$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft File: c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft (raw, json) Hash identifier: 4YNPAuMB+cmTnU8nXWRn43k0FUeEbbN3v2wkeOs+4KI= Subject key identifier: 95:43:B7:72:32:61:93:BE:B9:89:FA:45:A2:F8:DC:4E:86:A8:96:72 Authority key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Certificate issuer: /CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Certificate serial: 010D0C9F4328584B717724EF7717DEB2B891A460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft Manifest number: 010D0C9F4328584B6F7DE6DF002171B9DFF24402 Signing time: Tue 07 Oct 2025 13:54:03 +0000 Manifest this update: Tue 07 Oct 2025 13:54:03 +0000 Manifest next update: Thu 09 Oct 2025 20:00:00 +0000 Files and hashes: 1: c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl (hash: Tb3UL4HVkdfvsHrkO45bvK/dOOEaT+9a54dn3RQe1tQ=) 2: df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa (hash: ITxHqhjwmYNR8ai7r77QvLmbNm1sQJVpgMGDCzimfzo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:77:24:ef:77:17:de:b2:b8:91:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Validity Not Before: Oct 7 13:54:03 2025 GMT Not After : Oct 9 20:00:00 2025 GMT Subject: CN=a1ad7487-36ac-4eb5-97f8-a02a31bb168b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:71:72:83:66:f3:f6:65:2b:ba:39:d3:8e: 1f:d2:2c:80:9f:48:ab:06:aa:e5:6a:1e:3b:01:56: 57:41:c6:6a:d2:5e:39:3e:7d:39:06:1c:27:b1:75: a9:96:59:95:48:12:f3:44:31:d7:4d:d2:17:24:c4: 65:26:d9:59:db:8c:64:66:e3:c4:11:8e:a3:f9:1e: 51:99:40:46:03:37:70:8c:fa:08:24:57:1c:ed:68: 58:1d:28:34:b5:13:9c:15:60:06:af:79:07:2c:24: c6:44:aa:4e:17:8e:f0:da:8c:1e:fe:d2:46:59:9e: 77:35:20:00:7b:cb:77:07:fa:db:a6:9c:c6:04:1a: fd:c6:8d:ad:eb:e3:3e:02:3b:10:e5:0f:13:d0:e7: 2f:92:96:04:2e:fc:eb:fc:20:37:d8:14:5c:86:db: e8:5d:e4:f6:b8:b0:71:c5:57:fa:e9:28:6a:7b:9e: ef:d9:df:59:46:bd:e2:80:00:12:9d:f4:6b:67:2e: 0c:63:72:7c:08:81:f5:b4:d8:9e:ac:91:f2:c7:12: 80:7c:52:d6:0f:af:78:7a:80:9a:38:2f:8a:af:a7: 24:26:0b:20:25:41:88:9e:9f:ef:63:32:56:b3:51: 1c:d7:c7:99:7b:d8:20:64:0f:85:ef:70:a7:8a:3f: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:43:B7:72:32:61:93:BE:B9:89:FA:45:A2:F8:DC:4E:86:A8:96:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl X509v3 Authority Key Identifier: keyid:C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e8:3d:77:76:8e:a6:a6:2c:58:89:61:26:86:ec:ef:c7:0c: 91:27:a0:d6:be:ac:5f:22:a2:ca:45:c4:b8:46:c6:dd:4e:22: e3:df:26:9d:cf:ce:e6:da:f5:a7:38:56:09:e8:15:a1:cc:4c: 64:0d:54:73:cd:7c:78:47:2f:d1:dc:7c:70:20:16:6a:c0:c0: 97:f9:df:e2:bf:0d:3e:78:e4:1f:2a:e1:90:63:c8:1d:56:4b: d9:7e:62:20:af:61:56:f9:d8:34:f9:2c:85:8d:84:2f:f3:cb: a3:a1:3a:78:71:a9:64:ef:52:4e:c9:9f:19:5e:6d:fd:04:58: fd:c1:05:3e:24:cb:e2:10:08:27:e4:c6:3a:78:fb:ee:df:82: b2:88:01:a4:2e:6a:63:df:9a:8d:4d:a1:ed:61:48:85:49:9b: 4f:4c:5e:bc:ed:f7:d1:6b:95:a3:c7:45:3a:83:e1:73:b5:94: 4c:65:b1:29:5f:a2:8e:75:70:88:06:4f:b1:8d:d5:3a:39:e9: 86:3e:c5:5b:af:40:56:3d:49:d5:9b:8c:24:49:72:53:ee:c3: bb:0b:30:fb:81:4e:23:bd:82:03:ab:83:11:81:65:6b:ad:87: f5:c2:44:95:02:f7:9e:ff:0e:92:08:9f:9c:0d:62:0d:39:d2: 13:d1:b2:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtxdyTvdxfesriRpGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZm YWE5MB4XDTI1MTAwNzEzNTQwM1oXDTI1MTAwOTIwMDAwMFowLzEtMCsGA1UEAxMk YTFhZDc0ODctMzZhYy00ZWI1LTk3ZjgtYTAyYTMxYmIxNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcdxcoNm8/ZlK7o5044f0iyAn0irBqrlah47 AVZXQcZq0l45Pn05BhwnsXWpllmVSBLzRDHXTdIXJMRlJtlZ24xkZuPEEY6j+R5R mUBGAzdwjPoIJFcc7WhYHSg0tROcFWAGr3kHLCTGRKpOF47w2owe/tJGWZ53NSAA e8t3B/rbppzGBBr9xo2t6+M+AjsQ5Q8T0OcvkpYELvzr/CA32BRchtvoXeT2uLBx xVf66Shqe57v2d9ZRr3igAASnfRrZy4MY3J8CIH1tNierJHyxxKAfFLWD694eoCa OC+Kr6ckJgsgJUGInp/vYzJWs1Ec18eZe9ggZA+F73Cnij/zGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJVDt3IyYZO+uYn6RaL43E6GqJZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3 ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvYzMyNzg4ZTYtN2FiMC00 YTMyLThmZjEtM2M4MjY5MGZmYWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzMyNzg4ZTYtN2FiMC00YTMyLThm ZjEtM2M4MjY5MGZmYWE5L2MzMjc4OGU2LTdhYjAtNGEzMi04ZmYxLTNjODI2OTBm ZmFhOS5jcmwwHwYDVR0jBBgwFoAUxxHw61JDgmWZrfefzPBexANp2wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgy NjkwZmZhYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA36D13do6mpixYiWEmhuzv xwyRJ6DWvqxfIqLKRcS4RsbdTiLj3yadz87m2vWnOFYJ6BWhzExkDVRzzXx4Ry/R 3HxwIBZqwMCX+d/ivw0+eOQfKuGQY8gdVkvZfmIgr2FW+dg0+SyFjYQv88ujoTp4 calk71JOyZ8ZXm39BFj9wQU+JMviEAgn5MY6ePvu34KyiAGkLmpj35qNTaHtYUiF SZtPTF687ffRa5Wjx0U6g+FztZRMZbEpX6KOdXCIBk+xjdU6OemGPsVbr0BWPUnV m4wkSXJT7sO7CzD7gU4jvYIDq4MRgWVrrYf1wkSVAvee/w6SCJ+cDWINOdIT0bJ7 -----END CERTIFICATE-----Generated at Wed Oct 8 17:10:10 2025 by rpki-client