$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft File: 6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft (raw, json) Hash identifier: 9jjoBVzNXB7yZWYrzb6LTQSKQ/dHAKjouQGS3TIGhcA= Subject key identifier: 33:58:08:7C:C6:53:28:5D:EF:A7:13:12:10:F2:A4:54:6A:81:6E:A3 Authority key identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Certificate issuer: /CN=6a9537a8-a685-4b48-9fa8-8362e4fc47ae Certificate serial: 010D0C9F4328584B997DF752FC54B65F02775400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft Manifest number: 010D0C9F4328584073A82A2D4AC14CEF18F4A33F Signing time: Tue 21 Oct 2025 22:00:09 +0000 Manifest this update: Tue 21 Oct 2025 22:00:09 +0000 Manifest next update: Fri 24 Oct 2025 22:00:00 +0000 Files and hashes: 1: 6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl (hash: Fhpp+UR3yKAzwIiWMBOTCx5fbPEbkI3Il4I/fTOXnOk=) 2: b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer (hash: yzqh+yMh9mOQN6Duyqs47cCxbKsd37AKDqrX7NWoGrY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:7d:f7:52:fc:54:b6:5f:02:77:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9537a8-a685-4b48-9fa8-8362e4fc47ae Validity Not Before: Oct 21 22:00:09 2025 GMT Not After : Oct 24 22:00:00 2025 GMT Subject: CN=d7212ca7-8c35-4f5f-8edc-0a1268956f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:18:d7:e5:cc:5b:7a:73:1c:24:bd:8a:db: 48:ba:41:29:70:d5:94:ab:8f:bf:14:c5:36:be:29: 2e:c6:49:4b:ea:c4:37:e7:b6:13:44:03:87:f2:e4: 28:63:13:65:99:6a:a6:e3:a8:0b:47:f6:d2:b9:65: c5:5d:cb:4c:81:6f:d3:61:60:e2:b4:fa:fd:4c:30: c2:c0:1e:27:4e:ca:7b:e8:04:0d:2e:51:66:98:14: e5:5e:a2:be:17:fc:b0:fd:59:e1:b5:1b:5f:6d:32: 7e:a3:c0:c6:8a:30:30:7c:ce:f5:c9:24:1f:cc:1c: b5:49:a2:8d:99:c3:20:c6:29:33:b3:0d:86:26:7d: 1e:94:06:31:22:d4:2c:61:39:e2:fc:4f:3d:34:39: 1c:fe:a0:fb:89:4f:de:17:f8:09:1a:dc:21:28:29: 27:ad:a9:7b:37:c7:35:df:9f:3d:0f:06:93:84:6c: 19:49:61:5a:61:23:de:13:8d:20:fb:0b:45:78:c8: 28:8f:42:50:6f:55:ac:ee:b7:53:0a:ef:e8:52:ee: 17:21:45:a4:3d:bc:c5:54:13:23:7a:b3:ea:b5:aa: 61:3c:d3:9c:06:04:85:d2:69:84:ee:c2:01:51:c4: 4c:52:c3:43:cc:1b:f5:7c:a9:00:d3:54:5f:55:42: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:58:08:7C:C6:53:28:5D:EF:A7:13:12:10:F2:A4:54:6A:81:6E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl X509v3 Authority Key Identifier: keyid:B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:78:41:24:ec:a4:c0:d2:66:a4:26:fb:d4:5e:93:c3:70:3a: