$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft File: c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft (raw, json) Hash identifier: 1yTZw2kUns9LGsROfbQO/tqFxzZxuSAH54BdKma6Dg4= Subject key identifier: 68:52:7F:81:ED:F7:DE:22:32:D3:86:5B:F1:AF:70:63:0E:FE:66:B4 Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F4328584B7892AA26C09BE29B43A54E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft Manifest number: 010D0C9F432858436C5C98624A18C626B8CFE3ED Signing time: Fri 10 Oct 2025 03:00:08 +0000 Manifest this update: Fri 10 Oct 2025 03:00:08 +0000 Manifest next update: Mon 13 Oct 2025 03:00:00 +0000 Files and hashes: 1: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (hash: cQjzgOzgo+1KFPCYuuyJTXHWV598DDvH04F39fTy9hw=) 2: c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl (hash: BujZrnxLnFM34jHtnmAjKCYfy/6Zjk0CnQBC+vjnPF0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:92:aa:26:c0:9b:e2:9b:43:a5:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Oct 10 03:00:08 2025 GMT Not After : Oct 13 03:00:00 2025 GMT Subject: CN=3f05c9fc-9152-49ae-9b3e-c047d5a7a82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:5b:81:e0:7e:60:3d:2a:2b:79:75:66:44: 04:93:20:82:08:02:c8:6f:a1:5a:3a:4d:28:4e:70: f1:cb:e8:55:4a:52:75:61:40:13:93:25:99:0e:61: 52:2a:0e:fc:58:0f:e4:c6:d5:93:12:a5:50:19:d8: 2d:3e:46:42:a9:c4:9d:99:22:b5:a8:e6:38:c1:7d: fe:41:18:c9:5e:8c:62:35:63:bd:dd:20:4d:0d:0c: ef:ce:cf:c1:e8:4e:f8:bf:98:51:a4:59:1a:30:a5: 1e:db:90:ab:6e:cc:50:f9:89:e2:1f:dd:7c:28:96: 94:d8:67:77:d9:a2:00:8b:e8:98:5e:42:ec:1b:f8: 73:a9:3b:35:34:5b:ff:f7:67:8e:5d:bd:44:2a:45: 3a:71:32:fc:f7:68:79:84:b9:2d:29:ef:10:eb:84: b9:04:d6:7d:e1:41:0d:04:9e:93:5d:0b:a6:c0:1f: 2a:97:6a:ea:16:fa:b8:7f:f6:b2:5d:f2:8e:8e:cd: 47:d2:28:31:b5:61:f3:9b:0d:4f:b4:b0:31:9b:ef: 65:b0:30:11:45:20:47:d4:09:c6:35:57:2e:d1:5b: 75:ab:f5:30:c9:54:13:da:ce:45:a5:97:dc:ec:05: 58:87:68:a2:ef:3a:17:e4:01:3d:4c:7f:ba:84:21: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:52:7F:81:ED:F7:DE:22:32:D3:86:5B:F1:AF:70:63:0E:FE:66:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:50:ac:49:3a:8a:28:ad:bb:16:c6:86:8e:01:d0:ef:d2:fd: a3:c9:5e:a4:5a:57:e1:7a:61:25:e8:44:f5:d2:c4:ff:7d:6c: ec:f6:cf:0f:c4:96:44:51:a6:e6:c2:63:5c:cd:e0:05:80:74: 54:69:0d:03:84:24:8a:f8:ea:f9:66:e5:28:e5:c5:a7:6d:fe: 9c:7a:d4:4f:a0:ff:d5:b4:92:e1:4a:7f:e2:2e:12:01:35:cd: 85:04:12:f8:ba:81:f5:3b:f9:67:e0:1b:7e:1c:2f:a8:35:dd: f1:ae:8d:0f:d9:5c:c5:30:e7:0a:31:b5:dd:c3:b7:be:d7:1a: ef:17:d4:8c:6f:8a:e6:df:8d:2b:a1:85:62:5f:f4:53:84:a5: 4c:f3:8d:f6:02:fd:d2:4e:f9:43:c6:07:87:25:80:e2:c1:a6: 2c:8b:48:e8:48:66:95:ff:cd:a1:06:9d:0f:a6:00:c2:cc:14: b3:ab:18:fa:92:e9:c5:ff:47:04:3a:1b:a4:3c:79:31:93:b7: 43:54:fa:13:b2:a3:ae:9b:23:86:88:cb:f0:cc:7e:19:64:e0: 8d:81:39:44:e7:0f:be:0b:8c:d7:61:f0:1c:01:d0:14:e0:43: 3e:5c:97:9b:15:3a:c2:5c:49:5a:63:ce:1b:1c:27:2d:d4:bb: e4:3b:fb:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt4kqomwJvim0OlTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI1MTAxMDAzMDAwOFoXDTI1MTAxMzAzMDAwMFowLzEtMCsGA1UEAxMk M2YwNWM5ZmMtOTE1Mi00OWFlLTliM2UtYzA0N2Q1YTdhODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZVbgeB+YD0qK3l1ZkQEkyCCCALIb6FaOk0o TnDxy+hVSlJ1YUATkyWZDmFSKg78WA/kxtWTEqVQGdgtPkZCqcSdmSK1qOY4wX3+ QRjJXoxiNWO93SBNDQzvzs/B6E74v5hRpFkaMKUe25CrbsxQ+YniH918KJaU2Gd3 2aIAi+iYXkLsG/hzqTs1NFv/92eOXb1EKkU6cTL892h5hLktKe8Q64S5BNZ94UEN BJ6TXQumwB8ql2rqFvq4f/ayXfKOjs1H0igxtWHzmw1PtLAxm+9lsDARRSBH1AnG NVcu0Vt1q/UwyVQT2s5FpZfc7AVYh2ii7zoX5AE9TH+6hCFXnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGhSf4Ht994iMtOGW/GvcGMO/ma0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvYzg5MGVlZmItMWM1NS00 Y2Q4LWFkYjYtZTYxMmM4ZDBmOTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqUKxJOooorbsWxoaOAdDv 0v2jyV6kWlfhemEl6ET10sT/fWzs9s8PxJZEUabmwmNczeAFgHRUaQ0DhCSK+Or5 ZuUo5cWnbf6cetRPoP/VtJLhSn/iLhIBNc2FBBL4uoH1O/ln4Bt+HC+oNd3xro0P 2VzFMOcKMbXdw7e+1xrvF9SMb4rm340roYViX/RThKVM8432Av3STvlDxgeHJYDi waYsi0joSGaV/82hBp0PpgDCzBSzqxj6kunF/0cEOhukPHkxk7dDVPoTsqOumyOG iMvwzH4ZZOCNgTlE5w++C4zXYfAcAdAU4EM+XJebFTrCXElaY84bHCct1LvkO/tR -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:46 2025 by rpki-client