$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft File: a120b5d4-da56-49b1-8ae1-7987a6afde99.mft (raw, json) Hash identifier: UcbC4bzBqyua1cUJj1UluQ1g6MjVnIFcPfLTwNaiGdA= Subject key identifier: 23:55:14:A3:8A:DA:E8:CE:FC:D6:FC:88:6F:34:3D:A3:3C:A5:73:8E Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Certificate serial: 010D0C9F4328584B7268584D1778D42995512E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft Manifest number: 010D0C9F43285843EC2B3B6AE919C88C87F39143 Signing time: Tue 07 Oct 2025 22:00:03 +0000 Manifest this update: Tue 07 Oct 2025 22:00:03 +0000 Manifest next update: Fri 10 Oct 2025 22:00:00 +0000 Files and hashes: 1: a120b5d4-da56-49b1-8ae1-7987a6afde99.crl (hash: Eq/R9V5xD3AI3wC/XC5PzT09RUMSvdc7sfHZY4Lh0hE=) 2: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (hash: /Zx4+keOXnHmH644Qzmwgw7wvbTpFDd3vL5jh/cMfp0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:68:58:4d:17:78:d4:29:95:51:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Validity Not Before: Oct 7 22:00:03 2025 GMT Not After : Oct 10 22:00:00 2025 GMT Subject: CN=2c08e6ff-867e-4ab4-9d36-1ee71132b3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:15:74:e4:5b:9e:85:9d:32:a0:75:54:ae: c2:2b:17:f7:9f:53:ed:db:20:03:ee:25:d5:60:b1: 0a:f8:3a:f9:a4:2a:a6:fc:3a:39:95:41:08:e9:72: 3d:41:c9:1e:ca:c1:da:aa:56:92:d6:dd:87:e6:3e: ef:c1:39:66:3a:2f:4d:e9:88:9c:6e:14:20:c5:03: da:8e:88:53:0d:07:e0:27:86:e7:9d:4c:7c:ff:ff: 6d:b0:e6:48:dd:55:c9:ed:cd:60:77:89:c0:11:a8: 1f:80:33:e2:3f:33:ac:ac:1c:5a:1e:3a:bd:bd:99: 02:49:46:77:30:ce:6a:06:06:ea:c1:e9:fe:35:06: 1b:2a:5d:e7:83:a6:b2:b0:24:54:06:05:bd:3c:01: 97:ff:90:e2:9d:0d:4c:14:23:4b:44:d7:44:03:ba: 36:56:63:7f:da:e2:5b:04:c2:3d:f8:24:31:48:0f: af:35:21:dc:40:87:dd:64:63:49:55:d4:da:f7:4a: 7b:ee:e8:67:10:6a:02:3c:4d:10:45:a3:ab:30:cf: 32:de:09:3b:77:a1:27:18:de:1d:52:06:2f:30:29: da:fc:f3:d5:6c:8b:0b:a1:42:09:11:59:9a:07:f3: d9:8d:2c:2d:c6:20:b8:21:3f:5a:c1:16:e2:7f:25: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:14:A3:8A:DA:E8:CE:FC:D6:FC:88:6F:34:3D:A3:3C:A5:73:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl X509v3 Authority Key Identifier: keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:2b:5d:86:b7:a8:33:55:4e:b6:51:d1:ef:fa:58:35:a5:b2: 14:7d:31:33:4b:3e:2f:27:53:56:2b:db:7b:58:08:d0:40:a6: 71:4c:64:b0:bf:8a:c4:14:ac:8b:fe:32:81:b0:95:24:ad:80: 09:10:66:7c:c1:1f:ac:1f:0c:05:b1:b5:1b:f1:4a:b4:b8:fe: 1e:ae:df:ae:ba:6c:10:bc:e9:3f:79:99:ff:89:b0:57:30:c6: 4d:f8:e4:e8:a0:ad:75:b0:99:25:ec:bf:4c:15:b1:d0:6e:ca: 85:6e:3c:5a:03:8e:55:04:b9:d4:e6:52:17:c1:9b:a8:ef:bb: 61:02:ff:2c:52:e0:c1:72:de:5f:d9:6c:93:9e:35:9b:de:db: 03:1f:9f:3a:08:9b:8d:8c:34:eb:35:09:64:f7:b8:fe:cb:94: 24:6f:43:f8:62:20:92:33:6d:11:c2:43:98:0d:38:7c:a2:cc: 59:dd:a6:35:b0:89:9b:5d:ed:8a:16:98:09:b1:8b:fa:b6:75: 8a:20:12:87:91:1c:6e:62:34:6a:86:52:d6:77:3f:0f:9d:04: 0b:ae:c0:03:79:67:1b:52:11:04:7b:49:3c:21:27:75:80:f4: d3:c3:c0:16:06:7e:f8:4f:e3:9b:c0:3b:a0:c7:dd:93:14:d3: a2:f7:e7:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtyaFhNF3jUKZVRLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk ZTk5MB4XDTI1MTAwNzIyMDAwM1oXDTI1MTAxMDIyMDAwMFowLzEtMCsGA1UEAxMk MmMwOGU2ZmYtODY3ZS00YWI0LTlkMzYtMWVlNzExMzJiM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5wVdORbnoWdMqB1VK7CKxf3n1Pt2yAD7iXV YLEK+Dr5pCqm/Do5lUEI6XI9QckeysHaqlaS1t2H5j7vwTlmOi9N6YicbhQgxQPa johTDQfgJ4bnnUx8//9tsOZI3VXJ7c1gd4nAEagfgDPiPzOsrBxaHjq9vZkCSUZ3 MM5qBgbqwen+NQYbKl3ng6aysCRUBgW9PAGX/5DinQ1MFCNLRNdEA7o2VmN/2uJb BMI9+CQxSA+vNSHcQIfdZGNJVdTa90p77uhnEGoCPE0QRaOrMM8y3gk7d6EnGN4d UgYvMCna/PPVbIsLoUIJEVmaB/PZjSwtxiC4IT9awRbifyV+rQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNVFKOK2ujO/Nb8iG80PaM8pXOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYTEyMGI1ZDQtZGE1Ni00 OWIxLThhZTEtNzk4N2E2YWZkZTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3 YTZhZmRlOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDWK12Gt6gzVU62UdHv+lg1 pbIUfTEzSz4vJ1NWK9t7WAjQQKZxTGSwv4rEFKyL/jKBsJUkrYAJEGZ8wR+sHwwF sbUb8Uq0uP4ert+uumwQvOk/eZn/ibBXMMZN+OTooK11sJkl7L9MFbHQbsqFbjxa A45VBLnU5lIXwZuo77thAv8sUuDBct5f2WyTnjWb3tsDH586CJuNjDTrNQlk97j+ y5Qkb0P4YiCSM20RwkOYDTh8osxZ3aY1sImbXe2KFpgJsYv6tnWKIBKHkRxuYjRq hlLWdz8PnQQLrsADeWcbUhEEe0k8ISd1gPTTw8AWBn74T+ObwDugx92TFNOi9+cK -----END CERTIFICATE-----Generated at Wed Oct 8 17:29:04 2025 by rpki-client