$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft File: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft (raw, json) Hash identifier: ECsGwZpwG0EhNn0xg3UYmYYDs4B+cbXsftrluzenabE= Subject key identifier: 72:3D:92:83:FE:60:93:48:DC:C0:35:2F:5E:E4:34:F4:12:97:AC:EF Authority key identifier: B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA Certificate issuer: /CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Certificate serial: 010D0C9F4328584B94B90FBC18E6101AE08BDC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft Manifest number: 010D0C9F43285848EB9EF9CB5EADD579954BD7FC Signing time: Mon 20 Oct 2025 05:00:08 +0000 Manifest this update: Mon 20 Oct 2025 05:00:08 +0000 Manifest next update: Thu 23 Oct 2025 05:00:00 +0000 Files and hashes: 1: a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa (hash: U/VSVPu7ghikgbrdJEDc+u5VqYRU9+uHY6ydfTtvWBo=) 2: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl (hash: AfrqIwiXX4sj55a2ioJZDn2Shf4b7vBI+wWSC2nUWw0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:b9:0f:bc:18:e6:10:1a:e0:8b:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Validity Not Before: Oct 20 05:00:08 2025 GMT Not After : Oct 23 05:00:00 2025 GMT Subject: CN=d0a5f6f8-3dce-49a1-873b-3a8748a5c9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:80:dd:55:72:21:5a:9e:43:e5:aa:fe:14:ee: 18:4e:00:f8:e3:c6:b2:73:dc:26:1a:f5:c8:89:76: a8:a5:19:fa:a4:1a:99:b0:b3:30:df:7c:50:f0:e8: 08:9d:65:06:01:81:9f:2c:8e:b6:46:46:c0:92:32: 81:50:67:0f:23:eb:b8:c3:46:cd:e6:c5:fd:5a:e3: de:c7:f6:38:e4:ce:88:f7:4a:01:9a:af:e0:77:61: 21:be:e4:aa:2d:81:a3:27:55:02:e8:a1:ba:f6:07: 62:fc:e6:d0:83:a7:59:2d:3a:40:c0:fe:2e:23:c0: ef:0c:81:8b:a9:2a:f7:87:15:32:fb:18:37:a3:b5: 05:0f:1e:2c:d1:22:41:18:33:90:17:4c:46:b8:51: 5f:71:ed:a0:32:01:92:a3:32:07:34:83:20:a7:f1: 95:c7:89:4a:cc:ba:55:04:f2:33:68:d9:ab:69:3a: f0:27:df:07:4e:14:11:8d:7e:35:68:f2:0c:4a:ba: 7f:77:1e:c1:b5:fb:8b:5d:0f:14:41:7c:d7:1b:64: e2:c5:4a:f6:89:56:30:b5:4a:49:68:ab:fa:aa:0e: 84:5d:2b:eb:55:41:eb:9a:bc:5e:23:da:c3:02:3f: 5a:c2:96:ff:0e:68:b3:2f:90:0a:c0:18:eb:f1:f2: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3D:92:83:FE:60:93:48:DC:C0:35:2F:5E:E4:34:F4:12:97:AC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl X509v3 Authority Key Identifier: keyid:B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:22:6c:75:4c:ea:1f:e0:c9:74:78:88:8e:b5:b7:06:76:cf: 99:cd:4d:c4:8d:b2:b2:2b:80:6f:3b:08:3b:b1:d5:2d:53:90: 03:0c:31:1b:f2:fc:62:b6:ca:32:bd:93:e2:b6:26:62:30:ea: 63:31:d3:56:ea:da:93:cf:6d:72:22:67:b7:ef:bc:61:f5:64: 47:b8:b5:49:48:a3:4f:47:41:6a:10:c5:25:5a:1f:9d:c7:52: f9:fc:3f:3a:71:9d:3f:b2:21:d8:99:18:44:dc:9c:ca:d9:4e: 71:63:ef:c0:02:9d:8c:ab:7b:80:ca:9f:4c:34:a5:0d:58:ed: db:c1:eb:5d:06:c1:08:b2:35:0b:d2:9f:47:50:98:13:ca:54: e4:12:13:ce:5d:38:de:e9:b7:97:43:db:b6:5e:62:51:7d:01: 29:97:cc:a5:89:a3:b3:56:79:45:cb:82:7c:69:0e:02:33:e2: ef:71:9e:2a:b4:8c:16:6f:8b:b8:4a:5f:40:68:ef:65:52:b3: 12:11:10:9b:69:47:d6:ad:be:ed:e7:04:ed:dd:6e:93:cc:52: b9:d3:92:cf:99:16:3c:e7:ef:be:c2:f6:70:9e:85:46:be:c6: 9b:af:1a:4d:10:f1:6e:76:db:c2:3b:c8:0e:a7:2d:bd:a4:38: 39:a4:bf:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUuQ+8GOYQGuCL3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhNTM4YWUtZmEyNS00YTM4LWIxZjEtMzIwZTJlOWYx NmVmMB4XDTI1MTAyMDA1MDAwOFoXDTI1MTAyMzA1MDAwMFowLzEtMCsGA1UEAxMk ZDBhNWY2ZjgtM2RjZS00OWExLTg3M2ItM2E4NzQ4YTVjOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoDdVXIhWp5D5ar+FO4YTgD448ayc9wmGvXI iXaopRn6pBqZsLMw33xQ8OgInWUGAYGfLI62RkbAkjKBUGcPI+u4w0bN5sX9WuPe x/Y45M6I90oBmq/gd2EhvuSqLYGjJ1UC6KG69gdi/ObQg6dZLTpAwP4uI8DvDIGL qSr3hxUy+xg3o7UFDx4s0SJBGDOQF0xGuFFfce2gMgGSozIHNIMgp/GVx4lKzLpV BPIzaNmraTrwJ98HThQRjX41aPIMSrp/dx7BtfuLXQ8UQXzXG2TixUr2iVYwtUpJ aKv6qg6EXSvrVUHrmrxeI9rDAj9awpb/DmizL5AKwBjr8fKeiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHI9koP+YJNI3MA1L17kNPQSl6zvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1 MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBlMmU5ZjE2ZWYvZTZhNTM4YWUtZmEyNS00 YTM4LWIxZjEtMzIwZTJlOWYxNmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTZhNTM4YWUtZmEyNS00YTM4LWIx ZjEtMzIwZTJlOWYxNmVmL2U2YTUzOGFlLWZhMjUtNGEzOC1iMWYxLTMyMGUyZTlm MTZlZi5jcmwwHwYDVR0jBBgwFoAUtyyMyJ51ztdTHmylketyq4EsCrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBl MmU5ZjE2ZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPImx1TOof4Ml0eIiOtbcG ds+ZzU3EjbKyK4BvOwg7sdUtU5ADDDEb8vxitsoyvZPitiZiMOpjMdNW6tqTz21y Ime377xh9WRHuLVJSKNPR0FqEMUlWh+dx1L5/D86cZ0/siHYmRhE3JzK2U5xY+/A Ap2Mq3uAyp9MNKUNWO3bwetdBsEIsjUL0p9HUJgTylTkEhPOXTje6beXQ9u2XmJR fQEpl8yliaOzVnlFy4J8aQ4CM+LvcZ4qtIwWb4u4Sl9AaO9lUrMSERCbaUfWrb7t 5wTt3W6TzFK505LPmRY85+++wvZwnoVGvsabrxpNEPFudtvCO8gOpy29pDg5pL+I -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:46 2025 by rpki-client