$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft File: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft (raw, json) Hash identifier: UoDeIvVghCObHgQ4Hc5kNy38VY1IgCzenlK34+jjlKE= Subject key identifier: 36:1A:CB:2F:BE:01:F3:69:86:3E:3A:88:E0:D0:CE:B8:62:0D:8E:A3 Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Certificate serial: 010D0C9F4328584B92A1098EBE779DC1EFD77700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft Manifest number: 010D0C9F4328584073A85062F6BEE4FE45767712 Signing time: Sun 19 Oct 2025 11:00:08 +0000 Manifest this update: Sun 19 Oct 2025 11:00:08 +0000 Manifest next update: Tue 21 Oct 2025 11:00:00 +0000 Files and hashes: 1: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl (hash: NhJm5k730efRiPGu7v5U/cXUpe5IvrZ6bWaIpR6gvHw=) 2: f5ad0dde-a733-3deb-81db-42293449a543.roa (hash: x52umDgDjn281PEvXHhwX+jwGo4FTKQfZwyaQPYCo5c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:a1:09:8e:be:77:9d:c1:ef:d7:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Validity Not Before: Oct 19 11:00:08 2025 GMT Not After : Oct 21 11:00:00 2025 GMT Subject: CN=a0aa8161-bb0c-4665-964e-6fb9e99476ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:96:16:ad:64:c7:69:3f:36:0d:aa:0e:97: 75:99:f0:a8:9b:25:c1:4b:b9:9a:0a:68:d0:9c:17: d9:65:e3:12:fa:22:ab:1f:0a:5e:06:9c:94:b8:05: 45:cb:8d:78:89:35:57:39:87:47:c0:df:d6:c4:ec: be:9d:bd:6c:f4:1f:a9:c4:63:78:0d:6e:e6:22:c9: 8b:43:f8:fe:fd:e7:7a:23:f5:57:77:59:12:79:33: 25:13:e2:d9:6b:3f:ca:2c:88:67:bd:a1:a5:8c:83: 15:ec:9a:84:0a:fc:f2:88:c7:4e:4b:69:50:d9:8d: a0:23:05:68:a1:16:be:38:34:3a:21:7d:d8:02:a7: 73:3a:cf:d9:25:9f:4b:7b:3d:53:e1:54:cc:f4:8b: 74:7c:63:31:2c:90:7a:44:0c:88:b4:b4:2b:86:41: 06:94:03:ef:2f:b2:67:a1:47:62:9a:6e:24:e4:67: 58:08:49:c8:a2:63:e7:d0:2b:3c:c8:a5:f7:f0:dd: 75:38:b7:7c:a0:71:12:ab:81:9f:7c:af:49:9e:40: 4c:41:ca:3c:61:27:f6:3c:27:95:83:c1:34:7f:b8: 20:d6:a0:3b:96:9a:bf:be:11:c7:7b:10:a8:6e:f9: f8:10:86:5b:56:ef:29:ce:27:0d:37:d1:e1:98:1b: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:CB:2F:BE:01:F3:69:86:3E:3A:88:E0:D0:CE:B8:62:0D:8E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl X509v3 Authority Key Identifier: keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:af:9d:8d:14:40:ab:d3:aa:83:f7:92:48:36:74:b9:13:27: 5e:c7:df:b7:8d:7c:9b:83:0a:1f:96:52:ce:5f:5e:fd:95:5d: 7f:31:e6:26:b1:36:02:dd:b2:ea:8b:f9:29:52:f9:46:0e:76: af:bd:de:5f:e5:f1:60:b9:a1:8c:ae:3f:75:ff:7b:25:c3:da: c0:bd:4b:f8:21:eb:7e:76:f8:3b:64:03:10:f2:16:de:54:f8: 9f:28:c0:ce:ed:27:3e:6d:ac:a4:e6:88:d4:af:d2:d5:fb:46: c7:b2:33:75:52:28:6a:69:60:b1:82:19:4a:c4:05:e5:cc:30: f3:39:8e:a7:8b:81:ee:e9:2b:56:e5:fa:9b:80:83:00:9a:d5: 65:f9:17:ca:fd:32:5a:87:89:56:f6:13:f1:6a:5c:70:2d:58: f5:c8:ef:e8:e2:f4:62:31:cd:94:5f:b7:c2:2e:1d:2e:b0:42: a7:31:27:6e:ee:bf:5c:df:7e:77:01:2b:d1:02:c0:a9:d3:3b: 9b:5e:00:62:f9:9c:15:0a:b3:f9:20:a7:80:1a:c1:89:38:2a: 3f:c6:3c:0f:3a:2b:c9:2b:ff:af:ad:55:64:73:65:50:1c:0e: 59:0f:b4:0d:18:ea:d8:7d:b5:91:3d:d2:94:af:c5:09:fc:33: 70:b4:fa:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSoQmOvnedwe/XdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5 MTM3MB4XDTI1MTAxOTExMDAwOFoXDTI1MTAyMTExMDAwMFowLzEtMCsGA1UEAxMk YTBhYTgxNjEtYmIwYy00NjY1LTk2NGUtNmZiOWU5OTQ3NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlheWFq1kx2k/Ng2qDpd1mfComyXBS7maCmjQ nBfZZeMS+iKrHwpeBpyUuAVFy414iTVXOYdHwN/WxOy+nb1s9B+pxGN4DW7mIsmL Q/j+/ed6I/VXd1kSeTMlE+LZaz/KLIhnvaGljIMV7JqECvzyiMdOS2lQ2Y2gIwVo oRa+ODQ6IX3YAqdzOs/ZJZ9Lez1T4VTM9It0fGMxLJB6RAyItLQrhkEGlAPvL7Jn oUdimm4k5GdYCEnIomPn0Cs8yKX38N11OLd8oHESq4GffK9JnkBMQco8YSf2PCeV g8E0f7gg1qA7lpq/vhHHexCobvn4EIZbVu8pzicNN9HhmBsquQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDYayy++AfNphj46iODQzrhiDY6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Ni OWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvM2NjYjllZDAtNzg3MC00 YTRhLWJmMjgtY2I4NmJjYTQ5MTM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjYjllZDAtNzg3MC00YTRhLWJm MjgtY2I4NmJjYTQ5MTM3LzNjY2I5ZWQwLTc4NzAtNGE0YS1iZjI4LWNiODZiY2E0 OTEzNy5jcmwwHwYDVR0jBBgwFoAUkqh+NuEq47kCrc17zepC77GNICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2 YmNhNDkxMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFr52NFECr06qD95JINnS5 Eydex9+3jXybgwofllLOX179lV1/MeYmsTYC3bLqi/kpUvlGDnavvd5f5fFguaGM rj91/3slw9rAvUv4Iet+dvg7ZAMQ8hbeVPifKMDO7Sc+bayk5ojUr9LV+0bHsjN1 UihqaWCxghlKxAXlzDDzOY6ni4Hu6StW5fqbgIMAmtVl+RfK/TJah4lW9hPxalxw LVj1yO/o4vRiMc2UX7fCLh0usEKnMSdu7r9c3353ASvRAsCp0zubXgBi+ZwVCrP5 IKeAGsGJOCo/xjwPOivJK/+vrVVkc2VQHA5ZD7QNGOrYfbWRPdKUr8UJ/DNwtPpb -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:28 2025 by rpki-client