$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.mft File: 4c4e2949-612c-4663-8f95-3bdae2086fcd.mft (raw, json) Hash identifier: JYuidbH88DHXfyUd1XmZ6hllqc+nOWVxApS6cTzgJkA= Subject key identifier: 16:05:09:C8:0F:EA:4F:8D:36:E3:28:9F:1B:21:D7:D7:6B:0D:B8:A5 Authority key identifier: 7C:19:0D:13:69:9A:09:1B:0F:EA:9B:FD:DF:80:B4:76:D2:44:CB:85 Certificate issuer: /CN=4c4e2949-612c-4663-8f95-3bdae2086fcd Certificate serial: 010D0C9F4328584B9512644C7098639C5E66F190 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.mft Manifest number: 010D0C9F4328584B03EBBB885EF7D00751234474 Signing time: Mon 20 Oct 2025 08:00:08 +0000 Manifest this update: Mon 20 Oct 2025 08:00:08 +0000 Manifest next update: Thu 23 Oct 2025 08:00:00 +0000 Files and hashes: 1: 4c4e2949-612c-4663-8f95-3bdae2086fcd.crl (hash: BjZ5my6h+ZaZ0jAjF5+5ZeRCtsaGX1LR6FdaX4dNx2w=) 2: 5e35b7b3-ebd2-37ea-8995-7a1cfe694994.roa (hash: dowjxSK+2pmGVeIg6ST1pmtZuTZ0iUl7cdR/9j0J+84=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:12:64:4c:70:98:63:9c:5e:66:f1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4e2949-612c-4663-8f95-3bdae2086fcd Validity Not Before: Oct 20 08:00:08 2025 GMT Not After : Oct 23 08:00:00 2025 GMT Subject: CN=9ce6a9ec-c7e8-41a0-8cf0-1d7c24aa17b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:12:79:69:ce:48:82:6b:e7:af:be:af:45: bf:9c:f5:30:27:17:74:6a:32:86:a9:41:a3:59:10: bc:ee:fe:d1:3d:b9:b1:d1:7c:34:ad:4f:83:c6:5c: 4f:9f:a4:7f:80:77:1f:0b:0c:a6:68:e7:9e:38:34: fa:73:83:35:0d:45:5f:4b:8b:0a:50:60:18:f9:65: c6:49:c9:ba:f3:9a:95:8f:f1:d7:de:e7:6c:0d:6a: 83:04:2f:b6:25:aa:4d:3d:c6:a6:1f:a5:7f:79:1f: 7a:9c:34:b1:2c:cd:f3:d7:74:47:2c:d2:47:12:77: 33:d4:52:fd:05:79:39:3c:b3:87:9d:32:b5:c5:61: 1b:27:40:0c:ea:08:56:f2:21:44:77:c2:02:00:25: 04:80:89:b7:95:82:2b:8e:72:5a:b7:8e:7f:6f:86: 7b:9d:3b:4b:0b:39:0a:ac:53:1b:54:ff:e8:c9:b6: 66:75:63:f9:25:83:18:a0:68:81:b1:ca:a2:bf:28: 8d:cf:1c:a1:3f:26:f9:c7:ee:2a:67:43:6b:c3:9f: ae:49:9a:cd:0b:bc:b5:9e:e9:5d:c2:23:8a:e0:b5: d0:43:e5:34:96:97:5f:57:62:5c:23:10:9e:4e:6f: 40:fb:62:18:b5:44:f6:8b:32:df:56:cf:22:3a:7b: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:05:09:C8:0F:EA:4F:8D:36:E3:28:9F:1B:21:D7:D7:6B:0D:B8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.crl X509v3 Authority Key Identifier: keyid:7C:19:0D:13:69:9A:09:1B:0F:EA:9B:FD:DF:80:B4:76:D2:44:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b4:53:dd:45:92:7d:77:23:5b:cf:ff:15:a0:e7:bd:1f:5e: