$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft File: 34d1b905-337d-46f2-b028-65359c387fee.mft (raw, json) Hash identifier: AxxvLIf4QzpJi8RddrmVoyshI2irljH/tWUeVv6gN8M= Subject key identifier: 57:01:B3:56:69:89:2F:80:59:FE:25:E0:9D:A4:FE:45:D6:E3:E9:A3 Authority key identifier: 13:95:BF:1E:0C:4F:C8:E2:4F:2A:40:0A:33:2A:60:5B:83:C8:D9:94 Certificate issuer: /CN=34d1b905-337d-46f2-b028-65359c387fee Certificate serial: 010D0C9F4328584B8F6428144BEEE833B6A85180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft Manifest number: 010D0C9F4328584B8F642817835047F575D6B25D Signing time: Sat 18 Oct 2025 07:10:03 +0000 Manifest this update: Sat 18 Oct 2025 07:10:03 +0000 Manifest next update: Tue 21 Oct 2025 07:00:00 +0000 Files and hashes: 1: 34d1b905-337d-46f2-b028-65359c387fee.crl (hash: 57+FYeYpHxjO8Cw4eRd+RV4h237NoAS2D0+JYjzUwfs=) 2: 7dd9fce2-0cca-3fa6-9222-98f1df4a9d22.roa (hash: udnvtSgG7oXrKqavJT0up8kJHQKgWPr0QDOoNONoDok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:64:28:14:4b:ee:e8:33:b6:a8:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d1b905-337d-46f2-b028-65359c387fee Validity Not Before: Oct 18 07:10:03 2025 GMT Not After : Oct 21 07:00:00 2025 GMT Subject: CN=7b4220de-c2bd-4f6c-9441-88ac84f48c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:05:4d:1b:c6:8b:72:1f:42:18:00:41:e1: ab:f8:6f:c8:56:98:fc:c0:af:07:41:80:0f:a1:bf: ec:00:45:10:25:21:00:1e:9d:43:3d:4c:56:4d:7a: fd:4e:b8:56:2e:67:11:29:15:b6:67:1d:78:a5:8a: a7:a3:c1:cc:55:29:1c:7d:89:9f:c9:f9:85:62:ec: 1d:f7:a1:89:81:43:86:87:2c:5a:14:d1:b1:17:cd: ab:06:58:11:d8:a7:3e:ff:90:d6:02:8e:8b:7e:19: 8d:2d:ea:71:2a:05:69:88:7d:07:7f:8c:5e:f6:3b: 5a:9c:1a:ce:e7:1f:f4:42:63:09:11:93:ef:a8:6d: ea:c9:a3:13:ba:df:ec:17:5f:7a:96:f2:4b:35:8a: 38:ce:1f:d5:b3:39:2a:ff:e8:31:e1:9c:d8:07:da: c7:3f:5e:93:aa:e6:54:f7:8b:c8:0e:8e:ce:25:7a: 17:8e:5b:fd:5f:62:02:ca:c0:c1:a9:91:12:a1:02: c2:10:9d:b5:a7:d6:6a:42:e3:ba:f5:14:49:43:5b: 05:af:df:40:21:2e:d8:61:b2:30:98:d8:85:66:6e: 29:d9:8e:c1:7e:2d:24:6c:c3:c6:64:1a:5d:d0:5e: e5:3d:21:28:7a:a2:17:df:90:91:15:b0:79:5e:4f: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:01:B3:56:69:89:2F:80:59:FE:25:E0:9D:A4:FE:45:D6:E3:E9:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.crl X509v3 Authority Key Identifier: keyid:13:95:BF:1E:0C:4F:C8:E2:4F:2A:40:0A:33:2A:60:5B:83:C8:D9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:19:e8:97:1c:94:f2:6a:b9:98:40:39:3a:66:53:99:27:fe: