$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: EcNd8PEtQe4funDI2AmTfIlYli1IRaOlXiZ0JiVrNqg= Subject key identifier: E3:81:1D:9C:D4:54:8D:F7:3F:4C:1A:7D:B0:9A:15:4E:2C:3B:2B:61 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584B9600958C60077534B27F8D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02ED5 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: ktLi5wLjTCLDQ4eLHBcUcI2WLkoXflFDTM2eonBAnYY=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: CU0ZnnwGj8gncJrAIAKUgjbzQan2iTzZVYhhbOT4T90=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:95:8c:60:07:75:34:b2:7f:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=5ab5fdf9-513a-43e8-b833-b71beafb2f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:28:13:72:d6:79:83:f8:e8:91:49:d7:d2: 64:23:1b:71:8d:ae:f2:ce:f7:0d:78:b2:95:c9:41: 5e:d0:2b:30:35:15:16:8c:69:5e:80:87:be:62:31: 47:d3:b3:1d:c6:78:92:09:c1:4f:6e:98:a9:c1:29: ee:d5:4d:f8:a7:7c:55:58:e1:4a:a5:fe:63:f2:8d: 6d:64:ff:3b:ab:55:76:fa:3b:21:e1:1e:41:db:6d: ce:52:83:a1:56:94:2f:85:3e:79:57:ac:35:02:d3: 1f:36:72:24:b2:eb:9a:09:ba:99:d0:35:2c:8e:ef: 28:83:85:f4:75:4e:20:5a:1f:21:c4:3b:b4:b6:f4: 5b:12:fd:53:76:1c:bb:be:8d:18:c5:f5:3e:62:98: 51:96:6b:35:ab:aa:7b:9d:6b:1e:71:ca:4d:ae:1f: 77:ff:5f:ce:47:0e:28:d0:c5:bf:5f:3c:1a:ed:da: 7b:cf:18:be:39:f5:86:41:ae:24:b7:0f:7e:38:8b: f2:c9:e1:e2:ce:98:39:b1:40:e6:6e:4a:3a:ef:8f: f6:ac:9e:58:e2:09:5f:8c:54:ac:86:c2:a3:7e:90: e3:6f:8d:0c:41:20:cc:62:9e:f2:1c:0f:7e:4e:93: 7b:0e:2e:bc:f6:9a:99:b1:b2:f9:12:cf:e8:6f:94: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:81:1D:9C:D4:54:8D:F7:3F:4C:1A:7D:B0:9A:15:4E:2C:3B:2B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:87:27:03:07:f5:f0:9e:09:38:28:34:df:12:c0:7e:b9:8e: 41:82:fd:9d:71:a7:88:6f:6a:21:1e:77:6b:e7:15:ea:85:74: 12:c1:25:e2:bf:d8:db:54:be:c0:f4:69:86:a4:e8:23:9d:01: 21:a3:90:6c:79:85:7b:70:06:0c:45:ff:55:5e:85:9a:dc:e0: 95:4a:ab:b8:21:1b:e7:7f:0b:60:60:ff:8a:a6:ad:8e:dc:10: 31:8a:bb:fe:df:41:61:cf:0d:8f:f2:11:97:0a:13:0a:2a:3c: 21:28:bb:ef:80:70:13:fe:c2:72:15:25:57:7d:df:4f:d7:9b: c9:ec:36:ec:f1:15:50:9d:0f:51:14:bd:61:9e:8c:85:69:10: f3:81:ff:cd:f5:7b:d4:0d:67:ad:2d:9e:29:26:f7:c9:e8:ea: d4:5d:47:a9:52:6f:0a:49:65:44:79:38:25:5e:57:4a:c2:3e: 25:2c:dc:db:da:59:ee:86:25:3c:89:d1:ad:27:ae:82:ca:2e: b9:74:bd:49:c9:4e:ab:fe:69:7d:d1:d8:5c:0d:ff:80:d7:4d: 8f:82:b6:22:b1:35:43:40:88:5a:3f:f4:60:ac:9e:62:3e:a4: b4:1b:6e:20:1a:94:cb:fc:23:fd:a9:31:0e:bf:7c:f1:70:b8: 6f:f3:27:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJWMYAd1NLJ/jUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk NWFiNWZkZjktNTEzYS00M2U4LWI4MzMtYjcxYmVhZmIyZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMoE3LWeYP46JFJ19JkIxtxja7yzvcNeLKV yUFe0CswNRUWjGlegIe+YjFH07MdxniSCcFPbpipwSnu1U34p3xVWOFKpf5j8o1t ZP87q1V2+jsh4R5B223OUoOhVpQvhT55V6w1AtMfNnIksuuaCbqZ0DUsju8og4X0 dU4gWh8hxDu0tvRbEv1Tdhy7vo0YxfU+YphRlms1q6p7nWseccpNrh93/1/ORw4o 0MW/Xzwa7dp7zxi+OfWGQa4ktw9+OIvyyeHizpg5sUDmbko674/2rJ5Y4glfjFSs hsKjfpDjb40MQSDMYp7yHA9+TpN7Di689pqZsbL5Es/ob5RSywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOOBHZzUVI33P0wafbCaFU4sOythMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPhycDB/Xwngk4KDTfEsB+ uY5Bgv2dcaeIb2ohHndr5xXqhXQSwSXiv9jbVL7A9GmGpOgjnQEho5BseYV7cAYM Rf9VXoWa3OCVSqu4IRvnfwtgYP+Kpq2O3BAxirv+30Fhzw2P8hGXChMKKjwhKLvv gHAT/sJyFSVXfd9P15vJ7Dbs8RVQnQ9RFL1hnoyFaRDzgf/N9XvUDWetLZ4pJvfJ 6OrUXUepUm8KSWVEeTglXldKwj4lLNzb2lnuhiU8idGtJ66Cyi65dL1JyU6r/ml9 0dhcDf+A102PgrYisTVDQIhaP/RgrJ5iPqS0G24gGpTL/CP9qTEOv3zxcLhv8ydw -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:21 2025 by rpki-client