$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft File: a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft (raw, json) Hash identifier: YTYIpFVvIhWmfL5ejOY6A6anwZoIIpGnFxnbxTwzBzo= Subject key identifier: 7A:6D:0F:34:26:6F:F2:C8:49:C1:1B:EF:9D:66:A5:20:83:38:12:79 Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 Certificate issuer: /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Certificate serial: 010D0C9F4328584B785719C3C5BFEDEC67C75400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft Manifest number: 010D0C9F4328584073A8340FD2B65F21CD12F48C Signing time: Fri 10 Oct 2025 01:00:08 +0000 Manifest this update: Fri 10 Oct 2025 01:00:08 +0000 Manifest next update: Mon 13 Oct 2025 01:00:00 +0000 Files and hashes: 1: a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl (hash: lLJ2s4BNXUrhP6xLCGSADEHMHPqRi9lXDIbm5N96iAc=) 2: fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (hash: SE0h7yAkAgUMPJV1EcUcuHRSKa42NXxMM+B+Rw5oPuA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:19:c3:c5:bf:ed:ec:67:c7:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Validity Not Before: Oct 10 01:00:08 2025 GMT Not After : Oct 13 01:00:00 2025 GMT Subject: CN=ed23f8a6-ab39-45b8-a25f-36e5a1e03682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:6d:67:13:fb:f5:39:80:ce:5b:bb:36:ea: 10:8c:43:b9:16:2a:5a:2e:b1:e8:11:9a:0f:92:9e: 33:b3:99:12:16:16:c2:0e:96:3d:73:1c:05:2c:a5: 5d:15:74:f2:0f:7e:53:bd:6f:f4:da:18:f7:c7:89: 77:4a:5b:6a:dc:b3:1f:da:91:74:dd:eb:ef:75:f0: 77:a1:b1:29:f3:fa:41:4b:1a:94:db:49:8f:7d:6c: 0c:8e:2e:c5:82:ad:b6:14:92:10:0f:b7:c0:8d:b3: b1:7f:7a:4b:58:92:2c:ba:ad:87:83:c1:67:f4:f0: e7:2d:f7:66:0e:a5:5e:67:83:71:c7:44:27:81:c0: 2c:65:74:44:d3:b0:b2:e2:0b:91:48:b4:e2:09:d0: 75:9f:6e:f6:b0:83:75:87:31:0c:56:06:76:3b:8d: 9a:cd:ca:60:10:93:c3:7e:f2:5c:94:0f:85:22:36: 91:59:c4:78:fe:31:dc:bf:d1:38:21:6c:fb:e6:c2: c0:b1:55:3f:00:6a:41:af:5a:03:5f:c1:eb:f6:60: 3f:07:b7:cb:37:27:d7:09:40:c0:62:ca:1f:be:92: 44:e6:ca:9f:13:d4:da:d0:21:ab:48:9c:18:5b:1a: b3:da:95:c3:83:51:da:39:2f:d0:b9:10:15:25:b8: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6D:0F:34:26:6F:F2:C8:49:C1:1B:EF:9D:66:A5:20:83:38:12:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl X509v3 Authority Key Identifier: keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a1:91:66:ad:ef:f5:28:91:f4:6e:19:68:07:07:36:72:04: 01:54:1a:90:0a:4d:d6:5d:83:fc:f2:19:c3:9b:8d:6a:16:2b: 44:1e:2f:45:ae:87:b3:7a:90:36:44:16:49:db:3b:f7:e2:ac: 5b:0f:d9:5c:c7:13:0f:33:e3:e9:74:bd:26:7f:b5:e8:be:77: f1:a9:56:ca:90:cc:6e:0e:c1:ca:9c:27:d0:82:b0:af:68:b1: 9c:3c:35:69:92:d6:25:07:86:1f:9e:a1:5b:a3:90:42:a1:86: 75:9a:a5:4d:43:2b:1c:38:fd:0d:8e:b3:7b:3d:9d:59:09:4a: 56:fe:c6:4b:2d:f6:87:f6:75:cd:04:a4:9e:0c:c7:1e:cc:18: 29:dc:1f:f3:bc:8c:a0:32:00:11:80:1f:11:c2:34:1a:99:2b: 17:d3:c1:f9:38:af:57:c1:e6:49:f4:a3:a9:61:8c:5e:b4:74: 45:d4:94:e6:ad:15:f8:1b:bf:1c:da:fd:31:98:27:71:c8:45: 69:ab:40:c0:3e:fe:3f:3e:65:bc:17:9d:8f:2e:db:ea:6a:0d: 93:25:6b:ca:fa:53:68:47:00:0b:b3:71:ce:21:b6:5e:74:16: 18:40:49:dd:ff:7e:ee:a6:d1:67:cb:28:f5:b8:b5:00:f4:99: 20:2b:ef:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt4VxnDxb/t7GfHVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjMzNjMDgtYjI3YS00MTIwLTlhZjAtZTJjM2VlZjI3 MTNlMB4XDTI1MTAxMDAxMDAwOFoXDTI1MTAxMzAxMDAwMFowLzEtMCsGA1UEAxMk ZWQyM2Y4YTYtYWIzOS00NWI4LWEyNWYtMzZlNWExZTAzNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqFtZxP79TmAzlu7NuoQjEO5FipaLrHoEZoP kp4zs5kSFhbCDpY9cxwFLKVdFXTyD35TvW/02hj3x4l3Sltq3LMf2pF03evvdfB3 obEp8/pBSxqU20mPfWwMji7Fgq22FJIQD7fAjbOxf3pLWJIsuq2Hg8Fn9PDnLfdm DqVeZ4Nxx0QngcAsZXRE07Cy4guRSLTiCdB1n272sIN1hzEMVgZ2O42azcpgEJPD fvJclA+FIjaRWcR4/jHcv9E4IWz75sLAsVU/AGpBr1oDX8Hr9mA/B7fLNyfXCUDA YsofvpJE5sqfE9Ta0CGrSJwYWxqz2pXDg1HaOS/QuRAVJbgOhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHptDzQmb/LIScEb751mpSCDOBJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMz M2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMzZWVmMjcxM2UvYTFjMzNjMDgtYjI3YS00 MTIwLTlhZjAtZTJjM2VlZjI3MTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFjMzNjMDgtYjI3YS00MTIwLTlh ZjAtZTJjM2VlZjI3MTNlL2ExYzMzYzA4LWIyN2EtNDEyMC05YWYwLWUyYzNlZWYy NzEzZS5jcmwwHwYDVR0jBBgwFoAUI9SA/n2IIi/i7W/sxh+R853mAvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMzM2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMz ZWVmMjcxM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfoZFmre/1KJH0bhloBwc2 cgQBVBqQCk3WXYP88hnDm41qFitEHi9FroezepA2RBZJ2zv34qxbD9lcxxMPM+Pp dL0mf7XovnfxqVbKkMxuDsHKnCfQgrCvaLGcPDVpktYlB4YfnqFbo5BCoYZ1mqVN QyscOP0NjrN7PZ1ZCUpW/sZLLfaH9nXNBKSeDMcezBgp3B/zvIygMgARgB8RwjQa mSsX08H5OK9XweZJ9KOpYYxetHRF1JTmrRX4G78c2v0xmCdxyEVpq0DAPv4/PmW8 F52PLtvqag2TJWvK+lNoRwALs3HOIbZedBYYQEnd/37uptFnyyj1uLUA9JkgK+/H -----END CERTIFICATE-----Generated at Fri Oct 10 17:58:42 2025 by rpki-client