aa:99:52:2c:75:a2:83:d6:66:57:f7:7a:66:30:1b:d6:08:88: 8d:de:c0:a7:00:aa:7c:ec:cb:7d:b7:31:7f:c6:31:25:95:86: 56:b7:61:78:ea:04:a5:e7:2f:0e:34:4e:2f:a4:5f:72:20:ca: 7a:56:48:59:2b:95:c9:87:52:e0:6e:f2:40:e5:02:56:26:7f: e3:c8:60:97:40:88:e7:5a:f6:d9:32:2f:b7:a8:27:cc:a3:a3: 26:13:9d:94:fc:cb:f0:6c:bf:28:de:98:1f:a6:6b:ec:0e:80: 84:d5:52:f4:ef:a3:18:41:11:4d:ce:18:ea:90:b6:de:b8:c8: 48:61:7c:3e:a6:17:29:c4:49:77:87:02:b9:5c:83:78:50:e9: 19:84:1b:34:ae:d7:e2:05:67:d8:04:6b:b7:b8:be:1b:8f:0b: 60:be:cb:cf:4a:1e:77:bb:6f:73:4e:6e:b7:a8:91:f4:d9:93: 77:36:d8:d9:5e:16:e3:b3:9e:c0:0f:33:7b:d8:a5:c2:22:b1: af:0a:9d:31:4a:9b:71:b5:af:8e:d8:94:82:5c:98:c6:bf:8a: a9:ff:74:32:d4:2d:5d:51:99:1e:fb:db:62:c8:00:38:4b:36: 35:66:05:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuPZCgUS+7oM7aoUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRkMWI5MDUtMzM3ZC00NmYyLWIwMjgtNjUzNTljMzg3 ZmVlMB4XDTI1MTAxODA3MTAwM1oXDTI1MTAyMTA3MDAwMFowLzEtMCsGA1UEAxMk N2I0MjIwZGUtYzJiZC00ZjZjLTk0NDEtODhhYzg0ZjQ4YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtugFTRvGi3IfQhgAQeGr+G/IVpj8wK8HQYAP ob/sAEUQJSEAHp1DPUxWTXr9TrhWLmcRKRW2Zx14pYqno8HMVSkcfYmfyfmFYuwd 96GJgUOGhyxaFNGxF82rBlgR2Kc+/5DWAo6LfhmNLepxKgVpiH0Hf4xe9jtanBrO 5x/0QmMJEZPvqG3qyaMTut/sF196lvJLNYo4zh/Vszkq/+gx4ZzYB9rHP16TquZU 94vIDo7OJXoXjlv9X2ICysDBqZESoQLCEJ21p9ZqQuO69RRJQ1sFr99AIS7YYbIw mNiFZm4p2Y7Bfi0kbMPGZBpd0F7lPSEoeqIX35CRFbB5Xk8GCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFcBs1ZpiS+AWf4l4J2k/kXW4+mjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNGQx YjkwNS0zMzdkLTQ2ZjItYjAyOC02NTM1OWMzODdmZWUvMzRkMWI5MDUtMzM3ZC00 NmYyLWIwMjgtNjUzNTljMzg3ZmVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzRkMWI5MDUtMzM3ZC00NmYyLWIw MjgtNjUzNTljMzg3ZmVlLzM0ZDFiOTA1LTMzN2QtNDZmMi1iMDI4LTY1MzU5YzM4 N2ZlZS5jcmwwHwYDVR0jBBgwFoAUE5W/HgxPyOJPKkAKMypgW4PI2ZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNGQxYjkwNS0zMzdkLTQ2ZjItYjAyOC02NTM1 OWMzODdmZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALGeiXHJTyarmYQDk6ZlOZ J/6qmVIsdaKD1mZX93pmMBvWCIiN3sCnAKp87Mt9tzF/xjEllYZWt2F46gSl5y8O NE4vpF9yIMp6VkhZK5XJh1LgbvJA5QJWJn/jyGCXQIjnWvbZMi+3qCfMo6MmE52U /MvwbL8o3pgfpmvsDoCE1VL076MYQRFNzhjqkLbeuMhIYXw+phcpxEl3hwK5XIN4 UOkZhBs0rtfiBWfYBGu3uL4bjwtgvsvPSh53u29zTm63qJH02ZN3NtjZXhbjs57A DzN72KXCIrGvCp0xSptxta+O2JSCXJjGv4qp/3Qy1C1dUZke+9tiyAA4SzY1ZgV4 -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:33 2025 by rpki-client