$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft File: 39065acc-beed-4115-bc6c-63de232f2a04.mft (raw, json) Hash identifier: P6rtLpDZn/mvmSOHYwumPoYJ9spUe+w3NB6uy59PSvI= Subject key identifier: 67:37:EB:39:AC:B4:D3:B7:AF:08:95:E1:DD:E8:C2:C6:0D:73:21:82 Authority key identifier: AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 Certificate issuer: /CN=39065acc-beed-4115-bc6c-63de232f2a04 Certificate serial: 010D0C9F4328584B949B45F10B5CFB9E1F020280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft Manifest number: 010D0C9F4328584073A83DBF6298E32F59E98022 Signing time: Mon 20 Oct 2025 04:00:09 +0000 Manifest this update: Mon 20 Oct 2025 04:00:09 +0000 Manifest next update: Thu 23 Oct 2025 04:00:00 +0000 Files and hashes: 1: 02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer (hash: 7NgNWOL4l6I7JM2qYgjqIdogxUTJi9BJLmk0LWCjcHU=) 2: 39065acc-beed-4115-bc6c-63de232f2a04.crl (hash: EYrecLtd0tZlc5L//j6EmvwGRzS9uDva2qP5H4+AFdw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:9b:45:f1:0b:5c:fb:9e:1f:02:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39065acc-beed-4115-bc6c-63de232f2a04 Validity Not Before: Oct 20 04:00:09 2025 GMT Not After : Oct 23 04:00:00 2025 GMT Subject: CN=5a560f8b-a0be-4add-83ca-6af51f91af0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:48:5a:88:da:e5:22:bc:8d:dc:3a:a7:24: ed:48:de:9e:7c:01:44:f3:5a:6d:e7:a8:cf:ec:58: 2c:e0:68:4d:93:02:c4:a0:0b:24:28:e6:dd:2e:55: 73:1d:2a:1f:2f:ee:82:98:79:74:0c:3c:59:d8:8b: 8d:61:56:52:2f:6f:6a:31:80:c6:4c:ea:0a:bc:44: ad:5b:4b:b0:ab:0b:9b:51:e4:f5:3f:ab:0b:f6:41: 4e:79:3d:60:7f:e9:5d:b2:24:09:3a:48:dd:68:ac: f8:29:73:21:59:20:e4:c4:4d:34:06:37:33:61:6c: be:6e:f1:0e:79:42:d4:a1:29:5c:cf:3b:bf:09:fe: 2d:10:ca:4f:b7:58:e4:5a:12:1b:73:31:23:8e:d3: e3:64:eb:4a:a8:59:ce:a2:91:75:e3:3a:73:e7:86: bc:48:7f:5c:2d:06:4d:d0:97:7a:af:4b:67:cd:f8: 6e:be:ed:b0:25:c4:94:bb:b5:1e:bb:68:bf:bd:7b: d0:eb:aa:4b:b7:34:a5:0c:15:04:e9:80:9f:93:ae: be:13:79:4d:e8:8e:3d:46:f8:cd:07:42:1e:a5:f2: 86:10:ab:da:08:17:11:33:2a:75:ea:1f:2b:a0:1c: db:51:2f:bf:b9:3a:4c:f4:3e:1a:26:6e:2c:de:85: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:EB:39:AC:B4:D3:B7:AF:08:95:E1:DD:E8:C2:C6:0D:73:21:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl X509v3 Authority Key Identifier: keyid:AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:6c:74:9a:13:02:a0:7c:55:9b:43:2b:fb:7b:ef:b6:4e:ba: