$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft File: 896203b4-e5e8-4340-a765-a9457a0dfd1b.mft (raw, json) Hash identifier: eD5Mho5bAqbsUG8RLKFEnYIsdqHnh5yh8CpjduV343k= Subject key identifier: 5D:E2:F1:EE:42:34:FB:9C:75:BB:CE:47:07:2E:82:75:AC:12:31:27 Authority key identifier: BB:63:4C:A7:84:28:3F:91:B4:E9:38:4D:13:A9:9F:52:66:53:42:4E Certificate issuer: /CN=896203b4-e5e8-4340-a765-a9457a0dfd1b Certificate serial: 010D0C9F4328584B7533075BCA0135F12A6DFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft Manifest number: 010D0C9F4328584073A82C55AF22E5CB7299FAA9 Signing time: Wed 08 Oct 2025 22:00:03 +0000 Manifest this update: Wed 08 Oct 2025 22:00:03 +0000 Manifest next update: Fri 10 Oct 2025 22:00:00 +0000 Files and hashes: 1: 896203b4-e5e8-4340-a765-a9457a0dfd1b.crl (hash: VJL0zYG6McaqK3id2/vrYSowAYExjBDeEJL+6X4exl4=) 2: bf1b0011-9218-3bd2-9f8c-eae13a1fd138.roa (hash: Qbx26YnwXjJuLrmuJh4QF7LZDQs//hseELX8PXF6DG0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:33:07:5b:ca:01:35:f1:2a:6d:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896203b4-e5e8-4340-a765-a9457a0dfd1b Validity Not Before: Oct 8 22:00:03 2025 GMT Not After : Oct 10 22:00:00 2025 GMT Subject: CN=ca799efe-9296-4739-9636-04da4a9cae19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:26:ec:d1:18:11:d1:28:14:90:4e:28:d7: 9b:33:f6:7d:48:73:15:e0:8a:2a:e0:a1:3b:cb:0c: 5a:12:85:a0:db:61:bd:8c:f7:34:57:98:18:c7:d4: b0:13:02:9c:33:7d:bc:f1:a0:e1:26:62:33:4a:a3: 31:d7:cc:e8:b7:a2:8e:b5:36:53:72:f1:65:53:6d: df:1b:f3:64:5e:a4:39:1b:4a:ea:7d:02:43:52:5b: 9f:3e:99:cb:55:32:94:34:f4:b7:23:7f:c1:4b:62: cb:ab:97:b4:e6:04:35:4d:02:5c:eb:dc:f1:f1:e5: 5d:bc:0b:30:f8:0c:15:d1:ab:38:57:63:a8:ed:d5: f1:82:66:2d:46:78:17:a1:5a:0d:2a:f6:94:14:b7: e2:0d:77:43:3b:cc:8d:67:54:87:ea:37:12:fd:df: 41:53:84:2f:38:b1:52:43:4e:7e:45:08:18:c7:97: 16:79:47:dc:f4:ab:9c:96:2a:f5:16:32:a9:f2:fc: e1:90:9c:95:43:41:00:11:83:3e:94:a4:7e:8f:d4: 82:a1:a5:cd:30:54:24:0e:3d:39:a4:cd:16:62:21: cc:a8:4f:2f:9b:ef:22:44:b8:50:5f:1a:7e:74:e0: 64:13:81:8a:6e:1a:da:45:a1:23:38:92:df:4b:80: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E2:F1:EE:42:34:FB:9C:75:BB:CE:47:07:2E:82:75:AC:12:31:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.crl X509v3 Authority Key Identifier: keyid:BB:63:4C:A7:84:28:3F:91:B4:E9:38:4D:13:A9:9F:52:66:53:42:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8c:c8:dc:d6:70:9a:8f:bd:78:61:08:51:54:8d:e1:65:07: