$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft File: 47727e8f-5ea0-4ad7-a853-5cade93acd74.mft (raw, json) Hash identifier: zUTg+GugFLbmATN3H+CUSY2VEc3s9bfiNnQwz/CyS1Q= Subject key identifier: D9:B4:2E:6B:60:63:B0:C2:99:7F:32:E7:38:14:17:BF:AF:F9:B2:9C Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584B8C58F438F726B7F0610E2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft Manifest number: 010D0C9F4328584073A83E3481BD656300FDCE11 Signing time: Fri 17 Oct 2025 05:00:03 +0000 Manifest this update: Fri 17 Oct 2025 05:00:03 +0000 Manifest next update: Sun 19 Oct 2025 05:00:00 +0000 Files and hashes: 1: 47727e8f-5ea0-4ad7-a853-5cade93acd74.crl (hash: dzF9jOQpF8wSpuGejpkyn5G+ol0axokqwJwPzaYrq90=) 2: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (hash: nnprOlrl9dXtDeT07gXTlIaNE7CGw5E7tsC90dVQdh4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:58:f4:38:f7:26:b7:f0:61:0e:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Oct 17 05:00:03 2025 GMT Not After : Oct 19 05:00:00 2025 GMT Subject: CN=f8de737d-af25-4b97-a2a8-241f38b57a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:e8:0c:f9:0b:a7:f4:fa:56:91:60:45:28: 14:35:81:bc:c9:37:32:97:23:1a:d8:05:83:71:4e: ba:95:1a:3f:65:b4:b8:2b:7a:17:b7:81:2f:0d:40: db:93:a5:e7:5c:32:27:ac:85:3f:e2:1b:8d:95:ef: ab:c2:a9:31:fd:78:2a:bf:82:5d:4c:2f:54:19:92: 22:c4:44:e5:2f:7d:56:77:e5:e2:dd:80:d8:df:80: 38:fa:25:a6:7c:1f:e0:22:54:1c:cd:a0:f0:9c:dd: 6c:7b:d8:b6:5a:d9:6e:d4:43:01:a3:56:c2:86:be: 35:e1:b9:26:93:57:09:e9:2e:ea:34:a2:d5:a8:56: be:d8:a1:c1:0c:d2:78:ba:48:a2:50:02:b1:45:3f: 64:13:d5:c9:f0:cc:8b:1d:b0:36:75:be:a1:2f:1d: b1:9d:e2:b6:ca:95:f8:70:90:ee:91:4b:d0:54:6b: 1b:2b:0f:9d:60:ee:12:c2:e4:c6:36:2f:6e:06:3a: 53:59:b3:7e:85:12:d2:2c:11:2d:97:b0:cd:8e:29: 4f:4e:b2:22:28:18:7c:c0:76:5b:40:d4:42:ae:19: 51:2e:25:17:07:59:c9:42:05:31:40:37:fa:85:ab: 7d:60:a3:61:69:1a:9e:bf:01:9c:02:ca:51:6b:92: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:2E:6B:60:63:B0:C2:99:7F:32:E7:38:14:17:BF:AF:F9:B2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b0:32:1b:4f:8a:08:7f:cd:50:b6:71:93:9d:cd:79:e6:70: 4a:50:78:f8:50:0c:0f:8f:d0:f3:01:6b:ec:d6:9e:2d:af:5f: db:9b:59:ba:e9:c3:dd:bf:67:a6:48:fc:cf:9d:2d:5d:44:32: f8:cd:46:1a:8e:4e:ee:09:30:05:06:3c:41:0a:16:1b:4c:20: 60:56:44:6b:d8:6f:4d:06:5d:c2:69:83:eb:c5:a5:08:d7:7a: 65:5d:08:9e:f5:36:5c:91:f6:5b:71:28:c7:5c:f9:24:44:f6: bb:0e:bb:5e:c8:54:85:31:95:49:94:96:7d:b1:93:1d:31:67: 1d:8d:2b:db:d8:5f:d8:bc:c7:e3:04:fa:48:07:a5:79:5e:e2: ca:fc:c3:0f:25:d9:a5:f3:07:9d:e7:12:64:1b:84:ad:6b:55: 01:63:0c:83:07:27:15:cb:c3:c3:6f:28:16:a6:d9:a7:ea:bc: 09:16:9a:7e:92:92:bf:38:e5:a1:60:d3:ce:fb:dd:48:f0:54: 5c:d9:6b:e1:15:85:4b:62:b5:85:e1:4d:e2:31:c8:3c:8d:49: 60:3e:9b:a3:1b:4e:71:e7:13:c1:e2:5b:f2:df:0b:62:1d:4d: 57:14:00:88:10:11:30:d8:38:07:41:55:8f:7d:42:3b:af:a8: 29:63:28:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuMWPQ49ya38GEOL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI1MTAxNzA1MDAwM1oXDTI1MTAxOTA1MDAwMFowLzEtMCsGA1UEAxMk ZjhkZTczN2QtYWYyNS00Yjk3LWEyYTgtMjQxZjM4YjU3YTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJPoDPkLp/T6VpFgRSgUNYG8yTcylyMa2AWD cU66lRo/ZbS4K3oXt4EvDUDbk6XnXDInrIU/4huNle+rwqkx/Xgqv4JdTC9UGZIi xETlL31Wd+Xi3YDY34A4+iWmfB/gIlQczaDwnN1se9i2Wtlu1EMBo1bChr414bkm k1cJ6S7qNKLVqFa+2KHBDNJ4ukiiUAKxRT9kE9XJ8MyLHbA2db6hLx2xneK2ypX4 cJDukUvQVGsbKw+dYO4SwuTGNi9uBjpTWbN+hRLSLBEtl7DNjilPTrIiKBh8wHZb QNRCrhlRLiUXB1nJQgUxQDf6hat9YKNhaRqevwGcAspRa5Iz4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNm0LmtgY7DCmX8y5zgUF7+v+bKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvNDc3MjdlOGYtNWVhMC00 YWQ3LWE4NTMtNWNhZGU5M2FjZDc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXsDIbT4oIf81QtnGTnc15 5nBKUHj4UAwPj9DzAWvs1p4tr1/bm1m66cPdv2emSPzPnS1dRDL4zUYajk7uCTAF BjxBChYbTCBgVkRr2G9NBl3CaYPrxaUI13plXQie9TZckfZbcSjHXPkkRPa7Drte yFSFMZVJlJZ9sZMdMWcdjSvb2F/YvMfjBPpIB6V5XuLK/MMPJdml8wed5xJkG4St a1UBYwyDBycVy8PDbygWptmn6rwJFpp+kpK/OOWhYNPO+91I8FRc2WvhFYVLYrWF 4U3iMcg8jUlgPpujG05x5xPB4lvy3wtiHU1XFACIEBEw2DgHQVWPfUI7r6gpYygx -----END CERTIFICATE-----Generated at Fri Oct 17 09:33:36 2025 by rpki-client