$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft File: e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft (raw, json) Hash identifier: CnihSBmAbgvFjMhIoxCgMeb3hsedfo/nWyp87S51XBU= Subject key identifier: 29:AB:70:B0:F3:08:63:17:6A:AF:BE:B2:28:6C:22:AE:E1:BA:68:8D Authority key identifier: B8:E7:12:EE:2F:6D:1F:A1:7B:D3:84:C1:89:3C:1D:CC:2F:DD:26:83 Certificate issuer: /CN=e3f7ffc2-37e7-4f6b-8e00-f62d62821de7 Certificate serial: 010D0C9F4328584B94F490D8E9B2E410D49EF800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft Manifest number: 010D0C9F4328584B8F633699457C8B38FB159E82 Signing time: Mon 20 Oct 2025 07:00:03 +0000 Manifest this update: Mon 20 Oct 2025 07:00:03 +0000 Manifest next update: Thu 23 Oct 2025 07:00:00 +0000 Files and hashes: 1: 289bd71b-2aa4-38c0-9cbb-96cb01650911.roa (hash: vLNQ28qdRsOns0WOPDTKuSVxj+K0GV91oDJR7Fn6WAo=) 2: e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl (hash: JeBATyuffpoApj2m0yn7s/5Gj/SuEVSb+paAq+Ql63o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:f4:90:d8:e9:b2:e4:10:d4:9e:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f7ffc2-37e7-4f6b-8e00-f62d62821de7 Validity Not Before: Oct 20 07:00:03 2025 GMT Not After : Oct 23 07:00:00 2025 GMT Subject: CN=fa3711bc-fb54-4b98-84e2-b12573bac331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:14:50:46:f0:e3:29:f1:77:5a:2f:80:4a: 2b:c2:51:65:7f:d5:d3:dd:75:b0:5e:de:c3:af:16: d8:5b:03:1f:41:3f:20:77:4d:ef:25:a1:d0:9f:19: d0:9e:3f:aa:d4:4c:9d:4c:a1:58:f2:e9:49:1e:85: f4:ea:1c:c9:4c:45:8d:b3:f9:c6:5b:dd:7a:42:58: 09:7d:d5:69:7a:3a:cd:51:0a:21:51:a1:46:66:98: a4:f4:18:4a:2d:af:cd:be:56:de:aa:a0:71:af:fd: 70:42:66:5f:d5:da:a2:e2:29:9a:66:d2:2a:95:be: fc:0a:29:bc:11:f6:01:15:d6:b3:ef:53:c7:a6:e0: 5a:67:b5:c4:c5:aa:2c:8a:bf:02:00:e7:70:c3:d3: 2b:e2:59:44:87:de:70:c9:e0:f9:70:ff:2f:16:a1: 73:61:d6:7c:fb:6d:cb:11:17:f4:97:71:24:4b:e9: a7:92:fa:b4:d6:45:54:fd:87:ce:68:8f:ec:f4:3a: 6b:89:92:9a:dd:d9:f8:da:84:d3:c3:9f:2f:44:73: 52:fd:41:2d:e5:a7:f1:cf:6e:ed:98:c6:eb:fe:02: d5:c0:e9:34:eb:32:4d:6c:be:66:7f:fc:8b:40:33: 33:d7:72:cd:2a:8d:5f:85:85:56:27:4b:5f:da:55: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AB:70:B0:F3:08:63:17:6A:AF:BE:B2:28:6C:22:AE:E1:BA:68:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl X509v3 Authority Key Identifier: keyid:B8:E7:12:EE:2F:6D:1F:A1:7B:D3:84:C1:89:3C:1D:CC:2F:DD:26:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a5:86:3f:e5:50:45:b4:20:a3:aa:bd:a4:11:da:3b:05:df: 