$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: s0xbewHa/45HgHSg+sei2V33auVKLn829/DVkYOVy30= Subject key identifier: FF:52:C4:A2:BD:43:03:D0:71:72:84:11:1C:55:6B:8E:F6:4A:0C:23 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584B79F7F265BBF25CFCA04715C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697F2A Signing time: Fri 10 Oct 2025 15:00:04 +0000 Manifest this update: Fri 10 Oct 2025 15:00:04 +0000 Manifest next update: Mon 13 Oct 2025 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: b1dl9fEpjJpNuvSIiaOkfrZEOV0RDjHGd627nUdUPiE=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: rzSTWg0nZqyUt253r/b7cEdATCeW2mlDv3M7lwCEnWM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f7:f2:65:bb:f2:5c:fc:a0:47:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Oct 10 15:00:04 2025 GMT Not After : Oct 13 15:00:00 2025 GMT Subject: CN=d3b64781-a757-47c7-a5fc-46c9ca1cd5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:c4:5a:88:4e:25:09:2e:b5:fd:bf:2c:78: 55:0a:ed:d0:f3:74:4a:36:f4:f9:20:75:e0:e8:9e: 0c:fc:05:9a:98:d4:00:74:23:af:49:53:22:93:fd: ee:23:2d:fe:95:2b:c2:7c:4b:2c:50:70:cf:11:9d: 39:a5:d9:9b:2f:75:34:df:39:cf:49:6a:b6:7b:ee: 6c:75:02:af:9b:35:07:a0:8c:70:b5:30:c2:0d:93: 11:0c:cb:44:42:59:9a:68:8a:38:ff:de:a4:ac:dc: 57:cb:fb:c4:18:2a:81:76:84:19:53:18:f3:79:64: fc:cf:58:d7:91:70:1b:0e:c4:e6:1a:02:09:6c:9c: dc:37:67:40:21:1a:39:f2:69:3c:eb:76:ce:2c:70: 54:3e:66:d7:2a:3f:4f:81:87:28:f0:3b:ec:19:29: ac:1c:7d:d4:c0:e1:46:b1:cf:47:40:e3:98:79:43: 36:98:68:24:e9:85:5e:d3:6f:be:a7:05:b4:b1:4e: ce:d0:65:0a:14:47:c2:ea:86:bc:88:68:49:80:61: c7:e7:bf:d6:e8:3e:ec:b2:a5:45:30:aa:18:cc:84: 8d:b3:da:e8:49:3d:d6:ad:83:ac:80:ad:74:58:c0: f2:a8:4f:a4:65:f8:90:fb:39:18:1f:0d:a6:44:a7: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:C4:A2:BD:43:03:D0:71:72:84:11:1C:55:6B:8E:F6:4A:0C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:42:9e:0e:39:3e:3f:7c:14:9f:c3:d7:c2:bf:0b:7a:cd:34: 32:79:f1:d6:35:04:6c:d6:1d:f6:42:b7:e8:c6:69:b0:b6:40: 4c:15:a8:ba:55:48:45:58:c4:ec:27:9e:c3:70:f5:08:e5:79: 11:29:f9:4a:17:35:df:de:04:00:65:3d:58:e2:a9:58:6c:7e: f2:a1:9f:8c:58:d6:49:1a:31:3c:03:80:fd:bf:d7:7e:43:8c: 5e:53:77:a8:9e:f1:d3:ae:84:d7:17:66:b3:dd:1c:de:d1:2b: 26:26:34:a3:5f:39:ec:81:6f:f3:2c:59:5d:17:33:73:3f:61: 22:bc:75:3f:ab:7c:58:d7:a7:4e:d5:ad:29:11:d3:67:d2:19: 5a:8d:6e:b0:47:f7:eb:c8:aa:d3:41:f2:e6:7d:93:83:1c:df: d9:37:f3:ef:c5:39:3a:f2:86:52:49:c1:e6:94:ab:47:3f:b3: 41:47:de:7b:14:92:dd:2a:98:b2:85:a4:2c:4b:a5:16:98:6a: f8:84:ac:7e:f8:f2:75:6f:f6:67:b8:36:6b:42:2f:13:75:10: f0:91:2e:cd:4a:a1:ff:9a:fb:18:a1:1d:45:62:fd:4d:b0:7a: 4f:4d:ac:a7:56:51:1f:91:f8:68:b6:4d:63:5f:c5:ac:b7:8c: cf:61:58:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt59/Jlu/Jc/KBHFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MTAxMDE1MDAwNFoXDTI1MTAxMzE1MDAwMFowLzEtMCsGA1UEAxMk ZDNiNjQ3ODEtYTc1Ny00N2M3LWE1ZmMtNDZjOWNhMWNkNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnnEWohOJQkutf2/LHhVCu3Q83RKNvT5IHXg 6J4M/AWamNQAdCOvSVMik/3uIy3+lSvCfEssUHDPEZ05pdmbL3U03znPSWq2e+5s dQKvmzUHoIxwtTDCDZMRDMtEQlmaaIo4/96krNxXy/vEGCqBdoQZUxjzeWT8z1jX kXAbDsTmGgIJbJzcN2dAIRo58mk863bOLHBUPmbXKj9PgYco8DvsGSmsHH3UwOFG sc9HQOOYeUM2mGgk6YVe02++pwW0sU7O0GUKFEfC6oa8iGhJgGHH57/W6D7ssqVF MKoYzISNs9roST3WrYOsgK10WMDyqE+kZfiQ+zkYHw2mRKeowQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP9SxKK9QwPQcXKEERxVa472SgwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrQp4OOT4/fBSfw9fCvwt6 zTQyefHWNQRs1h32QrfoxmmwtkBMFai6VUhFWMTsJ57DcPUI5XkRKflKFzXf3gQA ZT1Y4qlYbH7yoZ+MWNZJGjE8A4D9v9d+Q4xeU3eonvHTroTXF2az3Rze0SsmJjSj XznsgW/zLFldFzNzP2EivHU/q3xY16dO1a0pEdNn0hlajW6wR/fryKrTQfLmfZOD HN/ZN/PvxTk68oZSScHmlKtHP7NBR957FJLdKpiyhaQsS6UWmGr4hKx++PJ1b/Zn uDZrQi8TdRDwkS7NSqH/mvsYoR1FYv1NsHpPTaynVlEfkfhotk1jX8Wst4zPYVhg -----END CERTIFICATE-----Generated at Fri Oct 10 16:37:05 2025 by rpki-client