$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft File: 3025c657-32e7-49d2-ab95-71634243f0d7.mft (raw, json) Hash identifier: N9qbHq14+wcBooreI4XK0c2WFjSm4SS+aXbHbnwE1Dc= Subject key identifier: 82:6B:E5:A8:BE:69:A7:8D:C0:D4:84:10:E2:4E:53:49:9F:47:50:7C Authority key identifier: 48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8 Certificate issuer: /CN=3025c657-32e7-49d2-ab95-71634243f0d7 Certificate serial: 010D0C9F4328584B95A73C93E304590337028600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft Manifest number: 010D0C9F4328584073A854BD021D1F4667AE7714 Signing time: Mon 20 Oct 2025 13:00:03 +0000 Manifest this update: Mon 20 Oct 2025 13:00:03 +0000 Manifest next update: Thu 23 Oct 2025 13:00:00 +0000 Files and hashes: 1: 3025c657-32e7-49d2-ab95-71634243f0d7.crl (hash: v3aRdm2fVE7mxGTbL4iju8zAMZ/M5OglO5aGfN79rfA=) 2: bb853397-5327-3933-b5ba-b925a6c10ca7.roa (hash: uxAJrqxofcsVkkEgorK+Gc0oNVcUAa4rjO43HULZjDM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:3c:93:e3:04:59:03:37:02:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3025c657-32e7-49d2-ab95-71634243f0d7 Validity Not Before: Oct 20 13:00:03 2025 GMT Not After : Oct 23 13:00:00 2025 GMT Subject: CN=91e9c6ad-9c21-4597-ba7a-531476de1808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:04:f2:0d:9d:c0:ce:18:0b:ea:c8:89:50: 9a:43:27:e4:fd:56:3a:f7:0f:52:41:d8:2e:b1:97: f3:ca:70:f6:5c:82:64:0b:4a:d8:ba:6a:c4:86:73: 38:d3:fb:35:d3:78:f6:d6:df:fc:5b:6f:d4:bb:9f: 28:11:7e:69:4e:1a:27:5f:2f:89:43:8b:f2:ca:c1: ab:d6:56:b1:80:84:dc:fb:18:42:23:dc:26:ed:24: 99:88:99:7f:a5:d8:11:ae:33:75:21:42:e4:6b:d0: e6:ad:0a:e5:a7:b5:c2:a1:13:b2:8a:ba:e9:a7:78: 5c:92:44:3d:da:a8:6d:08:f6:16:04:08:27:6b:85: 54:b1:8c:e6:20:2b:e6:a6:ed:79:ac:29:4a:8d:19: b3:70:a5:6a:cf:f4:15:23:72:5f:f6:5f:c6:b8:c7: 66:3b:e3:51:a6:ab:4b:83:22:c1:fb:fd:d9:1e:72: d2:0f:ae:6d:d0:7d:82:87:cf:31:61:fd:0f:80:9b: 44:76:17:81:55:69:3b:78:65:42:6c:5f:e8:bd:da: 1b:b0:15:47:cd:bd:59:8a:1c:95:61:e3:90:97:55: 22:ce:d7:60:81:16:6e:a4:dd:64:57:48:ac:85:5e: 71:c5:1f:0a:c3:27:74:42:92:1c:cb:79:b8:7b:8f: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6B:E5:A8:BE:69:A7:8D:C0:D4:84:10:E2:4E:53:49:9F:47:50:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.crl X509v3 Authority Key Identifier: keyid:48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:71:7a:20:25:85:c5:35:df:13:98:d0:b7:3c:13:44:b9:9e: