$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9/19640302-ac9f-4a6c-a076-42d5fba1d3b9.mft File: 19640302-ac9f-4a6c-a076-42d5fba1d3b9.mft (raw, json) Hash identifier: ulifP06N03N0geuNZZ8L0rTmKSP1RRPlzhH2HUgQG7s= Subject key identifier: 20:26:57:B1:9E:34:9C:78:41:15:7B:E5:4A:AF:3A:B0:50:73:EC:64 Authority key identifier: A7:E8:94:7B:1D:F3:D7:B4:66:49:24:E9:FD:59:12:00:C0:AD:5A:57 Certificate issuer: /CN=19640302-ac9f-4a6c-a076-42d5fba1d3b9 Certificate serial: 010D0C9F4328584B7CA4DCF26F7169813C6D1C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9/19640302-ac9f-4a6c-a076-42d5fba1d3b9.mft Manifest number: 010D0C9F4328584B7450B72429E8D64962145484 Signing time: Sat 11 Oct 2025 14:00:03 +0000 Manifest this update: Sat 11 Oct 2025 14:00:03 +0000 Manifest next update: Mon 13 Oct 2025 14:00:00 +0000 Files and hashes: 1: 19640302-ac9f-4a6c-a076-42d5fba1d3b9.crl (hash: cr14lXB3gEMb9ALXhrfIK18fhJWwHjwLeddd7J/Kuhw=) 2: 7d2e0bc2-420f-35e3-bce7-ba3fb2f804cb.roa (hash: Nb7ly+cT47iw1cIPi7FK4mOSGTSp7WpixWmSYZSAisg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9/19640302-ac9f-4a6c-a076-42d5fba1d3b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9/19640302-ac9f-4a6c-a076-42d5fba1d3b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:a4:dc:f2:6f:71:69:81:3c:6d:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19640302-ac9f-4a6c-a076-42d5fba1d3b9 Validity Not Before: Oct 11 14:00:03 2025 GMT Not After : Oct 13 14:00:00 2025 GMT Subject: CN=cb6a8dce-442e-4fca-946c-e2b0a1116de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:09:f6:d5:2a:a4:03:90:51:02:58:f3:17: 2e:40:1a:c9:b8:b8:95:7c:cc:e9:d8:24:ab:3a:8a: 77:42:de:27:1c:f7:ab:ee:eb:ec:64:d0:9f:91:24: 21:fb:49:a2:8a:14:a9:a8:d3:c0:69:35:1e:de:1c: fb:89:78:46:06:89:b1:3f:9b:6f:80:c5:87:58:38: 2d:7f:bc:e8:37:86:70:44:52:c8:00:3e:40:1c:c0: fb:0d:56:17:ca:9d:fb:83:bb:1c:47:47:88:8c:45: a8:24:3c:10:b1:83:1f:a2:a9:5c:4b:51:61:a2:b8: 65:2e:a4:92:83:d6:51:36:c2:d0:e8:65:9d:51:98: d3:62:d9:bb:e5:45:f4:9c:9a:11:f0:5b:32:03:47: 08:e7:35:20:bd:42:7f:b5:82:4e:d6:a5:9a:2b:0d: 51:c0:dc:18:bd:78:6f:4a:d0:84:4b:56:95:7c:03: 03:c4:8f:4d:d8:0e:a7:04:b5:cc:34:d0:df:d9:4e: 1a:3f:ee:ba:31:28:8b:d3:0b:a1:c6:85:ef:85:ca: 72:2a:92:9a:67:b4:bc:f3:cf:9f:32:02:7a:a3:82: a7:7f:04:71:c2:81:f0:04:66:8e:e8:e4:19:cf:1d: e4:fc:a2:cb:65:92:6c:1e:a9:6c:bf:1d:cd:5b:ac: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:57:B1:9E:34:9C:78:41:15:7B:E5:4A:AF:3A:B0:50:73:EC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9/19640302-ac9f-4a6c-a076-42d5fba1d3b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9/19640302-ac9f-4a6c-a076-42d5fba1d3b9.crl X509v3 Authority Key Identifier: