$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft File: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft (raw, json) Hash identifier: OnmflhBTTAUwQsgux/hqyhYDfLTLAg/3FiUE8cFWCv8= Subject key identifier: 5D:9A:41:8E:06:76:13:C3:13:0C:5B:93:47:68:36:31:0C:FA:2F:12 Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584B7768D75DEA446911D7E9C800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft Manifest number: 010D0C9F432858440A57C730C85A71D2060E3AB2 Signing time: Thu 09 Oct 2025 17:00:03 +0000 Manifest this update: Thu 09 Oct 2025 17:00:03 +0000 Manifest next update: Sat 11 Oct 2025 17:00:00 +0000 Files and hashes: 1: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl (hash: DDWDKNE53jS57V8WaHEbpIHaqjnJGa4ckJSCKstPHXE=) 2: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (hash: v9sljOa4hwcisi04S1uwGEK+FoezM+VPsPU+lhY8jPc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:68:d7:5d:ea:44:69:11:d7:e9:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: Oct 9 17:00:03 2025 GMT Not After : Oct 11 17:00:00 2025 GMT Subject: CN=f0439285-4817-4043-8792-c2065b087bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:ac:f4:58:cb:ec:a8:b6:f1:56:13:5c:61: 4a:97:23:d6:2f:85:8d:eb:ae:db:6d:c9:b5:1c:48: 26:f0:3e:f6:8e:cc:e7:90:e7:9c:8d:fa:b9:a9:3a: f8:f2:f9:c9:78:d1:1d:d0:1c:c2:45:c8:6c:a2:d1: 0f:eb:15:c9:8e:45:b2:d4:44:41:26:8e:39:ee:7e: 4c:0d:97:b3:d5:15:06:61:e8:25:60:fc:1c:10:6a: 6e:a0:4b:88:0b:e8:1c:dd:97:27:dd:de:dc:22:ac: 7c:3b:6b:47:94:2e:78:f2:2a:b3:5a:78:aa:cd:a8: c2:d2:e1:9b:1c:02:10:0f:33:13:99:23:9b:f8:4b: 99:ed:ec:ae:70:9c:89:56:cc:5c:e3:2e:10:e2:68: e8:11:f9:77:c2:15:b3:da:85:ce:60:41:9c:65:10: de:a2:db:8d:54:05:ce:5a:da:22:ba:75:c8:06:2e: 57:42:d4:97:80:00:f0:4f:84:d3:51:b9:5a:bf:f3: eb:67:4d:46:fd:8c:5d:f3:d8:15:b2:66:c5:b8:df: 50:1a:8c:39:88:ab:49:91:8c:e1:9d:de:60:29:61: dc:41:69:16:ae:d1:ea:bb:38:d5:45:3a:13:32:1d: 97:72:59:2f:70:43:3c:0f:f7:52:62:42:ef:b2:90: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9A:41:8E:06:76:13:C3:13:0C:5B:93:47:68:36:31:0C:FA:2F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:29:69:d7:a1:4e:7e:1f:3f:de:61:ae:58:2a:ee:8b:ab:52: d3:b5:71:e7:35:b4:1e:9b:52:62:67:2f:b7:a2:77:9d:1b:94: 05:31:48:cd:e9:66:67:56:27:42:65:ca:a2:3c:d8:92:9a:27: 0d:1e:10:8c:16:72:76:ab:37:c1:1b:9c:fb:08:70:d4:0d:23: d0:9b:0c:8a:55:3f:71:5e:dd:61:38:83:bc:52:9a:33:a5:b1: f4:2e:7f:af:fa:a8:65:e4:5e:a9:a1:20:f8:c2:e9:e3:09:fb: 57:c3:a3:f3:2a:24:d9:e4:52:bb:40:4a:5e:a2:f0:b4:5b:e4: ca:44:d5:76:0e:8f:76:4e:87:6a:63:f4:32:19:03:46:3d:4a: a9:dd:9b:8e:15:8e:4f:16:82:16:51:d5:77:79:46:0d:10:ee: d2:e1:4c:65:f7:d6:f9:49:96:08:ff:f6:b6:84:12:56:0f:dd: 7f:d2:cd:ba:6e:6b:2f:30:dc:d9:ce:96:ff:b8:9d:66:df:18: 0c:0a:70:d2:1b:33:bb:46:4d:1e:d2:84:cd:c1:c8:41:4f:bd: 6b:31:2e:c3:cb:6e:72:8a:db:2d:a7:18:85:6c:29:96:14:0d: 30:7b:79:30:60:c2:86:ce:e3:23:fb:10:d7:7c:8b:a5:9a:05: e1:bb:9e:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3aNdd6kRpEdfpyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI1MTAwOTE3MDAwM1oXDTI1MTAxMTE3MDAwMFowLzEtMCsGA1UEAxMk ZjA0MzkyODUtNDgxNy00MDQzLTg3OTItYzIwNjViMDg3YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl2s9FjL7Ki28VYTXGFKlyPWL4WN667bbcm1 HEgm8D72jsznkOecjfq5qTr48vnJeNEd0BzCRchsotEP6xXJjkWy1ERBJo457n5M DZez1RUGYeglYPwcEGpuoEuIC+gc3Zcn3d7cIqx8O2tHlC548iqzWniqzajC0uGb HAIQDzMTmSOb+EuZ7eyucJyJVsxc4y4Q4mjoEfl3whWz2oXOYEGcZRDeotuNVAXO WtoiunXIBi5XQtSXgADwT4TTUblav/PrZ01G/Yxd89gVsmbFuN9QGow5iKtJkYzh nd5gKWHcQWkWrtHquzjVRToTMh2XclkvcEM8D/dSYkLvspByQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2aQY4GdhPDEwxbk0doNjEM+i8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYTJiMmU1MzktYzgxYS00 OGNkLTk1YTUtN2UzZWFlOGFkMmQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/KWnXoU5+Hz/eYa5YKu6L q1LTtXHnNbQem1JiZy+3onedG5QFMUjN6WZnVidCZcqiPNiSmicNHhCMFnJ2qzfB G5z7CHDUDSPQmwyKVT9xXt1hOIO8UpozpbH0Ln+v+qhl5F6poSD4wunjCftXw6Pz KiTZ5FK7QEpeovC0W+TKRNV2Do92TodqY/QyGQNGPUqp3ZuOFY5PFoIWUdV3eUYN EO7S4Uxl99b5SZYI//a2hBJWD91/0s26bmsvMNzZzpb/uJ1m3xgMCnDSGzO7Rk0e 0oTNwchBT71rMS7Dy25yitstpxiFbCmWFA0we3kwYMKGzuMj+xDXfIulmgXhu57s -----END CERTIFICATE-----Generated at Fri Oct 10 17:30:03 2025 by rpki-client