$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft File: 161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft (raw, json) Hash identifier: BYC4UeF6Ne1sknf8VTr13G518Fdt7X+zXZ5a0GtZ8gc= Subject key identifier: C4:3C:28:E9:1E:87:96:B9:69:C8:31:D7:46:A7:1C:6E:38:13:52:9B Authority key identifier: 3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 Certificate issuer: /CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Certificate serial: 010D0C9F4328584B76D3F1888596B32AF4FF3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft Manifest number: 010D0C9F43285847282F95059FE4211372E35C13 Signing time: Thu 09 Oct 2025 12:00:03 +0000 Manifest this update: Thu 09 Oct 2025 12:00:03 +0000 Manifest next update: Sat 11 Oct 2025 12:00:00 +0000 Files and hashes: 1: 161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl (hash: srYjGlSvrnB5wHl3T13OCB/f8hNbWRBmXbjGCwGfZCE=) 2: c4eecb44-9468-327d-a4e0-79328177a32f.roa (hash: M5q/qWA7wflTJQBZHe+aGDbIMGqI54p7cBd3FIFGwXg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:d3:f1:88:85:96:b3:2a:f4:ff:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Validity Not Before: Oct 9 12:00:03 2025 GMT Not After : Oct 11 12:00:00 2025 GMT Subject: CN=4f95d7f8-63c3-4c15-a4f8-5f0652e83ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2a:a7:48:79:c0:5a:7b:31:50:59:7e:d3:c4: bb:b0:a4:d7:dc:4e:8f:be:b7:8d:4b:9c:31:92:7b: 5c:8f:25:2d:52:22:8d:83:bc:f0:f5:a1:a3:44:3c: 52:5b:ad:bf:6f:70:0e:32:e6:21:e5:66:1e:e4:6b: 57:6d:0e:45:ce:d9:79:c5:bf:dd:a3:ac:f0:3c:b3: bf:13:68:d8:29:4d:39:13:97:ac:0c:fb:a1:c9:e5: d8:e2:35:de:cd:57:e3:50:a3:ea:d5:72:35:f8:44: 7e:60:ff:37:c9:69:b5:02:66:08:1b:73:8c:fd:c4: fe:ee:4b:53:29:71:e7:4a:df:9f:97:61:98:df:cb: 1c:e0:a7:a7:0c:47:56:01:29:d5:d9:65:aa:32:1f: 2d:1b:fb:b8:f5:fe:4c:02:57:8a:3d:47:f7:79:ce: ea:0d:28:91:ce:4d:20:79:8a:e3:9e:3b:e9:9c:3d: 45:5f:74:7c:42:8f:cb:d0:66:79:bb:3d:ed:36:cf: ff:69:43:99:76:a0:bf:b9:40:52:f9:57:99:62:d4: 75:85:90:6b:82:8a:0d:03:16:97:31:b1:18:cb:5d: 46:55:46:1b:fd:59:4f:c7:9e:c1:59:6a:f9:19:4f: f3:b9:8b:2d:b5:f1:37:6f:bb:48:f6:a9:32:f0:93: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:28:E9:1E:87:96:B9:69:C8:31:D7:46:A7:1C:6E:38:13:52:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.crl X509v3 Authority Key Identifier: keyid:3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:38:4a:cf:7a:c8:ee:39:c2:08:bc:65:49:e3:14:f3:48:5a: 