$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft File: 528385d7-74c5-424c-a337-95b993622fcc.mft (raw, json) Hash identifier: ZhMuPVdwZFC3Yy5zgfvyQ3jSD0onipc5sjlzfT5P7TQ= Subject key identifier: 54:FE:54:48:56:53:8A:D6:41:EE:AD:7F:EF:9D:1B:FB:05:5D:B0:4E Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584B8DDC2122CD741FBB4E630500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft Manifest number: 010D0C9F432858416F331E6674A4842C38970148 Signing time: Fri 17 Oct 2025 18:00:08 +0000 Manifest this update: Fri 17 Oct 2025 18:00:08 +0000 Manifest next update: Mon 20 Oct 2025 18:00:00 +0000 Files and hashes: 1: 37e379c2-123b-325c-ac07-0f1c59aac703.roa (hash: OyNw4RpSdP00nRIlFVx5juVxXih0nACCirOHlUG+JNE=) 2: 528385d7-74c5-424c-a337-95b993622fcc.crl (hash: RPuzCiR9lz3pDJk7JisuJHVHhOxLdxrzkJbcf2hyQcw=) 3: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (hash: XIl0FEOprZxFCiJevlfJnI0GtnR229TwnGTTHM9DZ3s=) 4: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (hash: ZECUVIU/NCWjoS7pTWlkoAXQnR8CGOpKz7DGBZm2EBU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:dc:21:22:cd:74:1f:bb:4e:63:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Oct 17 18:00:08 2025 GMT Not After : Oct 20 18:00:00 2025 GMT Subject: CN=79f59c8d-b6f2-4a7e-9d88-350473a83f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:0f:18:57:7b:d9:5f:98:5b:f4:fe:33:f2: e9:72:e5:07:7e:2a:7f:93:79:b1:74:8e:b1:1a:c7: e0:6c:22:b3:0c:96:cb:b7:86:d7:0c:bd:79:e5:3b: 94:81:cb:cf:49:ab:fa:0b:45:ad:3f:49:64:f4:3d: 4b:00:15:09:8b:aa:44:e8:f4:79:24:89:87:9f:1e: a2:dc:e6:24:2e:f5:e7:ea:74:66:28:4a:a8:8f:64: ee:4c:38:3b:71:53:d3:95:0f:86:7b:a6:3f:aa:09: 67:93:9d:2b:55:87:a1:cd:f4:47:e3:30:79:27:2f: 17:78:f9:3f:0b:a2:67:1c:03:51:6b:00:21:01:64: 42:9b:59:9a:32:18:60:6e:e6:49:8a:d9:10:7e:d7: 02:a7:ea:11:60:20:ca:b7:fb:af:87:ec:f1:ba:53: 44:ad:d4:cc:54:9b:a7:d8:d2:55:9a:ec:f6:75:1d: 48:40:5b:dc:64:b1:77:e8:43:8f:70:6e:a0:ef:b5: 1f:43:2f:bc:bd:8f:f2:5d:37:c8:92:ac:c5:fc:41: 75:26:a5:a5:24:81:12:6d:5a:50:0a:21:90:e1:df: 73:7e:c2:c8:1e:4d:e5:d9:96:d4:dc:b0:83:f6:4d: 44:ab:c9:95:f6:0b:d1:b4:fc:a6:cb:da:5d:a4:4e: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FE:54:48:56:53:8A:D6:41:EE:AD:7F:EF:9D:1B:FB:05:5D:B0:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b5:0d:13:f2:2d:a5:4d:e6:0b:0c:85:c9:e0:07:ef:56:33: 2f:35:bc:8d:40:ac:50:c8:89:0b:a5:69:8f:19:ac:48:89:93: 59:00:4a:00:15:8b:b0:59:05:c0:d9:d3:a3:03:a8:29:70:98: 01:38:8e:56:ae:58:8c:8c:37:07:62:1e:26:e8:f7:cb:da:94: f5:03:61:42:50:50:34:5f:06:15:30:aa:f6:d8:c4:87:5e:c0: 87:04:5a:6a:54:72:ef:fa:0e:db:1a:6d:d7:d8:fb:e2:ab:6e: 6a:ac:71:0b:68:c8:cf:75:58:d1:52:34:07:e5:89:ae:02:2d: e1:8b:9f:ff:be:e7:a5:8e:0f:4f:eb:bd:fa:e6:27:31:36:f9: e4:8b:69:90:ed:fb:20:94:8b:d1:e4:61:ba:3d:a4:4b:68:e0: ce:5e:4c:12:78:33:ae:da:3c:37:39:21:ac:05:d8:d0:d7:3f: 80:06:5d:96:91:81:50:0c:3d:24:b8:84:97:2c:2a:c1:8b:41: d0:15:f9:b3:72:3e:0d:34:ed:34:5d:7e:31:61:cc:f5:28:fb: d7:18:23:1b:8c:78:95:ad:2a:4b:a7:d7:ea:fe:4f:4f:bd:7d: 09:3e:f1:bf:e2:32:63:8f:e4:58:a7:e3:08:24:58:6a:2a:ca: 68:27:43:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuN3CEizXQfu05jBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MTAxNzE4MDAwOFoXDTI1MTAyMDE4MDAwMFowLzEtMCsGA1UEAxMk NzlmNTljOGQtYjZmMi00YTdlLTlkODgtMzUwNDczYTgzZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4gPGFd72V+YW/T+M/LpcuUHfip/k3mxdI6x GsfgbCKzDJbLt4bXDL155TuUgcvPSav6C0WtP0lk9D1LABUJi6pE6PR5JImHnx6i 3OYkLvXn6nRmKEqoj2TuTDg7cVPTlQ+Ge6Y/qglnk50rVYehzfRH4zB5Jy8XePk/ C6JnHANRawAhAWRCm1maMhhgbuZJitkQftcCp+oRYCDKt/uvh+zxulNErdTMVJun 2NJVmuz2dR1IQFvcZLF36EOPcG6g77UfQy+8vY/yXTfIkqzF/EF1JqWlJIESbVpQ CiGQ4d9zfsLIHk3l2ZbU3LCD9k1Eq8mV9gvRtPymy9pdpE7fLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFT+VEhWU4rWQe6tf++dG/sFXbBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvNTI4Mzg1ZDctNzRjNS00 MjRjLWEzMzctOTViOTkzNjIyZmNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAftQ0T8i2lTeYLDIXJ4Afv VjMvNbyNQKxQyIkLpWmPGaxIiZNZAEoAFYuwWQXA2dOjA6gpcJgBOI5WrliMjDcH Yh4m6PfL2pT1A2FCUFA0XwYVMKr22MSHXsCHBFpqVHLv+g7bGm3X2Pviq25qrHEL aMjPdVjRUjQH5YmuAi3hi5//vueljg9P67365icxNvnki2mQ7fsglIvR5GG6PaRL aODOXkwSeDOu2jw3OSGsBdjQ1z+ABl2WkYFQDD0kuISXLCrBi0HQFfmzcj4NNO00 XX4xYcz1KPvXGCMbjHiVrSpLp9fq/k9PvX0JPvG/4jJjj+RYp+MIJFhqKspoJ0MT -----END CERTIFICATE-----Generated at Sat Oct 18 17:51:14 2025 by rpki-client