$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft File: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft (raw, json) Hash identifier: kdHGoSwPgXfJsBG0+fqCHDAjC/x01RJe0UV3URLkhSE= Subject key identifier: 16:80:E3:32:01:9C:2A:BA:16:8A:28:84:28:84:AA:97:C3:45:CC:65 Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Certificate issuer: /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Certificate serial: 010D0C9F4328584B945FADA6EA05C555A2857608 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft Manifest number: 010D0C9F4328584595004A1770E5FE451D02FC33 Signing time: Mon 20 Oct 2025 02:00:03 +0000 Manifest this update: Mon 20 Oct 2025 02:00:03 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl (hash: 1zyB4ifvsB4TLCKtTFt6zws2kNm+fXrHzrtupt7ChfY=) 2: 94b3319a-658a-3317-bf87-91c877d6dd90.roa (hash: 66oOWEfRI5jyVZemoiZEai9wcxkhMuvDYeTjiVIvg2w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:5f:ad:a6:ea:05:c5:55:a2:85:76:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Validity Not Before: Oct 20 02:00:03 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=a5ab5ff9-bec0-4b7e-be7b-4937240930ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:52:2f:c0:9a:4a:5f:9c:a0:d6:0a:d2:da: de:34:83:e9:74:3a:31:5d:51:d7:e2:c8:f7:b4:19: fc:c8:f0:59:9a:db:29:d0:ee:3e:88:47:3d:46:e1: 3e:b6:c8:a4:5b:fb:9a:3e:1b:36:39:16:7f:7e:00: 38:3a:34:28:d7:b8:e8:df:21:25:03:87:92:26:8b: d0:9e:77:e6:4e:12:b6:e3:c0:b9:93:6c:8d:3e:24: 68:6b:50:bd:7e:3b:e4:ef:f1:77:f1:18:2e:6a:ea: da:a5:20:d3:f6:3c:a2:2f:1d:d3:56:7c:45:f4:48: 5f:6d:17:71:6f:ed:10:2e:e0:05:54:2b:35:81:ea: 89:92:68:a1:06:71:a7:fe:47:13:75:f0:be:a7:06: 7d:ec:fd:13:0d:41:93:a0:2e:bd:cb:50:55:04:c8: d8:7a:d6:30:3b:7c:da:45:81:77:77:c6:a1:bf:21: ff:77:5a:fd:3d:1d:be:94:73:87:f7:74:68:fb:5d: 46:1a:cb:f6:e4:3b:03:a4:98:8c:01:9f:49:02:97: 13:9f:ca:2e:ad:b4:f4:24:a8:e1:d8:ce:81:0e:f7: 34:6a:00:03:a7:96:e8:41:65:d5:07:9a:84:2b:58: bd:4a:30:7d:72:27:65:1b:28:80:b9:ff:e6:67:ac: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:80:E3:32:01:9C:2A:BA:16:8A:28:84:28:84:AA:97:C3:45:CC:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl X509v3 Authority Key Identifier: keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a6:98:01:c5:fd:07:eb:39:a9:50:c8:2c:97:1f:82:00:6f: 6d:0b:50:20:bc:9a:fe:30:bd:96:4e:af:1a:a6:85:65:6c:7b: 96:7b:c3:f3:8b:6e:f0:a3:e7:bd:c0:a0:9e:c3:9e:e0:32:e6: 26:f5:d4:77:b0:c8:c5:60:19:58:bf:12:d2:2e:2f:a7:e9:f2: 19:a8:dd:b4:86:bc:fb:5e:f8:37:a2:5f:89:1c:6e:00:c0:f3: ee:37:0d:8c:05:24:e2:17:85:07:66:86:df:92:e6:98:18:4e: 05:ea:4c:65:4a:01:fa:7d:64:cf:f7:d8:10:6a:c3:57:67:2a: 28:ab:8e:a6:5a:a9:68:9e:75:e1:75:b5:ec:a6:d9:5c:4e:2c: d0:f8:a5:9c:a1:a8:c4:98:7b:3c:1d:a9:13:ca:cd:3c:27:31: e8:d9:34:70:94:d7:b1:c2:12:45:10:bb:9b:40:ee:6c:84:74: 66:cb:0f:a3:6b:6c:ef:28:ff:d7:e0:44:17:45:87:06:96:b3: 90:1f:ce:73:04:7f:f4:c0:e2:51:6e:65:74:5c:7d:52:20:c3: d6:8e:8b:9c:e1:46:2e:f8:0e:e6:04:57:55:29:f8:fc:30:6c: 96:49:dc:70:e2:1f:72:ec:50:42:a0:c2:81:b9:70:e5:b0:8f: f4:3a:ee:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUX62m6gXFVaKFdggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2 ZTAyMB4XDTI1MTAyMDAyMDAwM1oXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk YTVhYjVmZjktYmVjMC00YjdlLWJlN2ItNDkzNzI0MDkzMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZtSL8CaSl+coNYK0treNIPpdDoxXVHX4sj3 tBn8yPBZmtsp0O4+iEc9RuE+tsikW/uaPhs2ORZ/fgA4OjQo17jo3yElA4eSJovQ nnfmThK248C5k2yNPiRoa1C9fjvk7/F38RguaurapSDT9jyiLx3TVnxF9EhfbRdx b+0QLuAFVCs1geqJkmihBnGn/kcTdfC+pwZ97P0TDUGToC69y1BVBMjYetYwO3za RYF3d8ahvyH/d1r9PR2+lHOH93Ro+11GGsv25DsDpJiMAZ9JApcTn8ourbT0JKjh 2M6BDvc0agADp5boQWXVB5qEK1i9SjB9cidlGyiAuf/mZ6x3/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBaA4zIBnCq6FooohCiEqpfDRcxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTNi NTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvM2UzYjUyYzctYjdhNS00 NWIwLWEyYTQtZjgyNDJiMmI2ZTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UzYjUyYzctYjdhNS00NWIwLWEy YTQtZjgyNDJiMmI2ZTAyLzNlM2I1MmM3LWI3YTUtNDViMC1hMmE0LWY4MjQyYjJi NmUwMi5jcmwwHwYDVR0jBBgwFoAUtHC2EXrIXwKKvpTGbVycJLrG+u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0 MmIyYjZlMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGppgBxf0H6zmpUMgslx+C AG9tC1AgvJr+ML2WTq8apoVlbHuWe8Pzi27wo+e9wKCew57gMuYm9dR3sMjFYBlY vxLSLi+n6fIZqN20hrz7Xvg3ol+JHG4AwPPuNw2MBSTiF4UHZobfkuaYGE4F6kxl SgH6fWTP99gQasNXZyooq46mWqlonnXhdbXsptlcTizQ+KWcoajEmHs8HakTys08 JzHo2TRwlNexwhJFELubQO5shHRmyw+ja2zvKP/X4EQXRYcGlrOQH85zBH/0wOJR bmV0XH1SIMPWjouc4UYu+A7mBFdVKfj8MGyWSdxw4h9y7FBCoMKBuXDlsI/0Ou73 -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:49 2025 by rpki-client