ee:93:ff:a3:65:17:ba:1c:fa:59:26:15:46:cb:15:b1:ff:71: ea:40:16:52:cf:73:a3:fb:33:53:ca:75:92:17:8e:2a:05:c4: 89:e6:25:b1:7e:2c:72:8a:71:a2:f7:49:fa:dc:ec:e6:4e:63: 9a:af:ad:b8:90:00:d5:14:76:d1:56:27:dd:5b:bb:3f:0d:d6: ab:82:b5:b8:f2:16:a3:ac:a5:c0:69:d7:a1:f5:35:a2:f7:ca: 41:01:51:eb:54:20:66:0a:de:ff:23:4a:84:b3:6a:a9:b9:db: 10:c4:7d:fe:ee:9a:34:e3:73:a8:92:7b:2a:99:98:69:dc:c2: 11:24:85:08:b2:f8:55:73:12:fe:37:91:59:f7:00:21:d1:3f: ba:39:b5:52:fb:9d:de:60:36:bf:ff:f5:11:9d:a8:83:bb:81: bf:42:9b:58:12:61:db:16:57:31:60:fa:51:1d:ab:86:ca:75: 35:ad:09:79:2d:44:ec:d8:21:20:e4:b1:97:ea:de:71:f0:f3: 2f:8b:8f:f7:b5:a0:6c:10:f3:b2:2c:ef:f1:7e:28:c5:2b:73: 27:24:1a:d9:a5:18:36:0f:b0:4e:10:63:b6:7e:2a:e1:76:77: 4e:d4:bc:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVEmRMcJhjnF5m8ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM0ZTI5NDktNjEyYy00NjYzLThmOTUtM2JkYWUyMDg2 ZmNkMB4XDTI1MTAyMDA4MDAwOFoXDTI1MTAyMzA4MDAwMFowLzEtMCsGA1UEAxMk OWNlNmE5ZWMtYzdlOC00MWEwLThjZjAtMWQ3YzI0YWExN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPISeWnOSIJr56++r0W/nPUwJxd0ajKGqUGj WRC87v7RPbmx0Xw0rU+DxlxPn6R/gHcfCwymaOeeODT6c4M1DUVfS4sKUGAY+WXG Scm685qVj/HX3udsDWqDBC+2JapNPcamH6V/eR96nDSxLM3z13RHLNJHEncz1FL9 BXk5PLOHnTK1xWEbJ0AM6ghW8iFEd8ICACUEgIm3lYIrjnJat45/b4Z7nTtLCzkK rFMbVP/oybZmdWP5JYMYoGiBscqivyiNzxyhPyb5x+4qZ0Nrw5+uSZrNC7y1nuld wiOK4LXQQ+U0lpdfV2JcIxCeTm9A+2IYtUT2izLfVs8iOnvrwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBYFCcgP6k+NNuMonxsh19drDbilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YzRl Mjk0OS02MTJjLTQ2NjMtOGY5NS0zYmRhZTIwODZmY2QvNGM0ZTI5NDktNjEyYy00 NjYzLThmOTUtM2JkYWUyMDg2ZmNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGM0ZTI5NDktNjEyYy00NjYzLThm OTUtM2JkYWUyMDg2ZmNkLzRjNGUyOTQ5LTYxMmMtNDY2My04Zjk1LTNiZGFlMjA4 NmZjZC5jcmwwHwYDVR0jBBgwFoAUfBkNE2maCRsP6pv934C0dtJEy4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YzRlMjk0OS02MTJjLTQ2NjMtOGY5NS0zYmRh ZTIwODZmY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1tFPdRZJ9dyNbz/8VoOe9 H17uk/+jZRe6HPpZJhVGyxWx/3HqQBZSz3Oj+zNTynWSF44qBcSJ5iWxfixyinGi 90n63OzmTmOar624kADVFHbRVifdW7s/DdargrW48hajrKXAadeh9TWi98pBAVHr VCBmCt7/I0qEs2qpudsQxH3+7po043OoknsqmZhp3MIRJIUIsvhVcxL+N5FZ9wAh 0T+6ObVS+53eYDa///URnaiDu4G/QptYEmHbFlcxYPpRHauGynU1rQl5LUTs2CEg 5LGX6t5x8PMvi4/3taBsEPOyLO/xfijFK3MnJBrZpRg2D7BOEGO2firhdndO1Lxw -----END CERTIFICATE-----Generated at Mon Oct 20 14:55:22 2025 by rpki-client