$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.mft File: 164684e1-9b37-4d55-af01-f21223eda67a.mft (raw, json) Hash identifier: 9xLhPW2bga6r+epdPawFIGTKlJIiKPXAzWs+9SeIbDg= Subject key identifier: F0:0F:FF:EB:BB:76:E5:30:1F:87:A5:60:B5:20:21:72:69:51:FE:2A Authority key identifier: E7:22:F6:58:1E:4D:B7:C2:FC:8E:1F:33:C2:5C:F2:A8:29:AF:C7:45 Certificate issuer: /CN=164684e1-9b37-4d55-af01-f21223eda67a Certificate serial: 010D0C9F4328584B3A74E570AD20C295D171AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.mft Manifest number: 010D0C9F43285849577E9164734446892DB759F1 Signing time: Wed 17 Sep 2025 21:00:03 +0000 Manifest this update: Wed 17 Sep 2025 21:00:03 +0000 Manifest next update: Fri 19 Sep 2025 21:00:00 +0000 Files and hashes: 1: 164684e1-9b37-4d55-af01-f21223eda67a.crl (hash: rBlWA/YJLLP1gSBrXSWwjaQ6cP5Xhxi98SF7ah1by0Q=) 2: f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa (hash: OiT07x9Ai4F1fmZpygoT+z/qpldJvGnhWovuAtH+X98=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:74:e5:70:ad:20:c2:95:d1:71:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164684e1-9b37-4d55-af01-f21223eda67a Validity Not Before: Sep 17 21:00:03 2025 GMT Not After : Sep 19 21:00:00 2025 GMT Subject: CN=7ffa9b1f-a9b0-4c45-b0e1-1487812cb43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:ec:8a:08:10:fd:b4:42:e9:6b:4f:71:51: 3c:41:bb:c7:48:0e:d6:1d:82:3e:dc:be:74:be:f3: b2:50:c1:38:8d:98:ac:d4:b8:69:6a:46:30:61:8d: 67:4c:d0:50:8b:ee:20:1c:a1:ab:91:4f:d1:43:db: 1f:8a:78:a4:75:19:72:e1:de:2b:c1:4e:d3:74:c0: f6:0c:9a:b4:5f:0d:65:81:e2:4d:7a:c8:38:3d:a7: 41:16:b3:14:dd:ed:ea:17:ed:91:fa:6f:dd:5f:5f: 5e:5c:b6:e8:35:30:35:3d:81:ed:76:e6:8d:12:92: 60:9a:e9:50:9f:aa:11:9c:20:56:0a:4b:74:9f:43: 8f:aa:49:f3:5e:38:9e:da:36:a5:5e:ad:f1:75:ea: 94:ee:d6:35:f4:dc:2a:57:f8:79:93:56:da:cc:ab: 4d:4f:8e:ca:b0:4f:b0:c1:99:45:32:99:35:9a:38: d1:57:af:98:35:c9:c5:01:2e:90:36:f8:67:b5:f8: cc:79:fc:ea:68:ea:55:c8:ba:80:0a:44:2d:1b:74: 97:5c:ee:62:b2:66:be:44:53:b1:9d:c8:90:3c:d5: 37:f3:05:32:fc:6d:96:ff:f0:e5:06:19:c1:0f:9a: cc:34:56:d1:13:3e:42:16:9c:e5:d4:f6:2b:12:2c: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0F:FF:EB:BB:76:E5:30:1F:87:A5:60:B5:20:21:72:69:51:FE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.crl X509v3 Authority Key Identifier: keyid:E7:22:F6:58:1E:4D:B7:C2:FC:8E:1F:33:C2:5C:F2:A8:29:AF:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f4:bd:9d:15:40:5d:61:89:f8:74:f3:51:53:96:58:bf:30: 