$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft (raw, json) Hash identifier: 18cb7W17bEwSVXXFp9OS5WTWOwfzWdqMvi/4LYbSpMg= Subject key identifier: DD:4F:A7:CF:B0:04:FB:6F:37:33:96:45:DB:FE:E7:8E:ED:89:71:29 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584B94D6C85F0CA0AF9BEBFB5480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft Manifest number: 010D0C9F43285849CB146E7AB4A800E43DFE42A8 Signing time: Mon 20 Oct 2025 06:00:03 +0000 Manifest this update: Mon 20 Oct 2025 06:00:03 +0000 Manifest next update: Thu 23 Oct 2025 06:00:00 +0000 Files and hashes: 1: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (hash: 2tlTNIZgutfOPzwnfewaLwM7OweqH/JSoXK6SprplDE=) 2: f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl (hash: +QpR8xJ4XHtZ/dzVys9YnUHfz9R3gzpjwZgk7C2IMtM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:d6:c8:5f:0c:a0:af:9b:eb:fb:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Oct 20 06:00:03 2025 GMT Not After : Oct 23 06:00:00 2025 GMT Subject: CN=9f22db8f-eb1d-4c40-828d-f55a6b79b7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:87:98:4f:22:f0:a6:51:cf:4e:af:08:79: 4c:05:0c:e0:87:93:97:f2:ab:f2:f9:1f:5f:12:b3: 18:b5:0f:68:e4:a4:dd:45:d7:2c:c4:c9:f4:d9:c0: 6e:03:d2:1f:40:f5:94:e5:9f:91:67:73:1c:0c:79: b1:65:e7:53:d4:0a:ab:55:94:97:83:b7:99:5c:f4: 7e:1f:bb:e1:8d:6f:d1:f0:ca:17:41:e2:a0:f4:bc: d9:3b:4d:28:54:df:68:97:00:15:94:52:e5:1b:d2: 5e:69:92:07:6a:f9:7f:ff:cc:26:ab:f3:f0:50:66: 7b:16:d3:aa:69:14:fa:d6:d6:ff:14:37:d5:58:bd: e2:df:6f:68:f7:1b:e1:04:c6:e9:08:00:80:28:74: de:ae:f1:8f:72:36:0e:9f:3e:d5:0c:88:70:3a:1a: d2:d8:e9:23:d1:8e:6f:86:bc:b3:b7:70:aa:8f:3a: 7c:0f:f6:a1:b9:96:d6:29:07:40:92:f9:3e:f4:04: 69:24:fd:dc:06:e4:f0:64:f8:ec:0b:e1:db:1a:b6: b6:cf:86:60:2a:31:3a:7d:46:d1:8d:b8:0a:1d:d8: 2b:13:75:7f:96:1f:45:eb:e9:07:97:ea:7e:35:e1: 95:bb:7a:c5:59:76:0c:94:88:6a:30:ee:49:e8:54: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4F:A7:CF:B0:04:FB:6F:37:33:96:45:DB:FE:E7:8E:ED:89:71:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4a:97:5d:89:de:3c:33:f9:36:ad:d1:95:2a:83:f2:ed:be: e0:eb:92:e3:26:66:5a:7e:3f:f7:1c:62:69:c4:50:db:6d:d6: a7:2d:33:64:e3:6b:42:a2:86:4b:61:2b:fb:27:d4:61:8b:19: 6d:56:57:17:fc:5c:d1:92:70:12:42:a2:a7:10:38:67:33:bf: ba:4c:7b:f7:84:53:4e:2e:a4:1d:61:a7:16:22:ae:ba:01:10: 3d:8c:28:cf:09:85:05:20:01:29:9c:c7:63:25:34:1e:30:ae: a6:67:08:d7:29:7e:cc:55:e3:e4:9c:5b:95:8b:6f:5e:68:2a: ad:0c:5c:de:ce:c0:40:94:50:dc:7f:df:ca:ba:02:f3:70:6e: 2e:10:48:53:40:fd:9b:e0:7f:20:d0:d9:5f:d4:f6:52:cf:6e: 93:2f:fe:a1:0d:9a:3d:69:11:17:37:e1:4e:ee:dd:25:2b:0e: 70:3e:27:63:12:45:03:b9:31:94:e2:00:de:e8:a3:28:ae:25: fb:24:89:f3:1b:f1:7a:7b:fa:db:11:2a:ae:d0:7d:70:3c:d5: 1e:bf:2c:53:b1:00:22:86:f7:c9:62:b9:1f:32:8e:88:cc:21: bb:ae:af:41:60:7c:79:19:30:b5:c8:91:ba:2d:80:8c:c2:79: 27:f3:12:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU1shfDKCvm+v7VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MTAyMDA2MDAwM1oXDTI1MTAyMzA2MDAwMFowLzEtMCsGA1UEAxMk OWYyMmRiOGYtZWIxZC00YzQwLTgyOGQtZjU1YTZiNzliN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyASHmE8i8KZRz06vCHlMBQzgh5OX8qvy+R9f ErMYtQ9o5KTdRdcsxMn02cBuA9IfQPWU5Z+RZ3McDHmxZedT1AqrVZSXg7eZXPR+ H7vhjW/R8MoXQeKg9LzZO00oVN9olwAVlFLlG9JeaZIHavl//8wmq/PwUGZ7FtOq aRT61tb/FDfVWL3i329o9xvhBMbpCACAKHTervGPcjYOnz7VDIhwOhrS2Okj0Y5v hryzt3Cqjzp8D/ahuZbWKQdAkvk+9ARpJP3cBuTwZPjsC+HbGra2z4ZgKjE6fUbR jbgKHdgrE3V/lh9F6+kHl+p+NeGVu3rFWXYMlIhqMO5J6FRWzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN1Pp8+wBPtvNzOWRdv+547tiXEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvZjcxZDI1MmItOWEwZS00 NDkzLWJlOTMtZTZhOGUyZmZmZWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfSpddid48M/k2rdGVKoPy 7b7g65LjJmZafj/3HGJpxFDbbdanLTNk42tCooZLYSv7J9RhixltVlcX/FzRknAS QqKnEDhnM7+6THv3hFNOLqQdYacWIq66ARA9jCjPCYUFIAEpnMdjJTQeMK6mZwjX KX7MVePknFuVi29eaCqtDFzezsBAlFDcf9/KugLzcG4uEEhTQP2b4H8g0Nlf1PZS z26TL/6hDZo9aREXN+FO7t0lKw5wPidjEkUDuTGU4gDe6KMoriX7JInzG/F6e/rb ESqu0H1wPNUevyxTsQAihvfJYrkfMo6IzCG7rq9BYHx5GTC1yJG6LYCMwnkn8xL3 -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:10 2025 by rpki-client