$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft File: f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft (raw, json) Hash identifier: X4oRXoYNuAZDdveEvkCmf4pHJrZEgFc5DU7/ckzjGC0= Subject key identifier: 57:4E:85:B8:83:D0:D3:5A:C4:32:BB:40:02:ED:C1:FC:C8:63:8B:A3 Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Certificate issuer: /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Certificate serial: 010D0C9F4328584B72A3E9FE890927C30F0D3080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft Manifest number: 010D0C9F43285843F4D1C31AD63B296EB0229546 Signing time: Wed 08 Oct 2025 00:00:03 +0000 Manifest this update: Wed 08 Oct 2025 00:00:03 +0000 Manifest next update: Fri 10 Oct 2025 00:00:00 +0000 Files and hashes: 1: 43870171-fec9-3adf-a047-9532779804f9.roa (hash: 9lhinR+wuQf8SR4UfWc0FNbS859Q4wW7LMr6E8eGc0o=) 2: f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl (hash: XG2ntKQqJcLkiVb84raHZpkowpbJDV7KXinS/uvioKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:a3:e9:fe:89:09:27:c3:0f:0d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Validity Not Before: Oct 8 00:00:03 2025 GMT Not After : Oct 10 00:00:00 2025 GMT Subject: CN=838ae925-af1e-4a8c-8f6d-dd14d565f27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:e8:da:7b:bb:32:04:9a:fb:51:08:8d:39: 37:ff:f4:b7:50:53:55:0a:43:de:cd:14:bb:a0:04: 81:15:d8:4a:6b:18:22:d9:51:2c:9d:69:55:68:03: a8:1c:f8:35:68:5b:2e:05:3f:1d:20:f5:af:a3:26: d1:42:c4:1c:f5:f2:a1:c9:6c:85:8d:5f:53:db:c3: 45:8c:0a:27:7a:1a:47:c6:c4:53:70:31:8a:11:b2: ac:a9:20:f7:9a:c5:ae:5a:b6:c7:5f:a4:3e:ff:ad: 15:e0:82:93:ff:e8:f2:5e:88:2b:bd:79:46:11:52: 04:1f:dd:85:c9:c1:2f:36:17:3a:9b:f9:56:5e:49: ab:c6:20:7b:2e:ad:d8:86:57:7b:20:e1:2b:84:3a: 9f:85:5a:0f:32:41:2c:c0:b4:fc:cb:1c:9d:6b:23: c9:66:67:a6:e2:97:e9:15:09:61:ae:4b:23:c0:ef: e8:bf:20:ef:ff:6d:dd:a5:6e:db:e9:9b:3e:e0:a6: 58:1f:1d:58:69:a7:e7:be:85:0c:3c:ff:e2:03:69: ab:fa:07:7f:5b:76:a2:ff:2b:7b:35:f7:13:b2:e6: ef:04:e0:94:12:08:2a:5e:0f:53:ed:18:15:2c:c1: 73:81:5e:4e:e3:2f:f2:1f:d9:28:2e:f5:e0:66:3b: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:85:B8:83:D0:D3:5A:C4:32:BB:40:02:ED:C1:FC:C8:63:8B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl X509v3 Authority Key Identifier: keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c8:f6:60:f1:93:ed:47:c5:ee:6c:18:d0:a7:f0:29:51:25: 2e:45:93:d8:c3:70:42:e7:11:2e:d5:ab:e6:fb:f2:29:d7:db: 8c:27:9e:53:d5:a9:a8:c4:43:b1:42:3f:5d:78:86:53:b2:a7: 44:4d:97:94:d0:1c:8f:4a:0e:8a:5e:fc:86:23:cc:77:c4:88: a2:3b:a2:70:77:1c:48:d4:94:cd:95:2c:95:8f:e2:cd:91:f0: 15:b0:a9:5c:af:1b:de:e4:95:76:94:3c:0d:99:63:e2:92:a4: 6d:4b:07:e3:89:dc:da:1c:e1:cd:e1:64:07:75:18:21:19:f4: d2:96:31:e6:f2:ba:0e:b3:e1:85:2b:d9:9b:93:d8:cc:98:a0: 63:50:33:8d:de:b7:9d:4d:dc:33:cb:0c:26:0c:47:d4:da:72: 38:e2:0c:e5:4d:2c:7e:bc:f5:c0:79:b8:ca:94:c6:d1:29:4b: 1f:d0:6e:e5:1c:e0:b7:93:c3:60:7b:4e:9a:61:8d:1c:94:a4: 09:4e:51:6f:b6:90:de:6f:d0:cb:31:b1:a6:34:34:ea:ea:63: 51:f1:6d:ba:43:36:ce:91:69:1b:43:db:0c:51:9c:8b:47:3b: be:a0:c6:a5:cf:f2:e7:5c:dd:0a:9d:9f:d5:7f:7f:32:a5:d0: f5:63:73:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtyo+n+iQknww8NMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAxZjdlMGItMDBjYi00N2EyLThlMjAtMDMzYjM1Njdj YzZkMB4XDTI1MTAwODAwMDAwM1oXDTI1MTAxMDAwMDAwMFowLzEtMCsGA1UEAxMk ODM4YWU5MjUtYWYxZS00YThjLThmNmQtZGQxNGQ1NjVmMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCro2nu7MgSa+1EIjTk3//S3UFNVCkPezRS7 oASBFdhKaxgi2VEsnWlVaAOoHPg1aFsuBT8dIPWvoybRQsQc9fKhyWyFjV9T28NF jAonehpHxsRTcDGKEbKsqSD3msWuWrbHX6Q+/60V4IKT/+jyXogrvXlGEVIEH92F ycEvNhc6m/lWXkmrxiB7Lq3Yhld7IOErhDqfhVoPMkEswLT8yxydayPJZmem4pfp FQlhrksjwO/ovyDv/23dpW7b6Zs+4KZYHx1YaafnvoUMPP/iA2mr+gd/W3ai/yt7 NfcTsubvBOCUEggqXg9T7RgVLMFzgV5O4y/yH9koLvXgZjvI1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFdOhbiD0NNaxDK7QALtwfzIY4ujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFm N2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2N2NjNmQvZjAxZjdlMGItMDBjYi00 N2EyLThlMjAtMDMzYjM1NjdjYzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjAxZjdlMGItMDBjYi00N2EyLThl MjAtMDMzYjM1NjdjYzZkL2YwMWY3ZTBiLTAwY2ItNDdhMi04ZTIwLTAzM2IzNTY3 Y2M2ZC5jcmwwHwYDVR0jBBgwFoAUxBCwz+7PLW5YneCYZYFXgiGkKEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNi MzU2N2NjNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJyPZg8ZPtR8XubBjQp/Ap USUuRZPYw3BC5xEu1avm+/Ip19uMJ55T1amoxEOxQj9deIZTsqdETZeU0ByPSg6K XvyGI8x3xIiiO6JwdxxI1JTNlSyVj+LNkfAVsKlcrxve5JV2lDwNmWPikqRtSwfj idzaHOHN4WQHdRghGfTSljHm8roOs+GFK9mbk9jMmKBjUDON3redTdwzywwmDEfU 2nI44gzlTSx+vPXAebjKlMbRKUsf0G7lHOC3k8Nge06aYY0clKQJTlFvtpDeb9DL MbGmNDTq6mNR8W26QzbOkWkbQ9sMUZyLRzu+oMalz/LnXN0KnZ/Vf38ypdD1Y3M6 -----END CERTIFICATE-----Generated at Wed Oct 8 17:27:52 2025 by rpki-client