$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft File: 153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft (raw, json) Hash identifier: jYKykf+ooja/nLbWlOOlo2lB1S1ITYr0VRC0mCAivw8= Subject key identifier: A7:5D:A3:73:FD:99:78:EC:5A:4B:E0:2E:E3:C7:F9:8B:B4:81:05:5F Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 Certificate issuer: /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Certificate serial: 010D0C9F4328584BBFE0D4B0F8C009987308EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft Manifest number: 010D0C9F4328584073A81B65F56BDA1E553388D9 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl (hash: MYitg86Q7V9R7fpP8c9rMipklPSISG3fGv0J8urlfUA=) 2: 4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa (hash: hsm66+2jh/SGdug/P5TRCIk1/SlbYidGRlubWfMeS0s=) 3: d833a937-fd68-3b12-a552-2d99af1447a0.roa (hash: 0ziXN+JCNmyPlXatt981F893JYsUHKKGWnlzAqJwav0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d4:b0:f8:c0:09:98:73:08:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=620023e1-9d52-44b9-9779-4016b8ef3e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:c3:0e:ec:46:d8:9b:4e:c2:0d:58:20:89: 21:1b:13:92:8a:eb:6e:12:8c:ab:d4:e1:a7:a5:a3: c0:04:94:69:3a:28:8d:94:d7:83:46:5e:6f:15:39: cd:1e:f9:46:b5:79:7e:b4:4e:b9:86:68:0d:a7:ba: b6:b3:dd:53:1b:b2:b9:d7:c1:2c:48:99:42:07:59: b4:a2:3b:f7:70:e1:0d:55:22:73:af:78:8a:02:55: 81:4f:44:30:70:74:18:80:5a:ac:c2:48:ee:dc:b3: 05:09:8a:76:2a:d1:5b:69:94:cd:05:c6:b6:65:83: d8:fb:30:ca:1e:2d:85:dd:70:ee:58:b4:a2:89:25: e8:42:dd:f2:ef:84:d7:c1:7b:ff:6c:a3:15:65:c1: 08:d8:31:dc:a9:7e:36:88:69:2f:70:d5:ed:f1:70: 4f:f5:e4:bf:d1:46:a0:b5:1f:20:5e:8d:c7:0e:49: a9:83:c3:1d:51:c3:fa:0c:25:75:b3:fd:bd:e7:71: 84:5b:af:71:5a:b3:56:7f:64:48:47:30:db:ed:3d: 29:88:66:06:2d:42:9c:c3:89:00:4b:ba:3d:43:c2: bd:b0:93:b2:20:45:b6:62:93:35:c1:92:3e:3f:46: 0a:99:a8:03:88:45:95:02:a4:8c:1d:01:80:e6:86: 90:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5D:A3:73:FD:99:78:EC:5A:4B:E0:2E:E3:C7:F9:8B:B4:81:05:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl X509v3 Authority Key Identifier: keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:12:fe:f3:3a:3a:3e:2f:4d:44:6d:09:97:bc:7c:8a:f5:63: e3:15:4a:d6:30:39:95:a8:5a:a7:f2:c0:85:ab:94:32:5d:b4: 82:94:e2:7a:98:6a:0a:79:94:8a:cf:a6:30:d9:77:05:43:64: 27:9c:9a:83:0f:73:8c:62:e4:cf:af:c7:43:37:35:d7:a9:bc: 5c:e4:bb:24:9a:64:f7:e0:cb:84:1a:18:aa:df:91:b0:cc:1f: 7f:ad:9d:3d:5d:0c:7c:70:1f:ca:06:62:5c:1e:ea:b0:c0:82: 8b:e1:45:11:fd:5e:9d:92:d7:b9:c0:bc:0c:32:25:85:1e:1b: bf:44:3a:86:75:ac:09:61:72:c6:b5:05:bd:90:47:5e:91:86: 3e:06:c0:82:6a:de:02:63:fb:1e:8d:07:78:dc:2a:26:e4:17: de:38:c8:35:1d:14:16:e5:47:71:43:55:00:98:e4:8d:2a:f6: a1:54:73:0b:5c:47:c2:08:04:dc:b7:8f:c7:a5:d8:58:ec:7f: 6a:bd:81:08:7f:de:da:10:58:8f:d4:67:53:6f:1c:c2:67:95: 3c:be:8a:dc:e8:d5:8b:17:eb:c8:f7:5d:2d:f1:2f:cf:b7:5b: 9a:06:b4:66:5f:48:22:5e:a9:32:45:47:f8:c6:2e:d4:f4:e3: 6e:15:bf:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NSw+MAJmHMI7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUzYjFiMjAtMDg1OS00YjFiLTlmZmUtMzdlOTAwNDFh OGNjMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NjIwMDIzZTEtOWQ1Mi00NGI5LTk3NzktNDAxNmI4ZWYzZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDbDDuxG2JtOwg1YIIkhGxOSiutuEoyr1OGn paPABJRpOiiNlNeDRl5vFTnNHvlGtXl+tE65hmgNp7q2s91TG7K518EsSJlCB1m0 ojv3cOENVSJzr3iKAlWBT0QwcHQYgFqswkju3LMFCYp2KtFbaZTNBca2ZYPY+zDK Hi2F3XDuWLSiiSXoQt3y74TXwXv/bKMVZcEI2DHcqX42iGkvcNXt8XBP9eS/0Uag tR8gXo3HDkmpg8MdUcP6DCV1s/2953GEW69xWrNWf2RIRzDb7T0piGYGLUKcw4kA S7o9Q8K9sJOyIEW2YpM1wZI+P0YKmagDiEWVAqSMHQGA5oaQYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKddo3P9mXjsWkvgLuPH+Yu0gQVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNi MWIyMC0wODU5LTRiMWItOWZmZS0zN2U5MDA0MWE4Y2MvMTUzYjFiMjAtMDg1OS00 YjFiLTlmZmUtMzdlOTAwNDFhOGNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTUzYjFiMjAtMDg1OS00YjFiLTlm ZmUtMzdlOTAwNDFhOGNjLzE1M2IxYjIwLTA4NTktNGIxYi05ZmZlLTM3ZTkwMDQx YThjYy5jcmwwHwYDVR0jBBgwFoAUpfwsrNFV8Pf+yRnJtvPfULKMdvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNiMWIyMC0wODU5LTRiMWItOWZmZS0zN2U5 MDA0MWE4Y2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDVEv7zOjo+L01EbQmXvHyK 9WPjFUrWMDmVqFqn8sCFq5QyXbSClOJ6mGoKeZSKz6Yw2XcFQ2QnnJqDD3OMYuTP r8dDNzXXqbxc5LskmmT34MuEGhiq35GwzB9/rZ09XQx8cB/KBmJcHuqwwIKL4UUR /V6dkte5wLwMMiWFHhu/RDqGdawJYXLGtQW9kEdekYY+BsCCat4CY/sejQd43Com 5BfeOMg1HRQW5UdxQ1UAmOSNKvahVHMLXEfCCATct4/HpdhY7H9qvYEIf97aEFiP 1GdTbxzCZ5U8vorc6NWLF+vI910t8S/Pt1uaBrRmX0giXqkyRUf4xi7U9ONuFb9f -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:41 2025 by rpki-client