$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.mft File: a7740fca-0621-46f8-ba8f-31a8983ed90a.mft (raw, json) Hash identifier: tICjacBZxlMq2zNZzQ8dcadntjFBOHCnvbCASCVZJTI= Subject key identifier: BA:14:F1:02:6F:46:52:91:E7:61:BB:97:52:CE:B9:EC:52:E1:3C:32 Authority key identifier: 7D:8D:13:0E:1A:78:AC:E0:02:4C:33:D8:59:5F:4B:06:13:57:F2:22 Certificate issuer: /CN=a7740fca-0621-46f8-ba8f-31a8983ed90a Certificate serial: 010D0C9F4328584B71F147CF55E7EF6F09087300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.mft Manifest number: 010D0C9F4328584B20FF68C9260DA3ED5C378D7E Signing time: Tue 07 Oct 2025 18:00:08 +0000 Manifest this update: Tue 07 Oct 2025 18:00:08 +0000 Manifest next update: Thu 09 Oct 2025 18:00:00 +0000 Files and hashes: 1: a7740fca-0621-46f8-ba8f-31a8983ed90a.crl (hash: 16CwmZejK1SChlq+8z+6AdwyOUYhhA9Imz5YljQvEh8=) 2: b2ecd0c6-cf90-3a30-9eab-4a9a840d23dd.roa (hash: whln5p9E1FP+Cpn5TDXgBsMHhbtg5MGlM6BlQGiyImE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:f1:47:cf:55:e7:ef:6f:09:08:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7740fca-0621-46f8-ba8f-31a8983ed90a Validity Not Before: Oct 7 18:00:08 2025 GMT Not After : Oct 9 18:00:00 2025 GMT Subject: CN=01bb23fe-2db1-4161-b0f8-d375b7df732f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:8e:15:db:c7:63:49:d7:8a:5c:01:e0:2d: dd:dc:d8:0e:0a:d6:7b:1b:2d:5c:4e:4f:60:b0:13: 29:d9:cf:45:e1:ff:31:d3:74:7e:47:9b:db:05:b0: 94:76:85:1a:7e:4d:9e:b1:99:ea:bf:30:ad:f7:3c: c3:d1:2a:7e:eb:88:94:49:2a:55:ae:cd:22:7c:a0: 97:e0:f2:12:e9:9b:c0:0c:41:96:11:7f:89:e1:15: 7a:75:32:ac:e2:75:6c:3e:45:f7:6f:de:dd:04:d5: d7:4d:9d:94:4c:b9:fb:c0:3e:e9:e1:e8:1b:eb:5e: c9:61:fa:8d:eb:b8:9b:08:c0:3e:aa:ee:b7:b0:18: bd:3e:c7:2e:43:50:0a:05:92:45:be:56:73:05:ba: 25:1f:34:3b:9c:19:9a:1c:55:18:1b:c2:b1:9e:b5: aa:9a:16:18:3d:9e:88:4c:0a:b9:35:1d:a2:88:9c: b9:7c:63:80:fe:9a:17:ef:90:23:76:ef:c3:1a:19: 56:bf:8e:10:e4:a9:55:6f:89:4e:cd:b7:03:3b:5d: 6e:8e:b6:fd:42:cf:99:83:5c:75:ed:8e:b5:cd:02: 17:14:52:fd:1e:ca:f9:e1:e0:a2:52:d9:ac:1f:a6: 83:71:08:f1:ce:27:93:11:c3:9b:34:a9:54:2a:2f: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:14:F1:02:6F:46:52:91:E7:61:BB:97:52:CE:B9:EC:52:E1:3C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.crl X509v3 Authority Key Identifier: keyid:7D:8D:13:0E:1A:78:AC:E0:02:4C:33:D8:59:5F:4B:06:13:57:F2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b6:5d:ce:64:8e:b3:ec:b1:f4:3f:d5:3f:44:49:26:04:bf: 