$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json) Hash identifier: SyWNvivcE2mXxahXYdjGYvvs+OhXqyvSlbEklOYCPys= Subject key identifier: D1:00:09:E6:27:70:3C:F4:39:E4:D2:A0:B7:C3:54:3E:CC:77:BC:60 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584B7480680E638DADC26BB41480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02EC8 Signing time: Wed 08 Oct 2025 16:00:08 +0000 Manifest this update: Wed 08 Oct 2025 16:00:08 +0000 Manifest next update: Fri 10 Oct 2025 16:00:00 +0000 Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: ColM+bGgK4RmtLzcerh9DY6zw8jZHWWRRuvhzPWpKWg=) 2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: HvL6m4WPeVbJJ67GexCe2gGMQAdIWs01qKruk3GOKmg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:80:68:0e:63:8d:ad:c2:6b:b4:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Oct 8 16:00:08 2025 GMT Not After : Oct 10 16:00:00 2025 GMT Subject: CN=863851ce-1a30-4d40-a3a1-6d462d64f154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:81:e4:e5:bf:4d:fd:74:34:5b:bd:c1:8a: d7:1f:64:91:ad:fc:57:8b:de:82:9b:d7:7c:54:58: af:2a:e5:14:7f:92:a2:38:25:ad:6e:a9:5d:bf:ec: 5e:c1:bd:1c:6b:52:44:75:85:a9:92:0f:f2:99:80: 6a:d1:82:bc:33:fa:aa:cd:53:ca:18:06:24:12:b2: 33:fa:53:1c:36:70:da:73:e6:50:d1:10:68:ac:55: 6e:ac:6a:db:40:7c:ae:50:e7:52:d2:ce:be:a1:5c: 3a:e8:77:7a:9b:74:03:69:e6:97:34:99:ff:4c:fa: 04:d3:46:65:75:7a:9e:bf:a1:f0:06:aa:47:9c:65: 74:47:81:85:a4:1f:a1:3a:fd:d7:fa:d7:d8:43:e6: 99:64:ac:87:fd:40:f4:bf:7a:fd:29:21:3c:10:9f: e1:db:d5:25:a5:4d:49:be:ce:08:45:9e:ac:82:f7: 59:ba:05:aa:ae:1b:bc:df:bb:59:73:e5:e4:71:4f: 25:64:da:d5:e7:27:10:41:9a:6c:f0:28:4d:5b:ed: a4:1d:55:2f:fa:f4:87:2f:62:e1:7f:a0:ed:e8:67: fd:56:72:97:af:79:40:b5:54:9f:27:2c:3f:c8:36: 8f:4c:4c:88:fc:7d:9d:43:a9:d1:8a:3a:6b:86:21: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:09:E6:27:70:3C:F4:39:E4:D2:A0:B7:C3:54:3E:CC:77:BC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:43:13:c6:ee:38:a2:cf:70:3f:b5:d7:78:5a:fb:95:97:16: 90:3f:ff:a9:c2:66:42:97:43:89:9b:28:d5:cc:b5:13:76:12: 87:78:70:d0:b5:ad:a3:7c:dd:23:0a:7e:bd:96:f4:70:85:6b: 83:a8:42:32:c2:ee:80:ba:78:ab:7c:28:6f:35:90:3a:a0:97: 5d:0a:be:e8:f3:ad:45:b0:88:92:82:40:f9:df:b5:45:22:0a: 47:34:30:82:da:0d:52:6b:37:41:dc:8a:17:8c:2e:97:17:84: ac:e2:a0:ba:70:9c:74:70:96:f6:f1:3b:91:4c:fa:e7:8d:38: 99:ca:f0:62:96:04:62:6c:4e:5c:3e:e0:d0:fc:8b:24:77:e7: 66:5e:cf:08:76:f4:48:a5:ba:73:ec:1f:29:e1:93:b1:b5:8f: 2a:8e:38:ac:af:3e:37:1d:a9:cf:a7:1a:ca:09:8b:2d:eb:81: 85:c3:84:77:d3:e9:12:eb:4c:fe:2f:03:a0:44:71:17:74:7f: d6:11:00:42:be:b8:11:90:06:87:c4:20:f2:ed:af:06:6a:01: 94:8e:78:6b:61:c0:95:cf:0c:72:b8:57:07:a8:a8:9e:15:27: 16:88:10:9b:03:57:14:a3:1e:8d:2e:36:21:7c:b8:e6:36:4c: 01:a7:01:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0gGgOY42twmu0FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI1MTAwODE2MDAwOFoXDTI1MTAxMDE2MDAwMFowLzEtMCsGA1UEAxMk ODYzODUxY2UtMWEzMC00ZDQwLWEzYTEtNmQ0NjJkNjRmMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlluB5OW/Tf10NFu9wYrXH2SRrfxXi96Cm9d8 VFivKuUUf5KiOCWtbqldv+xewb0ca1JEdYWpkg/ymYBq0YK8M/qqzVPKGAYkErIz +lMcNnDac+ZQ0RBorFVurGrbQHyuUOdS0s6+oVw66Hd6m3QDaeaXNJn/TPoE00Zl dXqev6HwBqpHnGV0R4GFpB+hOv3X+tfYQ+aZZKyH/UD0v3r9KSE8EJ/h29UlpU1J vs4IRZ6sgvdZugWqrhu837tZc+XkcU8lZNrV5ycQQZps8ChNW+2kHVUv+vSHL2Lh f6Dt6Gf9VnKXr3lAtVSfJyw/yDaPTEyI/H2dQ6nRijprhiEqgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNEACeYncDz0OeTSoLfDVD7Md7xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00 NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxQxPG7jiiz3A/tdd4WvuV lxaQP/+pwmZCl0OJmyjVzLUTdhKHeHDQta2jfN0jCn69lvRwhWuDqEIywu6Aunir fChvNZA6oJddCr7o861FsIiSgkD537VFIgpHNDCC2g1SazdB3IoXjC6XF4Ss4qC6 cJx0cJb28TuRTPrnjTiZyvBilgRibE5cPuDQ/Iskd+dmXs8IdvRIpbpz7B8p4ZOx tY8qjjisrz43HanPpxrKCYst64GFw4R30+kS60z+LwOgRHEXdH/WEQBCvrgRkAaH xCDy7a8GagGUjnhrYcCVzwxyuFcHqKieFScWiBCbA1cUox6NLjYhfLjmNkwBpwF6 -----END CERTIFICATE-----Generated at Wed Oct 8 17:29:01 2025 by rpki-client