$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft File: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft (raw, json) Hash identifier: VgYVANTYKwZAGe2PjDegw+K/7m3AqtJzogLDppZLfso= Subject key identifier: 69:84:4D:48:10:A3:15:C2:1D:05:88:8D:87:74:28:FE:D0:C1:7F:A2 Authority key identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 Certificate issuer: /CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Certificate serial: 010D0C9F4328584B9695879ACC65995EB39AAFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft Manifest number: 010D0C9F4328584ADB979262E885ABB43C7FA344 Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Wed 22 Oct 2025 21:00:00 +0000 Files and hashes: 1: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl (hash: 1vxC2QCLUiPH958yNWnRRo9QzJJn1MCKByL3urNH+Bs=) 2: b04b7367-5452-3760-b2f3-796a906930bc.roa (hash: gOj/pod3M/8DLSawP5P9s7HXCj28UZAYqR8FiGWENDk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:87:9a:cc:65:99:5e:b3:9a:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 22 21:00:00 2025 GMT Subject: CN=9864fc58-4750-4586-ac31-a91d71a8924e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:53:89:14:22:bf:51:ea:99:1e:f5:a7:f5: df:d5:aa:fa:0f:94:ea:96:10:36:ff:cb:35:8e:d9: 8d:f6:ae:13:b3:59:cf:6b:b5:25:6b:80:41:29:36: 94:09:eb:91:27:37:fb:cb:de:72:13:5f:b8:03:80: c6:75:38:26:59:ff:d9:42:62:0f:9d:75:bb:26:05: 60:31:d6:64:cf:60:d2:29:3d:4a:f8:77:89:44:94: 85:0e:f8:b4:2e:17:45:e9:13:be:de:95:39:7b:0c: 72:e4:ea:db:27:a1:df:9c:5a:97:6e:06:7e:e6:a7: 7a:07:0b:01:60:26:5f:d8:7c:5c:90:ba:b7:b9:6c: 6e:39:45:80:89:c7:f2:07:38:79:8f:c2:e1:0c:dd: f0:0d:18:94:72:db:04:b6:c4:ac:7d:b9:a6:e3:1d: d0:69:28:74:91:02:ea:46:ca:a6:48:b0:94:54:70: 14:2f:97:8e:fd:6d:ca:d1:f5:f0:ec:b5:d3:d0:8f: da:38:f6:94:0c:20:f1:56:1b:99:04:29:52:df:f7: fa:e9:4c:1d:8f:e8:d2:ed:e9:99:8f:0f:c0:1c:67: 74:69:8b:69:25:2c:cc:93:bb:66:65:92:ab:cd:7d: 83:51:d7:da:97:9a:b6:1e:c7:bc:dd:19:b0:b9:6b: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:84:4D:48:10:A3:15:C2:1D:05:88:8D:87:74:28:FE:D0:C1:7F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl X509v3 Authority Key Identifier: keyid:B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:21:3e:99:18:9b:94:6d:b2:bc:4f:0b:1b:b4:ac:9b:62:94: ac:22:61:4e:e8:84:d9:87:6e:f0:d9:39:70:59:e4:43:d9:61: f0:f5:7f:9e:72:40:0e:0f:a5:21:de:29:f3:2e:21:2c:e3:ce: f8:ef:43:f8:24:46:9b:0d:2b:88:06:5f:e3:c5:f2:bf:14:63: d7:30:d2:79:12:7e:ca:54:69:a4:93:f3:e1:88:b8:c4:50:b5: e8:01:a6:d5:09:10:72:66:b5:cc:6d:e1:3e:df:1f:31:3b:1a: 7a:41:89:28:81:c2:17:f5:3b:93:00:58:1a:2c:33:fe:09:89: 0b:b2:3e:12:ff:13:77:e6:05:5c:40:a6:2c:25:ed:87:60:21: 07:82:c3:9f:8c:65:2f:88:cf:c3:7c:f2:f1:89:75:32:c8:75: a0:74:fa:b4:21:ae:7a:7c:73:db:29:e5:1d:9c:7e:98:9c:fd: fe:5c:5c:f9:f9:70:f8:8c:0c:b4:a2:19:9a:f1:c4:e0:b0:1c: dd:b2:48:df:28:e0:ab:f3:9f:8c:b9:8e:3a:a4:77:a1:ff:27: 3f:53:53:6b:24:3b:f3:ca:73:3f:4d:00:7a:54:60:70:1d:9a: 41:e5:c6:27:d7:69:66:0a:a0:9d:95:81:f5:58:58:12:4b:b8: 15:d4:21:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYeazGWZXrOar8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyYzZiNjUtZGNmZC00MTJhLTg3ODgtOGJhYTkxZmIz YTFkMB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMjIxMDAwMFowLzEtMCsGA1UEAxMk OTg2NGZjNTgtNDc1MC00NTg2LWFjMzEtYTkxZDcxYTg5MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJhTiRQiv1HqmR71p/Xf1ar6D5TqlhA2/8s1 jtmN9q4Ts1nPa7Ula4BBKTaUCeuRJzf7y95yE1+4A4DGdTgmWf/ZQmIPnXW7JgVg MdZkz2DSKT1K+HeJRJSFDvi0LhdF6RO+3pU5ewxy5OrbJ6HfnFqXbgZ+5qd6BwsB YCZf2HxckLq3uWxuOUWAicfyBzh5j8LhDN3wDRiUctsEtsSsfbmm4x3QaSh0kQLq RsqmSLCUVHAUL5eO/W3K0fXw7LXT0I/aOPaUDCDxVhuZBClS3/f66Uwdj+jS7emZ jw/AHGd0aYtpJSzMk7tmZZKrzX2DUdfal5q2Hse83RmwuWtGOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGmETUgQoxXCHQWIjYd0KP7QwX+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDJj NmI2NS1kY2ZkLTQxMmEtODc4OC04YmFhOTFmYjNhMWQvNDAyYzZiNjUtZGNmZC00 MTJhLTg3ODgtOGJhYTkxZmIzYTFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDAyYzZiNjUtZGNmZC00MTJhLTg3 ODgtOGJhYTkxZmIzYTFkLzQwMmM2YjY1LWRjZmQtNDEyYS04Nzg4LThiYWE5MWZi M2ExZC5jcmwwHwYDVR0jBBgwFoAUtsg0jmaGn6w1+CVuUQdfRLRRSSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDJjNmI2NS1kY2ZkLTQxMmEtODc4OC04YmFh OTFmYjNhMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEIT6ZGJuUbbK8TwsbtKyb YpSsImFO6ITZh27w2TlwWeRD2WHw9X+eckAOD6Uh3inzLiEs487470P4JEabDSuI Bl/jxfK/FGPXMNJ5En7KVGmkk/PhiLjEULXoAabVCRByZrXMbeE+3x8xOxp6QYko gcIX9TuTAFgaLDP+CYkLsj4S/xN35gVcQKYsJe2HYCEHgsOfjGUviM/DfPLxiXUy yHWgdPq0Ia56fHPbKeUdnH6YnP3+XFz5+XD4jAy0ohma8cTgsBzdskjfKOCr85+M uY46pHeh/yc/U1NrJDvzynM/TQB6VGBwHZpB5cYn12lmCqCdlYH1WFgSS7gV1CHx -----END CERTIFICATE-----Generated at Tue Oct 21 00:59:34 2025 by rpki-client