2f:6d:4b:30:8c:df:81:53:e0:d6:bf:e2:46:59:ce:94:0b:09: f0:be:0d:db:32:f9:1f:56:09:cd:73:97:12:8f:76:97:72:82: a9:16:04:7a:68:24:09:f3:d6:a1:3c:71:05:e9:3c:f6:ae:38: 9c:68:8d:13:24:97:4c:5a:86:8c:29:ba:b3:51:4b:10:d8:53: 55:43:40:5e:8b:78:fe:1d:11:d0:7b:81:6b:16:db:40:28:27: f6:8f:23:89:d0:62:7e:9c:36:75:25:90:56:91:f6:b7:ff:37: de:0a:32:ec:79:6b:ec:ad:5a:a6:6a:6a:c8:2d:70:9c:07:1e: 68:87:4a:ae:f4:87:a7:b2:51:63:9b:fe:07:ea:df:db:f5:2f: d2:94:2f:48:7e:46:fc:f2:54:dc:74:d7:c2:54:78:3f:02:3e: a2:4b:a1:0f:8a:77:af:0d:ac:f6:9a:d1:92:62:4d:ac:f8:4e: df:3e:ee:6c:38:33:67:49:55:68:e7:5b:a5:31:91:29:60:94: 87:e7:e0:dc:bb:f3:88:dd:18:2e:85:63:14:ef:86:9d:b0:70: 21:5c:82:d8:26:56:94:6d:eb:95:cf:ce:c7:56:92:60:87:18: 14:11:b2:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtx8UfPVefvbwkIcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NDBmY2EtMDYyMS00NmY4LWJhOGYtMzFhODk4M2Vk OTBhMB4XDTI1MTAwNzE4MDAwOFoXDTI1MTAwOTE4MDAwMFowLzEtMCsGA1UEAxMk MDFiYjIzZmUtMmRiMS00MTYxLWIwZjgtZDM3NWI3ZGY3MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl06OFdvHY0nXilwB4C3d3NgOCtZ7Gy1cTk9g sBMp2c9F4f8x03R+R5vbBbCUdoUafk2esZnqvzCt9zzD0Sp+64iUSSpVrs0ifKCX 4PIS6ZvADEGWEX+J4RV6dTKs4nVsPkX3b97dBNXXTZ2UTLn7wD7p4egb617JYfqN 67ibCMA+qu63sBi9PscuQ1AKBZJFvlZzBbolHzQ7nBmaHFUYG8KxnrWqmhYYPZ6I TAq5NR2iiJy5fGOA/poX75Ajdu/DGhlWv44Q5KlVb4lOzbcDO11ujrb9Qs+Zg1x1 7Y61zQIXFFL9Hsr54eCiUtmsH6aDcQjxzieTEcObNKlUKi8VZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLoU8QJvRlKR52G7l1LOuexS4TwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNzc0 MGZjYS0wNjIxLTQ2ZjgtYmE4Zi0zMWE4OTgzZWQ5MGEvYTc3NDBmY2EtMDYyMS00 NmY4LWJhOGYtMzFhODk4M2VkOTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTc3NDBmY2EtMDYyMS00NmY4LWJh OGYtMzFhODk4M2VkOTBhL2E3NzQwZmNhLTA2MjEtNDZmOC1iYThmLTMxYTg5ODNl ZDkwYS5jcmwwHwYDVR0jBBgwFoAUfY0TDhp4rOACTDPYWV9LBhNX8iIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNzc0MGZjYS0wNjIxLTQ2ZjgtYmE4Zi0zMWE4 OTgzZWQ5MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAutl3OZI6z7LH0P9U/REkm BL8vbUswjN+BU+DWv+JGWc6UCwnwvg3bMvkfVgnNc5cSj3aXcoKpFgR6aCQJ89ah PHEF6Tz2rjicaI0TJJdMWoaMKbqzUUsQ2FNVQ0Bei3j+HRHQe4FrFttAKCf2jyOJ 0GJ+nDZ1JZBWkfa3/zfeCjLseWvsrVqmamrILXCcBx5oh0qu9IenslFjm/4H6t/b 9S/SlC9Ifkb88lTcdNfCVHg/Aj6iS6EPinevDaz2mtGSYk2s+E7fPu5sODNnSVVo 51ulMZEpYJSH5+Dcu/OI3RguhWMU74adsHAhXILYJlaUbeuVz87HVpJghxgUEbIc -----END CERTIFICATE-----Generated at Wed Oct 8 17:19:38 2025 by rpki-client