$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft File: 5c24b227-71d8-4de3-9a17-e538fd673530.mft (raw, json) Hash identifier: 6wJlz5YPR9b5bPUJ4o5hIJOKYjdhaZOdm3zUklVtNU4= Subject key identifier: F6:FF:D1:3D:B6:AF:18:E8:E1:3B:33:D7:45:A0:38:93:C2:93:D0:FD Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584B9441E35117B55F856D3D6230 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft Manifest number: 010D0C9F4328584803652AECF92BBFA7A97AC71B Signing time: Mon 20 Oct 2025 01:00:03 +0000 Manifest this update: Mon 20 Oct 2025 01:00:03 +0000 Manifest next update: Wed 22 Oct 2025 01:00:00 +0000 Files and hashes: 1: 408e275f-c077-3b66-9a3f-a4e43e87657a.roa (hash: 1NvMY7zBaZEOJplefA97w54yHAItac3VqSAcZoskY44=) 2: 46bc93dd-2d2d-3a7b-8837-053957c750fa.roa (hash: pOlCfTKjQqNdEBBIAKDb9I7Rx06G7Nxxr1E7IiyttII=) 3: 5c24b227-71d8-4de3-9a17-e538fd673530.crl (hash: QWwSaW8xxIlNbXD3XnzWYfzXT6Ea/ou5dBq8SfwxoM8=) 4: fcbb683d-69c1-3103-ba72-9ebfb8834220.roa (hash: oNQiuBQMT6j04oo/hIcEKcy2ZpY9jZUIU3uqQkZc8Yg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:41:e3:51:17:b5:5f:85:6d:3d:62:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Oct 20 01:00:03 2025 GMT Not After : Oct 22 01:00:00 2025 GMT Subject: CN=62394e2d-f61d-44b7-aa77-ab152b22f2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:5e:fc:ba:74:70:20:db:a4:7d:56:57:14: db:03:94:0c:59:fa:18:6b:e3:dd:86:82:d9:c1:e6: 7a:d6:e1:f0:ff:8b:00:a1:0c:e8:11:3f:81:55:ae: a0:ad:7e:3a:52:6c:d5:e9:77:61:80:92:95:66:eb: a9:e4:81:44:fa:30:85:80:06:f2:45:0f:12:2a:59: 77:b4:a1:1f:57:f7:9a:67:2d:2c:3b:fa:6a:9d:8e: 46:4f:2d:99:ab:ae:98:ae:10:75:e5:f0:32:f9:a4: a4:36:62:2f:4c:dc:fe:00:2a:20:ba:1c:00:3b:c3: 19:46:28:22:86:cf:f3:a7:d6:9c:2f:56:d9:ef:d0: c0:56:8b:20:39:58:03:bd:f0:80:b6:af:0d:db:d4: 11:57:74:e7:b7:42:b5:4d:c4:6f:73:fa:f2:33:c6: b8:e4:a7:84:1f:cb:26:17:35:fc:ec:f0:ec:37:fa: df:a4:53:62:dd:51:ea:ca:00:90:01:1f:f3:a6:5e: 31:da:8e:6d:08:71:05:e0:f4:83:2e:f7:75:61:a9: b2:d2:c6:f1:5b:41:20:85:7c:1d:34:df:be:8e:dc: 38:4f:3f:2e:ab:ed:07:ad:9f:98:57:bd:b8:9a:0d: 91:2a:76:46:a6:1e:31:45:c4:ba:78:66:90:70:7d: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FF:D1:3D:B6:AF:18:E8:E1:3B:33:D7:45:A0:38:93:C2:93:D0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:84:36:04:22:c5:b9:ea:51:b6:20:5a:0b:97:2d:28:61:55: 31:8a:f8:f9:81:14:68:1e:d5:6b:4c:37:9f:3b:1f:3e:69:d5: b5:cc:50:23:75:aa:16:60:0d:78:64:a3:ea:fb:e1:63:06:52: e3:3e:d6:0e:de:31:06:c7:8c:82:81:30:db:c9:16:4b:4b:3b: 7c:8a:ae:ce:2a:dd:75:5e:24:1c:71:8f:97:53:be:14:43:f9: aa:f0:d6:f5:06:fc:f9:16:44:ae:7e:83:17:4f:db:37:f4:26: 9f:11:f5:dd:7d:5e:00:fe:4a:03:33:fa:67:03:e6:6c:80:a0: 36:ce:b2:a9:7f:3c:a5:bd:c8:87:a4:31:85:90:28:26:66:89: 17:9f:d9:67:27:93:b5:e5:b2:55:30:9d:8c:d2:53:09:01:66: 7d:e2:25:13:43:ff:e0:11:e4:f6:fc:1b:4d:20:fd:8c:d9:43: e4:50:50:e9:fc:13:94:37:6f:03:b3:5f:a7:85:d8:32:5b:a7: 5a:bb:fd:84:01:c8:d9:71:fe:a1:ce:db:19:74:13:8f:37:3a: 7a:5f:c4:23:c4:71:8a:79:59:40:ea:0c:3a:7b:c8:19:60:d8: c7:4a:3e:9c:d3:db:14:c4:a9:e3:92:04:8b:86:b6:9e:7c:3f: 12:4a:3f:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUQeNRF7VfhW09YjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MTAyMDAxMDAwM1oXDTI1MTAyMjAxMDAwMFowLzEtMCsGA1UEAxMk NjIzOTRlMmQtZjYxZC00NGI3LWFhNzctYWIxNTJiMjJmMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F9e/Lp0cCDbpH1WVxTbA5QMWfoYa+PdhoLZ weZ61uHw/4sAoQzoET+BVa6grX46UmzV6XdhgJKVZuup5IFE+jCFgAbyRQ8SKll3 tKEfV/eaZy0sO/pqnY5GTy2Zq66YrhB15fAy+aSkNmIvTNz+ACoguhwAO8MZRigi hs/zp9acL1bZ79DAVosgOVgDvfCAtq8N29QRV3Tnt0K1TcRvc/ryM8a45KeEH8sm FzX87PDsN/rfpFNi3VHqygCQAR/zpl4x2o5tCHEF4PSDLvd1Yamy0sbxW0EghXwd NN++jtw4Tz8uq+0HrZ+YV724mg2RKnZGph4xRcS6eGaQcH0UBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPb/0T22rxjo4Tsz10WgOJPCk9D9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvNWMyNGIyMjctNzFkOC00 ZGUzLTlhMTctZTUzOGZkNjczNTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCthDYEIsW56lG2IFoLly0o YVUxivj5gRRoHtVrTDefOx8+adW1zFAjdaoWYA14ZKPq++FjBlLjPtYO3jEGx4yC gTDbyRZLSzt8iq7OKt11XiQccY+XU74UQ/mq8Nb1Bvz5FkSufoMXT9s39CafEfXd fV4A/koDM/pnA+ZsgKA2zrKpfzylvciHpDGFkCgmZokXn9lnJ5O15bJVMJ2M0lMJ AWZ94iUTQ//gEeT2/BtNIP2M2UPkUFDp/BOUN28Ds1+nhdgyW6dau/2EAcjZcf6h ztsZdBOPNzp6X8QjxHGKeVlA6gw6e8gZYNjHSj6c09sUxKnjkgSLhraefD8SSj9z -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:42 2025 by rpki-client