$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft File: 3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft (raw, json) Hash identifier: 3ZDsrw/WEVSTZweTQv09uMBZXTn/0On4+PqROROgtSU= Subject key identifier: AC:C1:BB:53:79:42:AF:10:6C:C3:51:5E:B7:23:28:99:EE:4B:2C:30 Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Certificate serial: 010D0C9F4328584B93CAC78D3811F3AB533E9D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft Manifest number: 010D0C9F432858476EF1D5E25F620B9E9B5EF998 Signing time: Sun 19 Oct 2025 21:00:03 +0000 Manifest this update: Sun 19 Oct 2025 21:00:03 +0000 Manifest next update: Wed 22 Oct 2025 21:00:00 +0000 Files and hashes: 1: 3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl (hash: 5LksWlUocSeTQ4xZIW4axpBeAa6V8T+VTMDpnUwqPeU=) 2: e746abd4-c62e-3b05-88bc-b654eeb90c84.roa (hash: m4KGxcqw926WELehgYdNNTcXNi2xjYZZMCCAAD0BIkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ca:c7:8d:38:11:f3:ab:53:3e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Validity Not Before: Oct 19 21:00:03 2025 GMT Not After : Oct 22 21:00:00 2025 GMT Subject: CN=1f540eaf-0228-480b-bee6-9857e9f5ebf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:dd:32:5f:2b:0f:16:0e:a6:02:d2:de:5a: a0:cd:e5:22:07:db:bd:a0:90:c6:c1:3b:76:98:32: fe:bb:6b:94:17:d4:d8:48:f6:71:73:53:55:fd:50: 70:5d:10:fa:3a:de:44:54:e1:9c:91:9a:6c:17:f6: 31:77:18:44:0c:53:a7:e2:c3:a5:59:fa:69:13:dd: 6b:27:25:a0:33:88:3f:5e:81:75:a8:8a:1b:51:b8: a6:d7:cd:4b:2a:6f:ab:b0:12:23:eb:33:47:19:6b: 0c:dd:4f:f2:12:1f:61:e7:37:b4:b1:8f:1b:5e:df: da:5b:40:ce:b6:5f:f9:35:26:91:78:25:b9:57:76: 21:7c:89:6e:77:80:e7:d3:c9:10:73:b0:69:08:ef: 8e:59:b6:94:9a:69:b2:e7:bf:63:5f:d5:87:37:fe: 56:d2:d9:a7:99:bd:07:4b:f1:e1:92:53:b5:65:14: a8:72:30:bd:94:13:c4:f0:f3:30:84:3a:24:05:f9: 12:fb:fd:19:92:4f:a8:e9:3c:3b:00:da:4a:7c:e3: 0c:5e:04:59:e9:16:00:ad:d8:5e:82:67:b8:56:a4: eb:1e:01:9e:ec:bf:6f:ea:e7:37:cc:a4:e9:bd:20: 17:7f:c5:e5:f5:03:f9:0b:02:c4:61:7b:d1:b3:de: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C1:BB:53:79:42:AF:10:6C:C3:51:5E:B7:23:28:99:EE:4B:2C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl X509v3 Authority Key Identifier: keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:18:94:19:5c:83:8b:b3:62:fe:ea:4a:64:54:c8:bc:f9:ba: bf:7d:2e:0b:fd:36:50:dd:33:45:01:87:34:62:62:9a:1d:d3: e2:14:bf:10:bd:20:43:db:cc:94:b6:75:47:7f:9e:1e:98:1a: a6:0e:f1:51:df:48:eb:10:45:68:20:26:83:5d:6a:2b:cf:93: 25:48:d6:1d:4c:66:01:b9:be:dc:9f:1d:e8:2a:03:0b:91:4e: a0:6c:50:bd:d2:11:1f:ef:58:c4:58:65:2b:1c:a6:1f:49:b2: a5:92:8a:5e:c6:00:3b:72:63:83:1a:69:3e:c5:c4:5a:1f:4a: 4e:12:30:16:b0:2d:62:49:45:a9:93:00:22:98:1e:81:58:d7: 5d:4b:aa:c4:17:65:9b:24:dd:f1:ef:44:d7:bf:8c:36:de:24: de:46:86:49:ed:2a:b2:37:ed:f4:7b:18:8b:2a:a2:58:1d:a4: 29:52:f7:e1:75:34:84:04:17:2d:3b:f8:42:49:1e:5e:b5:e9: 05:ca:de:d1:22:f1:10:d6:40:da:a4:62:82:39:0b:a5:58:89: 2d:c0:94:34:3b:d4:b2:2b:70:58:d7:6d:3f:79:60:e1:37:e7: 12:93:c1:0a:0e:42:1c:e1:02:4a:bb:5e:5c:60:fd:3a:5c:48: 53:e6:df:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTyseNOBHzq1M+nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4Y2VjMjUtZDFjMi00MzcyLWJmMzktMWZlMjAxNWVl MWE5MB4XDTI1MTAxOTIxMDAwM1oXDTI1MTAyMjIxMDAwMFowLzEtMCsGA1UEAxMk MWY1NDBlYWYtMDIyOC00ODBiLWJlZTYtOTg1N2U5ZjVlYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLrdMl8rDxYOpgLS3lqgzeUiB9u9oJDGwTt2 mDL+u2uUF9TYSPZxc1NV/VBwXRD6Ot5EVOGckZpsF/YxdxhEDFOn4sOlWfppE91r JyWgM4g/XoF1qIobUbim181LKm+rsBIj6zNHGWsM3U/yEh9h5ze0sY8bXt/aW0DO tl/5NSaReCW5V3YhfIlud4Dn08kQc7BpCO+OWbaUmmmy579jX9WHN/5W0tmnmb0H S/HhklO1ZRSocjC9lBPE8PMwhDokBfkS+/0Zkk+o6Tw7ANpKfOMMXgRZ6RYArdhe gme4VqTrHgGe7L9v6uc3zKTpvSAXf8Xl9QP5CwLEYXvRs96ekQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKzBu1N5Qq8QbMNRXrcjKJnuSywwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhj ZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUyMDE1ZWUxYTkvM2I4Y2VjMjUtZDFjMi00 MzcyLWJmMzktMWZlMjAxNWVlMWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4Y2VjMjUtZDFjMi00MzcyLWJm MzktMWZlMjAxNWVlMWE5LzNiOGNlYzI1LWQxYzItNDM3Mi1iZjM5LTFmZTIwMTVl ZTFhOS5jcmwwHwYDVR0jBBgwFoAUfJShhFC9NQ4zymZKtOBm7vEKO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhjZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUy MDE1ZWUxYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzGJQZXIOLs2L+6kpkVMi8 +bq/fS4L/TZQ3TNFAYc0YmKaHdPiFL8QvSBD28yUtnVHf54emBqmDvFR30jrEEVo ICaDXWorz5MlSNYdTGYBub7cnx3oKgMLkU6gbFC90hEf71jEWGUrHKYfSbKlkope xgA7cmODGmk+xcRaH0pOEjAWsC1iSUWpkwAimB6BWNddS6rEF2WbJN3x70TXv4w2 3iTeRoZJ7SqyN+30exiLKqJYHaQpUvfhdTSEBBctO/hCSR5etekFyt7RIvEQ1kDa pGKCOQulWIktwJQ0O9SyK3BY120/eWDhN+cSk8EKDkIc4QJKu15cYP06XEhT5t/P -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:02 2025 by rpki-client