$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft File: d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft (raw, json) Hash identifier: sT3XaAvLR4FN/Fk6bzFrTZW2/bzk5FmO9jiDIkCKUx0= Subject key identifier: 65:A9:9A:CB:51:44:33:58:1E:B3:76:C3:91:DB:A0:B8:FA:42:58:1E Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584B963C2B3389D84029F917BC48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft Manifest number: 010D0C9F4328584073A81E42E921E4AC9A93D3AD Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 09ef4b44-ba95-30f1-91ff-60c41204628c.roa (hash: PimA7tWfYTSP8YSJ9nDeE5DLpnHacHLoBuSzc8lDidQ=) 2: be6ca291-2d27-3d55-bd3a-edcae2d27349.roa (hash: h4b+SE2inh1rHf5dJmo70C/FtpFe4e+xbZEhoWEuoxY=) 3: d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl (hash: OGSYROGjiEU0xOav2HRbsNbdCmUqcY5KA7Q8oDwBm9I=) 4: de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa (hash: w/rDqED3GlElbbzW15JijpKrqVCmybrdCvnQMXGPfaM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2b:33:89:d8:40:29:f9:17:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=c189528d-12f3-433a-9be6-13e43885951f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:8c:f3:a4:82:e5:f3:de:30:5b:37:e7:ac: d6:b0:09:9a:37:40:1d:fa:09:e8:ce:1f:b0:3c:18: cb:4d:81:f5:18:b0:86:4c:b5:6e:bb:de:47:f8:58: 7c:3b:cb:b5:17:be:d0:e8:22:e9:2e:89:b8:5b:9b: dc:ad:35:dd:f1:44:18:6e:c7:6d:b0:19:85:4c:3b: ce:2f:ac:81:2c:c4:5e:54:e7:8d:5c:68:af:bf:f0: 12:79:c1:c0:42:67:d7:82:6d:0c:b8:2c:01:ad:59: 3c:3e:04:8e:4b:45:54:5e:b4:5f:0f:9b:0b:fc:62: 63:37:0b:05:f2:60:2b:3a:c7:9b:4f:f0:4c:2a:97: 69:12:ad:1e:94:fe:04:3a:f9:2b:97:c6:cb:02:e3: bc:f4:f8:d3:41:9e:bd:cd:6a:b3:89:48:f1:ef:36: 4e:7a:ed:ce:98:29:d8:99:88:f2:75:c4:0e:f0:7f: 92:18:45:4e:b9:86:e1:d5:74:fa:c9:41:b3:7d:d5: aa:ef:eb:1c:7b:bc:91:ec:6b:a4:41:0b:cb:f2:c8: 0c:5a:d2:53:eb:5a:95:6c:b0:8a:5b:11:7e:53:5f: 98:03:61:40:63:d4:5c:e5:30:af:8c:68:13:1f:db: f9:8c:ad:74:51:67:ea:fa:06:81:85:0d:b9:d9:cf: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A9:9A:CB:51:44:33:58:1E:B3:76:C3:91:DB:A0:B8:FA:42:58:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a6:b5:0c:0b:51:83:d8:8a:96:50:79:fc:00:7a:68:d5:aa: e3:5b:b5:71:3b:3a:30:bc:e1:43:18:cc:1e:b8:a6:69:9a:f9: 95:a9:f7:f1:77:55:b4:62:d8:ad:a9:60:53:01:63:0e:98:fd: b8:b0:da:f8:e7:de:26:84:3c:2a:d1:e3:f3:a0:4d:82:31:07: 0d:f1:b9:8d:7b:56:b3:ef:c4:3b:54:98:bd:2a:c6:65:8a:3d: c4:94:3e:db:e5:6c:55:38:78:4d:bb:51:73:35:33:e2:3e:d6: 1d:a1:d5:2f:4a:a2:14:90:4a:1e:a9:17:8a:6d:ca:bd:71:4a: 72:8e:30:7c:00:47:dc:22:40:88:ed:7a:2d:6b:c3:77:a4:bf: 17:f7:25:7e:23:8d:23:c6:83:61:cc:ee:33:aa:3a:ef:c0:49: 95:88:57:4d:29:63:01:4e:71:93:14:f3:30:09:56:a5:b9:6c: f5:0f:c6:0b:4c:ca:58:01:08:85:7c:3a:e5:fb:3a:3b:1e:04: a7:32:ca:af:51:8d:af:ca:82:33:96:6d:ba:09:c3:22:f2:59: bd:6a:8c:2a:0f:3e:8e:b3:b7:8b:78:4f:c4:6f:a0:b6:ef:2b: ac:80:87:39:90:be:29:13:b4:c3:b3:ad:b5:bd:76:eb:79:4f: 39:cc:34:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPCszidhAKfkXvEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk YzE4OTUyOGQtMTJmMy00MzNhLTliZTYtMTNlNDM4ODU5NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsyM86SC5fPeMFs356zWsAmaN0Ad+gnozh+w PBjLTYH1GLCGTLVuu95H+Fh8O8u1F77Q6CLpLom4W5vcrTXd8UQYbsdtsBmFTDvO L6yBLMReVOeNXGivv/ASecHAQmfXgm0MuCwBrVk8PgSOS0VUXrRfD5sL/GJjNwsF 8mArOsebT/BMKpdpEq0elP4EOvkrl8bLAuO89PjTQZ69zWqziUjx7zZOeu3OmCnY mYjydcQO8H+SGEVOuYbh1XT6yUGzfdWq7+sce7yR7GukQQvL8sgMWtJT61qVbLCK WxF+U1+YA2FAY9Rc5TCvjGgTH9v5jK10UWfq+gaBhQ252c8YXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGWpmstRRDNYHrN2w5HboLj6QlgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvZDEzMWZmYWEtODVmMi00 YmQ1LTg5NjEtOWRjOGFkZjE1YjhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCprUMC1GD2IqWUHn8AHpo 1arjW7VxOzowvOFDGMweuKZpmvmVqffxd1W0YtitqWBTAWMOmP24sNr4594mhDwq 0ePzoE2CMQcN8bmNe1az78Q7VJi9KsZlij3ElD7b5WxVOHhNu1FzNTPiPtYdodUv SqIUkEoeqReKbcq9cUpyjjB8AEfcIkCI7Xota8N3pL8X9yV+I40jxoNhzO4zqjrv wEmViFdNKWMBTnGTFPMwCValuWz1D8YLTMpYAQiFfDrl+zo7HgSnMsqvUY2vyoIz lm26CcMi8lm9aowqDz6Os7eLeE/Eb6C27yusgIc5kL4pE7TDs621vXbreU85zDRj -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:46 2025 by rpki-client