$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft File: 3f607d23-8c92-4ffc-9c54-90418a4c4544.mft (raw, json) Hash identifier: lZ+zKSYqmUakyhCtQzGamCey6VAW2R4BO5inggqud7Q= Subject key identifier: D4:0B:75:65:00:3D:E9:DC:6A:CC:94:03:49:9C:8C:A3:2C:28:1F:AE Authority key identifier: 69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1 Certificate issuer: /CN=3f607d23-8c92-4ffc-9c54-90418a4c4544 Certificate serial: 010D0C9F4328584B9659EC1BED61ADADE451A3D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft Manifest number: 010D0C9F4328584073A822249281B32E51953A5A Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 3f607d23-8c92-4ffc-9c54-90418a4c4544.crl (hash: Jbx7dxgYQ3xlK4j4gfhQGBiuo+R6aRFEsHk0MBGeuSQ=) 2: 5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa (hash: dBoVy1Grun/TfB15x88nK99dyVDxu4yLLr+sU5gim9c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:ec:1b:ed:61:ad:ad:e4:51:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f607d23-8c92-4ffc-9c54-90418a4c4544 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=f72745cd-42e4-4f2b-89f7-4c3e1c9b2870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:19:6f:3e:9d:6c:f0:dc:66:1d:1b:1d:44: bc:7d:b3:40:da:5c:54:c0:81:e7:68:b9:fe:48:76: 5f:28:e6:bf:b3:d9:f3:96:71:db:43:3b:86:09:df: ad:7f:ee:ac:b9:ea:f8:1f:99:91:3e:06:fd:c7:90: 57:fe:01:6a:6b:af:38:0b:d7:84:f8:82:d6:e1:b4: 0b:68:22:0d:fe:9a:d4:e7:ef:6f:46:e0:8b:14:14: 2c:c3:0b:79:15:82:4a:b5:38:5d:fe:40:9f:ce:63: 47:7e:6c:58:c4:19:b3:18:8d:81:73:13:4d:db:4c: a1:2b:25:23:08:21:a1:a9:11:b1:2f:09:db:9e:ac: fa:e4:56:54:c0:69:83:d0:0c:68:f4:25:d2:57:85: 3a:e4:01:ec:2d:a0:09:1d:3b:cf:76:1a:7c:b6:91: 4c:5f:01:34:01:98:47:9a:cd:4c:5e:c8:52:c8:12: 5e:b8:8c:53:9b:dd:ee:cc:9c:ef:5d:a4:75:41:52: ae:ed:da:a4:57:68:98:4b:23:fd:79:4b:5f:47:08: 9e:8b:60:e5:ba:dc:1f:3c:c8:70:56:15:62:f5:89: ce:73:11:9d:60:66:36:33:62:82:b5:44:2b:21:5d: 9f:04:ae:22:85:cd:8f:84:02:37:a5:e2:70:b5:da: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0B:75:65:00:3D:E9:DC:6A:CC:94:03:49:9C:8C:A3:2C:28:1F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl X509v3 Authority Key Identifier: keyid:69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:09:d2:0c:2b:c3:81:b4:89:57:0d:2d:71:46:7c:27:b4:36: 63:82:bf:e5:b1:bf:c2:42:44:78:45:ea:08:72:db:89:e5:ca: 77:8f:51:57:4b:8c:9d:ec:71:68:cf:59:f5:55:25:54:a6:c9: 57:6d:62:e3:c9:71:55:b9:c6:de:93:86:4e:6f:38:dd:73:8c: e3:ae:bc:12:93:af:b5:21:80:c6:a6:bd:87:80:e7:f6:7f:00: 97:06:e8:7a:da:6f:79:ce:da:b8:e2:c3:a0:ec:a4:e2:3e:4e: 5b:3c:7a:94:03:eb:bf:9d:53:9c:0b:27:f2:1a:75:69:14:8d: 83:6b:d8:4d:fe:04:60:dc:45:d4:a5:59:c4:c1:32:0b:de:76: 6f:f3:f7:b8:db:75:e6:db:c0:1e:21:27:c4:1b:ea:59:2d:05: 06:20:45:21:c0:c7:a2:1d:cb:43:27:6f:8a:36:cf:34:59:c1: 55:6a:76:3c:c8:28:cd:26:5e:63:08:a3:18:4c:0f:12:be:8b: 1f:31:99:09:c5:6b:29:a7:2b:59:79:41:05:6b:d1:53:00:12: da:93:99:6b:d4:fd:59:2e:5a:46:54:81:35:51:81:04:a1:a3: 58:a7:04:d2:0c:dc:a6:e0:13:4d:47:73:16:61:ea:7b:e0:0b: a5:7c:86:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWewb7WGtreRRo9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2MDdkMjMtOGM5Mi00ZmZjLTljNTQtOTA0MThhNGM0 NTQ0MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk ZjcyNzQ1Y2QtNDJlNC00ZjJiLTg5ZjctNGMzZTFjOWIyODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXwZbz6dbPDcZh0bHUS8fbNA2lxUwIHnaLn+ SHZfKOa/s9nzlnHbQzuGCd+tf+6suer4H5mRPgb9x5BX/gFqa684C9eE+ILW4bQL aCIN/prU5+9vRuCLFBQswwt5FYJKtThd/kCfzmNHfmxYxBmzGI2BcxNN20yhKyUj CCGhqRGxLwnbnqz65FZUwGmD0Axo9CXSV4U65AHsLaAJHTvPdhp8tpFMXwE0AZhH ms1MXshSyBJeuIxTm93uzJzvXaR1QVKu7dqkV2iYSyP9eUtfRwiei2DlutwfPMhw VhVi9YnOcxGdYGY2M2KCtUQrIV2fBK4ihc2PhAI3peJwtdqJgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNQLdWUAPencasyUA0mcjKMsKB+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjYw N2QyMy04YzkyLTRmZmMtOWM1NC05MDQxOGE0YzQ1NDQvM2Y2MDdkMjMtOGM5Mi00 ZmZjLTljNTQtOTA0MThhNGM0NTQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2MDdkMjMtOGM5Mi00ZmZjLTlj NTQtOTA0MThhNGM0NTQ0LzNmNjA3ZDIzLThjOTItNGZmYy05YzU0LTkwNDE4YTRj NDU0NC5jcmwwHwYDVR0jBBgwFoAUaTjMka986+bkHCCBh/FqEpFiQPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjYwN2QyMy04YzkyLTRmZmMtOWM1NC05MDQx OGE0YzQ1NDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByCdIMK8OBtIlXDS1xRnwn tDZjgr/lsb/CQkR4ReoIctuJ5cp3j1FXS4yd7HFoz1n1VSVUpslXbWLjyXFVucbe k4ZObzjdc4zjrrwSk6+1IYDGpr2HgOf2fwCXBuh62m95ztq44sOg7KTiPk5bPHqU A+u/nVOcCyfyGnVpFI2Da9hN/gRg3EXUpVnEwTIL3nZv8/e423Xm28AeISfEG+pZ LQUGIEUhwMeiHctDJ2+KNs80WcFVanY8yCjNJl5jCKMYTA8SvosfMZkJxWsppytZ eUEFa9FTABLak5lr1P1ZLlpGVIE1UYEEoaNYpwTSDNym4BNNR3MWYep74AulfIYb -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:44 2025 by rpki-client