$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: xJdgFpHMAILGBTUMINJd+asV0ZZcAiMmcvTWqomibbg= Subject key identifier: D9:5F:9B:13:2D:C5:15:7F:CB:0C:C5:F0:15:69:44:9E:89:57:10:98 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584B928344BEBA81D118A3807300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBB14 Signing time: Sun 19 Oct 2025 10:00:09 +0000 Manifest this update: Sun 19 Oct 2025 10:00:09 +0000 Manifest next update: Tue 21 Oct 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: soceUjARfPWWQcXRGjTz/W8XgF1mkGQ71DoWUBl54d0=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: H06UmjlWIabt2OGqnnY+gtdAB6k8ET6VYOJWn69U9x8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:83:44:be:ba:81:d1:18:a3:80:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Oct 19 10:00:09 2025 GMT Not After : Oct 21 10:00:00 2025 GMT Subject: CN=4961adca-7e85-4534-b46f-41dc3ba9e448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:8e:ac:c8:98:7b:20:8a:33:32:38:39:66: e1:9b:8a:18:b0:36:1a:59:a7:56:d6:ac:be:cd:6b: 41:52:15:42:ef:e5:c7:6e:e1:90:c3:88:60:bf:76: 76:35:20:d8:93:e1:72:c5:c1:aa:69:15:21:a9:dd: 56:77:c9:31:4c:52:a6:88:78:fe:0b:90:81:6b:03: a3:f0:d3:25:32:39:96:eb:0f:57:8e:55:38:8c:e4: 46:de:f8:8e:d3:7d:3b:aa:12:b5:4a:32:8a:7d:5e: 73:7a:78:49:f2:2c:c8:bb:11:84:a8:1c:e8:fb:5d: cc:78:48:80:c3:f9:ee:73:48:eb:02:0f:68:29:47: 1a:41:b2:a2:a2:af:04:68:9f:45:79:81:7c:1e:59: e7:f0:bf:2b:2f:19:f3:66:5a:38:0e:f2:07:fd:0c: cf:d1:4c:77:62:c1:ba:ed:91:15:ba:35:68:a6:f2: 3f:b1:59:f7:ce:4c:9c:b0:4b:34:a6:0c:67:b6:cf: d5:c6:9f:29:2d:22:d8:3a:27:b5:c1:33:9c:cb:c2: 0e:0c:2e:06:72:15:78:4d:57:29:7c:2e:8d:46:e7: 73:e1:87:26:cd:5b:87:c5:ed:3f:ad:8a:8a:8f:cd: 3d:2a:30:d0:f9:2e:1e:0d:9e:32:52:b0:6a:c9:98: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:9B:13:2D:C5:15:7F:CB:0C:C5:F0:15:69:44:9E:89:57:10:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2e:b6:a5:0f:41:f1:1c:9e:e4:a2:5b:cb:aa:94:bc:8f:6f: be:e7:86:79:c8:6f:7c:7f:ad:70:75:1f:ef:b9:ea:c9:f8:81: 31:2f:fb:2f:dd:75:e4:f2:1e:15:80:37:e5:d9:56:b8:ba:45: 79:b9:80:de:d6:ed:ab:31:3b:85:cb:f6:9c:47:29:39:84:73: fc:ad:b2:d4:61:ec:a1:d6:61:c4:65:ae:21:47:b6:3d:86:c9: 07:ee:75:3a:c4:6e:a0:3a:65:15:94:8b:6b:5c:8c:de:f0:82: 80:be:3e:98:2d:b5:72:22:42:e2:bd:76:c9:c2:55:30:43:2e: 90:a7:d8:ae:19:d4:94:80:5a:74:3b:22:04:a1:0b:89:09:fb: ae:23:f1:97:ca:19:a7:3a:ff:2a:99:09:65:a0:3b:37:ea:09: 0b:5e:b1:9f:d8:89:09:44:ca:fe:71:c1:4a:57:af:a2:04:43: 23:52:b9:f0:91:1f:d3:93:f5:fd:76:57:1b:31:4c:77:2d:e7: 46:4c:25:b4:16:fc:7d:eb:84:01:42:c2:7c:e4:b0:28:d9:10: 14:fe:92:06:8d:22:fa:40:ec:47:c4:2b:96:e4:01:95:b4:70: 3b:90:cd:1a:7d:a9:eb:4d:86:36:a9:8d:e3:c5:2a:0b:ae:bc: 8d:8b:67:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSg0S+uoHRGKOAcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MTAxOTEwMDAwOVoXDTI1MTAyMTEwMDAwMFowLzEtMCsGA1UEAxMk NDk2MWFkY2EtN2U4NS00NTM0LWI0NmYtNDFkYzNiYTllNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0eOrMiYeyCKMzI4OWbhm4oYsDYaWadW1qy+ zWtBUhVC7+XHbuGQw4hgv3Z2NSDYk+FyxcGqaRUhqd1Wd8kxTFKmiHj+C5CBawOj 8NMlMjmW6w9XjlU4jORG3viO0307qhK1SjKKfV5zenhJ8izIuxGEqBzo+13MeEiA w/nuc0jrAg9oKUcaQbKioq8EaJ9FeYF8Hlnn8L8rLxnzZlo4DvIH/QzP0Ux3YsG6 7ZEVujVopvI/sVn3zkycsEs0pgxnts/Vxp8pLSLYOie1wTOcy8IODC4GchV4TVcp fC6NRudz4YcmzVuHxe0/rYqKj809KjDQ+S4eDZ4yUrBqyZjY4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNlfmxMtxRV/ywzF8BVpRJ6JVxCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJLralD0HxHJ7kolvLqpS8 j2++54Z5yG98f61wdR/vuerJ+IExL/sv3XXk8h4VgDfl2Va4ukV5uYDe1u2rMTuF y/acRyk5hHP8rbLUYeyh1mHEZa4hR7Y9hskH7nU6xG6gOmUVlItrXIze8IKAvj6Y LbVyIkLivXbJwlUwQy6Qp9iuGdSUgFp0OyIEoQuJCfuuI/GXyhmnOv8qmQlloDs3 6gkLXrGf2IkJRMr+ccFKV6+iBEMjUrnwkR/Tk/X9dlcbMUx3LedGTCW0Fvx964QB QsJ85LAo2RAU/pIGjSL6QOxHxCuW5AGVtHA7kM0afanrTYY2qY3jxSoLrryNi2df -----END CERTIFICATE-----Generated at Sun Oct 19 17:37:55 2025 by rpki-client