$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft File: d3878a5b-a112-41cb-867c-f6fae3f22d52.mft (raw, json) Hash identifier: 4yKab18qMBaeLsFD0RTMm+9KN47vt/ZHHRlQKdLzg8I= Subject key identifier: 20:9F:20:14:27:2C:3D:AE:96:BE:BE:D7:7C:49:F4:95:5A:CA:4C:9F Authority key identifier: 7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1 Certificate issuer: /CN=d3878a5b-a112-41cb-867c-f6fae3f22d52 Certificate serial: 010D0C9F4328584B95E2CE773147DA56691F8678 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft Manifest number: 010D0C9F43285844A8F7BB0BA335BF211A19EC34 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 245383de-2b92-3248-956a-5516c43e64a9.roa (hash: wb4D9u1Hf2ZfhJ8seeHCnTvx0v7hI0fim05Cm3xgZ10=) 2: 56888ec3-91ad-304f-a1c5-2db34a218a54.roa (hash: cRXQ/frbX4q3HXJpj5+JrYmFFgWR5YYyFSoRt9pDCFE=) 3: d3878a5b-a112-41cb-867c-f6fae3f22d52.crl (hash: INZoLy34J3S/RdOoP4M+nJiCzjCA2E0gYz5H8QowHO0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:ce:77:31:47:da:56:69:1f:86:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3878a5b-a112-41cb-867c-f6fae3f22d52 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=5a8f7ec7-441f-4165-a561-31b0b0d0d91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:a6:ad:88:50:09:4b:88:16:08:db:48:45: fe:3d:29:cb:6f:7d:44:9c:db:73:c4:05:3f:25:b4: 09:37:fe:e8:5b:e9:78:be:5e:4b:07:9a:39:ee:e3: 3e:fc:e9:e6:df:bd:81:2b:c1:3d:16:57:96:62:75: c1:29:c2:40:f5:2f:ec:f4:d6:53:1c:d2:57:31:44: b0:6b:f6:94:f6:73:d6:7f:90:cd:87:0b:8e:5c:00: b9:79:21:35:48:cb:ac:b8:61:2a:5c:e7:ab:16:d9: 77:32:9e:27:12:61:ed:85:38:a5:3e:77:34:25:69: be:f6:39:32:4e:e9:c9:0e:cf:60:e7:d2:e1:04:d3: be:45:b6:32:34:c7:1d:8c:44:15:98:76:a0:ea:71: 31:67:e3:0a:91:49:48:f3:8d:72:b4:ce:3b:11:00: 8c:9b:96:d2:aa:31:ae:37:7c:3c:fa:f8:d2:dd:50: 44:04:aa:63:6f:03:7e:9f:88:0d:41:13:3e:dd:e6: 74:38:c6:e3:e7:73:3d:fc:10:22:0e:48:32:de:43: f6:32:17:82:f7:87:64:00:c3:8f:32:57:1e:5e:ea: 3d:46:3f:b9:cf:29:22:c6:f1:b4:2a:6a:df:1a:29: 43:c9:1a:18:26:9e:73:4e:22:8b:97:81:34:6b:64: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:20:14:27:2C:3D:AE:96:BE:BE:D7:7C:49:F4:95:5A:CA:4C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl X509v3 Authority Key Identifier: keyid:7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:86:ec:06:b4:f2:bc:0a:3d:4d:ad:83:91:14:ff:af:89:6f: d9:1d:c4:ad:90:7a:57:9a:f2:12:b4:d3:24:87:45:ea:b6:fd: bb:76:3a:28:ea:86:7a:20:ab:75:f1:ef:3b:ad:0b:1e:cb:3d: 89:24:aa:62:40:ed:98:de:0a:e3:09:ec:48:af:a9:7a:07:2d: c1:51:bb:14:7e:d5:c2:1d:f3:10:4a:02:9c:b1:7a:99:8c:e1: 00:93:d0:18:e2:a8:41:69:97:58:23:82:c8:84:54:c7:3e:d8: a5:62:74:bc:eb:1a:47:6a:fd:72:7a:a9:a6:6c:e8:34:af:60: b3:00:d8:00:ec:d0:12:4b:ec:0c:16:03:77:08:53:28:35:df: dc:0c:d7:da:34:1f:e2:91:8a:c2:0b:eb:66:af:42:74:f0:ca: e1:6f:0e:b9:bc:17:83:00:31:36:4b:c9:4e:b3:82:a0:72:05: dc:83:00:51:77:b3:bb:45:5e:e3:37:dd:7e:41:25:56:da:0c: cc:38:a5:aa:f4:86:ff:fa:e7:69:2c:88:ec:7b:ca:46:08:02: 69:ba:ae:ab:a0:bd:43:2b:45:b9:b6:e3:12:bb:43:e9:bc:e1: f6:c0:27:9e:c5:8e:cc:b0:2c:0b:9f:aa:c3:c7:3b:56:c7:60: 84:ab:8e:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s53MUfaVmkfhngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM4NzhhNWItYTExMi00MWNiLTg2N2MtZjZmYWUzZjIy ZDUyMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk NWE4ZjdlYzctNDQxZi00MTY1LWE1NjEtMzFiMGIwZDBkOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3WmrYhQCUuIFgjbSEX+PSnLb31EnNtzxAU/ JbQJN/7oW+l4vl5LB5o57uM+/Onm372BK8E9FleWYnXBKcJA9S/s9NZTHNJXMUSw a/aU9nPWf5DNhwuOXAC5eSE1SMusuGEqXOerFtl3Mp4nEmHthTilPnc0JWm+9jky TunJDs9g59LhBNO+RbYyNMcdjEQVmHag6nExZ+MKkUlI841ytM47EQCMm5bSqjGu N3w8+vjS3VBEBKpjbwN+n4gNQRM+3eZ0OMbj53M9/BAiDkgy3kP2MheC94dkAMOP MlceXuo9Rj+5zykixvG0KmrfGilDyRoYJp5zTiKLl4E0a2R4kQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCCfIBQnLD2ulr6+13xJ9JVaykyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMzg3 OGE1Yi1hMTEyLTQxY2ItODY3Yy1mNmZhZTNmMjJkNTIvZDM4NzhhNWItYTExMi00 MWNiLTg2N2MtZjZmYWUzZjIyZDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDM4NzhhNWItYTExMi00MWNiLTg2 N2MtZjZmYWUzZjIyZDUyL2QzODc4YTViLWExMTItNDFjYi04NjdjLWY2ZmFlM2Yy MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUe/OrUI5E4vxQ8oRDKcZm8ILqTqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMzg3OGE1Yi1hMTEyLTQxY2ItODY3Yy1mNmZh ZTNmMjJkNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0huwGtPK8Cj1NrYORFP+v iW/ZHcStkHpXmvIStNMkh0Xqtv27djoo6oZ6IKt18e87rQseyz2JJKpiQO2Y3grj CexIr6l6By3BUbsUftXCHfMQSgKcsXqZjOEAk9AY4qhBaZdYI4LIhFTHPtilYnS8 6xpHav1yeqmmbOg0r2CzANgA7NASS+wMFgN3CFMoNd/cDNfaNB/ikYrCC+tmr0J0 8Mrhbw65vBeDADE2S8lOs4KgcgXcgwBRd7O7RV7jN91+QSVW2gzMOKWq9Ib/+udp LIjse8pGCAJpuq6roL1DK0W5tuMSu0PpvOH2wCeexY7MsCwLn6rDxztWx2CEq46D -----END CERTIFICATE-----Generated at Tue Oct 21 15:49:52 2025 by rpki-client