$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: CCPS2fMSNrKITEpm5Y35ZdDlcrtiXPAia2MYd5O9fXM= Subject key identifier: 21:44:9C:CA:58:6A:EA:0B:E4:E7:07:AD:2C:3E:7D:BF:40:D9:17:5A Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584B92A10B5733A5AAED6D53BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCA86 Signing time: Sun 19 Oct 2025 11:00:08 +0000 Manifest this update: Sun 19 Oct 2025 11:00:08 +0000 Manifest next update: Tue 21 Oct 2025 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: wvF2NPwqCtb1UrsLdmlL69Kf5gVj9lJlU60QqnnoMOE=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: FIZ3xJMvnPKUekYvK3IflROLqHYHvYvdFrSm+5fWMLU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:a1:0b:57:33:a5:aa:ed:6d:53:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Oct 19 11:00:08 2025 GMT Not After : Oct 21 11:00:00 2025 GMT Subject: CN=aedd2c54-3faf-4202-87d0-267fef3ffef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:a2:d7:76:7d:75:ae:43:f3:b0:93:bb:af: a0:cb:90:3c:ad:45:69:1b:aa:06:14:64:8e:52:84: 36:0e:d0:73:df:21:3e:74:06:47:31:18:f7:c2:d9: 0e:33:a4:fc:00:d5:f9:5a:e3:8d:26:b2:2e:63:04: 13:b5:67:34:14:1c:7e:56:5f:a4:1d:14:e6:db:e4: 4a:6a:b9:e7:94:67:e5:73:7c:12:e0:36:a0:ed:8b: bf:3c:f3:1a:b3:33:45:74:97:c4:f1:28:8a:96:c9: 80:d7:ad:d4:48:2b:03:56:e1:9e:b2:43:4a:70:2f: 3b:1f:45:1c:c6:17:b5:e8:a8:da:57:2e:74:da:b8: b6:e3:c0:2f:71:76:33:5a:b3:c2:cb:59:d2:57:59: d0:de:7b:a7:fc:59:69:98:3c:85:1b:f2:35:83:c5: 9d:58:46:34:e7:aa:af:84:76:e1:32:02:24:cd:b4: ae:ef:6c:be:4a:f7:99:a6:b9:38:08:e9:1e:d5:29: d5:37:d2:c1:ba:31:f4:6f:4e:8e:cd:fa:27:ef:29: 2b:00:fe:9d:18:16:f2:c8:0f:d8:df:ab:1b:35:31: 07:1c:95:22:6a:b2:ff:16:7a:1f:eb:d4:3e:a7:d6: e1:d7:8a:1b:bd:dc:25:1d:94:bc:99:46:1a:e0:fe: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:44:9C:CA:58:6A:EA:0B:E4:E7:07:AD:2C:3E:7D:BF:40:D9:17:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:98:68:d9:a8:57:7f:f6:07:85:5f:d4:c9:84:dc:cb:43:97: 73:b7:e0:9e:1d:0b:bb:92:61:54:85:7e:2a:f0:5d:41:dc:84: 57:22:37:b4:6b:d1:7c:86:e0:ff:d9:57:4c:20:fc:ab:95:96: b3:53:a2:d3:53:23:d8:5d:75:1d:28:39:1b:78:ae:e6:d8:b1: 31:d8:d8:35:ed:57:df:5d:ba:60:05:a8:7a:d0:ff:ae:6e:99: ff:d5:c3:c9:17:72:14:c5:7f:b7:e8:52:fb:8c:d8:a8:24:54: 89:a9:96:e9:30:aa:fb:c4:ac:25:cc:74:50:ef:e7:91:b5:12: 39:ef:7d:bf:d8:e7:a3:3a:1b:9b:47:b8:be:1d:51:d8:5f:7e: 57:b9:e9:cd:a4:af:c7:c6:24:34:c4:55:03:1b:41:8d:50:aa: 8d:91:95:22:ea:f8:20:f4:92:63:f8:35:8b:b4:05:ae:8f:e4: e0:cd:02:d4:5e:8f:14:95:b5:93:00:4b:05:4c:86:45:79:8f: e5:6a:68:46:84:0c:cd:a7:e4:a7:b1:45:21:f1:81:b6:56:19: b7:4e:f4:38:f2:dd:10:69:8e:a2:e7:d1:89:8a:87:b5:84:af: 10:2a:ca:28:e9:0d:5d:7d:0d:24:b5:65:6d:ec:d1:a9:9d:75: 26:44:0e:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSoQtXM6Wq7W1TvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MTAxOTExMDAwOFoXDTI1MTAyMTExMDAwMFowLzEtMCsGA1UEAxMk YWVkZDJjNTQtM2ZhZi00MjAyLTg3ZDAtMjY3ZmVmM2ZmZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBmi13Z9da5D87CTu6+gy5A8rUVpG6oGFGSO UoQ2DtBz3yE+dAZHMRj3wtkOM6T8ANX5WuONJrIuYwQTtWc0FBx+Vl+kHRTm2+RK arnnlGflc3wS4Dag7Yu/PPMaszNFdJfE8SiKlsmA163USCsDVuGeskNKcC87H0Uc xhe16KjaVy502ri248AvcXYzWrPCy1nSV1nQ3nun/FlpmDyFG/I1g8WdWEY056qv hHbhMgIkzbSu72y+SveZprk4COke1SnVN9LBujH0b06Ozfon7ykrAP6dGBbyyA/Y 36sbNTEHHJUiarL/Fnof69Q+p9bh14obvdwlHZS8mUYa4P6M2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFEnMpYauoL5OcHrSw+fb9A2RdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfmGjZqFd/9geFX9TJhNzL Q5dzt+CeHQu7kmFUhX4q8F1B3IRXIje0a9F8huD/2VdMIPyrlZazU6LTUyPYXXUd KDkbeK7m2LEx2Ng17VffXbpgBah60P+ubpn/1cPJF3IUxX+36FL7jNioJFSJqZbp MKr7xKwlzHRQ7+eRtRI5732/2OejOhubR7i+HVHYX35XuenNpK/HxiQ0xFUDG0GN UKqNkZUi6vgg9JJj+DWLtAWuj+TgzQLUXo8UlbWTAEsFTIZFeY/lamhGhAzNp+Sn sUUh8YG2Vhm3TvQ48t0QaY6i59GJioe1hK8QKsoo6Q1dfQ0ktWVt7NGpnXUmRA4h -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:57 2025 by rpki-client