a9:69:0c:67:31:05:d2:dc:82:fe:1d:cd:7a:a0:a5:63:d2:6f: 0f:89:25:cb:d9:b5:ca:dc:73:c2:c0:84:7f:0a:7a:3d:5a:c1: 69:21:24:cb:6c:89:97:49:f4:4f:00:19:b5:84:a4:18:9e:6b: 45:1a:f1:3a:7f:61:ce:a9:69:e9:76:0e:f6:f0:5b:f7:b9:29: 26:43:27:d6:13:f1:2f:b4:d1:c5:88:34:7c:46:d9:e8:ea:06: 0f:c6:26:82:42:4d:8e:fa:0c:f5:f4:71:44:5d:12:76:8d:75: 9a:2d:ae:e0:3d:65:d0:7a:2a:c8:7e:6d:a7:04:56:6f:e4:31: ad:14:72:b2:ea:d3:af:83:cf:bd:d1:29:36:96:10:87:fc:ed: 20:80:c2:d3:83:4c:c6:ce:4c:8b:52:d6:45:8b:ed:7a:8b:28: ad:65:de:3b:28:3c:7c:74:29:80:fe:60:b8:1d:09:8b:af:78: c2:5c:90:98:96:d7:68:fa:cf:86:e0:99:6c:9b:d6:9f:45:d7: 7a:57:0c:a2:94:08:0a:dd:92:35:ba:c2:67:90:34:fc:4f:25: cc:35:b1:4e:c7:e6:41:ba:df:9e:49:b3:1e:4b:47:8f:99:fa: 47:bb:37:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuZffdS/FS2XwJ3VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE5NTM3YTgtYTY4NS00YjQ4LTlmYTgtODM2MmU0ZmM0 N2FlMB4XDTI1MTAyMTIyMDAwOVoXDTI1MTAyNDIyMDAwMFowLzEtMCsGA1UEAxMk ZDcyMTJjYTctOGMzNS00ZjVmLThlZGMtMGExMjY4OTU2ZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V0Y1+XMW3pzHCS9ittIukEpcNWUq4+/FMU2 vikuxklL6sQ357YTRAOH8uQoYxNlmWqm46gLR/bSuWXFXctMgW/TYWDitPr9TDDC wB4nTsp76AQNLlFmmBTlXqK+F/yw/VnhtRtfbTJ+o8DGijAwfM71ySQfzBy1SaKN mcMgxikzsw2GJn0elAYxItQsYTni/E89NDkc/qD7iU/eF/gJGtwhKCknral7N8c1 3589DwaThGwZSWFaYSPeE40g+wtFeMgoj0JQb1Ws7rdTCu/oUu4XIUWkPbzFVBMj erPqtaphPNOcBgSF0mmE7sIBUcRMUsNDzBv1fKkA01RfVUKVowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDNYCHzGUyhd76cTEhDypFRqgW6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1 MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvNmE5NTM3YTgtYTY4NS00 YjQ4LTlmYTgtODM2MmU0ZmM0N2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmE5NTM3YTgtYTY4NS00YjQ4LTlm YTgtODM2MmU0ZmM0N2FlLzZhOTUzN2E4LWE2ODUtNGI0OC05ZmE4LTgzNjJlNGZj NDdhZS5jcmwwHwYDVR0jBBgwFoAUsXNu4gUrrdR+ASolzER+jyYLsUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYy ZTRmYzQ3YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjeEEk7KTA0makJvvUXpPD cDqpaQxnMQXS3IL+Hc16oKVj0m8PiSXL2bXK3HPCwIR/Cno9WsFpISTLbImXSfRP ABm1hKQYnmtFGvE6f2HOqWnpdg728Fv3uSkmQyfWE/EvtNHFiDR8Rtno6gYPxiaC Qk2O+gz19HFEXRJ2jXWaLa7gPWXQeirIfm2nBFZv5DGtFHKy6tOvg8+90Sk2lhCH /O0ggMLTg0zGzkyLUtZFi+16iyitZd47KDx8dCmA/mC4HQmLr3jCXJCYltdo+s+G 4Jlsm9afRdd6VwyilAgK3ZI1usJnkDT8TyXMNbFOx+ZBut+eSbMeS0ePmfpHuzco -----END CERTIFICATE-----Generated at Wed Oct 22 18:33:53 2025 by rpki-client