$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: ivTubj2JlAbNq09xDRTWyLiAjhOey+aSR8Bsx+0rCeg= Subject key identifier: F6:A7:CB:14:7C:CC:45:CB:36:88:16:63:30:1D:46:05:A2:64:9C:6B Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584B23C6144E2C788EDAE1014A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F8E0 Signing time: Tue 09 Sep 2025 18:00:03 +0000 Manifest this update: Tue 09 Sep 2025 18:00:03 +0000 Manifest next update: Thu 11 Sep 2025 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: F5ciTgmF44u+0xtQINw1DA3jFAEBsfVtheQSzWWbDEI=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: qlBWgQVHIokIjDb6QASxIynORN+xy8Kc7Lulq2B7wKg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:c6:14:4e:2c:78:8e:da:e1:01:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Sep 9 18:00:03 2025 GMT Not After : Sep 11 18:00:00 2025 GMT Subject: CN=513e41be-2c13-4b16-a568-a335cea929d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:e7:7c:dc:fa:d0:24:53:e8:f4:df:82:58: 16:6a:ab:65:e8:5a:d9:07:89:fa:6e:6b:28:b8:4f: b9:51:bb:be:7c:64:82:04:78:52:ab:cc:5a:05:fb: aa:d4:b9:bf:be:44:9a:68:78:40:a3:98:74:43:45: 59:30:60:91:70:fb:8a:cf:ef:f5:b5:a2:f9:27:58: 4e:60:d0:fe:01:59:f0:37:af:26:21:7b:15:09:04: 29:f2:ef:d6:4d:9a:c4:77:5c:f9:b8:33:d0:21:9b: 20:b2:65:80:02:28:db:85:59:60:e4:ca:37:68:99: 89:f6:a6:f0:e0:f5:70:65:ae:0b:2a:59:07:7a:6c: c4:9e:23:38:55:02:e0:1a:61:cf:80:8e:ef:8d:4e: 69:f7:5f:24:8b:92:70:4e:67:41:6c:d4:19:18:0b: 8a:a0:8d:d7:15:68:3d:14:75:f3:9c:19:a9:38:4f: 28:13:51:a9:fc:fa:5c:65:2c:93:23:65:a0:54:4c: 17:ef:85:5e:a6:aa:0e:a5:f0:ec:cc:8d:f5:42:ef: c4:ec:c0:1a:b6:02:c1:f7:67:d3:54:9b:90:9f:fa: a1:f4:94:fd:11:81:7f:5f:f5:fe:d6:4a:10:48:ac: 75:eb:22:22:2e:b0:f6:d2:a6:51:b0:93:17:b7:ea: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A7:CB:14:7C:CC:45:CB:36:88:16:63:30:1D:46:05:A2:64:9C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d2:2f:4f:6e:b0:22:06:43:3e:9c:d6:4e:35:8f:39:a4:f2: 9e:8b:ed:88:b0:36:bc:e3:eb:41:91:7e:e4:b4:c7:8a:57:72: 51:60:99:1b:e6:e0:54:2a:42:f1:d1:10:b6:39:3a:7f:1b:da: 6c:56:a9:41:b8:0e:a3:20:bc:66:01:5d:5f:fe:97:36:8e:9a: cc:2e:67:a5:c6:32:80:d9:ec:de:66:b8:0b:76:9f:a2:7f:db: 79:49:45:cd:7b:74:bb:02:6e:60:80:95:ad:ec:28:d4:d7:3f: 44:fa:41:e9:17:1d:b0:c0:f0:34:f1:2c:65:5c:d1:30:90:f3: fc:7d:eb:59:eb:2a:4d:a8:2c:1d:1f:0f:3b:1d:76:99:18:ba: 6b:cf:98:56:73:0c:d6:54:cb:60:99:96:26:85:27:52:68:4d: 69:ab:6d:3d:3d:cf:c1:d4:a1:46:6f:82:10:b1:f3:b0:f0:da: e3:42:e1:3b:85:dd:e5:8c:43:e7:e6:46:fe:79:3c:22:47:91: 2c:98:12:6a:25:17:ee:88:f0:6e:91:bd:00:5f:82:75:a2:50: f2:ff:e5:d8:83:27:85:c8:64:b5:c8:f1:fa:81:f7:17:87:42: f2:ed:b5:0c:50:04:cb:63:8d:05:4c:ed:31:b1:ed:05:29:46: 6e:d7:59:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsjxhROLHiO2uEBSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MDkwOTE4MDAwM1oXDTI1MDkxMTE4MDAwMFowLzEtMCsGA1UEAxMk NTEzZTQxYmUtMmMxMy00YjE2LWE1NjgtYTMzNWNlYTkyOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja/nfNz60CRT6PTfglgWaqtl6FrZB4n6bmso uE+5Ubu+fGSCBHhSq8xaBfuq1Lm/vkSaaHhAo5h0Q0VZMGCRcPuKz+/1taL5J1hO YND+AVnwN68mIXsVCQQp8u/WTZrEd1z5uDPQIZsgsmWAAijbhVlg5Mo3aJmJ9qbw 4PVwZa4LKlkHemzEniM4VQLgGmHPgI7vjU5p918ki5JwTmdBbNQZGAuKoI3XFWg9 FHXznBmpOE8oE1Gp/PpcZSyTI2WgVEwX74VepqoOpfDszI31Qu/E7MAatgLB92fT VJuQn/qh9JT9EYF/X/X+1koQSKx16yIiLrD20qZRsJMXt+oN9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPanyxR8zEXLNogWYzAdRgWiZJxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCB0i9PbrAiBkM+nNZONY85 pPKei+2IsDa84+tBkX7ktMeKV3JRYJkb5uBUKkLx0RC2OTp/G9psVqlBuA6jILxm AV1f/pc2jprMLmelxjKA2ezeZrgLdp+if9t5SUXNe3S7Am5ggJWt7CjU1z9E+kHp Fx2wwPA08SxlXNEwkPP8fetZ6ypNqCwdHw87HXaZGLprz5hWcwzWVMtgmZYmhSdS aE1pq209Pc/B1KFGb4IQsfOw8NrjQuE7hd3ljEPn5kb+eTwiR5EsmBJqJRfuiPBu kb0AX4J1olDy/+XYgyeFyGS1yPH6gfcXh0Ly7bUMUATLY40FTO0xse0FKUZu11nL -----END CERTIFICATE-----Generated at Wed Sep 10 16:56:32 2025 by rpki-client