$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: L73ofN0ttU3HhsFRNXw982CpROIU71tZ+scigAsMilQ= Subject key identifier: ED:8F:8A:39:BA:F7:F2:71:2B:F6:23:33:B8:EC:FC:06:EC:3A:78:3C Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584B9659E7A0DD1852F579BF0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FA7D Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: 2JqdLa84ocCmrZqcxIglqqua+Ui/g0ZNtbK9nfm7FrY=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: HJhzQHcV4PoaB9rqL2cSXVZxk+peubAM6O7TcfoGOKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:e7:a0:dd:18:52:f5:79:bf:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=a4d49f42-f5c4-41c7-8a39-cd790e958e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:f9:e8:59:53:b6:9a:b4:17:f1:68:93:fa: 4a:ba:b3:52:1a:f8:22:6a:b0:c3:8e:34:38:48:c3: 19:3b:dd:f9:4e:ef:df:96:0d:58:e2:ed:bc:00:6b: 78:18:eb:9d:f8:c1:f6:14:05:3e:27:36:71:2f:12: b6:51:9d:ad:3d:de:55:13:b7:98:8a:c5:2b:61:e8: 5d:54:d4:11:b8:0b:13:62:66:25:f3:02:c8:b2:b5: 5f:58:a0:44:98:56:9e:47:1c:2d:6d:3a:98:ad:59: 98:54:71:84:1e:5b:17:3b:69:be:71:2a:7f:7e:e6: fe:44:a7:83:5f:e4:4b:bf:6a:e9:ff:9e:d5:aa:8f: 3e:21:2f:5e:cd:ed:e0:af:a7:2a:04:b5:37:d6:fd: 91:3c:58:0c:12:ac:90:da:7e:69:40:7e:07:03:eb: 76:8d:14:4e:62:61:a3:ac:45:4f:f7:58:99:33:57: 6a:6f:d1:9d:bb:4c:a9:c0:bc:1e:55:ed:0c:d9:44: 97:d6:f3:1e:0d:e4:a7:a2:c1:91:3f:55:c8:32:a7: 71:3e:21:a7:3b:6f:cf:94:ab:ed:ed:9b:a6:f3:b9: c7:f2:b9:84:6e:91:8a:a4:86:27:5e:2b:3e:f5:ea: 76:04:32:81:ab:25:a3:56:05:35:c7:10:3a:c3:c7: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:8A:39:BA:F7:F2:71:2B:F6:23:33:B8:EC:FC:06:EC:3A:78:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c3:48:a5:21:ae:90:7d:0c:d6:10:49:a1:f0:93:b1:67:4a: 59:62:3c:1d:c9:9b:e0:4c:a0:ae:74:24:73:e3:8f:9a:b7:11: 16:90:7b:d2:87:96:5b:ff:db:36:fd:30:94:e3:c7:51:c6:bd: c0:1c:ec:35:dc:6a:c9:30:ce:21:fa:18:ab:f3:9a:84:93:6f: 5f:9b:9a:e0:76:c9:d4:45:42:34:ac:62:0b:e5:5e:ee:73:bb: 6d:3f:19:63:6e:d6:78:60:cf:c4:40:e0:bd:89:2b:83:6d:a8: a7:b4:ab:cf:e5:88:73:a9:42:be:d2:56:8b:67:18:80:d7:b4: 10:b4:d9:91:f3:e3:4a:dd:57:55:e2:3e:ba:8e:0e:ec:a2:84: 4e:9d:d3:4c:76:5f:fb:f7:57:f3:0c:0b:f5:0f:7b:af:a7:2a: 88:44:8a:d3:01:c4:41:66:4f:da:05:bf:6e:fc:00:91:a9:4f: d6:f7:2c:09:11:4a:8b:e3:12:e7:4f:33:b8:5c:f8:38:3d:d1: 25:76:64:ee:16:72:2a:3f:62:5d:9c:c7:f2:f4:28:6e:49:7e: bb:18:17:06:2d:c0:21:24:00:0f:c3:3a:a5:e4:26:5f:ee:81: d7:37:e6:e7:fc:54:34:97:5b:f9:ba:ca:1d:fc:fb:b1:3d:be: ae:8a:5a:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWeeg3RhS9Xm/CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk YTRkNDlmNDItZjVjNC00MWM3LThhMzktY2Q3OTBlOTU4ZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaX56FlTtpq0F/Fok/pKurNSGvgiarDDjjQ4 SMMZO935Tu/flg1Y4u28AGt4GOud+MH2FAU+JzZxLxK2UZ2tPd5VE7eYisUrYehd VNQRuAsTYmYl8wLIsrVfWKBEmFaeRxwtbTqYrVmYVHGEHlsXO2m+cSp/fub+RKeD X+RLv2rp/57Vqo8+IS9eze3gr6cqBLU31v2RPFgMEqyQ2n5pQH4HA+t2jRROYmGj rEVP91iZM1dqb9Gdu0ypwLweVe0M2USX1vMeDeSnosGRP1XIMqdxPiGnO2/PlKvt 7Zum87nH8rmEbpGKpIYnXis+9ep2BDKBqyWjVgU1xxA6w8dzXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO2Pijm69/JxK/YjM7js/AbsOng8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUw0ilIa6QfQzWEEmh8JOx Z0pZYjwdyZvgTKCudCRz44+atxEWkHvSh5Zb/9s2/TCU48dRxr3AHOw13GrJMM4h +hir85qEk29fm5rgdsnURUI0rGIL5V7uc7ttPxljbtZ4YM/EQOC9iSuDbaintKvP 5YhzqUK+0laLZxiA17QQtNmR8+NK3VdV4j66jg7sooROndNMdl/791fzDAv1D3uv pyqIRIrTAcRBZk/aBb9u/ACRqU/W9ywJEUqL4xLnTzO4XPg4PdEldmTuFnIqP2Jd nMfy9ChuSX67GBcGLcAhJAAPwzql5CZf7oHXN+bn/FQ0l1v5usod/PuxPb6uilrJ -----END CERTIFICATE-----Generated at Tue Oct 21 15:27:01 2025 by rpki-client