$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: mjAEbl02z9uarWwIt67gG01r2C714w057emX9Rr48bU= Subject key identifier: A1:AF:B6:0B:64:57:D9:80:11:86:05:9E:5D:0A:C1:7A:A3:83:33:3E Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584B7909BAFF07C6DE204F45F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A338A Signing time: Fri 10 Oct 2025 07:00:03 +0000 Manifest this update: Fri 10 Oct 2025 07:00:03 +0000 Manifest next update: Mon 13 Oct 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: +HumoP+y1kRF/KbtKLXmgaKsyGkfY1ADuS5c+aY+Rf8=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: m/4Wc8kw26tfI4ytQM+TUMK1ZyCfaRDmEwL3BFBf3+A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:09:ba:ff:07:c6:de:20:4f:45:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Oct 10 07:00:03 2025 GMT Not After : Oct 13 07:00:00 2025 GMT Subject: CN=ba67418b-f873-4a3f-a9ab-0348bf876fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:06:9b:01:89:86:c1:ba:9b:5a:34:af:c9: 9e:ce:80:b7:8a:46:61:4e:6e:47:ff:66:f3:c6:a0: 53:28:ba:76:ee:70:c9:2b:2d:f9:fb:62:72:fa:f1: 30:4b:f1:f9:33:47:39:d5:e1:9c:dc:98:bb:7e:4c: b1:ef:6a:cb:82:07:81:ce:44:d5:45:a0:de:3b:63: 93:cb:51:d9:92:6e:ca:42:51:b1:fd:e8:e9:94:e2: 60:83:95:05:c0:d8:89:3c:a3:7e:4a:0e:e9:7a:c8: 46:59:a8:21:ef:fe:51:5b:5f:d5:97:71:88:1f:d4: cc:e5:57:94:0b:72:26:8b:98:81:e6:0b:29:fc:f0: 6a:36:d9:cb:c9:12:97:68:9c:39:e1:06:fb:96:31: b8:7d:f0:ab:18:b5:94:c7:ce:1f:1c:5d:56:bf:7e: ca:8a:3b:5a:f2:17:f8:c2:67:7c:cd:a7:e5:a6:80: 84:ea:c3:28:f4:dd:31:5c:4b:5e:0e:cc:4c:81:f2: cf:8c:f9:12:bb:80:3f:fa:9e:2b:4d:55:a0:1c:e3: ed:4f:dd:43:62:a8:3e:ec:44:5b:f2:bd:9f:50:51: d0:04:15:8c:aa:d4:65:21:96:42:dc:03:64:e9:4d: a6:9d:c9:7d:93:76:f2:45:f5:d9:c5:38:11:87:b7: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:B6:0B:64:57:D9:80:11:86:05:9E:5D:0A:C1:7A:A3:83:33:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:65:70:9c:fb:ea:4c:64:a3:a3:96:1f:01:c7:e4:bd:13:fd: 0d:ac:ec:30:4c:a5:1a:aa:1e:3a:f8:73:00:a1:49:87:ef:c5: 90:97:18:94:e8:47:e6:db:ea:8c:f3:f8:26:2e:4e:99:85:dd: 83:7a:8b:d9:eb:fa:60:72:30:4c:20:21:3a:78:ef:88:12:a0: d7:07:51:9c:1f:df:2a:81:0a:b7:cb:20:8a:5e:7e:f5:ea:33: 21:be:2f:53:43:a7:32:df:71:61:0e:b1:ab:c0:df:a9:b8:a5: a7:23:c2:db:dc:fc:ce:52:23:45:27:36:30:30:e7:45:88:a5: 4d:ac:70:06:ac:d5:d6:f2:42:40:25:d7:bb:5b:ae:8c:df:24: 75:d7:f3:fe:ce:a2:12:0a:13:6b:78:1c:1f:8e:7f:75:ca:a2: 5a:87:21:5f:1b:0d:54:32:db:4c:28:84:1e:e6:8e:af:39:1c: e7:b5:33:e1:85:14:9a:cc:01:46:75:74:9f:3a:76:3b:2a:05: 2d:be:cd:1d:37:cc:71:0e:72:6f:25:92:58:6e:cf:b4:80:e4: 72:b4:9f:bf:ef:93:ab:8c:3c:a0:8c:b8:77:9b:b3:b0:9e:aa: 27:72:af:35:cf:7a:89:b8:1d:f8:22:85:d3:34:59:c5:a4:b2: 53:05:0a:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5Cbr/B8beIE9F8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MTAxMDA3MDAwM1oXDTI1MTAxMzA3MDAwMFowLzEtMCsGA1UEAxMk YmE2NzQxOGItZjg3My00YTNmLWE5YWItMDM0OGJmODc2ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIQGmwGJhsG6m1o0r8mezoC3ikZhTm5H/2bz xqBTKLp27nDJKy35+2Jy+vEwS/H5M0c51eGc3Ji7fkyx72rLggeBzkTVRaDeO2OT y1HZkm7KQlGx/ejplOJgg5UFwNiJPKN+Sg7peshGWagh7/5RW1/Vl3GIH9TM5VeU C3Imi5iB5gsp/PBqNtnLyRKXaJw54Qb7ljG4ffCrGLWUx84fHF1Wv37Kijta8hf4 wmd8zaflpoCE6sMo9N0xXEteDsxMgfLPjPkSu4A/+p4rTVWgHOPtT91DYqg+7ERb 8r2fUFHQBBWMqtRlIZZC3ANk6U2mncl9k3byRfXZxTgRh7dpxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGvtgtkV9mAEYYFnl0KwXqjgzM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaZXCc++pMZKOjlh8Bx+S9 E/0NrOwwTKUaqh46+HMAoUmH78WQlxiU6Efm2+qM8/gmLk6Zhd2DeovZ6/pgcjBM ICE6eO+IEqDXB1GcH98qgQq3yyCKXn716jMhvi9TQ6cy33FhDrGrwN+puKWnI8Lb 3PzOUiNFJzYwMOdFiKVNrHAGrNXW8kJAJde7W66M3yR11/P+zqISChNreBwfjn91 yqJahyFfGw1UMttMKIQe5o6vORzntTPhhRSazAFGdXSfOnY7KgUtvs0dN8xxDnJv JZJYbs+0gORytJ+/75OrjDygjLh3m7Ownqoncq81z3qJuB34IoXTNFnFpLJTBQpu -----END CERTIFICATE-----Generated at Sat Oct 11 07:24:25 2025 by rpki-client