$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft File: 65a67cfc-305d-4049-900c-33f3b01e742a.mft (raw, json) Hash identifier: Fm9yaSUKRHIowdhZVyvb5l7+27sy7r2OHnvMq8575HQ= Subject key identifier: 17:64:4C:A9:EB:47:F5:74:50:FC:23:53:EF:1E:06:AE:F2:2F:DD:50 Authority key identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 Certificate issuer: /CN=65a67cfc-305d-4049-900c-33f3b01e742a Certificate serial: 010D0C9F4328584B781B7D7DFD590F421BD15780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft Manifest number: 010D0C9F4328584073A82EC0CBDAAFEE66C86A0A Signing time: Thu 09 Oct 2025 23:00:03 +0000 Manifest this update: Thu 09 Oct 2025 23:00:03 +0000 Manifest next update: Sun 12 Oct 2025 23:00:00 +0000 Files and hashes: 1: 65a67cfc-305d-4049-900c-33f3b01e742a.crl (hash: jLDFXYBXqnnhCwN2PkXFy5z1ZAvFJX2oPI6KvfrwGKM=) 2: f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa (hash: jlERRYLvdfipIA0nwxMMuNS7nApTFD5NLtMNUsZ+W4Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:1b:7d:7d:fd:59:0f:42:1b:d1:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a67cfc-305d-4049-900c-33f3b01e742a Validity Not Before: Oct 9 23:00:03 2025 GMT Not After : Oct 12 23:00:00 2025 GMT Subject: CN=386993a8-65cd-4d7e-8db0-c178b6614a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:c5:47:80:cc:39:16:b4:6d:85:41:a9:97: af:bf:9f:71:32:35:db:28:6d:36:8f:2d:f3:77:8b: d5:ad:98:ab:0d:73:da:7a:1a:f2:c1:e9:07:2e:95: 37:59:51:3d:6d:e9:0a:df:01:4c:77:8c:9a:4b:82: 28:45:35:32:27:1a:24:d6:4e:73:50:e7:a2:ad:e3: 0a:d7:b7:2f:46:26:72:d0:8e:82:e5:d2:ff:08:44: ef:3d:3e:16:9a:b3:26:cc:20:75:02:ee:93:5f:f2: ca:55:9a:be:22:26:1b:0c:7f:12:23:3a:11:2f:66: 66:ac:e6:0c:0e:2f:76:63:00:73:06:09:59:ae:85: b6:95:41:c3:c9:a9:90:e1:e6:a7:dd:5b:0e:9a:af: 8d:74:5c:72:bc:48:c9:56:3a:b3:29:6f:4a:48:48: c0:fd:c8:e7:8a:23:4d:8f:00:56:d2:d9:e4:0c:ad: c1:c7:b9:9c:f9:67:f3:a4:e1:e9:98:98:54:76:61: 37:be:25:91:ad:87:4e:70:1c:3f:c3:37:56:61:ed: 31:ac:ad:3f:95:41:34:4c:7c:a9:ee:cf:c9:e9:13: 09:a9:3c:78:c5:5b:80:32:d4:ae:b9:28:af:73:94: 85:ea:73:7f:ad:50:25:3b:66:a5:c7:ae:04:b5:f0: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:4C:A9:EB:47:F5:74:50:FC:23:53:EF:1E:06:AE:F2:2F:DD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl X509v3 Authority Key Identifier: keyid:9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cb:ad:be:7c:27:da:20:91:75:70:0f:aa:37:14:5d:7a:32: 