f6:97:ed:c4:b0:3d:ed:1d:95:2a:09:94:b4:5f:9f:60:db:2f: 60:d0:63:7c:14:82:df:00:db:2b:d0:7a:bd:d0:b3:7a:f4:a8: e1:e0:8c:ba:d2:96:29:3f:57:be:e7:d2:c7:89:22:2a:47:64: 79:94:c8:bd:2b:27:c6:b5:b4:aa:d5:cc:bf:f9:33:2f:17:df: 0b:da:d5:3c:95:29:c2:eb:43:b1:0f:25:31:ca:0b:7b:6b:fe: aa:37:d9:05:79:4a:b2:78:31:fe:21:25:46:af:8c:fb:4c:83: fa:fa:34:67:77:63:9b:1d:80:39:a2:fc:14:ba:07:57:92:4e: 8f:d5:00:c2:67:d3:2a:0a:65:bb:76:92:0b:3c:fe:a1:8c:8a: 08:48:42:42:92:26:c1:e5:3d:cd:01:37:ef:f9:59:aa:00:04: 87:ad:45:7b:bf:60:24:8b:8f:42:a3:5c:78:9e:5c:89:af:07: 69:20:88:ed:4b:23:c5:a7:c4:e3:27:1a:90:60:45:da:28:ba: a8:be:dc:73:c2:ee:33:b4:0b:4d:ec:51:4a:ee:56:be:b5:d4: 9d:71:32:d5:4a:a0:2d:19:ef:d7:66:80:1d:08:cb:b8:8a:e3: b9:a2:7c:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVpzyT4wRZAzcChgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAyNWM2NTctMzJlNy00OWQyLWFiOTUtNzE2MzQyNDNm MGQ3MB4XDTI1MTAyMDEzMDAwM1oXDTI1MTAyMzEzMDAwMFowLzEtMCsGA1UEAxMk OTFlOWM2YWQtOWMyMS00NTk3LWJhN2EtNTMxNDc2ZGUxODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhasE8g2dwM4YC+rIiVCaQyfk/VY69w9SQdgu sZfzynD2XIJkC0rYumrEhnM40/s103j21t/8W2/Uu58oEX5pThonXy+JQ4vyysGr 1laxgITc+xhCI9wm7SSZiJl/pdgRrjN1IULka9DmrQrlp7XCoROyirrpp3hckkQ9 2qhtCPYWBAgna4VUsYzmICvmpu15rClKjRmzcKVqz/QVI3Jf9l/GuMdmO+NRpqtL gyLB+/3ZHnLSD65t0H2Ch88xYf0PgJtEdheBVWk7eGVCbF/ovdobsBVHzb1ZihyV YeOQl1UiztdggRZupN1kV0ishV5xxR8Kwyd0QpIcy3m4e4/l1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIJr5ai+aaeNwNSEEOJOU0mfR1B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDI1 YzY1Ny0zMmU3LTQ5ZDItYWI5NS03MTYzNDI0M2YwZDcvMzAyNWM2NTctMzJlNy00 OWQyLWFiOTUtNzE2MzQyNDNmMGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzAyNWM2NTctMzJlNy00OWQyLWFi OTUtNzE2MzQyNDNmMGQ3LzMwMjVjNjU3LTMyZTctNDlkMi1hYjk1LTcxNjM0MjQz ZjBkNy5jcmwwHwYDVR0jBBgwFoAUSIgWwXD4v9+Fu9FY+DeVDWN+lugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDI1YzY1Ny0zMmU3LTQ5ZDItYWI5NS03MTYz NDI0M2YwZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAcXogJYXFNd8TmNC3PBNE uZ72l+3EsD3tHZUqCZS0X59g2y9g0GN8FILfANsr0Hq90LN69Kjh4Iy60pYpP1e+ 59LHiSIqR2R5lMi9KyfGtbSq1cy/+TMvF98L2tU8lSnC60OxDyUxygt7a/6qN9kF eUqyeDH+ISVGr4z7TIP6+jRnd2ObHYA5ovwUugdXkk6P1QDCZ9MqCmW7dpILPP6h jIoISEJCkibB5T3NATfv+VmqAASHrUV7v2Aki49Co1x4nlyJrwdpIIjtSyPFp8Tj JxqQYEXaKLqovtxzwu4ztAtN7FFK7la+tdSdcTLVSqAtGe/XZoAdCMu4iuO5onyD -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:44 2025 by rpki-client