$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft File: d7e20303-2390-47a7-b89c-842367be4584.mft (raw, json) Hash identifier: bLQ0mXNwkJINBe/Q0SD8mWaDh1OrHQ/kNfQhXwXkLTE= Subject key identifier: 34:40:44:F4:45:2C:78:BB:92:20:2E:7D:8A:0C:E5:62:27:49:0F:7E Authority key identifier: 38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99 Certificate issuer: /CN=d7e20303-2390-47a7-b89c-842367be4584 Certificate serial: 010D0C9F4328584B8BFF9F9148277D5BBF05D680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft Manifest number: 010D0C9F4328584073A836FD93F59394F8429001 Signing time: Fri 17 Oct 2025 02:00:03 +0000 Manifest this update: Fri 17 Oct 2025 02:00:03 +0000 Manifest next update: Sun 19 Oct 2025 02:00:00 +0000 Files and hashes: 1: 63ef6ba7c7a8be96cfb149135472cbd00aab8f29a31820d418.cer (hash: d58eBnv9sz2TyLr/A4doibPvExKMnGiom3yRvGjMh5E=) 2: d7e20303-2390-47a7-b89c-842367be4584.crl (hash: DMifEAuXAp7aAODXtmqQimC4fa4OnPiNjfaDvvMIfP8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:ff:9f:91:48:27:7d:5b:bf:05:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e20303-2390-47a7-b89c-842367be4584 Validity Not Before: Oct 17 02:00:03 2025 GMT Not After : Oct 19 02:00:00 2025 GMT Subject: CN=743d0d14-a20b-4cc7-93fa-28ab038b25fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:48:56:a4:0a:e3:99:8e:32:50:de:3c:70: 3d:8f:fc:b0:d0:38:27:ac:08:a5:6d:b4:29:54:d2: 30:88:26:03:42:19:4b:2d:72:8f:7f:ce:8d:34:d5: ce:03:a4:2b:98:2f:69:a2:96:d4:b2:fa:06:a1:a0: e4:32:69:e3:fe:b6:e0:e6:d1:8b:1b:94:c8:4e:a0: ca:db:ea:c3:18:cc:7f:b1:94:ed:56:b7:7e:bc:86: 2a:7d:73:4f:ae:db:e7:7e:cb:cb:68:b5:75:b5:a7: 20:b7:61:75:d5:32:88:a8:45:b6:19:63:db:5d:20: 33:e1:cb:29:b1:d3:19:e6:64:7a:2c:5e:cd:16:15: cb:e4:f5:e4:7b:f5:3a:a8:06:b3:90:f6:ba:d7:48: c0:8d:f5:9f:2b:e1:97:4f:56:0a:b6:08:8b:66:d7: 43:2f:7a:76:e2:5d:bd:7c:a8:f1:ad:f5:a7:79:46: 4f:7d:ab:3c:46:c2:65:55:3a:86:21:67:55:7e:8f: 1a:80:d1:7e:a8:bb:3b:95:2d:ca:d9:e7:f0:90:f5: aa:c9:60:7d:67:2e:81:cf:f8:6e:b4:f5:96:ff:c9: 50:83:36:e2:96:6f:b8:21:21:7e:f9:fc:d0:bc:5c: 82:54:62:fc:9b:ea:76:9e:05:f6:aa:54:47:78:7f: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:40:44:F4:45:2C:78:BB:92:20:2E:7D:8A:0C:E5:62:27:49:0F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl X509v3 Authority Key Identifier: keyid:38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2e:1c:d7:0a:fe:3c:d9:8d:1f:c9:a8:84:6a:9b:b2:1e:45: b0:1c:dc:cd:2c:5f:96:26:f1:95:c4:f6:b0:a5:ff:4c:23:fb: e2:e5:f3:72:a2:95:57:84:a6:4d:3c:e2:9f:ec:a5:17:bb:97: fb:43:d9:f0:23:de:2f:42:1a:90:63:a0:d7:67:63:ab:9f:c6: c8:11:63:b5:0a:1c:49:90:d5:17:78:fa:6d:b3:84:1e:26:3f: e0:2f:f6:05:2d:5d:1d:e1:de:09:c1:d1:37:b1:55:27:c5:95: fc:66:e1:de:bd:98:49:c6:a7:88:2c:1b:95:68:3b:c4:6a:c5: 34:04:3f:51:9c:84:8f:c0:66:fb:ba:63:03:32:98:f3:ef:8f: d8:a0:35:f8:ea:ed:09:b7:f6:8f:eb:52:66:59:b6:ed:6a:29: 99:1d:70:94:7b:b9:97:5e:c3:62:75:19:3b:20:83:5f:c7:77: 1e:b2:4b:0a:99:a3:70:99:a0:48:38:86:0a:81:46:03:22:70: 9c:b2:bc:1d:95:c7:33:96:8b:90:12:0e:2e:28:6c:55:b0:47: 0c:91:16:64:f3:48:04:10:4e:bf:fe:ea:93:7d:e1:dd:3b:ca: b7:49:ab:50:44:5f:e2:1d:94:88:99:4e:25:db:67:37:05:9f: 8d:76:2c:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuL/5+RSCd9W78F1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlMjAzMDMtMjM5MC00N2E3LWI4OWMtODQyMzY3YmU0 NTg0MB4XDTI1MTAxNzAyMDAwM1oXDTI1MTAxOTAyMDAwMFowLzEtMCsGA1UEAxMk NzQzZDBkMTQtYTIwYi00Y2M3LTkzZmEtMjhhYjAzOGIyNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgVIVqQK45mOMlDePHA9j/yw0DgnrAilbbQp VNIwiCYDQhlLLXKPf86NNNXOA6QrmC9popbUsvoGoaDkMmnj/rbg5tGLG5TITqDK 2+rDGMx/sZTtVrd+vIYqfXNPrtvnfsvLaLV1tacgt2F11TKIqEW2GWPbXSAz4csp sdMZ5mR6LF7NFhXL5PXke/U6qAazkPa610jAjfWfK+GXT1YKtgiLZtdDL3p24l29 fKjxrfWneUZPfas8RsJlVTqGIWdVfo8agNF+qLs7lS3K2efwkPWqyWB9Zy6Bz/hu tPWW/8lQgzbilm+4ISF++fzQvFyCVGL8m+p2ngX2qlRHeH869wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDRARPRFLHi7kiAufYoM5WInSQ9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Uy MDMwMy0yMzkwLTQ3YTctYjg5Yy04NDIzNjdiZTQ1ODQvZDdlMjAzMDMtMjM5MC00 N2E3LWI4OWMtODQyMzY3YmU0NTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdlMjAzMDMtMjM5MC00N2E3LWI4 OWMtODQyMzY3YmU0NTg0L2Q3ZTIwMzAzLTIzOTAtNDdhNy1iODljLTg0MjM2N2Jl NDU4NC5jcmwwHwYDVR0jBBgwFoAUODA5kWnxd3j4cFZ5GDkCwiGGSJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2UyMDMwMy0yMzkwLTQ3YTctYjg5Yy04NDIz NjdiZTQ1ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiLhzXCv482Y0fyaiEapuy HkWwHNzNLF+WJvGVxPawpf9MI/vi5fNyopVXhKZNPOKf7KUXu5f7Q9nwI94vQhqQ Y6DXZ2Orn8bIEWO1ChxJkNUXePpts4QeJj/gL/YFLV0d4d4JwdE3sVUnxZX8ZuHe vZhJxqeILBuVaDvEasU0BD9RnISPwGb7umMDMpjz74/YoDX46u0Jt/aP61JmWbbt aimZHXCUe7mXXsNidRk7IINfx3cesksKmaNwmaBIOIYKgUYDInCcsrwdlcczlouQ Eg4uKGxVsEcMkRZk80gEEE6//uqTfeHdO8q3SatQRF/iHZSImU4l22c3BZ+Ndiz0 -----END CERTIFICATE-----Generated at Fri Oct 17 09:38:10 2025 by rpki-client