97:1f:1d:31:97:20:0f:2a:76:11:9e:a2:6c:23:d7:f7:0d:78: d9:18:9b:f9:83:8d:cf:e1:3f:a1:28:18:ed:6d:5a:06:0b:33: 6e:4e:d7:a7:a3:fe:03:77:f2:44:ec:bf:76:7c:e4:b3:ed:95: ff:ab:6f:7d:da:28:38:f1:7f:ae:5a:24:78:cf:77:b0:03:02: 76:55:34:94:ad:35:48:47:28:ba:71:d7:e2:18:0e:60:83:7e: 7a:36:d7:10:d4:91:4d:63:6b:83:49:c9:6d:cf:38:94:f9:60: cc:92:c3:3f:ce:70:ac:b1:f0:3b:32:c5:4c:a6:83:2b:d3:0e: b0:6d:7b:45:bc:3e:4e:ba:16:98:5a:12:00:c1:f8:ef:fa:e3: 26:ee:c4:62:e3:7c:d2:61:58:5e:19:1d:80:2a:3a:8d:6e:d9: 37:d9:d6:1c:cc:39:2f:d6:cb:34:aa:8c:47:83:94:c3:40:ce: 87:b4:4f:97:ac:0f:ee:01:19:2b:92:e5:50:52:de:43:f3:8e: aa:87:4e:7e:18:d9:b3:75:b5:9e:c4:a8:d2:f2:03:d4:93:0f: 12:13:50:bf:d5:03:f2:5a:f5:99:4a:49:cc:b2:53:2a:31:74: bc:a9:10:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt4G319/VkPQhvRV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhNjdjZmMtMzA1ZC00MDQ5LTkwMGMtMzNmM2IwMWU3 NDJhMB4XDTI1MTAwOTIzMDAwM1oXDTI1MTAxMjIzMDAwMFowLzEtMCsGA1UEAxMk Mzg2OTkzYTgtNjVjZC00ZDdlLThkYjAtYzE3OGI2NjE0YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r/FR4DMORa0bYVBqZevv59xMjXbKG02jy3z d4vVrZirDXPaehrywekHLpU3WVE9bekK3wFMd4yaS4IoRTUyJxok1k5zUOeireMK 17cvRiZy0I6C5dL/CETvPT4WmrMmzCB1Au6TX/LKVZq+IiYbDH8SIzoRL2ZmrOYM Di92YwBzBglZroW2lUHDyamQ4ean3VsOmq+NdFxyvEjJVjqzKW9KSEjA/cjniiNN jwBW0tnkDK3Bx7mc+WfzpOHpmJhUdmE3viWRrYdOcBw/wzdWYe0xrK0/lUE0THyp 7s/J6RMJqTx4xVuAMtSuuSivc5SF6nN/rVAlO2alx64EtfDVVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBdkTKnrR/V0UPwjU+8eBq7yL91QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NWE2 N2NmYy0zMDVkLTQwNDktOTAwYy0zM2YzYjAxZTc0MmEvNjVhNjdjZmMtMzA1ZC00 MDQ5LTkwMGMtMzNmM2IwMWU3NDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjVhNjdjZmMtMzA1ZC00MDQ5LTkw MGMtMzNmM2IwMWU3NDJhLzY1YTY3Y2ZjLTMwNWQtNDA0OS05MDBjLTMzZjNiMDFl NzQyYS5jcmwwHwYDVR0jBBgwFoAUnhnAKyCYsTJMIVyBr/J+ZZqTpXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NWE2N2NmYy0zMDVkLTQwNDktOTAwYy0zM2Yz YjAxZTc0MmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2y62+fCfaIJF1cA+qNxRd ejKXHx0xlyAPKnYRnqJsI9f3DXjZGJv5g43P4T+hKBjtbVoGCzNuTteno/4Dd/JE 7L92fOSz7ZX/q2992ig48X+uWiR4z3ewAwJ2VTSUrTVIRyi6cdfiGA5gg356NtcQ 1JFNY2uDScltzziU+WDMksM/znCssfA7MsVMpoMr0w6wbXtFvD5OuhaYWhIAwfjv +uMm7sRi43zSYVheGR2AKjqNbtk32dYczDkv1ss0qoxHg5TDQM6HtE+XrA/uARkr kuVQUt5D846qh05+GNmzdbWexKjS8gPUkw8SE1C/1QPyWvWZSknMslMqMXS8qRA0 -----END CERTIFICATE-----Generated at Sat Oct 11 00:12:33 2025 by rpki-client