$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: 7o89/bj3znE4PcRSbGICKhUG+rFg2NxJbguPB3EAFyo= Subject key identifier: 56:00:A2:4F:9A:92:B0:65:6C:90:E2:E7:0B:B7:E7:54:47:63:2C:C6 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584B9B1EE152BD0250054BDD5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1AF0 Signing time: Wed 22 Oct 2025 12:00:08 +0000 Manifest this update: Wed 22 Oct 2025 12:00:08 +0000 Manifest next update: Fri 24 Oct 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: RYjWEOdqIFicevR7CXUjqeAsaTIWg00bOqBAbv+vXFo=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: jJ0tmTUIPV8GgW/6E+C1G2NeWJEBzIrYhyAIFIqIM8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:1e:e1:52:bd:02:50:05:4b:dd:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Oct 22 12:00:08 2025 GMT Not After : Oct 24 12:00:00 2025 GMT Subject: CN=89aa1776-8bdc-4d5f-8cf9-e4ef3adec929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:fa:b2:f8:ba:01:a3:a7:10:3c:1b:a1:3a: 91:3d:88:f6:6c:d7:0c:0a:71:e3:68:28:95:ca:c4: 2d:4f:4e:6a:9c:cd:3a:61:36:60:89:ff:76:15:5f: 08:ab:93:c0:c3:91:c6:a4:4a:54:90:56:d4:aa:e1: e8:72:c9:f9:e5:10:8c:7c:bf:30:92:e4:c8:8b:e9: 27:d5:78:6a:37:99:a5:3a:b9:7a:43:82:70:15:63: 45:7b:c4:33:29:99:a7:a4:72:4f:e1:c9:8b:ef:dc: ab:89:9a:bd:a4:a5:df:c9:4e:53:59:5d:9f:b4:99: 38:b2:26:45:d9:c4:a8:1d:a3:6b:53:ef:33:10:16: 4a:2d:09:b8:81:74:9e:3e:44:08:0f:7b:a6:ce:9e: de:5c:2a:87:95:56:5b:91:72:12:1d:40:13:83:60: 53:45:ba:a5:37:7f:9b:6d:19:0b:76:82:08:dd:75: da:78:d4:16:6f:3e:15:dd:ea:6d:8d:8e:3b:e6:a1: 38:1d:d3:27:ad:07:51:b7:11:ec:01:9b:c3:a9:f0: d4:f2:23:2e:af:67:93:c9:59:90:48:2d:85:d6:e7: 75:09:c9:fd:89:8e:2a:09:b7:84:d1:07:f6:73:76: 76:38:e9:6d:fe:1f:f8:6d:37:f5:a3:76:5c:eb:cb: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:00:A2:4F:9A:92:B0:65:6C:90:E2:E7:0B:B7:E7:54:47:63:2C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:82:5e:d5:dc:c9:b8:ec:85:bc:b4:26:95:69:d8:fe:25:f3: 83:b5:54:43:4f:05:ca:23:ee:2d:73:a0:b9:04:70:dd:3f:18: e8:c4:5b:93:59:99:f7:da:7f:5b:5b:c7:d2:ae:6c:da:f4:9d: 11:15:d7:ad:72:73:50:b5:b4:30:5c:ca:b9:4d:8c:46:38:59: 85:58:26:f9:c5:81:2c:07:c9:40:21:e4:dd:73:66:5c:24:29: 5c:e4:09:64:b6:b1:fa:33:a2:7f:b1:bf:f0:26:89:c8:d4:86: 1d:f5:65:50:cc:8f:c0:05:7c:24:83:85:50:cf:2b:fb:69:ba: 1a:99:e9:df:fc:f2:4e:cf:3b:56:fb:f0:c6:a1:67:52:c4:d5: c9:56:20:1f:d9:04:6a:7e:10:c7:a3:fe:7c:c4:f0:f2:a5:52: 47:6a:6c:27:f1:c8:a5:b4:df:1b:fc:5f:f0:69:5f:d4:fd:26: 7a:ad:69:58:67:75:7c:22:0f:c1:ed:7c:3c:6d:08:8b:1f:f1: d4:0d:5a:39:6d:46:1b:09:ab:85:dd:07:0f:f4:b1:83:d8:25: 90:f1:fe:39:55:fa:ea:63:c3:57:00:e6:16:4c:36:f1:40:37: 57:39:68:c3:ee:c0:98:b0:2b:1d:1c:91:cb:53:0d:96:54:1b: 4b:74:25:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEubHuFSvQJQBUvdWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MTAyMjEyMDAwOFoXDTI1MTAyNDEyMDAwMFowLzEtMCsGA1UEAxMk ODlhYTE3NzYtOGJkYy00ZDVmLThjZjktZTRlZjNhZGVjOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyD6svi6AaOnEDwboTqRPYj2bNcMCnHjaCiV ysQtT05qnM06YTZgif92FV8Iq5PAw5HGpEpUkFbUquHocsn55RCMfL8wkuTIi+kn 1XhqN5mlOrl6Q4JwFWNFe8QzKZmnpHJP4cmL79yriZq9pKXfyU5TWV2ftJk4siZF 2cSoHaNrU+8zEBZKLQm4gXSePkQID3umzp7eXCqHlVZbkXISHUATg2BTRbqlN3+b bRkLdoII3XXaeNQWbz4V3eptjY475qE4HdMnrQdRtxHsAZvDqfDU8iMur2eTyVmQ SC2F1ud1Ccn9iY4qCbeE0Qf2c3Z2OOlt/h/4bTf1o3Zc68tXrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFYAok+akrBlbJDi5wu351RHYyzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwgl7V3Mm47IW8tCaVadj+ JfODtVRDTwXKI+4tc6C5BHDdPxjoxFuTWZn32n9bW8fSrmza9J0RFdetcnNQtbQw XMq5TYxGOFmFWCb5xYEsB8lAIeTdc2ZcJClc5AlktrH6M6J/sb/wJonI1IYd9WVQ zI/ABXwkg4VQzyv7aboamenf/PJOzztW+/DGoWdSxNXJViAf2QRqfhDHo/58xPDy pVJHamwn8ciltN8b/F/waV/U/SZ6rWlYZ3V8Ig/B7Xw8bQiLH/HUDVo5bUYbCauF 3QcP9LGD2CWQ8f45VfrqY8NXAOYWTDbxQDdXOWjD7sCYsCsdHJHLUw2WVBtLdCVK -----END CERTIFICATE-----Generated at Wed Oct 22 23:21:46 2025 by rpki-client