$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft File: c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft (raw, json) Hash identifier: Q5cglCnZeBymYuhkz6UQw3d6LVkIoy7WolLiQfcpICI= Subject key identifier: 38:16:D2:21:A0:6B:EF:3D:05:7B:B5:E6:C9:8B:FA:32:7E:7B:70:5C Authority key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 Certificate issuer: /CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Certificate serial: 010D0C9F4328584B963C2AE46F211BD8FDB97C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft Manifest number: 010D0C9F4328584A17DA3FA749DC24C8808F304D Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 8d95541a-b336-3100-a13d-7931c32d52f2.roa (hash: bZq8qGeooC6wxYP0zm/erKPtPD7ibdK1lCa57JQnMyk=) 2: c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl (hash: /9ZOEB5n7+d9F+eJcvsfWxfkGErNghe4MmVj4hfDN+g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2a:e4:6f:21:1b:d8:fd:b9:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=ee1f851d-dd2c-4f42-a08f-d98457310727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:83:6e:57:35:84:9f:8e:2e:ee:e6:8d:94:5b: e4:2b:5b:18:8a:95:87:33:51:e7:03:3d:23:26:70: 23:ca:a2:fc:10:fd:45:a9:03:41:51:a1:53:40:ad: 26:97:d6:0c:f8:6c:2a:5a:64:3a:69:ed:54:21:49: eb:a9:e2:ef:e5:76:69:ae:f5:3a:3e:c4:d1:7b:8e: 93:f4:c4:a7:ed:ea:b7:9a:31:60:03:ba:c9:ab:ae: 4c:f9:e1:1a:fe:3c:85:80:bc:88:9a:bd:25:34:2e: 66:d5:94:7a:a3:d0:c8:4f:4a:c9:65:6e:46:0e:0e: 88:fe:96:69:47:ad:15:7d:3f:2a:8d:1b:1e:8c:c9: 64:18:bc:79:6b:c5:d6:b2:60:72:d1:2a:89:24:c2: 78:75:67:53:2d:39:3d:62:6b:51:a9:9a:26:33:ee: 15:44:49:14:d7:47:d1:d8:cf:4b:4b:ef:16:a6:69: d4:1b:92:a8:26:77:f4:b6:0b:51:ce:7e:20:3f:97: c9:e3:0f:08:a6:c1:9d:a4:18:38:a9:04:c0:85:be: 0c:b8:9e:b8:31:8b:72:08:a2:7d:ac:66:a7:c4:37: d9:96:ce:ce:95:71:ac:1a:39:fc:1a:19:3c:9c:91: 6b:be:50:53:63:bf:20:40:1e:02:4c:01:f8:af:79: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:D2:21:A0:6B:EF:3D:05:7B:B5:E6:C9:8B:FA:32:7E:7B:70:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl X509v3 Authority Key Identifier: keyid:02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ee:78:7d:52:24:e1:4c:db:4c:11:3b:68:e1:a7:36:96:34: 6e:97:03:ce:9e:f9:5e:00:65:47:5a:0a:81:8d:c3:57:fb:28: 92:ca:10:36:de:de:e1:83:1d:4b:72:e0:55:94:4b:2c:29:aa: 49:a9:66:98:a7:a4:6d:21:28:69:c4:07:79:4b:67:58:21:8d: 23:94:4a:29:86:8e:9a:62:e4:81:03:b9:ab:99:00:99:9d:35: 56:d5:55:1b:3c:e6:04:7e:9e:04:44:1a:95:e0:eb:aa:43:f4: 5c:b7:25:a2:4d:a7:cc:2d:c1:6e:41:95:64:5a:d5:70:d8:ec: 07:32:30:0f:69:0f:01:0b:f8:3e:85:fa:19:b2:8f:86:53:84: 13:61:b5:00:24:cf:66:7b:a5:6c:f4:db:12:f4:6e:69:02:ff: 04:fa:b4:7e:c3:29:de:30:a3:ac:2a:ea:bd:1b:af:90:05:92: 52:cd:5e:c7:86:01:44:49:75:18:39:75:98:1e:d7:5e:a7:b3: 41:63:ad:c6:dc:e6:95:32:9e:48:e9:13:20:09:1f:81:8a:97: 95:89:b8:15:ff:2d:9e:bf:8a:d4:2e:b6:6a:60:a0:1a:bd:9e: db:90:6e:02:47:1a:46:f7:5c:9b:e2:71:2b:6b:8e:81:37:c7: 19:4c:1e:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPCrkbyEb2P25fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhZWE3ZTItZTM4MC00NTU5LTlmZjMtNGZjNzEzOGM0 MzVlMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk ZWUxZjg1MWQtZGQyYy00ZjQyLWEwOGYtZDk4NDU3MzEwNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYNuVzWEn44u7uaNlFvkK1sYipWHM1HnAz0j JnAjyqL8EP1FqQNBUaFTQK0ml9YM+GwqWmQ6ae1UIUnrqeLv5XZprvU6PsTRe46T 9MSn7eq3mjFgA7rJq65M+eEa/jyFgLyImr0lNC5m1ZR6o9DIT0rJZW5GDg6I/pZp R60VfT8qjRsejMlkGLx5a8XWsmBy0SqJJMJ4dWdTLTk9YmtRqZomM+4VREkU10fR 2M9LS+8WpmnUG5KoJnf0tgtRzn4gP5fJ4w8IpsGdpBg4qQTAhb4MuJ64MYtyCKJ9 rGanxDfZls7OlXGsGjn8Ghk8nJFrvlBTY78gQB4CTAH4r3lbTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDgW0iGga+89BXu15smL+jJ+e3BcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jN2Fl YTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3MTM4YzQzNWUvYzdhZWE3ZTItZTM4MC00 NTU5LTlmZjMtNGZjNzEzOGM0MzVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzdhZWE3ZTItZTM4MC00NTU5LTlm ZjMtNGZjNzEzOGM0MzVlL2M3YWVhN2UyLWUzODAtNDU1OS05ZmYzLTRmYzcxMzhj NDM1ZS5jcmwwHwYDVR0jBBgwFoAUAueJuYYj4tMp8jV4mdgRxdPaCpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jN2FlYTdlMi1lMzgwLTQ1NTktOWZmMy00ZmM3 MTM4YzQzNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAM7nh9UiThTNtMETto4ac2 ljRulwPOnvleAGVHWgqBjcNX+yiSyhA23t7hgx1LcuBVlEssKapJqWaYp6RtIShp xAd5S2dYIY0jlEopho6aYuSBA7mrmQCZnTVW1VUbPOYEfp4ERBqV4OuqQ/RctyWi TafMLcFuQZVkWtVw2OwHMjAPaQ8BC/g+hfoZso+GU4QTYbUAJM9me6Vs9NsS9G5p Av8E+rR+wyneMKOsKuq9G6+QBZJSzV7HhgFESXUYOXWYHtdep7NBY63G3OaVMp5I 6RMgCR+BipeVibgV/y2ev4rULrZqYKAavZ7bkG4CRxpG91yb4nEra46BN8cZTB5H -----END CERTIFICATE-----Generated at Tue Oct 21 07:39:34 2025 by rpki-client