$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: RifKi0kxzrD2/BHJQY7iGf3j1+vFQ/bol3ZcIx8TI7Q= Subject key identifier: 69:E7:58:E9:72:96:A0:0C:4D:D3:AA:39:66:51:43:93:79:B6:AF:D7 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584B3A1B8E3543866D0778A35900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD8FB Signing time: Wed 17 Sep 2025 18:00:03 +0000 Manifest this update: Wed 17 Sep 2025 18:00:03 +0000 Manifest next update: Sat 20 Sep 2025 18:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: 8jWxZkdUgH9IxaaBFrycZ+4a7yAIsBTF/F2BW4VKpeE=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: hLyJg0XmNtG9TOt/XfSKH4ReSiyiQ8pWpIKYem0Vd+s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:1b:8e:35:43:86:6d:07:78:a3:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Sep 17 18:00:03 2025 GMT Not After : Sep 20 18:00:00 2025 GMT Subject: CN=5c3c3e87-18fb-4902-80fc-0318d5350eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e3:d0:28:72:dd:27:92:ab:12:48:11:d5:68: 2c:0c:8d:bf:cc:61:7c:72:d7:b8:15:cb:73:a2:8f: db:c3:03:1b:af:87:2d:6c:7b:fe:05:f0:ae:4d:a9: 63:d5:be:24:3f:8c:3e:d4:04:c4:0d:89:b6:98:eb: 4f:0f:6b:0e:a9:02:bd:6b:15:0d:7c:bc:ef:f1:80: 0a:af:db:41:8a:39:4c:e2:b4:e2:01:ce:61:d5:40: 04:b6:0d:32:ac:78:bf:66:ee:79:47:e0:e5:f9:fe: 90:8a:1e:32:26:74:f4:ee:4b:75:1b:b1:f6:c6:12: 07:a5:b8:f0:d1:78:d9:b1:bf:7b:55:22:6a:76:33: 8d:c5:23:c5:c1:4d:5a:1e:eb:14:d1:11:dc:c8:d3: 07:f2:1a:e7:cd:bb:1a:a0:91:58:4d:93:0d:22:d2: 30:56:3c:a3:bf:76:43:d8:3d:f6:1f:21:c6:2f:c4: cb:ba:26:77:b4:29:c8:07:c9:9e:01:9c:6d:bb:67: 9a:60:4a:12:a8:2d:b0:c7:7c:cf:e1:d1:5c:5a:d3: b7:39:18:a7:36:5f:83:b8:fb:d9:78:47:fb:dd:f8: cb:b8:51:2a:bb:52:f3:24:ca:58:ff:f4:49:16:5f: 06:e1:3b:2c:96:ca:1f:a4:22:d9:e7:cb:49:c9:ca: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:58:E9:72:96:A0:0C:4D:D3:AA:39:66:51:43:93:79:B6:AF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b0:83:51:ab:27:d3:d0:e3:0e:6c:6a:e3:f8:71:a7:d5:62: 62:33:60:6a:6b:24:fe:7c:e4:e8:22:bc:cd:9c:b7:c6:3f:40: a6:fc:25:39:e3:17:92:4a:20:90:0c:d1:ab:e1:bb:78:7b:c9: 10:42:32:ce:8b:8b:24:3c:ef:20:8c:39:2b:1a:08:31:e7:ef: e3:fb:5a:66:b3:6b:c1:b5:54:d2:68:68:f4:94:c1:ac:69:5f: 72:17:a9:9e:bb:41:27:b0:ed:6a:b1:c5:5b:da:e5:1e:4d:1f: 79:e4:e6:52:45:ed:62:04:2d:12:f9:cd:79:6d:30:8a:2d:d9: 59:af:9b:f9:dc:61:e7:3c:50:19:5b:4f:32:07:46:b9:63:8d: 29:7e:47:0b:3c:fd:4e:83:bc:49:27:57:2d:a8:66:01:c8:8a: 05:ef:0a:f9:5f:78:29:a8:d8:38:f2:70:4e:c6:88:da:a1:3f: a7:8b:6e:9b:12:b7:97:b3:70:a1:fe:72:bc:f5:d1:74:fe:48: 08:bf:0b:18:1a:d6:c1:5c:f0:b9:24:b9:6d:f7:b2:f0:dd:a0: fa:45:ae:b6:a0:a8:18:d6:06:11:20:2f:75:90:2b:85:49:69: bd:b4:4d:a4:60:4d:ff:0a:2f:7e:72:1c:3f:20:ad:94:90:2e: bb:be:a3:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs6G441Q4ZtB3ijWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MDkxNzE4MDAwM1oXDTI1MDkyMDE4MDAwMFowLzEtMCsGA1UEAxMk NWMzYzNlODctMThmYi00OTAyLTgwZmMtMDMxOGQ1MzUwZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ePQKHLdJ5KrEkgR1WgsDI2/zGF8cte4Fctz oo/bwwMbr4ctbHv+BfCuTalj1b4kP4w+1ATEDYm2mOtPD2sOqQK9axUNfLzv8YAK r9tBijlM4rTiAc5h1UAEtg0yrHi/Zu55R+Dl+f6Qih4yJnT07kt1G7H2xhIHpbjw 0XjZsb97VSJqdjONxSPFwU1aHusU0RHcyNMH8hrnzbsaoJFYTZMNItIwVjyjv3ZD 2D32HyHGL8TLuiZ3tCnIB8meAZxtu2eaYEoSqC2wx3zP4dFcWtO3ORinNl+DuPvZ eEf73fjLuFEqu1LzJMpY//RJFl8G4TsslsofpCLZ58tJycrffwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGnnWOlylqAMTdOqOWZRQ5N5tq/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCasINRqyfT0OMObGrj+HGn 1WJiM2BqayT+fOToIrzNnLfGP0Cm/CU54xeSSiCQDNGr4bt4e8kQQjLOi4skPO8g jDkrGggx5+/j+1pms2vBtVTSaGj0lMGsaV9yF6meu0EnsO1qscVb2uUeTR955OZS Re1iBC0S+c15bTCKLdlZr5v53GHnPFAZW08yB0a5Y40pfkcLPP1Og7xJJ1ctqGYB yIoF7wr5X3gpqNg48nBOxojaoT+ni26bEreXs3Ch/nK89dF0/kgIvwsYGtbBXPC5 JLlt97Lw3aD6Ra62oKgY1gYRIC91kCuFSWm9tE2kYE3/Ci9+chw/IK2UkC67vqMz -----END CERTIFICATE-----Generated at Wed Sep 17 19:12:18 2025 by rpki-client