$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft File: 917bf66f-fa51-48f2-813c-8b0191c1aa76.mft (raw, json) Hash identifier: A0JGqzF3i5eU8+bO1+1aRN83qaVSYH5WS9uGibtCTNs= Subject key identifier: C0:1B:1C:87:55:75:31:CE:41:07:C0:76:2F:F8:56:0B:C4:AC:F5:2E Authority key identifier: DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61 Certificate issuer: /CN=917bf66f-fa51-48f2-813c-8b0191c1aa76 Certificate serial: 010D0C9F4328584B96D10708A7E0AE81AB6BB700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft Manifest number: 010D0C9F4328584073A82F3667A373495E5052FC Signing time: Mon 20 Oct 2025 23:00:03 +0000 Manifest this update: Mon 20 Oct 2025 23:00:03 +0000 Manifest next update: Wed 22 Oct 2025 23:00:00 +0000 Files and hashes: 1: 917bf66f-fa51-48f2-813c-8b0191c1aa76.crl (hash: nklNymTIGzi9YMEJGcNIXbPyUWfjWQVxh6rz57DauSg=) 2: d442156c-4d4b-307b-9416-612333104ee4.roa (hash: 72xWps7J+HLCCssVScda5OsowNSW3lSE/yMESze1Jlk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:d1:07:08:a7:e0:ae:81:ab:6b:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917bf66f-fa51-48f2-813c-8b0191c1aa76 Validity Not Before: Oct 20 23:00:03 2025 GMT Not After : Oct 22 23:00:00 2025 GMT Subject: CN=827091b8-55ff-45da-9333-2538234aa83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:3f:b8:6d:6f:ef:27:15:e5:63:91:51:63: 62:6f:ba:88:23:8b:9e:44:1a:84:78:dc:3c:f8:01: e1:31:e5:ef:90:c7:1a:25:c4:45:fc:4c:39:16:83: 0f:12:ad:8b:e5:c0:57:d6:4a:6d:89:cb:06:d0:d4: c8:6c:84:c4:96:fa:7e:e8:2b:23:42:7e:8a:0d:b1: 32:0d:b3:ed:d8:79:f1:ed:62:99:96:f8:a2:a6:5d: cf:ac:73:51:34:6e:17:3e:86:8b:50:e9:b3:cf:f6: 24:51:12:a8:84:3a:ab:2f:99:54:8b:03:40:c9:0f: 33:70:dc:53:0d:54:43:b7:a9:e0:7b:a7:2a:7f:44: cb:16:2a:f1:56:94:ab:67:d7:64:fa:c0:8f:38:d1: 7b:ab:48:f6:aa:12:70:c4:47:38:93:8f:6b:44:2c: d7:58:95:bf:50:f9:0e:d4:a7:35:24:7d:79:82:b5: 55:a5:a1:e6:d3:38:00:9d:07:c9:88:6d:04:ab:d1: 93:43:f1:0f:88:ce:53:c1:88:9a:fe:8d:c3:69:58: 05:f1:b8:7f:ac:18:b2:19:e4:19:01:1a:38:fc:02: 8b:ac:8a:f0:fe:b8:da:87:f5:4b:aa:0c:e7:da:e0: 95:58:c5:17:ee:88:56:70:d8:8e:90:e0:15:9e:2a: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1B:1C:87:55:75:31:CE:41:07:C0:76:2F:F8:56:0B:C4:AC:F5:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl X509v3 Authority Key Identifier: keyid:DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:43:f1:2a:a5:d3:f6:1f:16:67:2f:b2:31:31:99:49:ee:07: 