9a:92:a2:e4:12:92:39:a4:f5:e7:4c:09:98:d3:91:a4:eb:05: d1:b4:a6:95:08:be:b1:8c:e2:22:48:f6:85:f2:7f:f9:fe:2a: 25:14:2a:57:c7:36:f1:a2:ba:52:23:bd:c8:90:a0:cb:13:e2: 86:9f:58:a8:7e:4a:4a:be:27:49:35:b4:79:1f:b9:cc:47:93: fd:c8:12:78:4d:63:25:77:ae:8c:69:3d:a9:07:48:50:13:0e: b7:6c:48:c4:f3:59:89:13:3d:7b:4c:89:2a:5a:48:02:6e:02: 32:4a:14:c0:2d:16:d3:b2:57:f9:c8:fe:95:df:74:55:03:ef: 01:d0:2d:35:43:93:07:db:0b:b8:28:6e:16:27:04:35:99:bb: 2b:72:4c:19:3e:d6:81:43:c0:31:e3:7b:a5:08:01:a8:cc:56: 59:19:96:46:d6:bb:f9:1c:2d:6d:2f:e8:d3:43:58:d0:09:92: 7d:29:90:0c:04:ee:30:75:0d:06:08:d4:7f:6a:95:ab:5f:40: 2a:55:d7:7a:3a:ec:88:a5:55:1e:d7:3d:99:33:f5:39:75:94: 9c:2e:df:b4:14:24:f2:ae:df:5a:f6:3a:d1:a4:b0:35:13:a6: 75:f7:76:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuU9JDY6bLkENSe+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmN2ZmYzItMzdlNy00ZjZiLThlMDAtZjYyZDYyODIx ZGU3MB4XDTI1MTAyMDA3MDAwM1oXDTI1MTAyMzA3MDAwMFowLzEtMCsGA1UEAxMk ZmEzNzExYmMtZmI1NC00Yjk4LTg0ZTItYjEyNTczYmFjMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNIUUEbw4ynxd1ovgEorwlFlf9XT3XWwXt7D rxbYWwMfQT8gd03vJaHQnxnQnj+q1EydTKFY8ulJHoX06hzJTEWNs/nGW916QlgJ fdVpejrNUQohUaFGZpik9BhKLa/NvlbeqqBxr/1wQmZf1dqi4imaZtIqlb78Cim8 EfYBFdaz71PHpuBaZ7XExaosir8CAOdww9Mr4llEh95wyeD5cP8vFqFzYdZ8+23L ERf0l3EkS+mnkvq01kVU/YfOaI/s9DpriZKa3dn42oTTw58vRHNS/UEt5afxz27t mMbr/gLVwOk06zJNbL5mf/yLQDMz13LNKo1fhYVWJ0tf2lXfBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCmrcLDzCGMXaq++sihsIq7humiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lM2Y3 ZmZjMi0zN2U3LTRmNmItOGUwMC1mNjJkNjI4MjFkZTcvZTNmN2ZmYzItMzdlNy00 ZjZiLThlMDAtZjYyZDYyODIxZGU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTNmN2ZmYzItMzdlNy00ZjZiLThl MDAtZjYyZDYyODIxZGU3L2UzZjdmZmMyLTM3ZTctNGY2Yi04ZTAwLWY2MmQ2Mjgy MWRlNy5jcmwwHwYDVR0jBBgwFoAUuOcS7i9tH6F704TBiTwdzC/dJoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lM2Y3ZmZjMi0zN2U3LTRmNmItOGUwMC1mNjJk NjI4MjFkZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBApYY/5VBFtCCjqr2kEdo7 Bd+akqLkEpI5pPXnTAmY05Gk6wXRtKaVCL6xjOIiSPaF8n/5/iolFCpXxzbxorpS I73IkKDLE+KGn1iofkpKvidJNbR5H7nMR5P9yBJ4TWMld66MaT2pB0hQEw63bEjE 81mJEz17TIkqWkgCbgIyShTALRbTslf5yP6V33RVA+8B0C01Q5MH2wu4KG4WJwQ1 mbsrckwZPtaBQ8Ax43ulCAGozFZZGZZG1rv5HC1tL+jTQ1jQCZJ9KZAMBO4wdQ0G CNR/apWrX0AqVdd6OuyIpVUe1z2ZM/U5dZScLt+0FCTyrt9a9jrRpLA1E6Z193bO -----END CERTIFICATE-----Generated at Mon Oct 20 12:49:10 2025 by rpki-client