$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft File: f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft (raw, json) Hash identifier: tfLsm/bXEZLcv+AszJTO2f/MxMLVj1sjvXpQr7ELfzM= Subject key identifier: 77:A6:61:32:E1:56:1F:9F:16:BC:B5:4C:53:35:4E:B4:2D:1C:11:6F Authority key identifier: 1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94 Certificate issuer: /CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d Certificate serial: 010D0C9F4328584B715C587C39BE55B06BF20440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft Manifest number: 010D0C9F4328584902E0AF27672789B198119363 Signing time: Tue 07 Oct 2025 13:00:03 +0000 Manifest this update: Tue 07 Oct 2025 13:00:03 +0000 Manifest next update: Thu 09 Oct 2025 13:00:00 +0000 Files and hashes: 1: 4c50f12e-00b1-369c-bd0c-e4874d03b817.roa (hash: xVYlbiYRvU/X/KCLuNpwLdgW0iN5UJzjHNVb1wwQPBo=) 2: f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl (hash: WErzCalF/RnUQI2ASfSCN2iytJtxWZ6AnFiP3KRoPpM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:58:7c:39:be:55:b0:6b:f2:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d Validity Not Before: Oct 7 13:00:03 2025 GMT Not After : Oct 9 13:00:00 2025 GMT Subject: CN=9169aa2c-ec2e-4b30-b766-1a6ae6acab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:fb:19:de:4c:ea:13:eb:f2:3b:54:7d:15: c4:a6:12:9b:50:f0:73:f9:91:93:e9:85:0a:35:67: 25:6c:48:90:64:71:3e:7d:98:49:66:7d:dd:63:23: 93:2b:ef:0c:aa:22:00:38:3a:38:e0:e4:03:24:8f: 2d:8a:21:ff:77:91:62:5d:95:9b:7e:b6:f8:1a:db: a6:ab:b0:e1:ee:26:ed:46:63:8c:2f:3c:c2:5f:01: 97:d0:8e:d0:25:47:f2:a9:e2:8d:b8:77:53:0b:a1: cf:41:d4:6c:2d:41:d1:da:48:27:b7:4b:da:37:dd: aa:d4:e6:02:87:1d:ea:36:05:49:d4:25:0f:9a:57: 05:6d:db:6c:12:a4:34:be:d5:18:b5:a7:38:de:39: 0d:a3:81:71:15:99:cb:b4:95:fe:b2:43:cd:8e:a7: da:f2:0d:42:48:22:c5:07:3c:3a:06:7d:d4:3c:16: a7:d1:67:9a:81:b2:84:d7:51:6c:51:62:f7:4d:29: d9:dc:e3:9b:b0:ea:4e:09:54:22:d6:56:62:1e:99: 6c:a8:9e:81:d8:26:e1:07:b8:ea:b3:eb:58:ad:f1: 1e:91:8c:ec:e5:13:fe:4e:ff:67:d2:a6:d7:81:5d: f8:bf:10:37:a8:9a:c6:de:31:90:22:e3:31:6a:ae: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A6:61:32:E1:56:1F:9F:16:BC:B5:4C:53:35:4E:B4:2D:1C:11:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl X509v3 Authority Key Identifier: keyid:1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:35:00:c7:8e:16:2c:7d:dc:13:39:23:35:6c:ed:66:5c:ba: 