$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: ttqPKSnnjwPXLMY2IzB7bblHGU6Z9KETRnKfooO2jYM= Subject key identifier: 73:A1:7F:A2:D9:F3:64:3A:5E:79:63:4A:EE:65:3B:B0:D9:7F:55:E6 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584B9924A68CF7960FF31DFC8980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B76B9 Signing time: Tue 21 Oct 2025 19:00:08 +0000 Manifest this update: Tue 21 Oct 2025 19:00:08 +0000 Manifest next update: Fri 24 Oct 2025 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: OSDFSTnLCdBqAZIzFfdiV61+XTXyrFXz8Z5j4wSdFpQ=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: qyvK3qaxDYB49+qT0oF9rU7CNsuedi/vUaiTFu839mw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:24:a6:8c:f7:96:0f:f3:1d:fc:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Oct 21 19:00:08 2025 GMT Not After : Oct 24 19:00:00 2025 GMT Subject: CN=db5b662e-2468-45f2-8cf5-8362ead8c156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:89:8a:83:57:11:48:46:f8:9b:89:39:27: 28:bc:69:71:4c:4a:18:e4:3b:91:af:fd:34:0a:b9: da:16:e2:74:04:33:10:5e:50:e4:48:29:07:44:54: 51:6d:84:d5:e5:e3:d1:0e:b9:2b:6b:5a:6a:48:88: fe:cd:c2:b5:78:6e:03:05:c7:db:84:b8:cf:36:d9: 9e:4c:f5:af:20:70:56:b2:00:22:75:ae:ae:bf:72: 92:51:56:f3:27:5f:e2:b2:1c:74:47:9d:12:2c:46: 2f:fa:c6:a4:70:cb:72:9e:0a:96:7a:2d:63:33:a7: 47:4b:34:04:ee:89:29:c7:a0:5c:c0:1c:09:d7:66: 11:fb:f3:3a:ec:8d:64:b8:f8:46:96:41:29:33:b8: a8:dc:71:9c:db:76:d5:a4:61:ae:eb:d1:c3:5d:59: b7:b4:de:d5:2f:c5:69:58:6e:ca:c2:72:35:e3:ec: 92:1e:34:62:c2:24:8d:d9:e2:6f:3f:2f:38:5b:01: 37:6b:4a:cb:08:ca:99:87:d6:4a:c1:88:9d:41:55: f5:fc:ff:49:97:cf:a0:7d:d4:d3:02:00:75:8b:fa: 62:d6:eb:e1:87:a4:5b:75:0f:fa:61:13:6c:d6:2a: 30:1f:60:54:7d:69:f7:15:6b:fb:83:fe:f0:3f:ac: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A1:7F:A2:D9:F3:64:3A:5E:79:63:4A:EE:65:3B:B0:D9:7F:55:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4a:f7:af:02:69:28:09:52:2b:1a:54:ba:1c:f5:fc:e1:e3: 3a:e0:c3:bb:f0:64:71:1e:eb:7e:9a:d1:83:a7:25:fd:ad:c8: fd:72:1b:93:42:a8:55:b6:17:25:07:40:52:20:4e:db:b0:28: bf:31:fe:43:7a:90:ff:95:77:d1:77:30:fe:24:30:44:12:31: af:74:c6:2d:0a:87:5a:c6:fb:ff:9b:58:7a:68:20:4a:29:58: 0e:52:5e:18:ee:94:cc:ee:fb:02:53:9d:16:e2:6c:d6:7d:07: 43:58:ae:bd:90:92:cc:ef:37:ab:6b:83:86:28:6b:aa:07:90: 04:8f:6f:36:c6:f3:f9:28:a8:b1:b5:0e:b5:ec:ea:70:25:f8: 3f:e1:5f:cc:34:01:75:18:d4:4f:12:61:af:b8:14:39:02:2e: 60:59:9d:31:5f:38:e5:70:74:b6:db:21:5a:07:5a:fe:94:5e: 4b:9f:68:fe:ad:fb:ba:97:53:0d:4b:81:19:08:7d:e7:0f:73: c8:ab:26:bf:0f:a0:4a:97:6e:de:1a:06:7b:4b:17:a0:27:b8: b3:e0:45:88:ab:77:fb:bb:9d:5f:ef:fd:a4:ee:f0:87:b0:2a: 2d:46:54:78:65:4b:9b:82:5b:b0:c7:cd:83:f1:db:51:b6:e3: 8d:e0:15:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuZJKaM95YP8x38iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI1MTAyMTE5MDAwOFoXDTI1MTAyNDE5MDAwMFowLzEtMCsGA1UEAxMk ZGI1YjY2MmUtMjQ2OC00NWYyLThjZjUtODM2MmVhZDhjMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOOJioNXEUhG+JuJOScovGlxTEoY5DuRr/00 CrnaFuJ0BDMQXlDkSCkHRFRRbYTV5ePRDrkra1pqSIj+zcK1eG4DBcfbhLjPNtme TPWvIHBWsgAida6uv3KSUVbzJ1/ishx0R50SLEYv+sakcMtyngqWei1jM6dHSzQE 7okpx6BcwBwJ12YR+/M67I1kuPhGlkEpM7io3HGc23bVpGGu69HDXVm3tN7VL8Vp WG7KwnI14+ySHjRiwiSN2eJvPy84WwE3a0rLCMqZh9ZKwYidQVX1/P9Jl8+gfdTT AgB1i/pi1uvhh6RbdQ/6YRNs1iowH2BUfWn3FWv7g/7wP6wqHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHOhf6LZ82Q6XnljSu5lO7DZf1XmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkSvevAmkoCVIrGlS6HPX8 4eM64MO78GRxHut+mtGDpyX9rcj9chuTQqhVthclB0BSIE7bsCi/Mf5DepD/lXfR dzD+JDBEEjGvdMYtCodaxvv/m1h6aCBKKVgOUl4Y7pTM7vsCU50W4mzWfQdDWK69 kJLM7zera4OGKGuqB5AEj282xvP5KKixtQ617OpwJfg/4V/MNAF1GNRPEmGvuBQ5 Ai5gWZ0xXzjlcHS22yFaB1r+lF5Ln2j+rfu6l1MNS4EZCH3nD3PIqya/D6BKl27e GgZ7SxegJ7iz4EWIq3f7u51f7/2k7vCHsCotRlR4ZUubgluwx82D8dtRtuON4BUd -----END CERTIFICATE-----Generated at Wed Oct 22 14:09:19 2025 by rpki-client