$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: mFtPl9hZ+LGEal7LoDK/PCWOXK9kJLncHcHwg3H+q/g= Subject key identifier: 71:CC:36:CD:8B:BD:82:18:89:4A:78:BC:EB:22:97:41:00:8F:78:52 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584B954DF26A5444860D2063F780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026C95 Signing time: Mon 20 Oct 2025 10:00:09 +0000 Manifest this update: Mon 20 Oct 2025 10:00:09 +0000 Manifest next update: Thu 23 Oct 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: mm/Gt8mXHebIFoxO13txrgSnIJ9T3kerEQiUnvoJWvY=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: KskGYb9cfBHDtQFW1au4HNI3icTqDNGJpKSL6dXOZvw=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: qqdYngo5D+o3hg9kBFr/sMg94Z0lGGys0C4Qy/8CSjI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:4d:f2:6a:54:44:86:0d:20:63:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Oct 20 10:00:09 2025 GMT Not After : Oct 23 10:00:00 2025 GMT Subject: CN=a3b0906f-f008-4f0b-a5e9-79d908998460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:57:11:df:29:f0:03:0c:50:94:26:e0:c0: 76:5f:68:d1:e2:87:60:e7:a1:df:09:48:59:ba:80: a8:32:f4:12:47:3e:2d:78:9d:16:77:b6:23:6e:eb: 32:5c:0e:39:d6:25:cf:a0:7f:cc:d0:3b:e2:7e:77: b6:35:fc:46:62:45:54:92:28:bf:88:67:ea:5d:19: c7:85:3b:1b:36:3e:52:52:65:e4:88:1b:5b:7e:b8: 28:fa:1a:a0:98:4a:c1:58:45:2b:77:0b:fd:cd:b6: dd:11:2a:b7:e0:a7:30:89:d6:81:29:a9:5b:2e:f0: b3:51:3f:06:b1:42:ab:80:da:9f:68:c1:6c:63:8b: 86:02:e6:75:ca:20:8e:2a:07:32:a2:82:52:a6:dd: 7c:13:12:18:4b:08:5e:c8:f3:87:96:47:f8:02:21: 6c:7f:a5:6a:9d:92:a6:7c:46:1e:2b:a3:85:47:97: ba:85:57:f9:d1:50:4e:f0:b5:ae:e7:69:4e:44:8d: 43:b9:e7:99:96:3e:a9:71:da:a5:b7:08:9e:14:26: 16:e3:4e:03:a0:05:aa:2c:88:6f:f9:a0:c6:3e:94: 85:09:31:b1:dc:2a:a0:bf:5d:a2:8b:ed:7d:69:6c: e9:f2:d1:75:b8:fa:2a:16:ca:2c:79:a4:0c:51:b2: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:36:CD:8B:BD:82:18:89:4A:78:BC:EB:22:97:41:00:8F:78:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:87:82:15:08:8e:8c:48:b0:9f:bf:78:64:33:ed:15:52:de: ae:e5:85:9a:89:30:0e:ea:c6:c5:99:56:51:5a:fd:7d:41:55: 2f:3c:12:23:d9:e9:47:8d:d1:e4:d9:6d:9d:49:89:17:c4:26: bd:74:2b:16:f1:9c:7a:7f:ee:17:0a:b7:72:8e:45:ef:4e:65: e2:60:d0:c7:42:41:a6:9f:aa:6d:3c:1a:5f:6e:15:55:9b:3b: 25:37:f1:9b:95:bb:f8:2e:8f:da:e0:0a:41:c3:d6:6e:c5:80: f3:1d:96:4a:30:21:ae:45:16:88:38:8b:c1:f6:65:84:8c:1a: f2:c9:72:96:e1:2b:5c:f3:d0:76:9b:d8:8e:07:3e:ac:83:9a: 7f:27:dc:89:0f:18:84:e9:ff:cf:53:fe:3a:87:79:b0:3e:4c: 36:e5:45:69:26:95:bd:10:78:19:08:69:92:ad:88:ab:16:f3: 63:35:a7:cc:be:17:3c:ac:c1:42:a3:e7:f0:b3:a8:10:26:71: 2a:6a:59:71:0f:f0:d3:bc:b5:30:71:c2:67:ef:78:9f:e1:a5: e5:7b:c0:82:97:57:8d:6d:5b:66:1d:c5:cc:bb:3e:9f:4d:05: fe:d2:dd:9c:4d:89:f2:57:e3:e0:f5:71:24:e1:db:5d:0b:fd: 1a:87:6d:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVTfJqVESGDSBj94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MTAyMDEwMDAwOVoXDTI1MTAyMzEwMDAwMFowLzEtMCsGA1UEAxMk YTNiMDkwNmYtZjAwOC00ZjBiLWE1ZTktNzlkOTA4OTk4NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGFXEd8p8AMMUJQm4MB2X2jR4odg56HfCUhZ uoCoMvQSRz4teJ0Wd7YjbusyXA451iXPoH/M0Dvifne2NfxGYkVUkii/iGfqXRnH hTsbNj5SUmXkiBtbfrgo+hqgmErBWEUrdwv9zbbdESq34KcwidaBKalbLvCzUT8G sUKrgNqfaMFsY4uGAuZ1yiCOKgcyooJSpt18ExIYSwheyPOHlkf4AiFsf6VqnZKm fEYeK6OFR5e6hVf50VBO8LWu52lORI1DueeZlj6pcdqltwieFCYW404DoAWqLIhv +aDGPpSFCTGx3Cqgv12ii+19aWzp8tF1uPoqFsoseaQMUbK1ZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHMNs2LvYIYiUp4vOsil0EAj3hSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0h4IVCI6MSLCfv3hkM+0V Ut6u5YWaiTAO6sbFmVZRWv19QVUvPBIj2elHjdHk2W2dSYkXxCa9dCsW8Zx6f+4X CrdyjkXvTmXiYNDHQkGmn6ptPBpfbhVVmzslN/Gblbv4Lo/a4ApBw9ZuxYDzHZZK MCGuRRaIOIvB9mWEjBryyXKW4Stc89B2m9iOBz6sg5p/J9yJDxiE6f/PU/46h3mw Pkw25UVpJpW9EHgZCGmSrYirFvNjNafMvhc8rMFCo+fws6gQJnEqallxD/DTvLUw ccJn73if4aXle8CCl1eNbVtmHcXMuz6fTQX+0t2cTYnyV+Pg9XEk4dtdC/0ah23Q -----END CERTIFICATE-----Generated at Mon Oct 20 19:42:35 2025 by rpki-client