$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft File: 3bb548a9-e172-41a3-925a-609e931d0009.mft (raw, json) Hash identifier: H3bPkKQ9gvvpskJEgkNknoYWkNWqFq6DLu2IESERrKU= Subject key identifier: BD:37:AC:42:61:40:4E:45:94:7F:AF:22:E7:F4:9B:22:4A:85:D6:97 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584B9335F26817CB58C3B82CD940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft Manifest number: 010D0C9F43285847448A94FE4E0E821F3BB12E54 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Tue 21 Oct 2025 16:00:00 +0000 Files and hashes: 1: 3bb548a9-e172-41a3-925a-609e931d0009.crl (hash: vGGquVx/0EIL+hCG+mOz02wTwEHMKWy4g8GniZG/pQk=) 2: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (hash: 3lwWYhP715HLq7DsWpk/3JcoC1anChxjP5lkURyAZjE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:f2:68:17:cb:58:c3:b8:2c:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 21 16:00:00 2025 GMT Subject: CN=23dcd905-cb50-46d7-b823-aa6ae0bc4eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:e6:f4:1e:90:a8:18:15:7f:40:d0:55:22: 0a:cd:03:06:23:a2:1d:a4:c3:56:fb:c5:a2:85:b9: fc:4b:f0:ed:98:e8:db:2b:7b:eb:a4:9a:f2:f5:5b: 0b:0e:82:90:f1:79:e1:d3:55:42:b6:37:41:b9:d6: 51:12:c6:53:c7:ad:43:d5:4d:fe:9a:a0:fd:76:71: 54:7a:50:96:92:02:e4:89:f0:3f:3f:a5:82:be:75: 9d:e3:1e:a7:5e:9e:0b:a1:82:b0:69:c5:be:cb:c0: 70:01:34:87:3f:69:59:38:41:2e:45:a2:fd:1d:dd: db:14:d4:09:91:66:f0:3a:73:0a:e4:b4:0b:3c:9e: 05:2b:ad:d9:9a:cc:b2:63:68:f4:62:f7:29:24:f3: dd:48:eb:fe:8c:d1:59:95:5f:e0:f9:49:a6:51:5e: 58:a0:c1:62:62:e1:ce:bc:93:04:9a:b9:ca:25:97: df:97:0c:3b:d4:14:bf:e6:44:02:9d:a8:c7:a5:31: 59:34:cd:c2:f0:57:ec:88:9e:c6:4e:4c:ab:3d:c8: dc:3a:a9:ad:e4:ec:fc:8b:ff:00:38:d9:fb:28:94: 0c:55:78:41:ac:0e:48:ca:17:15:b8:53:af:fa:f3: c3:57:76:f8:0c:a7:d0:47:63:a4:d5:96:ec:49:b6: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:AC:42:61:40:4E:45:94:7F:AF:22:E7:F4:9B:22:4A:85:D6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:35:8a:8d:bb:5a:8c:e7:8c:4e:9b:eb:77:48:f6:45:3e:9f: 12:f7:f2:56:a7:41:9d:8f:22:8d:fc:fb:2e:cd:02:86:1d:74: c1:86:8d:0b:ac:3c:14:a0:cd:66:00:d6:4a:00:2b:01:9c:25: 1b:ef:8f:c7:f8:36:cb:c8:08:ad:37:8f:37:51:4c:45:e8:f2: c1:26:3b:42:2c:07:4c:31:b7:c9:2b:f7:9e:cd:9d:79:fe:f4: 15:0f:2f:fe:74:17:3a:f0:ba:20:46:a6:b0:c0:74:11:91:ef: 34:6f:8a:66:fe:44:8b:4d:cf:7e:d5:47:87:42:07:8a:62:a7: 16:51:37:ca:8a:30:31:6f:f0:4d:5e:23:fb:3b:2d:88:6e:fa: 74:4c:37:02:65:f8:1c:fc:d3:3c:7d:82:bb:bc:0d:76:95:d0: 7f:0d:fe:6f:16:75:21:a1:17:79:27:c5:89:75:b6:82:f4:88: ab:0d:3b:7b:5b:16:65:87:2f:00:47:35:96:66:a0:36:11:c4: 44:e6:8a:e0:0e:1a:d8:58:18:14:76:15:bf:ba:3d:59:eb:1b: 2a:49:e0:68:f3:6c:88:ca:63:d0:78:15:1d:0d:87:5a:fb:8c: ee:dd:14:6b:89:b1:eb:95:ac:3a:5f:9a:e2:7f:c5:20:01:f5: 2b:f0:8e:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNfJoF8tYw7gs2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMTE2MDAwMFowLzEtMCsGA1UEAxMk MjNkY2Q5MDUtY2I1MC00NmQ3LWI4MjMtYWE2YWUwYmM0ZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vbm9B6QqBgVf0DQVSIKzQMGI6IdpMNW+8Wi hbn8S/DtmOjbK3vrpJry9VsLDoKQ8Xnh01VCtjdBudZREsZTx61D1U3+mqD9dnFU elCWkgLkifA/P6WCvnWd4x6nXp4LoYKwacW+y8BwATSHP2lZOEEuRaL9Hd3bFNQJ kWbwOnMK5LQLPJ4FK63ZmsyyY2j0YvcpJPPdSOv+jNFZlV/g+UmmUV5YoMFiYuHO vJMEmrnKJZfflww71BS/5kQCnajHpTFZNM3C8FfsiJ7GTkyrPcjcOqmt5Oz8i/8A ONn7KJQMVXhBrA5IyhcVuFOv+vPDV3b4DKfQR2Ok1ZbsSbbKaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL03rEJhQE5FlH+vIuf0myJKhdaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvM2JiNTQ4YTktZTE3Mi00 MWEzLTkyNWEtNjA5ZTkzMWQwMDA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2NYqNu1qM54xOm+t3SPZF Pp8S9/JWp0GdjyKN/PsuzQKGHXTBho0LrDwUoM1mANZKACsBnCUb74/H+DbLyAit N483UUxF6PLBJjtCLAdMMbfJK/eezZ15/vQVDy/+dBc68LogRqawwHQRke80b4pm /kSLTc9+1UeHQgeKYqcWUTfKijAxb/BNXiP7Oy2Ibvp0TDcCZfgc/NM8fYK7vA12 ldB/Df5vFnUhoRd5J8WJdbaC9IirDTt7WxZlhy8ARzWWZqA2EcRE5orgDhrYWBgU dhW/uj1Z6xsqSeBo82yIymPQeBUdDYda+4zu3RRribHrlaw6X5rif8UgAfUr8I7a -----END CERTIFICATE-----Generated at Mon Oct 20 16:28:11 2025 by rpki-client