41:c7:2d:cd:04:d9:31:af:b1:d7:01:6c:16:30:db:9d:b5:52: 3b:e7:e8:77:cf:f7:0d:67:36:39:dc:8c:95:81:71:04:c2:78: 88:0d:77:2b:9d:11:da:d7:3e:2f:4e:97:4b:51:2d:2d:c8:2d: da:8f:fc:35:d9:a0:e8:3c:c6:04:d5:ec:85:db:57:34:aa:b5: d7:04:f9:42:f3:ba:6b:db:87:25:fb:7f:dd:44:a5:15:d5:70: b6:b8:05:a7:8c:16:af:ba:eb:a9:67:cf:78:bb:3e:47:42:46: 42:90:cf:77:e3:94:9e:9e:07:79:59:31:df:56:ea:6a:a3:45: 53:36:c4:b9:f8:18:51:b8:37:fc:f5:c1:76:4e:c0:4d:3b:95: f1:11:27:c3:c2:53:1f:2c:3e:e3:fd:48:32:83:3f:85:09:5e: 3d:07:f1:da:f6:74:43:8f:a4:be:c8:cc:39:3d:c1:fd:7c:fb: 22:46:6c:1c:19:b2:73:9f:0f:a2:91:f5:cc:f1:53:12:df:53: 03:1f:6f:ea:bd:87:6d:05:c8:f7:a6:6e:88:30:41:f5:7c:3b: 2c:63:2b:6c:62:43:40:d3:98:4b:46:f2:57:a9:4d:8d:54:3d: d8:74:e7:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt20/GIhZazKvT/NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxYjhiMjctN2M1ZS00ZjA3LTk5MDMtYjQyNWVlOWVh MWEzMB4XDTI1MTAwOTEyMDAwM1oXDTI1MTAxMTEyMDAwMFowLzEtMCsGA1UEAxMk NGY5NWQ3ZjgtNjNjMy00YzE1LWE0ZjgtNWYwNjUyZTgzYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSqnSHnAWnsxUFl+08S7sKTX3E6PvreNS5wx kntcjyUtUiKNg7zw9aGjRDxSW62/b3AOMuYh5WYe5GtXbQ5Fztl5xb/do6zwPLO/ E2jYKU05E5esDPuhyeXY4jXezVfjUKPq1XI1+ER+YP83yWm1AmYIG3OM/cT+7ktT KXHnSt+fl2GY38sc4KenDEdWASnV2WWqMh8tG/u49f5MAleKPUf3ec7qDSiRzk0g eYrjnjvpnD1FX3R8Qo/L0GZ5uz3tNs//aUOZdqC/uUBS+VeZYtR1hZBrgooNAxaX MbEYy11GVUYb/VlPx57BWWr5GU/zuYsttfE3b7tI9qky8JOrRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMQ8KOkeh5a5acgx10anHG44E1KbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNjFi OGIyNy03YzVlLTRmMDctOTkwMy1iNDI1ZWU5ZWExYTMvMTYxYjhiMjctN2M1ZS00 ZjA3LTk5MDMtYjQyNWVlOWVhMWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTYxYjhiMjctN2M1ZS00ZjA3LTk5 MDMtYjQyNWVlOWVhMWEzLzE2MWI4YjI3LTdjNWUtNGYwNy05OTAzLWI0MjVlZTll YTFhMy5jcmwwHwYDVR0jBBgwFoAUO2tLi+c+KqDXWvN+ilZy2VtYaZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNjFiOGIyNy03YzVlLTRmMDctOTkwMy1iNDI1 ZWU5ZWExYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4OErPesjuOcIIvGVJ4xTz SFpBxy3NBNkxr7HXAWwWMNudtVI75+h3z/cNZzY53IyVgXEEwniIDXcrnRHa1z4v TpdLUS0tyC3aj/w12aDoPMYE1eyF21c0qrXXBPlC87pr24cl+3/dRKUV1XC2uAWn jBavuuupZ894uz5HQkZCkM9345Sengd5WTHfVupqo0VTNsS5+BhRuDf89cF2TsBN O5XxESfDwlMfLD7j/Ugygz+FCV49B/Ha9nRDj6S+yMw5PcH9fPsiRmwcGbJznw+i kfXM8VMS31MDH2/qvYdtBcj3pm6IMEH1fDssYytsYkNA05hLRvJXqU2NVD3YdOet -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:23 2025 by rpki-client