$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft File: d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft (raw, json) Hash identifier: 76U0vAeQFbuuAOmcft8HiPu3wD8An9x4N8qxy+qds5U= Subject key identifier: BD:20:F3:1E:21:03:6B:01:BA:06:A5:A1:A7:C6:47:18:32:D6:27:A3 Authority key identifier: 22:DE:B8:10:D2:AA:A5:55:21:70:32:E8:F5:86:1C:EA:2E:43:9A:80 Certificate issuer: /CN=d3ea6eab-f41f-4e46-a8f6-3da4a128d78c Certificate serial: 010D0C9F4328584B937181B7B8700CC7024DA680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft Manifest number: 010D0C9F4328584073A81D19CF4B222702B9E75F Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer (hash: csdHir4u9WTGtP7UGyozt2QUD7/mykHb/Hkj8FrHMsw=) 2: d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl (hash: Dc64i1gghHVT9FCIiG7ba2oe7XDnEp9oYTw5G0W3A54=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:81:b7:b8:70:0c:c7:02:4d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ea6eab-f41f-4e46-a8f6-3da4a128d78c Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=db9226c7-607f-46a4-8542-d3af98caafc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:28:e0:6f:cb:c9:47:b1:d0:77:cf:74:96: 2d:8e:02:ca:df:7a:b8:07:24:59:a1:07:38:39:bf: c3:82:aa:d2:5f:20:8f:c6:45:e4:ae:fe:e4:94:be: df:b7:90:af:8a:18:22:28:97:13:d4:30:ce:66:34: 42:e2:c8:58:72:99:b8:dc:20:74:58:7f:3a:dc:52: fc:d8:3e:8c:c1:a0:d9:e2:14:2d:9d:97:42:53:ea: 09:1d:b2:2c:0c:09:e2:29:75:d2:2c:10:7a:26:e1: cf:a6:0a:e6:ad:1e:39:d4:09:56:aa:8d:bb:97:b1: ac:4f:4c:11:ef:c9:86:4a:ea:2e:b2:bf:28:d0:a7: ef:56:a7:63:5d:a7:d6:67:e0:6d:19:4f:6c:ee:fe: 55:f2:96:0f:09:f6:45:91:e5:64:90:7b:02:c4:49: 72:5b:af:ac:11:d9:e0:98:3b:56:b5:ea:22:35:cf: 62:b1:e3:b3:6f:e6:a8:9c:c5:a0:ad:c1:3f:4d:5f: a6:d3:60:b1:c0:b9:65:10:d1:7b:ab:bb:64:ee:3f: 8a:c5:92:cb:45:ce:02:1c:da:76:ab:c1:81:22:81: fc:e6:55:39:b5:a5:44:26:fa:3c:92:c3:27:0e:a6: 12:be:55:83:37:56:0d:8f:2b:5c:4b:7c:49:79:c0: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:20:F3:1E:21:03:6B:01:BA:06:A5:A1:A7:C6:47:18:32:D6:27:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl X509v3 Authority Key Identifier: keyid:22:DE:B8:10:D2:AA:A5:55:21:70:32:E8:F5:86:1C:EA:2E:43:9A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3a:c3:06:d4:10:6d:b3:4c:aa:b5:2c:a5:d7:9f:5d:77:55: 72:dc:1a:0b:d6:a0:43:23:4a:d3:70:07:85:80:2f:ed:de:20: aa:d5:ee:a7:57:a7:19:54:26:67:d0:b8:fe:73:52:0a:9f:5b: ba:d1:45:ec:7d:a2:86:df:34:34:e3:8b:98:b4:b6:0a:45:de: 0c:6a:aa:8b:84:48:da:79:bb:f0:d9:3a:8d:59:03:4d:8d:3e: 65:f2:c5:ed:b9:e2:11:ed:51:28:5f:da:8f:79:ef:ca:09:4f: fc:85:c6:39:c5:04:c2:6c:08:68:ce:8b:43:0e:b3:23:17:f2: 26:bb:99:bf:50:46:72:0f:32:3d:c6:11:dc:69:9e:eb:be:ae: fc:1e:06:69:84:cd:c9:d8:ae:76:88:77:b5:2a:53:8b:df:42: a6:60:d1:69:ae:c6:0a:35:ca:ab:4a:73:cc:15:f4:08:e0:0a: 39:cd:4e:54:fe:ac:ef:a6:e1:d7:2a:9f:26:53:dd:8c:b9:f8: 9d:1a:c8:bc:bf:a4:3e:e9:ea:b3:b5:ea:86:49:d9:16:a0:23: 10:27:b4:2b:40:dc:27:9a:a6:f5:34:4d:fd:f2:29:e3:43:16: c0:ce:d0:70:ba:bd:52:39:ea:46:64:b5:17:a1:44:55:02:43: ad:02:34:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcYG3uHAMxwJNpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNlYTZlYWItZjQxZi00ZTQ2LWE4ZjYtM2RhNGExMjhk NzhjMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk ZGI5MjI2YzctNjA3Zi00NmE0LTg1NDItZDNhZjk4Y2FhZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveEo4G/LyUex0HfPdJYtjgLK33q4ByRZoQc4 Ob/DgqrSXyCPxkXkrv7klL7ft5CvihgiKJcT1DDOZjRC4shYcpm43CB0WH863FL8 2D6MwaDZ4hQtnZdCU+oJHbIsDAniKXXSLBB6JuHPpgrmrR451AlWqo27l7GsT0wR 78mGSuousr8o0KfvVqdjXafWZ+BtGU9s7v5V8pYPCfZFkeVkkHsCxElyW6+sEdng mDtWteoiNc9iseOzb+aonMWgrcE/TV+m02CxwLllENF7q7tk7j+KxZLLRc4CHNp2 q8GBIoH85lU5taVEJvo8ksMnDqYSvlWDN1YNjytcS3xJecAaLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL0g8x4hA2sBugaloafGRxgy1iejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2Vh NmVhYi1mNDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvZDNlYTZlYWItZjQxZi00 ZTQ2LWE4ZjYtM2RhNGExMjhkNzhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDNlYTZlYWItZjQxZi00ZTQ2LWE4 ZjYtM2RhNGExMjhkNzhjL2QzZWE2ZWFiLWY0MWYtNGU0Ni1hOGY2LTNkYTRhMTI4 ZDc4Yy5jcmwwHwYDVR0jBBgwFoAUIt64ENKqpVUhcDLo9YYc6i5DmoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1mNDFmLTRlNDYtYThmNi0zZGE0 YTEyOGQ3OGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSOsMG1BBts0yqtSyl159d d1Vy3BoL1qBDI0rTcAeFgC/t3iCq1e6nV6cZVCZn0Lj+c1IKn1u60UXsfaKG3zQ0 44uYtLYKRd4MaqqLhEjaebvw2TqNWQNNjT5l8sXtueIR7VEoX9qPee/KCU/8hcY5 xQTCbAhozotDDrMjF/Imu5m/UEZyDzI9xhHcaZ7rvq78HgZphM3J2K52iHe1KlOL 30KmYNFprsYKNcqrSnPMFfQI4Ao5zU5U/qzvpuHXKp8mU92MufidGsi8v6Q+6eqz teqGSdkWoCMQJ7QrQNwnmqb1NE398injQxbAztBwur1SOepGZLUXoURVAkOtAjTH -----END CERTIFICATE-----Generated at Mon Oct 20 01:40:14 2025 by rpki-client