ac:46:37:5e:a6:d4:d8:d8:74:67:49:3b:ec:d6:7d:12:f5:89: 92:77:b3:4e:42:5c:4a:67:9c:c0:e1:61:9a:67:30:80:8e:58: 38:64:3f:c7:26:5f:21:ae:f8:aa:17:47:62:da:b5:2f:a6:8b: be:80:0c:ac:ac:2b:39:bc:e0:e3:a9:cf:bd:6c:03:30:0c:ed: 18:55:42:ea:4a:80:3a:f5:95:0c:b2:86:cf:61:64:27:38:04: 12:2f:1c:1d:e1:45:07:27:99:a9:26:00:8a:0b:fe:e4:e8:d7: 65:84:03:c7:e3:cc:46:db:82:44:f0:d9:d1:b1:e7:8f:3c:97: 75:76:34:c5:54:72:e3:87:2a:19:c9:5a:f2:a5:28:d4:3c:be: 72:78:d7:55:45:8d:2c:51:eb:ae:5b:75:ea:0d:24:7d:d1:b1: 7d:e4:38:37:19:e2:c5:c6:70:0f:6e:42:24:85:1e:83:d1:28: 6e:53:f0:a4:48:79:bf:b0:4f:81:84:fb:67:35:a4:91:3b:a3: 04:9f:ce:28:6d:41:18:34:ac:8d:be:af:04:11:4a:cf:34:b4: cc:75:ba:ec:6b:49:49:12:30:5a:38:5b:e2:3d:5c:c5:64:b5: 44:9a:71:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt1MwdbygE18Spt+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2MjAzYjQtZTVlOC00MzQwLWE3NjUtYTk0NTdhMGRm ZDFiMB4XDTI1MTAwODIyMDAwM1oXDTI1MTAxMDIyMDAwMFowLzEtMCsGA1UEAxMk Y2E3OTllZmUtOTI5Ni00NzM5LTk2MzYtMDRkYTRhOWNhZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Mm7NEYEdEoFJBOKNebM/Z9SHMV4Ioq4KE7 ywxaEoWg22G9jPc0V5gYx9SwEwKcM3288aDhJmIzSqMx18zot6KOtTZTcvFlU23f G/NkXqQ5G0rqfQJDUlufPpnLVTKUNPS3I3/BS2LLq5e05gQ1TQJc69zx8eVdvAsw +AwV0as4V2Oo7dXxgmYtRngXoVoNKvaUFLfiDXdDO8yNZ1SH6jcS/d9BU4QvOLFS Q05+RQgYx5cWeUfc9Kuclir1FjKp8vzhkJyVQ0EAEYM+lKR+j9SCoaXNMFQkDj05 pM0WYiHMqE8vm+8iRLhQXxp+dOBkE4GKbhraRaEjOJLfS4DO1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF3i8e5CNPucdbvORwcugnWsEjEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OTYy MDNiNC1lNWU4LTQzNDAtYTc2NS1hOTQ1N2EwZGZkMWIvODk2MjAzYjQtZTVlOC00 MzQwLWE3NjUtYTk0NTdhMGRmZDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODk2MjAzYjQtZTVlOC00MzQwLWE3 NjUtYTk0NTdhMGRmZDFiLzg5NjIwM2I0LWU1ZTgtNDM0MC1hNzY1LWE5NDU3YTBk ZmQxYi5jcmwwHwYDVR0jBBgwFoAUu2NMp4QoP5G06ThNE6mfUmZTQk4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OTYyMDNiNC1lNWU4LTQzNDAtYTc2NS1hOTQ1 N2EwZGZkMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSjMjc1nCaj714YQhRVI3h ZQesRjdeptTY2HRnSTvs1n0S9YmSd7NOQlxKZ5zA4WGaZzCAjlg4ZD/HJl8hrviq F0di2rUvpou+gAysrCs5vODjqc+9bAMwDO0YVULqSoA69ZUMsobPYWQnOAQSLxwd 4UUHJ5mpJgCKC/7k6NdlhAPH48xG24JE8NnRseePPJd1djTFVHLjhyoZyVrypSjU PL5yeNdVRY0sUeuuW3XqDSR90bF95Dg3GeLFxnAPbkIkhR6D0ShuU/CkSHm/sE+B hPtnNaSRO6MEn84obUEYNKyNvq8EEUrPNLTMdbrsa0lJEjBaOFviPVzFZLVEmnG0 -----END CERTIFICATE-----Generated at Thu Oct 9 15:29:01 2025 by rpki-client