keyid:A7:E8:94:7B:1D:F3:D7:B4:66:49:24:E9:FD:59:12:00:C0:AD:5A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/19640302-ac9f-4a6c-a076-42d5fba1d3b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:99:a1:76:d5:c1:27:83:c5:13:28:5a:d7:8e:35:9a:27:e2: 27:72:d6:22:a4:f1:7c:8c:8a:29:79:fc:5b:5c:1d:14:8f:bf: 5a:cf:ea:66:23:0b:e0:09:4e:65:fd:32:a4:76:1e:d2:3c:8e: ed:18:6f:d6:5b:e1:5b:43:e1:e3:b2:cf:dd:e5:0b:2c:c6:f8: b8:9e:9c:3c:a7:e4:01:bd:4e:03:f1:2a:84:b7:4d:df:77:77: 95:f0:ba:a3:f9:a4:4c:6d:5e:99:d6:d5:6d:7c:73:bb:9e:6d: 32:8b:4b:43:27:ab:3c:b0:91:1c:ca:9e:96:f6:db:b5:33:09: 93:9f:d0:70:d9:17:44:56:05:8c:b4:a5:42:d2:58:0b:f8:3a: 38:5c:7d:13:ed:d2:c5:76:f8:a1:e3:bd:88:94:9e:e4:de:6b: 6b:21:ad:37:52:3c:1f:a6:fc:63:a4:cb:1d:04:04:f9:d8:ad: e6:10:09:15:b2:61:b2:b1:25:d5:f5:ca:59:13:3d:eb:f2:9f: dc:4d:62:88:50:12:6b:d9:da:b3:0a:98:98:07:b3:89:d3:4b: 48:a5:3a:d5:8b:0a:07:c3:56:13:d1:4c:a9:1f:38:a3:20:c7: f0:be:89:6a:46:08:79:12:0e:c7:70:b3:dc:7c:4b:ea:61:98: 33:fb:fc:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt8pNzyb3FpgTxtHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk2NDAzMDItYWM5Zi00YTZjLWEwNzYtNDJkNWZiYTFk M2I5MB4XDTI1MTAxMTE0MDAwM1oXDTI1MTAxMzE0MDAwMFowLzEtMCsGA1UEAxMk Y2I2YThkY2UtNDQyZS00ZmNhLTk0NmMtZTJiMGExMTE2ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZgJ9tUqpAOQUQJY8xcuQBrJuLiVfMzp2CSr Oop3Qt4nHPer7uvsZNCfkSQh+0miihSpqNPAaTUe3hz7iXhGBomxP5tvgMWHWDgt f7zoN4ZwRFLIAD5AHMD7DVYXyp37g7scR0eIjEWoJDwQsYMfoqlcS1FhorhlLqSS g9ZRNsLQ6GWdUZjTYtm75UX0nJoR8FsyA0cI5zUgvUJ/tYJO1qWaKw1RwNwYvXhv StCES1aVfAMDxI9N2A6nBLXMNNDf2U4aP+66MSiL0wuhxoXvhcpyKpKaZ7S888+f MgJ6o4KnfwRxwoHwBGaO6OQZzx3k/KLLZZJsHqlsvx3NW6w4dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCAmV7GeNJx4QRV75UqvOrBQc+xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xOTY0 MDMwMi1hYzlmLTRhNmMtYTA3Ni00MmQ1ZmJhMWQzYjkvMTk2NDAzMDItYWM5Zi00 YTZjLWEwNzYtNDJkNWZiYTFkM2I5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTk2NDAzMDItYWM5Zi00YTZjLWEw NzYtNDJkNWZiYTFkM2I5LzE5NjQwMzAyLWFjOWYtNGE2Yy1hMDc2LTQyZDVmYmEx ZDNiOS5jcmwwHwYDVR0jBBgwFoAUp+iUex3z17RmSSTp/VkSAMCtWlcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xOTY0MDMwMi1hYzlmLTRhNmMtYTA3Ni00MmQ1 ZmJhMWQzYjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArmaF21cEng8UTKFrXjjWa J+InctYipPF8jIopefxbXB0Uj79az+pmIwvgCU5l/TKkdh7SPI7tGG/WW+FbQ+Hj ss/d5Qssxvi4npw8p+QBvU4D8SqEt03fd3eV8Lqj+aRMbV6Z1tVtfHO7nm0yi0tD J6s8sJEcyp6W9tu1MwmTn9Bw2RdEVgWMtKVC0lgL+Do4XH0T7dLFdvih472IlJ7k 3mtrIa03UjwfpvxjpMsdBAT52K3mEAkVsmGysSXV9cpZEz3r8p/cTWKIUBJr2dqz CpiYB7OJ00tIpTrViwoHw1YT0UypHzijIMfwvolqRgh5Eg7HcLPcfEvqYZgz+/yr -----END CERTIFICATE-----Generated at Sat Oct 11 19:57:50 2025 by rpki-client