$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft File: 657b5e5f-0699-429f-8c83-a39c9a7a0322.mft (raw, json) Hash identifier: IclgmkApqmVAZzEqLEcDZVqUntLu5XWmOrVA8VC1pIg= Subject key identifier: 87:22:F4:2B:80:65:8B:F8:F7:FC:6A:D4:0D:F1:65:02:0B:53:6B:81 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584B74D9B6F0D1A7C2B5E432D540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft Manifest number: 010D0C9F4328584741ED8E70AEF6F5909F24C7CE Signing time: Wed 08 Oct 2025 19:00:03 +0000 Manifest this update: Wed 08 Oct 2025 19:00:03 +0000 Manifest next update: Fri 10 Oct 2025 19:00:00 +0000 Files and hashes: 1: 262cfe51-ecd6-3481-9e48-9f3cf3500b13.roa (hash: cECwxTSP9ehT8ZMsKXYbvvpikDT89/OgYHLHpivfAQ4=) 2: 657b5e5f-0699-429f-8c83-a39c9a7a0322.crl (hash: RVIi1Y8Q+B2jlufE/4qV6a+Dlwse9sDNZhC0RwbSr3c=) 3: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (hash: YJUj1MVZms9v9+I/ZYzSLff9uY+uco1FhyNZFBbq4Ew=) 4: cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa (hash: Yv35/oEL2RjPiWJocTKtKxwAR932u/EEWF38PzAYerI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:d9:b6:f0:d1:a7:c2:b5:e4:32:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Oct 8 19:00:03 2025 GMT Not After : Oct 10 19:00:00 2025 GMT Subject: CN=6b07365c-8ac5-40be-997a-7d641dd2c7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:0c:f0:c2:29:ae:ad:aa:0e:cf:9d:c8:93: fb:a6:dd:93:25:85:61:87:e4:bd:ad:75:10:b8:45: d0:69:44:da:42:92:08:b8:dc:aa:f2:c7:c6:a5:85: 84:91:3a:12:e4:6d:d2:38:42:4c:3a:e4:2f:5d:7f: e8:47:14:85:24:54:52:11:bf:64:02:f1:c9:92:b9: 89:97:78:7e:e6:0a:52:35:78:45:94:50:e7:b1:9e: 23:4a:21:46:a8:df:01:a7:64:d1:4b:a4:a1:3d:a8: 8f:5f:6b:d0:ff:b2:f6:4b:2c:85:04:9d:02:06:3a: c9:c1:29:a9:88:91:98:86:88:47:f0:44:0c:0b:43: 6a:ac:e5:9e:8e:8a:56:72:f6:27:d6:b4:f3:6c:52: df:bf:99:34:6d:9b:13:49:64:65:fb:8c:83:54:64: ff:6a:a4:56:8f:e0:22:8f:db:a8:a1:eb:7a:b0:80: 5b:e9:07:db:24:58:13:7c:ba:2c:a8:d7:20:83:3a: 7e:20:41:96:0c:77:7e:25:3f:8c:d0:0c:7e:2d:68: 62:ae:0d:66:62:ca:30:46:1c:9d:44:cf:66:d5:24: 2a:33:d1:b5:62:b4:ca:a6:fe:53:0b:8d:1d:12:34: 7d:41:5f:b5:fe:34:6f:1f:91:76:6b:33:ad:ab:d7: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:22:F4:2B:80:65:8B:F8:F7:FC:6A:D4:0D:F1:65:02:0B:53:6B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ef:a4:1d:25:61:da:ef:fc:2e:e7:e8:a9:65:d5:5e:7a:c8: 6f:bb:2f:d3:54:27:69:2c:f3:63:e4:ba:cd:32:17:81:5a:a0: 54:52:f8:41:a2:88:04:74:9f:b9:8c:cc:83:b1:d9:3e:4b:2b: 7c:20:da:8a:d5:58:5e:d3:7d:23:35:00:23:30:ff:05:d8:83: 9e:a7:17:9a:1f:da:6d:77:3e:3c:21:fa:8e:12:96:1f:ca:d9: d8:1b:01:28:ea:fe:54:8e:7d:68:f6:50:18:af:e3:89:5a:df: 59:4d:d7:2a:df:c1:2f:35:8a:82:8e:25:ef:91:2f:8b:13:8f: 2a:c4:08:f6:89:1d:b5:de:f0:e9:bc:53:ce:53:43:be:82:37: e7:2d:1d:83:ed:78:b1:f6:bd:aa:65:bf:ca:eb:5b:ca:78:8d: f7:9a:85:5d:28:19:22:27:1d:30:f3:e1:16:9a:07:06:7e:fc: 6e:de:95:e1:34:54:49:3b:5f:e1:8e:e4:01:6b:01:66:25:ec: d3:21:74:9d:9a:db:1b:a0:ec:05:ff:d4:7b:ac:fd:54:b4:a2: f9:70:38:22:c2:5d:c2:02:f1:16:5e:a4:8e:ea:e8:40:60:26: 48:a5:2b:cb:46:58:d0:69:e1:2d:04:21:e8:ca:0c:9b:10:75: 03:5c:fe:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt02bbw0afCteQy1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI1MTAwODE5MDAwM1oXDTI1MTAxMDE5MDAwMFowLzEtMCsGA1UEAxMk NmIwNzM2NWMtOGFjNS00MGJlLTk5N2EtN2Q2NDFkZDJjN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3kM8MIprq2qDs+dyJP7pt2TJYVhh+S9rXUQ uEXQaUTaQpIIuNyq8sfGpYWEkToS5G3SOEJMOuQvXX/oRxSFJFRSEb9kAvHJkrmJ l3h+5gpSNXhFlFDnsZ4jSiFGqN8Bp2TRS6ShPaiPX2vQ/7L2SyyFBJ0CBjrJwSmp iJGYhohH8EQMC0NqrOWejopWcvYn1rTzbFLfv5k0bZsTSWRl+4yDVGT/aqRWj+Ai j9uooet6sIBb6QfbJFgTfLosqNcggzp+IEGWDHd+JT+M0Ax+LWhirg1mYsowRhyd RM9m1SQqM9G1YrTKpv5TC40dEjR9QV+1/jRvH5F2azOtq9cLLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIci9CuAZYv49/xq1A3xZQILU2uBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvNjU3YjVlNWYtMDY5OS00 MjlmLThjODMtYTM5YzlhN2EwMzIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC876QdJWHa7/wu5+ipZdVe eshvuy/TVCdpLPNj5LrNMheBWqBUUvhBoogEdJ+5jMyDsdk+Syt8INqK1Vhe030j NQAjMP8F2IOepxeaH9ptdz48IfqOEpYfytnYGwEo6v5Ujn1o9lAYr+OJWt9ZTdcq 38EvNYqCjiXvkS+LE48qxAj2iR213vDpvFPOU0O+gjfnLR2D7Xix9r2qZb/K61vK eI33moVdKBkiJx0w8+EWmgcGfvxu3pXhNFRJO1/hjuQBawFmJezTIXSdmtsboOwF /9R7rP1UtKL5cDgiwl3CAvEWXqSO6uhAYCZIpSvLRljQaeEtBCHoygybEHUDXP7q -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:48 2025 by rpki-client