7:a9:f1:1f:9f: d8:ab:e2:55:f5:7b:26:4e:6d:fb:68:f8:70:64:5d:ab:f2:51: ce:9c:55:ff:38:47:6a:53:c9:38:77:a3:28:f5:19:ca:e1:eb: f7:e2:4d:e0:cf:bb:e9:e1:6a:61:18:a5:b6:8a:2f:6e:f7:6f: 77:cd:e3:6e:0a:4f:6d:be:0c:03:a7:68:45:69:06:32:ae:51: c4:0f:9e:af:54:97:36:8b:fe:6b:e1:36:3d:cb:67:95:68:3a: 69:97:91:2c:0a:e8:f5:4e:79:7e:ec:1c:79:39:39:42:55:36: cf:bc:c7:46:48:f2:cf:e8:8d:e8:2e:2c:15:06:a0:d0:da:c4: 32:23:aa:f9:17:e3:12:1e:7c:1c:4f:b1:0a:83:ee:7b:5c:1e: d3:4d:f9:47:03:8b:a4:65:0e:a7:99:da:14:6b:13:95:cc:ee: 2f:30:57:ff:1b:2e:4b:93:15:6b:5d:14:69:10:14:bb:98:5d: 2d:ef:4b:78:4c:65:3c:f0:3d:86:0f:f8:b9:5e:36:51:6d:bd: ed:7b:27:ab:49:ce:7a:02:0e:63:85:fa:ff:cc:87:bc:ce:71: 9d:a5:de:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS3IyLUklHbSwPQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQzOGM4MjMtZTQyNC00MWExLTk2MzEtYWEzYjc1YWVh MGM3MB4XDTI1MTAxOTEzMDAwM1oXDTI1MTAyMjEzMDAwMFowLzEtMCsGA1UEAxMk Y2JkNmU4MjQtODFjOS00MTY4LTgwMzUtYjA1ZDViZjk5YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d760uIFyGlzmntkLv7XRWoS2nxr3tOsqygo rihM+2FLyB+zg7Rm4+sFIheeRFE7X1eXUTxG5XEI6eShSdumxwbKB0LZswczA6hZ 1j4SOx4wvWXLz7ISYdwd+gnIN+EVzI9nxZH/Cq3EoEs9uuLpel9OP/4DTI433jFj VkTnKRtRBOeRe9xGGxRDDWrEqnZfUAEaxiVNTWXNSFcR9GWKqKYBL/W4Movas8Jf 3wJB2EKFJ6qQWk/J7BMwyByVX1M0O38lk+WkFXie0xwIDSbWn3Qd6eh7sfAKYheg SegQ6adqtcim5AGLRt/8pZ0sYqB/+VllQARbAS4PvoMTOiWoaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOa9HKKmTGb6d9p3HUWYUpRALBbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNDM4 YzgyMy1lNDI0LTQxYTEtOTYzMS1hYTNiNzVhZWEwYzcvZDQzOGM4MjMtZTQyNC00 MWExLTk2MzEtYWEzYjc1YWVhMGM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDQzOGM4MjMtZTQyNC00MWExLTk2 MzEtYWEzYjc1YWVhMGM3L2Q0MzhjODIzLWU0MjQtNDFhMS05NjMxLWFhM2I3NWFl YTBjNy5jcmwwHwYDVR0jBBgwFoAU47w3VoVo5ZH1j5/93tQWKaNT2JMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNDM4YzgyMy1lNDI0LTQxYTEtOTYzMS1hYTNi NzVhZWEwYzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBvWpUwv8/uHxstQNA1Uti bkhzrIK9m6S/HvYYqr+1t6nxH5/Yq+JV9XsmTm37aPhwZF2r8lHOnFX/OEdqU8k4 d6Mo9RnK4ev34k3gz7vp4WphGKW2ii9u9293zeNuCk9tvgwDp2hFaQYyrlHED56v VJc2i/5r4TY9y2eVaDppl5EsCuj1Tnl+7Bx5OTlCVTbPvMdGSPLP6I3oLiwVBqDQ 2sQyI6r5F+MSHnwcT7EKg+57XB7TTflHA4ukZQ6nmdoUaxOVzO4vMFf/Gy5LkxVr XRRpEBS7mF0t70t4TGU88D2GD/i5XjZRbb3teyerSc56Ag5jhfr/zIe8znGdpd60 -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:38 2025 by rpki-client