39:f8:a4:5a:a9:fe:f6:15:a4:8a:b2:1e:6a:9e:e0:fd:20:4c: ab:f0:ca:10:a6:0b:25:d9:76:63:6c:6a:ff:6d:b0:64:24:50: ec:3c:2e:71:a8:0e:6d:b5:6a:88:d0:cc:64:ea:6d:23:93:14: 92:9e:00:10:d2:3a:49:a0:e0:ab:b1:ba:cf:92:9a:37:f8:68: d9:73:81:e4:84:62:83:5c:dd:87:02:0c:54:ad:5b:31:42:1c: e6:52:1c:54:7c:1e:cb:7e:5b:c4:5d:cd:db:9d:ec:e6:7d:d4: ec:78:48:97:e0:1b:75:d5:de:6f:51:87:db:f0:0f:ad:51:be: b1:b6:62:9f:43:6e:5c:7b:33:6a:84:21:29:9b:9d:7f:85:3c: e4:69:99:9d:9f:e6:4f:d6:4f:15:cf:3c:d9:73:b2:18:aa:59: 32:58:9f:8c:95:97:3e:c9:a2:93:ad:12:89:2a:66:f1:33:43: 5f:84:c1:98:23:ec:c5:4e:98:eb:2e:97:7c:3c:31:83:13:ad: 61:53:dc:40:99:8a:e0:57:6d:8a:50:c5:33:bd:72:bc:1f:d5: 53:34:f9:1b:90:20:ea:22:ea:7c:a6:91:3f:06:32:ce:15:db: bc:86:e4:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtxXFh8Ob5VsGvyBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyOGNmNGEtYjMzMC00NjA5LThjODUtYmRlZTdjZjE4 ZDdkMB4XDTI1MTAwNzEzMDAwM1oXDTI1MTAwOTEzMDAwMFowLzEtMCsGA1UEAxMk OTE2OWFhMmMtZWMyZS00YjMwLWI3NjYtMWE2YWU2YWNhYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryT7Gd5M6hPr8jtUfRXEphKbUPBz+ZGT6YUK NWclbEiQZHE+fZhJZn3dYyOTK+8MqiIAODo44OQDJI8tiiH/d5FiXZWbfrb4Gtum q7Dh7ibtRmOMLzzCXwGX0I7QJUfyqeKNuHdTC6HPQdRsLUHR2kgnt0vaN92q1OYC hx3qNgVJ1CUPmlcFbdtsEqQ0vtUYtac43jkNo4FxFZnLtJX+skPNjqfa8g1CSCLF Bzw6Bn3UPBan0WeagbKE11FsUWL3TSnZ3OObsOpOCVQi1lZiHplsqJ6B2CbhB7jq s+tYrfEekYzs5RP+Tv9n0qbXgV34vxA3qJrG3jGQIuMxaq59rQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHemYTLhVh+fFry1TFM1TrQtHBFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjI4 Y2Y0YS1iMzMwLTQ2MDktOGM4NS1iZGVlN2NmMThkN2QvZjYyOGNmNGEtYjMzMC00 NjA5LThjODUtYmRlZTdjZjE4ZDdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjYyOGNmNGEtYjMzMC00NjA5LThj ODUtYmRlZTdjZjE4ZDdkL2Y2MjhjZjRhLWIzMzAtNDYwOS04Yzg1LWJkZWU3Y2Yx OGQ3ZC5jcmwwHwYDVR0jBBgwFoAUGjpl2NjBZc7y7oBL5hiK/gRiM5QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjI4Y2Y0YS1iMzMwLTQ2MDktOGM4NS1iZGVl N2NmMThkN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMNQDHjhYsfdwTOSM1bO1m XLo5+KRaqf72FaSKsh5qnuD9IEyr8MoQpgsl2XZjbGr/bbBkJFDsPC5xqA5ttWqI 0Mxk6m0jkxSSngAQ0jpJoOCrsbrPkpo3+GjZc4HkhGKDXN2HAgxUrVsxQhzmUhxU fB7LflvEXc3bnezmfdTseEiX4Bt11d5vUYfb8A+tUb6xtmKfQ25cezNqhCEpm51/ hTzkaZmdn+ZP1k8VzzzZc7IYqlkyWJ+MlZc+yaKTrRKJKmbxM0NfhMGYI+zFTpjr Lpd8PDGDE61hU9xAmYrgV22KUMUzvXK8H9VTNPkbkCDqIup8ppE/BjLOFdu8huQq -----END CERTIFICATE-----Generated at Wed Oct 8 13:37:34 2025 by rpki-client