$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: UTbauAkvlplb7eAaiCKZNSWBnIItQr12KRML/qNjdEI= Subject key identifier: 55:AE:E3:8D:BF:9D:4E:1F:D5:49:C1:1E:09:DB:80:F4:FA:11:E6:6F Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584B9335EE51D554FDB91F0F8F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C767 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Wed 22 Oct 2025 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: r1KzN2jUI4wF6eH4VRzFb1ye/D0wI3T8V/oC9NpJCyk=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: MAGuA6Av7oZ+Y33Kb4lHufJruIwvF1lyw64jNyW2Wug=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: /+y4mV0rBVBGGp12rDwxD4nYlxOEEauEgJcDnCsnLSk=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: PB3mndTgIuq9LGPDycgT+Kb5VUQgKi0b5Q9rpPLbsVc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:ee:51:d5:54:fd:b9:1f:0f:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 22 16:00:00 2025 GMT Subject: CN=c8c37f32-fe9d-4423-9c66-bff05c4c0efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:ca:6f:07:a5:43:46:33:f2:83:0b:54:3f: 20:9d:ab:cd:c7:7f:4d:60:a6:e6:86:46:14:8b:54: 75:df:e5:27:be:b1:fc:1e:6f:4a:6d:fa:04:0f:82: d3:f7:fe:ea:b8:fb:09:6e:52:22:e8:e5:75:c2:12: b5:dd:06:1f:f3:46:0e:59:56:3d:82:7d:77:11:5e: 54:34:50:da:6a:90:1e:f1:a9:7c:78:55:34:75:83: cf:31:85:ee:74:4e:b6:74:6c:ab:d8:3f:a4:42:6b: 36:24:86:72:1a:2b:9f:5c:e2:25:1b:0f:2c:9c:a9: 08:fb:75:7c:a9:5b:b8:9c:db:c4:76:ad:eb:0c:c8: ec:f0:66:63:f4:e1:96:0f:76:2e:06:c9:31:db:ed: e3:a6:90:17:53:ad:b1:72:bd:f9:11:c8:ef:4e:ce: 11:4d:c4:7c:14:70:94:f5:0f:11:03:f8:1e:32:b4: 9b:37:ea:ce:e8:94:7c:d2:51:d1:34:58:1c:e4:94: 91:01:37:da:4f:01:a1:7a:33:90:35:ee:e7:29:a1: 1e:48:a6:a2:06:91:df:73:2b:6a:21:67:f9:9c:be: b7:7f:0a:70:28:e0:c7:8f:15:bb:57:91:8c:0f:97: 85:3f:75:1f:6a:cf:70:48:1e:06:5d:90:33:8f:9d: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:E3:8D:BF:9D:4E:1F:D5:49:C1:1E:09:DB:80:F4:FA:11:E6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:08:ee:8a:14:15:3e:06:5f:bb:08:2a:f5:f2:9c:3e:ea:1d: df:0d:02:77:4d:b6:e0:fc:77:fd:3b:b5:ee:a9:92:bd:53:6a: fb:bd:02:e5:f7:30:ca:a5:48:9b:fb:10:fa:45:e1:a0:6d:ef: 2e:63:0c:a2:81:8b:3d:c3:b3:3d:5d:9e:f6:da:33:4c:bb:39: 00:ad:32:bb:3c:d3:fc:e9:d5:62:e1:50:59:8b:a5:ac:ff:78: e3:98:c2:18:d2:24:31:93:72:d7:14:a9:12:f9:a7:8a:59:b3: 76:51:35:09:4b:1b:4f:27:e6:3f:10:df:d0:5d:f8:f6:ae:1d: a9:0c:9a:42:7d:26:b0:51:69:ff:0c:18:fe:83:0c:aa:64:9d: aa:22:71:e4:5c:ac:cd:cf:c2:8c:bc:cf:28:b5:b1:34:50:91: 81:ec:2b:43:da:3e:ba:01:34:b2:10:5a:c2:91:27:43:62:1a: 5a:d0:fe:f8:dc:1d:f3:a6:a0:ca:38:b1:49:69:fe:0a:4c:e3: 44:a6:55:93:43:1c:00:7f:a8:f7:3d:ef:b1:8f:c6:77:d0:ee: 29:3a:8f:3e:57:b3:ba:39:2c:85:9a:ac:2a:48:bb:7f:b1:5d: 7d:23:0c:cf:6b:50:81:b0:8e:4c:45:bb:b5:b4:db:46:05:c4: fc:5f:ad:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNe5R1VT9uR8Pj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMjE2MDAwMFowLzEtMCsGA1UEAxMk YzhjMzdmMzItZmU5ZC00NDIzLTljNjYtYmZmMDVjNGMwZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzKbwelQ0Yz8oMLVD8gnavNx39NYKbmhkYU i1R13+UnvrH8Hm9KbfoED4LT9/7quPsJblIi6OV1whK13QYf80YOWVY9gn13EV5U NFDaapAe8al8eFU0dYPPMYXudE62dGyr2D+kQms2JIZyGiufXOIlGw8snKkI+3V8 qVu4nNvEdq3rDMjs8GZj9OGWD3YuBskx2+3jppAXU62xcr35EcjvTs4RTcR8FHCU 9Q8RA/geMrSbN+rO6JR80lHRNFgc5JSRATfaTwGhejOQNe7nKaEeSKaiBpHfcytq IWf5nL63fwpwKODHjxW7V5GMD5eFP3Ufas9wSB4GXZAzj501gQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFWu442/nU4f1UnBHgnbgPT6EeZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8CO6KFBU+Bl+7CCr18pw+ 6h3fDQJ3Tbbg/Hf9O7XuqZK9U2r7vQLl9zDKpUib+xD6ReGgbe8uYwyigYs9w7M9 XZ722jNMuzkArTK7PNP86dVi4VBZi6Ws/3jjmMIY0iQxk3LXFKkS+aeKWbN2UTUJ SxtPJ+Y/EN/QXfj2rh2pDJpCfSawUWn/DBj+gwyqZJ2qInHkXKzNz8KMvM8otbE0 UJGB7CtD2j66ATSyEFrCkSdDYhpa0P743B3zpqDKOLFJaf4KTONEplWTQxwAf6j3 Pe+xj8Z30O4pOo8+V7O6OSyFmqwqSLt/sV19IwzPa1CBsI5MRbu1tNtGBcT8X63O -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:37 2025 by rpki-client