f1:76:6e:c1:a4:af:8a:64:de:2c:0f:0f:72:69:a1:82:f8:29: f9:73:33:7b:ae:b0:68:ef:dd:2f:8a:a7:49:38:44:23:3a:25: dc:20:5f:d2:94:dd:82:c5:d0:58:25:92:de:7b:f2:1a:d6:d2: 73:3d:ea:24:dd:fe:bc:2b:50:c3:25:24:b9:fc:32:bd:b7:8d: e6:de:6d:ff:5c:82:82:34:3a:57:f7:cf:9f:ee:39:7d:24:a1: e3:7b:43:2d:29:a7:22:d0:ec:7e:de:54:4f:a1:a1:d7:87:aa: 75:4a:64:d7:01:27:09:b6:eb:eb:86:2e:d0:00:8e:fa:57:7d: 27:b8:98:1b:37:3b:c6:34:4f:e6:16:38:70:fb:96:d3:30:f8: 2c:6b:bf:3c:a3:fc:78:ed:4d:a7:57:3b:fc:03:3e:09:f7:bf: 81:b5:64:78:6b:06:f5:91:04:92:00:68:07:e9:a4:6d:62:b0: 8d:f3:17:50:bd:66:ec:3d:54:7c:dc:fe:f1:c6:17:40:66:48: cb:70:0a:87:7c:d1:39:b6:85:7f:07:68:ab:24:3a:39:d4:af: 52:e8:8c:70:b2:22:dc:28:3f:ab:b0:06:ed:fd:d6:2c:4c:6d: 2c:46:d1:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUm0XxC1z7nh8CAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwNjVhY2MtYmVlZC00MTE1LWJjNmMtNjNkZTIzMmYy YTA0MB4XDTI1MTAyMDA0MDAwOVoXDTI1MTAyMzA0MDAwMFowLzEtMCsGA1UEAxMk NWE1NjBmOGItYTBiZS00YWRkLTgzY2EtNmFmNTFmOTFhZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPxIWoja5SK8jdw6pyTtSN6efAFE81pt56jP 7Fgs4GhNkwLEoAskKObdLlVzHSofL+6CmHl0DDxZ2IuNYVZSL29qMYDGTOoKvESt W0uwqwubUeT1P6sL9kFOeT1gf+ldsiQJOkjdaKz4KXMhWSDkxE00BjczYWy+bvEO eULUoSlczzu/Cf4tEMpPt1jkWhIbczEjjtPjZOtKqFnOopF14zpz54a8SH9cLQZN 0Jd6r0tnzfhuvu2wJcSUu7Ueu2i/vXvQ66pLtzSlDBUE6YCfk66+E3lN6I49RvjN B0IepfKGEKvaCBcRMyp16h8roBzbUS+/uTpM9D4aJm4s3oUQvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGc36zmstNO3rwiV4d3owsYNcyGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2 NWFjYy1iZWVkLTQxMTUtYmM2Yy02M2RlMjMyZjJhMDQvMzkwNjVhY2MtYmVlZC00 MTE1LWJjNmMtNjNkZTIzMmYyYTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwNjVhY2MtYmVlZC00MTE1LWJj NmMtNjNkZTIzMmYyYTA0LzM5MDY1YWNjLWJlZWQtNDExNS1iYzZjLTYzZGUyMzJm MmEwNC5jcmwwHwYDVR0jBBgwFoAUqsoD8ydge6ZVHnnF30XdmDWxTKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02M2Rl MjMyZjJhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDEbHSaEwKgfFWbQyv7e++2 Trrxdm7BpK+KZN4sDw9yaaGC+Cn5czN7rrBo790viqdJOEQjOiXcIF/SlN2CxdBY JZLee/Ia1tJzPeok3f68K1DDJSS5/DK9t43m3m3/XIKCNDpX98+f7jl9JKHje0Mt Kaci0Ox+3lRPoaHXh6p1SmTXAScJtuvrhi7QAI76V30nuJgbNzvGNE/mFjhw+5bT MPgsa788o/x47U2nVzv8Az4J97+BtWR4awb1kQSSAGgH6aRtYrCN8xdQvWbsPVR8 3P7xxhdAZkjLcAqHfNE5toV/B2irJDo51K9S6IxwsiLcKD+rsAbt/dYsTG0sRtFU -----END CERTIFICATE-----Generated at Mon Oct 20 10:49:23 2025 by rpki-client