$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft File: 3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft (raw, json) Hash identifier: s8scE8BasITW6rv0OfJYaQvbyiokzqdHw8VYGb34Rzo= Subject key identifier: B5:CF:DA:A2:AD:21:D3:27:25:93:7A:D8:74:AF:E8:80:A2:61:7F:26 Authority key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Certificate issuer: /CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Certificate serial: 010D0C9F4328584B92656EA9DA64AFB9FE008B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft Manifest number: 010D0C9F4328584677E442BE896761CB509EC19F Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:03 +0000 Manifest next update: Wed 22 Oct 2025 09:00:00 +0000 Files and hashes: 1: 08b21afd-c79d-35c4-91d3-323622a79ddc.roa (hash: UYV+7+fKA7ePYRxnWCQLkgj57Vta43hDMNfWeqayxi8=) 2: 3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl (hash: DfuIyb3PEAOlCrSjhrN61usJq4+HVk28PpUEcu5CpWA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:65:6e:a9:da:64:af:b9:fe:00:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Validity Not Before: Oct 19 09:00:03 2025 GMT Not After : Oct 22 09:00:00 2025 GMT Subject: CN=97def767-2b89-4e40-a616-dfd453893fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:5c:16:19:45:00:07:d9:93:65:dd:43:f4: 90:0f:47:94:a2:bc:d9:38:f4:3a:31:ba:0a:d0:34: ac:ea:a5:1c:69:cb:0a:20:7a:65:68:f7:ff:72:96: 0e:40:ec:dd:2c:64:fe:96:86:76:94:71:0e:ac:6d: fa:81:38:22:e0:37:73:c6:fb:f7:87:4a:53:5e:c0: 25:95:f9:36:cc:93:c3:db:96:3b:da:10:22:33:48: 35:8c:3e:fe:22:99:1b:8c:21:2d:5c:46:19:46:4f: 44:e4:dc:3b:97:37:0a:71:19:1f:94:92:2d:12:2a: 6a:7d:f5:30:1c:cb:2e:3b:09:cb:82:8c:a7:c7:88: fe:2e:0d:34:56:af:81:38:07:99:06:6a:4e:bd:c9: 87:b8:fb:ca:9d:14:35:24:ad:d4:ba:5e:98:7d:cb: 76:ac:41:d6:b0:71:98:ec:9d:81:fc:5a:19:3f:11: b6:89:af:a8:ed:56:a2:8a:8c:14:22:88:32:53:d8: fc:94:f7:9c:b3:94:b9:d8:ca:48:5b:aa:09:0a:0c: 2d:d1:d2:81:df:05:69:9f:17:82:b0:8e:21:01:f5: 2e:8c:fe:2a:08:9f:29:fc:79:e6:5a:e7:e2:de:d1: ba:f8:ae:ed:03:ca:28:da:d5:34:6b:8b:b7:f5:57: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:DA:A2:AD:21:D3:27:25:93:7A:D8:74:AF:E8:80:A2:61:7F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl X509v3 Authority Key Identifier: keyid:3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c8:d0:d7:27:f0:b3:ac:f2:b1:fa:6b:c7:ca:d9:9a:9b:90: be:af:d9:53:aa:5c:db:1b:96:74:d3:01:8f:7c:8a:41:f8:3d: ef:44:32:4d:4e:c7:fd:5b:28:c4:f3:f0:66:b9:bb:f8:dc:0b: cb:5c:29:a9:95:7e:d0:8e:69:51:b9:0d:81:56:21:10:0d:64: 18:83:25:37:1a:fc:54:c2:63:2f:56:9f:c0:ba:96:f6:8d:bb: 58:69:96:40:b3:44:55:9d:5b:03:8d:79:27:94:78:79:19:a7: 23:ab:a7:8a:70:05:33:ba:04:e0:b0:da:6a:94:92:21:6d:e8: 5a:4f:6f:b5:e8:81:a0:1e:cb:16:c1:e5:4e:43:f0:47:ce:de: d4:a5:f1:c4:37:c5:c9:c2:fc:a0:32:cb:b9:ed:8f:db:f1:c4: 5b:9f:8c:a1:a3:1a:03:2f:0d:45:79:93:ea:50:98:b9:3f:9b: c2:25:4d:d1:b2:c1:99:e7:07:d8:b7:ee:77:ef:21:1c:73:85: 60:17:1f:11:65:ef:de:12:86:08:73:b0:af:6f:c1:29:1a:ff: ee:b6:be:68:d4:cc:ff:fd:fd:32:62:b1:44:13:7a:c4:70:23: c7:b9:53:c6:1f:27:7b:c3:71:7a:45:77:e5:13:1b:9d:48:93: d5:45:61:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSZW6p2mSvuf4Ai0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0 YWE3MB4XDTI1MTAxOTA5MDAwM1oXDTI1MTAyMjA5MDAwMFowLzEtMCsGA1UEAxMk OTdkZWY3NjctMmI4OS00ZTQwLWE2MTYtZGZkNDUzODkzZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGJcFhlFAAfZk2XdQ/SQD0eUorzZOPQ6MboK 0DSs6qUcacsKIHplaPf/cpYOQOzdLGT+loZ2lHEOrG36gTgi4Ddzxvv3h0pTXsAl lfk2zJPD25Y72hAiM0g1jD7+IpkbjCEtXEYZRk9E5Nw7lzcKcRkflJItEipqffUw HMsuOwnLgoynx4j+Lg00Vq+BOAeZBmpOvcmHuPvKnRQ1JK3Uul6Yfct2rEHWsHGY 7J2B/FoZPxG2ia+o7VaiiowUIogyU9j8lPecs5S52MpIW6oJCgwt0dKB3wVpnxeC sI4hAfUujP4qCJ8p/HnmWufi3tG6+K7tA8oo2tU0a4u39VexGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLXP2qKtIdMnJZN62HSv6ICiYX8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYWU3 ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvM2FlN2VjZmYtZTNhYi00 NzJkLWE0ZWMtMGZjZDNmZTk0YWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2FlN2VjZmYtZTNhYi00NzJkLWE0 ZWMtMGZjZDNmZTk0YWE3LzNhZTdlY2ZmLWUzYWItNDcyZC1hNGVjLTBmY2QzZmU5 NGFhNy5jcmwwHwYDVR0jBBgwFoAUPph7Dc5mtoYTiir7ITCCh1t0sEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNk M2ZlOTRhYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARyNDXJ/CzrPKx+mvHytma m5C+r9lTqlzbG5Z00wGPfIpB+D3vRDJNTsf9WyjE8/Bmubv43AvLXCmplX7QjmlR uQ2BViEQDWQYgyU3GvxUwmMvVp/Aupb2jbtYaZZAs0RVnVsDjXknlHh5Gacjq6eK cAUzugTgsNpqlJIhbehaT2+16IGgHssWweVOQ/BHzt7UpfHEN8XJwvygMsu57Y/b 8cRbn4yhoxoDLw1FeZPqUJi5P5vCJU3RssGZ5wfYt+537yEcc4VgFx8RZe/eEoYI c7Cvb8EpGv/utr5o1Mz//f0yYrFEE3rEcCPHuVPGHyd7w3F6RXflExudSJPVRWEq -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:30 2025 by rpki-client