7d:1f:24:99:16:c8:e8:b3:bf:60:4a:a2:53:06:3a:b0:da:b8: 20:c4:3b:01:e3:12:44:7f:f9:0f:8a:fd:2d:55:f0:44:00:83: 97:91:69:9a:84:e1:f8:d8:4b:67:4f:75:20:c5:08:1c:f3:44: 76:e4:98:4f:11:7e:9c:87:a5:cc:58:c4:ee:98:55:66:69:49: 33:73:a5:bc:6f:66:41:ed:66:1d:3b:2c:c7:0d:a3:a3:f3:b7: 1c:36:13:ce:85:c7:6b:b7:0a:74:41:92:c8:72:6c:2f:27:55: dc:a2:0b:c3:b5:10:94:4b:92:8c:05:d1:12:ea:5b:3b:95:f3: e3:05:67:6e:30:d3:67:ab:08:17:f5:99:11:63:a4:aa:f4:57: f7:8a:c9:91:49:68:5c:25:fd:a8:c2:29:f0:83:63:9f:8b:f7: bf:75:eb:4b:30:eb:9a:f0:73:98:91:a5:9d:e8:5a:ee:97:96: e4:3d:f8:fe:89:b1:18:6b:6f:de:b8:89:54:13:48:d5:1f:56: 96:ea:55:01:c3:9a:52:b5:3c:dd:86:33:4c:8c:86:27:dc:8b: 60:da:70:0b:13:48:dc:41:e8:0b:4b:2a:81:d5:53:68:e7:0c: e4:ff:3a:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs6dOVwrSDCldFxrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTY0Njg0ZTEtOWIzNy00ZDU1LWFmMDEtZjIxMjIzZWRh NjdhMB4XDTI1MDkxNzIxMDAwM1oXDTI1MDkxOTIxMDAwMFowLzEtMCsGA1UEAxMk N2ZmYTliMWYtYTliMC00YzQ1LWIwZTEtMTQ4NzgxMmNiNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHvsiggQ/bRC6WtPcVE8QbvHSA7WHYI+3L50 vvOyUME4jZis1LhpakYwYY1nTNBQi+4gHKGrkU/RQ9sfinikdRly4d4rwU7TdMD2 DJq0Xw1lgeJNesg4PadBFrMU3e3qF+2R+m/dX19eXLboNTA1PYHtduaNEpJgmulQ n6oRnCBWCkt0n0OPqknzXjie2jalXq3xdeqU7tY19NwqV/h5k1bazKtNT47KsE+w wZlFMpk1mjjRV6+YNcnFAS6QNvhntfjMefzqaOpVyLqACkQtG3SXXO5isma+RFOx nciQPNU38wUy/G2W//DlBhnBD5rMNFbREz5CFpzl1PYrEixWyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPAP/+u7duUwH4elYLUgIXJpUf4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xNjQ2 ODRlMS05YjM3LTRkNTUtYWYwMS1mMjEyMjNlZGE2N2EvMTY0Njg0ZTEtOWIzNy00 ZDU1LWFmMDEtZjIxMjIzZWRhNjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTY0Njg0ZTEtOWIzNy00ZDU1LWFm MDEtZjIxMjIzZWRhNjdhLzE2NDY4NGUxLTliMzctNGQ1NS1hZjAxLWYyMTIyM2Vk YTY3YS5jcmwwHwYDVR0jBBgwFoAU5yL2WB5Nt8L8jh8zwlzyqCmvx0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xNjQ2ODRlMS05YjM3LTRkNTUtYWYwMS1mMjEy MjNlZGE2N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBb9L2dFUBdYYn4dPNRU5ZY vzB9HySZFsjos79gSqJTBjqw2rggxDsB4xJEf/kPiv0tVfBEAIOXkWmahOH42Etn T3UgxQgc80R25JhPEX6ch6XMWMTumFVmaUkzc6W8b2ZB7WYdOyzHDaOj87ccNhPO hcdrtwp0QZLIcmwvJ1XcogvDtRCUS5KMBdES6ls7lfPjBWduMNNnqwgX9ZkRY6Sq 9Ff3ismRSWhcJf2owinwg2Ofi/e/detLMOua8HOYkaWd6Frul5bkPfj+ibEYa2/e uIlUE0jVH1aW6lUBw5pStTzdhjNMjIYn3Itg2nALE0jcQegLSyqB1VNo5wzk/zrL -----END CERTIFICATE-----Generated at Wed Sep 17 23:59:00 2025 by rpki-client