$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft File: a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json) Hash identifier: JjMbmHVmE0eDzy9E9EW2E4d5DX2dNGemzrs9O8nFHVM= Subject key identifier: 6D:C5:BF:16:B0:1F:C1:96:27:45:18:18:B2:01:2C:02:87:DE:B0:5A Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584BAA3E0911835F380A50EF68A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft Manifest number: 010D0C9F432858496598AC39FE13BB942B9EDF95 Signing time: Mon 27 Oct 2025 22:00:03 +0000 Manifest this update: Mon 27 Oct 2025 22:00:03 +0000 Manifest next update: Thu 30 Oct 2025 22:00:00 +0000 Files and hashes: 1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: /T4eh2bliCSbSZMcnAdws45RScjElSctU98gkFNngzg=) 2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: f55BB78pI2Oz39eHaKLT29k2ieQIVypFFIwW770POcc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:3e:09:11:83:5f:38:0a:50:ef:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Oct 27 22:00:03 2025 GMT Not After : Oct 30 22:00:00 2025 GMT Subject: CN=8f5c8203-6579-4f75-a633-e988e734b76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:96:2a:9f:a1:07:c5:87:81:3f:ba:f2:ed: 3f:33:89:5c:1e:9e:ba:03:7f:c7:a6:e5:5a:42:1a: c7:9e:31:3a:25:d7:16:4f:c6:fc:bb:67:a2:23:ff: 4d:74:ba:04:5e:c6:89:a9:de:b7:90:0e:02:c1:4c: 18:0e:ec:32:02:10:d0:22:61:5b:22:ef:e4:f4:e5: ab:45:5b:16:0d:1b:8b:43:45:4c:8e:46:27:d5:27: 41:08:b6:4b:9d:ea:99:e0:ce:4d:23:dd:3f:01:3a: 31:28:3e:81:be:f9:bb:84:cb:0c:f6:e5:4e:2f:4e: 9c:ea:d6:cf:f0:7f:7b:d0:9f:9d:b9:ad:c6:86:e8: 20:39:1f:ed:db:69:b5:dd:96:fa:37:dd:9e:14:9d: 21:5a:72:1d:b7:cc:38:c0:04:c7:be:70:56:07:59: a3:b1:95:3c:e2:e8:d1:f2:df:25:a0:fb:bc:f0:a1: 4d:a7:0e:5f:da:53:f6:9a:c5:31:ae:4a:fb:29:d6: 0e:90:4e:70:57:bf:1d:dc:76:4c:24:b2:72:fe:15: 03:a9:ed:3c:01:86:0b:8f:1c:da:5d:2c:9c:ac:b2: 9e:6f:15:98:f1:97:c0:e9:a8:ce:19:d5:7b:41:43: c7:bc:3f:b7:02:ff:c0:0c:f6:c4:a7:41:81:8e:bf: 14:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C5:BF:16:B0:1F:C1:96:27:45:18:18:B2:01:2C:02:87:DE:B0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ec:c0:b2:da:4a:39:78:3b:43:0b:4a:60:fe:85:db:5e:cc: 0f:88:26:11:41:5c:69:47:3f:ab:79:9d:4c:5c:05:be:e9:a6: 76:f5:45:d8:5b:a6:28:ed:ac:b1:85:de:fd:df:1e:e3:8c:78: a5:39:9c:e5:ba:e6:c5:bb:88:4a:73:11:a1:57:58:07:53:33: f7:dd:df:ca:84:4f:3a:e9:14:3e:4c:da:7e:b6:54:28:b6:1c: da:6f:64:f2:7b:1b:45:cf:e5:92:8f:75:e4:2b:79:60:c7:78: 23:ca:72:81:ae:74:03:c3:76:23:e2:fb:17:92:e7:ec:32:2f: 46:61:b1:71:16:b4:c5:ff:f9:f6:67:ca:7b:5c:b2:f1:6a:04: 60:d9:b3:26:20:e7:08:0d:36:05:9c:2f:9d:65:8d:76:74:1f: c3:e8:2b:d6:d0:2e:0c:8d:08:ba:ff:13:66:e9:07:9c:6c:f9: 1c:33:99:94:81:de:af:da:66:35:44:0b:15:49:ce:fc:23:10: 8c:18:00:1a:e5:60:00:bb:ad:07:c6:5f:ec:fc:75:05:10:1a: 91:61:fb:44:59:09:a4:96:a6:4c:cf:63:d8:14:2b:4c:c3:73: 2b:27:77:4f:cf:e3:46:4c:53:26:d7:d8:45:41:4d:a6:14:a2: 03:05:32:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuqPgkRg184ClDvaKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MTAyNzIyMDAwM1oXDTI1MTAzMDIyMDAwMFowLzEtMCsGA1UEAxMk OGY1YzgyMDMtNjU3OS00Zjc1LWE2MzMtZTk4OGU3MzRiNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9eWKp+hB8WHgT+68u0/M4lcHp66A3/HpuVa QhrHnjE6JdcWT8b8u2eiI/9NdLoEXsaJqd63kA4CwUwYDuwyAhDQImFbIu/k9OWr RVsWDRuLQ0VMjkYn1SdBCLZLneqZ4M5NI90/AToxKD6Bvvm7hMsM9uVOL06c6tbP 8H970J+dua3GhuggOR/t22m13Zb6N92eFJ0hWnIdt8w4wATHvnBWB1mjsZU84ujR 8t8loPu88KFNpw5f2lP2msUxrkr7KdYOkE5wV78d3HZMJLJy/hUDqe08AYYLjxza XSycrLKebxWY8ZfA6ajOGdV7QUPHvD+3Av/ADPbEp0GBjr8UwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG3FvxawH8GWJ0UYGLIBLAKH3rBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk4N2M0NDYtNWZjMi00 NGIwLTlhNDEtNjUyOTZkOTBkMGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT7MCy2ko5eDtDC0pg/oXb XswPiCYRQVxpRz+reZ1MXAW+6aZ29UXYW6Yo7ayxhd793x7jjHilOZzluubFu4hK cxGhV1gHUzP33d/KhE866RQ+TNp+tlQothzab2TyextFz+WSj3XkK3lgx3gjynKB rnQDw3Yj4vsXkufsMi9GYbFxFrTF//n2Z8p7XLLxagRg2bMmIOcIDTYFnC+dZY12 dB/D6CvW0C4MjQi6/xNm6QecbPkcM5mUgd6v2mY1RAsVSc78IxCMGAAa5WAAu60H xl/s/HUFEBqRYftEWQmklqZMz2PYFCtMw3MrJ3dPz+NGTFMm19hFQU2mFKIDBTI9 -----END CERTIFICATE-----Generated at Tue Oct 28 03:14:21 2025 by rpki-client