$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft File: 670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft (raw, json) Hash identifier: fW8b7rnlC8NfoQfa6NUc8erfeHQS2ebKSpcRmuVhZiQ= Subject key identifier: 38:3C:DB:D8:B6:F0:05:78:DD:6B:B0:D9:28:42:AE:FC:3F:E6:49:AE Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA Certificate issuer: /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Certificate serial: 010D0C9F4328584B9B5A62A16236AAE0D4CF6440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft Manifest number: 010D0C9F4328584A89CE42F3540E36279B3F5EB4 Signing time: Wed 22 Oct 2025 14:00:03 +0000 Manifest this update: Wed 22 Oct 2025 14:00:03 +0000 Manifest next update: Sat 25 Oct 2025 14:00:00 +0000 Files and hashes: 1: 50295063-44b9-3f73-8e63-136553fdd8cc.roa (hash: YnELkFQ3Y8Z45x7FEvVAf4Qh5521I7tZBizN9GKirWs=) 2: 670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl (hash: BRcCvjwRINorgrqecxrQJUTsI7xXt/r0g5XSQLN6mJc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:5a:62:a1:62:36:aa:e0:d4:cf:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Validity Not Before: Oct 22 14:00:03 2025 GMT Not After : Oct 25 14:00:00 2025 GMT Subject: CN=29249cac-b6c6-4802-b0a7-eb229c6ae6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:21:b4:1d:d4:98:61:4a:fa:d3:68:46:82: 10:97:d3:f4:99:0a:82:84:d6:1d:bf:ae:d5:77:4f: 82:e6:c2:c0:09:fd:a1:f0:6d:0f:02:33:a8:83:b3: ee:26:91:33:ac:29:ab:2d:51:ce:0e:91:8a:37:6b: 31:ac:a9:b8:90:86:cf:fd:7f:59:3b:86:02:3f:fe: 14:36:4d:b5:eb:c9:c0:11:82:30:fe:67:9a:70:13: 41:4e:fd:58:ff:d6:4f:eb:32:0c:c1:25:7c:61:bb: 2c:13:dc:2f:54:f1:f0:2b:77:c5:1a:01:64:19:f2: 1a:a6:bd:5e:2a:e2:aa:cd:1b:b9:76:5f:36:91:a3: 5d:be:ee:b5:fc:f3:14:6b:a2:8c:9d:6e:c6:f3:82: 72:84:af:22:59:78:a9:68:fa:da:66:3d:7d:83:4b: 7d:8b:12:fb:e2:6a:02:9b:3f:6d:68:92:9d:be:66: 12:45:9d:db:d1:ca:f9:a9:b0:1a:62:3a:71:b8:fd: f5:87:2b:77:c5:84:c5:05:0e:46:25:65:ff:88:be: 1d:de:90:c8:16:8c:7c:de:b7:d6:ae:0e:fd:dd:15: 31:f1:c1:86:39:96:15:3d:bc:94:3f:01:25:04:75: 56:2c:ef:5e:09:e1:77:2f:c2:ef:d9:99:88:53:42: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3C:DB:D8:B6:F0:05:78:DD:6B:B0:D9:28:42:AE:FC:3F:E6:49:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl X509v3 Authority Key Identifier: keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:34:2b:6b:aa:13:db:88:92:8e:d4:2f:82:80:b1:39:8a:56: 85:af:c5:dd:35:21:50:84:fb:bd:14:6c:4a:79:db:20:9c:be: db:ce:7e:e4:79:82:e1:14:7e:5b:a6:bf:50:4c:64:dd:13:9b: e3:03:ae:8a:50:3d:a8:f3:06:12:28:a2:bb:6e:f4:8b:a7:d3: d5:aa:2b:42:33:2b:d0:cf:f4:e8:bf:a5:5d:21:be:f6:df:a4: 40:67:0b:ab:8a:f4:5b:40:92:bf:bd:e0:8a:be:a9:2e:38:41: 42:57:d3:4a:ca:12:eb:b7:4f:ce:02:7f:cd:14:69:34:66:80: 2b:eb:50:c0:4c:ae:8b:bc:c3:dc:d9:47:f9:fa:9c:a4:f3:2a: e5:17:3a:27:2f:82:47:b7:4a:04:59:c0:c9:6f:c5:98:27:cf: 22:b1:9c:45:9d:dd:a9:65:37:1c:19:7e:ed:81:85:fd:4d:e3: 6e:40:97:de:39:e1:f4:0f:38:88:a8:61:5f:b1:c4:3d:84:1f: 16:ef:b2:ac:da:23:3b:3a:2e:d6:fa:6d:45:cc:42:6f:04:04: 7a:22:81:fd:b7:85:55:ec:01:da:36:8a:a8:b8:64:86:ff:e1: fc:ce:74:a1:b3:79:10:71:6c:26:c3:2a:2d:bb:18:bc:32:c4: ae:8b:cb:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEubWmKhYjaq4NTPZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYjlmNGUtYzM2OS00ZjRjLWFhMjQtMjdmM2ZjODUx YmM1MB4XDTI1MTAyMjE0MDAwM1oXDTI1MTAyNTE0MDAwMFowLzEtMCsGA1UEAxMk MjkyNDljYWMtYjZjNi00ODAyLWIwYTctZWIyMjljNmFlNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV4htB3UmGFK+tNoRoIQl9P0mQqChNYdv67V d0+C5sLACf2h8G0PAjOog7PuJpEzrCmrLVHODpGKN2sxrKm4kIbP/X9ZO4YCP/4U Nk2168nAEYIw/meacBNBTv1Y/9ZP6zIMwSV8YbssE9wvVPHwK3fFGgFkGfIapr1e KuKqzRu5dl82kaNdvu61/PMUa6KMnW7G84JyhK8iWXipaPraZj19g0t9ixL74moC mz9taJKdvmYSRZ3b0cr5qbAaYjpxuP31hyt3xYTFBQ5GJWX/iL4d3pDIFox83rfW rg793RUx8cGGOZYVPbyUPwElBHVWLO9eCeF3L8Lv2ZmIU0KvLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDg829i28AV43Wuw2ShCrvw/5kmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NzBi OWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2YzZmM4NTFiYzUvNjcwYjlmNGUtYzM2OS00 ZjRjLWFhMjQtMjdmM2ZjODUxYmM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjcwYjlmNGUtYzM2OS00ZjRjLWFh MjQtMjdmM2ZjODUxYmM1LzY3MGI5ZjRlLWMzNjktNGY0Yy1hYTI0LTI3ZjNmYzg1 MWJjNS5jcmwwHwYDVR0jBBgwFoAUwp+puLpCfjzznWu7KBSK6QNRm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NzBiOWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2Yz ZmM4NTFiYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATNCtrqhPbiJKO1C+CgLE5 ilaFr8XdNSFQhPu9FGxKedsgnL7bzn7keYLhFH5bpr9QTGTdE5vjA66KUD2o8wYS KKK7bvSLp9PVqitCMyvQz/Tov6VdIb7236RAZwurivRbQJK/veCKvqkuOEFCV9NK yhLrt0/OAn/NFGk0ZoAr61DATK6LvMPc2Uf5+pyk8yrlFzonL4JHt0oEWcDJb8WY J88isZxFnd2pZTccGX7tgYX9TeNuQJfeOeH0DziIqGFfscQ9hB8W77Ks2iM7Oi7W +m1FzEJvBAR6IoH9t4VV7AHaNoqouGSG/+H8znShs3kQcWwmwyotuxi8MsSui8tf -----END CERTIFICATE-----Generated at Wed Oct 22 17:37:48 2025 by rpki-client