44:2c:50:f8:2a:1a:5c:59:de:3b:bf:b3:d9:c9:62:59:3c:f5: 66:ed:60:fb:f7:f3:87:17:06:47:64:74:49:c4:bc:4f:99:e3: d6:de:1d:79:50:70:bb:94:ac:f7:9b:e9:5a:08:37:e3:39:e0: ff:9e:98:7d:56:1f:f0:ce:b8:84:f7:4d:d0:31:48:0f:20:03: 45:9c:ff:b6:eb:d1:40:81:44:69:f5:82:f4:3c:8d:72:c3:1e: 93:a4:d6:2e:0c:df:42:2c:ed:e3:62:8c:23:fc:b6:48:29:dd: be:05:7d:88:f4:c4:c9:27:a4:6f:5d:39:91:1f:8f:bf:e0:30: b3:75:c0:ed:b1:c9:d6:32:e9:37:77:00:fe:77:33:9e:8e:ba: 95:01:65:8f:3f:c3:00:21:78:2d:e5:fa:bc:bb:52:74:c2:9c: 73:07:a3:d0:fa:0b:89:5f:8f:3f:c7:5d:56:36:d8:eb:ee:56: c2:9a:8b:78:33:09:fa:70:2e:11:f8:62:d2:c1:66:3c:8b:cb: e4:3f:bc:f7:3e:30:01:a5:ec:cd:79:b7:f1:2f:6b:0b:09:52: 19:55:78:fd:cc:58:1e:23:a4:aa:5c:12:16:a7:4a:9d:ee:8c: 49:f0:97:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuW0QcIp+CugatrtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3YmY2NmYtZmE1MS00OGYyLTgxM2MtOGIwMTkxYzFh YTc2MB4XDTI1MTAyMDIzMDAwM1oXDTI1MTAyMjIzMDAwMFowLzEtMCsGA1UEAxMk ODI3MDkxYjgtNTVmZi00NWRhLTkzMzMtMjUzODIzNGFhODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfQ/uG1v7ycV5WORUWNib7qII4ueRBqEeNw8 +AHhMeXvkMcaJcRF/Ew5FoMPEq2L5cBX1kpticsG0NTIbITElvp+6CsjQn6KDbEy DbPt2Hnx7WKZlviipl3PrHNRNG4XPoaLUOmzz/YkURKohDqrL5lUiwNAyQ8zcNxT DVRDt6nge6cqf0TLFirxVpSrZ9dk+sCPONF7q0j2qhJwxEc4k49rRCzXWJW/UPkO 1Kc1JH15grVVpaHm0zgAnQfJiG0Eq9GTQ/EPiM5TwYia/o3DaVgF8bh/rBiyGeQZ ARo4/AKLrIrw/rjah/VLqgzn2uCVWMUX7ohWcNiOkOAVniqx7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMAbHIdVdTHOQQfAdi/4VgvErPUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdi ZjY2Zi1mYTUxLTQ4ZjItODEzYy04YjAxOTFjMWFhNzYvOTE3YmY2NmYtZmE1MS00 OGYyLTgxM2MtOGIwMTkxYzFhYTc2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3YmY2NmYtZmE1MS00OGYyLTgx M2MtOGIwMTkxYzFhYTc2LzkxN2JmNjZmLWZhNTEtNDhmMi04MTNjLThiMDE5MWMx YWE3Ni5jcmwwHwYDVR0jBBgwFoAU3UNWmXK7Jx8POhk2OOjQ+oQg0GEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdiZjY2Zi1mYTUxLTQ4ZjItODEzYy04YjAx OTFjMWFhNzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIQ/EqpdP2HxZnL7IxMZlJ 7gdELFD4KhpcWd47v7PZyWJZPPVm7WD79/OHFwZHZHRJxLxPmePW3h15UHC7lKz3 m+laCDfjOeD/nph9Vh/wzriE903QMUgPIANFnP+269FAgURp9YL0PI1ywx6TpNYu DN9CLO3jYowj/LZIKd2+BX2I9MTJJ6RvXTmRH4+/4DCzdcDtscnWMuk3dwD+dzOe jrqVAWWPP8MAIXgt5fq8u1J0wpxzB6PQ+guJX48/x11WNtjr7lbCmot4Mwn6cC4R +GLSwWY8i8vkP7z3PjABpezNebfxL2sLCVIZVXj9zFgeI6SqXBIWp0qd7oxJ8Jfj -----END CERTIFICATE-----Generated at Tue Oct 21 16:08:20 2025 by rpki-client