$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft File: 1c939443-d4d3-4122-9e02-8422f40f90c5.mft (raw, json) Hash identifier: u8FaPWRb1kGMsjnl8dAfNW7wrhNwPX7iTjVjrruXK9U= Subject key identifier: 9F:C4:B8:B0:7A:32:CA:38:CB:21:74:A5:62:63:BA:21:85:A8:21:5A Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Certificate issuer: /CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Certificate serial: 010D0C9F4328584B98AD7D9514FF80046ED09300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft Manifest number: 010D0C9F432858430ED6AE4515AF570837AF18E2 Signing time: Tue 21 Oct 2025 15:00:04 +0000 Manifest this update: Tue 21 Oct 2025 15:00:04 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 1c939443-d4d3-4122-9e02-8422f40f90c5.crl (hash: QQOLJura6+yyLb1pEJnQ9ENb5C4Bat1L40eGcMqZhKg=) 2: 6fccbf45-4871-3804-845f-da32fb15f471.roa (hash: Sjnd1kVQwTxg4eWo9c5eAjdmIccKNPWDUhcg6zkyN4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:ad:7d:95:14:ff:80:04:6e:d0:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Validity Not Before: Oct 21 15:00:04 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=cd867a7b-96de-426b-bcb6-77efa5cbe8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:6a:86:43:9e:fd:f0:62:3f:e9:f7:27:2e: b7:7d:30:83:1b:20:34:54:92:67:e6:58:b4:5e:e2: 6b:6a:35:bc:0d:75:8f:6d:a8:bd:78:29:ba:9c:55: 54:7d:47:3c:35:e0:e4:a5:7c:11:e0:66:0d:fc:b5: 64:a0:dd:75:85:e7:33:bd:4a:6b:c6:6e:8c:a8:91: 85:01:ae:a9:db:33:37:47:71:51:29:6b:1b:2b:83: 9c:ad:33:48:81:55:cd:39:9b:ff:ca:f4:42:59:80: 24:a7:e3:6b:f2:5c:87:41:56:1b:bf:b0:d8:9b:fd: fd:8b:ad:e0:c4:f0:dc:c2:c6:45:2d:d0:07:33:52: f3:48:56:c8:18:29:44:27:1c:a7:b6:c2:b0:bc:a3: 34:81:3d:0c:0c:70:e7:27:2d:61:5a:36:3e:04:c7: 52:75:41:99:e0:bb:b6:b6:87:17:e6:ea:d6:56:7a: 5c:3a:a7:b9:fd:90:de:84:8d:9e:e0:2f:69:23:dd: 9b:a2:3b:f3:60:9d:cc:ce:05:3f:85:82:c8:af:5a: 1f:a8:36:51:59:a7:63:c8:58:3c:63:a0:5f:a7:ba: b1:3a:a0:8c:7e:1d:5f:9a:d9:2a:55:6f:b3:93:26: f4:e4:0a:50:41:f6:2d:ee:25:88:c0:ca:9c:b1:dc: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C4:B8:B0:7A:32:CA:38:CB:21:74:A5:62:63:BA:21:85:A8:21:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl X509v3 Authority Key Identifier: keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ce:5b:84:6e:b9:7c:cc:35:00:b2:59:f8:d5:bd:ae:81:20: 75:f6:e8:1c:cb:40:b2:95:23:a9:18:e9:92:8b:84:1d:a1:8a: 17:ea:f2:f6:9a:70:8b:ac:01:90:26:9e:a0:57:b4:37:92:83: fe:41:7c:38:16:61:05:7d:8a:b9:1b:b4:64:ef:ab:d0:88:5b: a1:3c:1c:d7:7d:e1:58:82:6a:27:d3:33:5a:e3:37:ea:c1:07: 50:48:18:2e:c3:02:5e:31:4c:65:0e:0f:18:0d:2f:cc:f1:f4: a3:56:17:dc:1a:94:b1:8d:fc:b8:da:be:e8:8f:4a:75:67:10: f0:f6:2a:c8:96:81:3a:da:78:e8:7c:69:66:69:a2:79:de:45: 99:b7:a4:0a:1e:3d:a9:4e:08:1e:ab:56:86:e9:c7:56:dd:25: bb:b8:c7:54:a7:8a:12:fa:63:02:79:35:f8:9b:8a:d1:e7:3b: bd:7c:7c:60:a4:b6:98:12:50:7b:4e:7e:e0:39:fd:f7:e1:f8: c8:2f:15:0c:56:bb:74:22:d7:ce:a6:57:cf:06:d5:94:17:be: 3c:47:6c:45:e9:d0:19:b5:58:90:86:e6:3a:aa:b5:44:0c:05: 4a:af:4a:da:c8:08:a7:de:90:b7:44:b5:85:c2:7d:74:47:ba: f9:bf:85:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuYrX2VFP+ABG7QkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5 MGM1MB4XDTI1MTAyMTE1MDAwNFoXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk Y2Q4NjdhN2ItOTZkZS00MjZiLWJjYjYtNzdlZmE1Y2JlOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5xqhkOe/fBiP+n3Jy63fTCDGyA0VJJn5li0 XuJrajW8DXWPbai9eCm6nFVUfUc8NeDkpXwR4GYN/LVkoN11heczvUprxm6MqJGF Aa6p2zM3R3FRKWsbK4OcrTNIgVXNOZv/yvRCWYAkp+Nr8lyHQVYbv7DYm/39i63g xPDcwsZFLdAHM1LzSFbIGClEJxyntsKwvKM0gT0MDHDnJy1hWjY+BMdSdUGZ4Lu2 tocX5urWVnpcOqe5/ZDehI2e4C9pI92bojvzYJ3MzgU/hYLIr1ofqDZRWadjyFg8 Y6Bfp7qxOqCMfh1fmtkqVW+zkyb05ApQQfYt7iWIwMqcsdzxDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ/EuLB6Mso4yyF0pWJjuiGFqCFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzkz OTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMWM5Mzk0NDMtZDRkMy00 MTIyLTllMDItODQyMmY0MGY5MGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM5Mzk0NDMtZDRkMy00MTIyLTll MDItODQyMmY0MGY5MGM1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05ZTAyLTg0MjJmNDBm OTBjNS5jcmwwHwYDVR0jBBgwFoAUcwBMVZEDoAnEK13od5gZ5m1HdWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIy ZjQwZjkwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6zluEbrl8zDUAsln41b2u gSB19ugcy0CylSOpGOmSi4QdoYoX6vL2mnCLrAGQJp6gV7Q3koP+QXw4FmEFfYq5 G7Rk76vQiFuhPBzXfeFYgmon0zNa4zfqwQdQSBguwwJeMUxlDg8YDS/M8fSjVhfc GpSxjfy42r7oj0p1ZxDw9irIloE62njofGlmaaJ53kWZt6QKHj2pTggeq1aG6cdW 3SW7uMdUp4oS+mMCeTX4m4rR5zu9fHxgpLaYElB7Tn7gOf334fjILxUMVrt0ItfO plfPBtWUF748R2xF6dAZtViQhuY6qrVEDAVKr0rayAin3pC3RLWFwn10R7r5v4Vm -----END CERTIFICATE-----Generated at Wed Oct 22 11:49:58 2025 by rpki-client