$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft File: 7b407ffa-7fa7-4255-8a63-77381712e9e8.mft (raw, json) Hash identifier: bTSi6breHzJZ4eR4m2y/DuIJPWBx5Zpt1gsqIysSp/E= Subject key identifier: 1F:33:23:B3:C0:17:72:0A:91:6F:2B:FB:78:84:2C:89:8F:FE:3C:03 Authority key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 Certificate issuer: /CN=7b407ffa-7fa7-4255-8a63-77381712e9e8 Certificate serial: 010D0C9F4328584B937180F5A6AB109113A59B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft Manifest number: 010D0C9F4328584940E89232F5239F1B05F1F9DA Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: 7b407ffa-7fa7-4255-8a63-77381712e9e8.crl (hash: 5SI8yu2NwnNoPauZobQkqlZw9wCiWyffkhe+UXjHIAM=) 2: 9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa (hash: 53p3HGQTxlwhdEa+Q5bffN9e2mW0Lle6m/Qdp4G4ExQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:80:f5:a6:ab:10:91:13:a5:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=0539fafb-cc8c-454a-868b-fd2dd7ca8d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:7a:82:ef:e7:21:3f:6b:9c:10:ae:53:e1: 33:d7:2a:88:00:60:e1:82:8f:e8:7d:b4:24:09:86: 21:9d:ce:1f:e7:c3:fc:d5:19:f5:ee:ab:57:3f:12: ab:8d:6c:0a:fa:34:dc:d5:a8:f2:e6:4f:59:77:56: 75:93:9d:3e:bc:06:66:a8:7b:f6:87:e9:c0:59:fa: d7:17:11:27:7b:fe:3a:c7:71:a3:3d:4f:b8:18:c3: 3d:e9:82:a4:c4:5e:ee:72:4e:42:19:92:35:9c:a7: 91:8b:14:2b:c2:84:1f:44:69:77:25:29:84:5a:e5: d7:9a:86:e2:12:5e:00:18:1b:7d:cd:16:4e:35:5d: 17:3c:e3:8d:8e:bb:45:37:6f:96:8d:74:b6:de:ea: 52:9c:91:70:13:72:9e:78:4a:dc:44:a2:f1:3f:d0: 69:26:0e:aa:1e:21:a9:e8:9e:d4:e2:cf:68:a9:4f: 73:a8:03:b3:f5:72:b4:40:5d:ad:ba:1f:18:ec:73: 61:30:2e:29:a1:ca:2d:93:5c:09:88:b7:19:31:ae: 87:77:c7:5c:3f:ea:a6:e4:18:a3:68:68:95:0c:a7: d5:1c:c3:56:56:55:87:7d:58:b3:6e:61:ed:84:d8: 80:1f:db:14:c5:c1:84:ad:97:95:7e:c6:a1:30:49: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:33:23:B3:C0:17:72:0A:91:6F:2B:FB:78:84:2C:89:8F:FE:3C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl X509v3 Authority Key Identifier: keyid:C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bf:ea:ca:7c:54:26:4e:bc:8f:78:21:95:c5:24:16:4b:b3: ee:01:ce:d4:31:96:fd:92:cf:af:58:ab:fe:7f:d5:63:e1:72: 79:26:f5:20:6d:68:81:e0:ca:d7:59:91:82:32:4f:5d:ad:4f: e0:87:ac:5e:20:0d:86:35:21:8d:50:a9:b5:72:fa:aa:4c:6f: d6:e6:e5:bd:c7:5b:44:14:1f:56:e5:30:fb:96:7f:73:b3:7c: 0b:80:74:d4:e1:87:8a:5f:dc:38:9c:59:e8:3d:7d:d1:ec:1f: 3e:2b:32:25:7d:7f:3d:a2:da:55:bc:53:1e:3b:6b:a1:b7:7a: 21:d0:8d:65:e5:f2:0f:6a:32:fa:b4:9a:ad:ed:1b:01:7e:8f: 80:c8:09:78:13:69:df:14:ee:cc:a1:8a:84:0d:22:fc:13:35: 05:19:07:73:0f:fc:66:22:a1:81:28:29:e3:6b:fd:ea:e8:d2: 4a:e5:01:ba:22:ed:f7:a1:69:f4:6b:bc:93:77:07:f0:63:78: 1f:89:b7:e3:c9:df:11:98:fd:45:bf:9b:03:b6:a5:12:47:4e: 46:18:df:94:a0:17:7c:a8:82:2c:68:f7:35:3e:03:b6:23:e6: bd:11:09:74:c5:4c:b8:44:ec:83:83:d4:01:3d:08:c4:d2:06: 94:e6:aa:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcYD1pqsQkROlmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I0MDdmZmEtN2ZhNy00MjU1LThhNjMtNzczODE3MTJl OWU4MB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk MDUzOWZhZmItY2M4Yy00NTRhLTg2OGItZmQyZGQ3Y2E4ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1V6gu/nIT9rnBCuU+Ez1yqIAGDhgo/ofbQk CYYhnc4f58P81Rn17qtXPxKrjWwK+jTc1ajy5k9Zd1Z1k50+vAZmqHv2h+nAWfrX FxEne/46x3GjPU+4GMM96YKkxF7uck5CGZI1nKeRixQrwoQfRGl3JSmEWuXXmobi El4AGBt9zRZONV0XPOONjrtFN2+WjXS23upSnJFwE3KeeErcRKLxP9BpJg6qHiGp 6J7U4s9oqU9zqAOz9XK0QF2tuh8Y7HNhMC4pocotk1wJiLcZMa6Hd8dcP+qm5Bij aGiVDKfVHMNWVlWHfVizbmHthNiAH9sUxcGErZeVfsahMEn52QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB8zI7PAF3IKkW8r+3iELImP/jwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83YjQw N2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcxMmU5ZTgvN2I0MDdmZmEtN2ZhNy00 MjU1LThhNjMtNzczODE3MTJlOWU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2I0MDdmZmEtN2ZhNy00MjU1LThh NjMtNzczODE3MTJlOWU4LzdiNDA3ZmZhLTdmYTctNDI1NS04YTYzLTc3MzgxNzEy ZTllOC5jcmwwHwYDVR0jBBgwFoAUwnPNckEbBDCbe/SoQWX+RoCHYiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4 MTcxMmU5ZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbv+rKfFQmTryPeCGVxSQW S7PuAc7UMZb9ks+vWKv+f9Vj4XJ5JvUgbWiB4MrXWZGCMk9drU/gh6xeIA2GNSGN UKm1cvqqTG/W5uW9x1tEFB9W5TD7ln9zs3wLgHTU4YeKX9w4nFnoPX3R7B8+KzIl fX89otpVvFMeO2uht3oh0I1l5fIPajL6tJqt7RsBfo+AyAl4E2nfFO7MoYqEDSL8 EzUFGQdzD/xmIqGBKCnja/3q6NJK5QG6Iu33oWn0a7yTdwfwY3gfibfjyd8RmP1F v5sDtqUSR05GGN+UoBd8qIIsaPc1PgO2I+a9EQl0xUy4ROyDg9QBPQjE0gaU5qqu -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:29 2025 by rpki-client