$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft File: f3280fa0-3649-4902-978e-e7711edc5a33.mft (raw, json) Hash identifier: FLBuo7AgCA5yA5wWT4ZEtCumLV4fBG+pCkrXu0nbPbg= Subject key identifier: BE:69:0D:9E:C6:B2:E7:BE:40:51:A0:51:74:8C:3D:1D:91:D6:3D:99 Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Certificate issuer: /CN=f3280fa0-3649-4902-978e-e7711edc5a33 Certificate serial: 010D0C9F4328584B963C2B3C3D529D90231D2D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft Manifest number: 010D0C9F432858447FB44DEA14A23356D9E9999C Signing time: Mon 20 Oct 2025 18:00:08 +0000 Manifest this update: Mon 20 Oct 2025 18:00:08 +0000 Manifest next update: Thu 23 Oct 2025 18:00:00 +0000 Files and hashes: 1: 91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (hash: KRpc9+zV+HnCQqL4GNgJAah0YSLXPUzSPWpxLVDrECw=) 2: f3280fa0-3649-4902-978e-e7711edc5a33.crl (hash: 6y233R8/wjF8e2KsQByTfOu97WK7Z3yUAFWdiXWls28=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:2b:3c:3d:52:9d:90:23:1d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33 Validity Not Before: Oct 20 18:00:08 2025 GMT Not After : Oct 23 18:00:00 2025 GMT Subject: CN=cd7eeb56-dd99-4570-a183-9e982a6940b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:84:11:cf:75:7d:ba:78:a6:a5:f4:39:f7: e6:81:d1:a9:1d:d7:23:0b:f4:60:cd:6b:29:81:cf: f4:95:62:e8:d8:1f:1b:f6:bf:ad:ba:c8:b6:d0:a4: 55:b4:56:62:60:56:37:20:23:eb:d0:c3:46:3e:79: 1c:82:77:6f:7c:42:e9:0d:84:84:04:dc:06:a1:00: 6e:e6:cf:e9:1a:d8:7a:09:78:bc:b0:dd:17:26:c5: a1:e0:a6:21:97:54:f6:c9:db:12:7f:75:b4:35:a4: da:1c:5e:6d:9b:ee:2a:c8:3f:a9:10:10:db:12:8d: 41:0b:46:cb:da:7d:d0:e6:cb:06:3e:2c:34:28:04: e4:d4:b5:bf:2e:ef:0d:87:42:0d:8b:df:ec:01:19: 80:0d:41:41:fa:be:e1:5a:bc:0a:8f:a2:2b:6a:dc: 0a:73:09:69:30:c6:d4:b7:ac:b3:f7:cd:f4:be:97: d6:fc:e4:85:66:ab:5e:bc:38:b2:65:2e:95:fa:6d: 17:8b:51:ce:d7:db:24:44:0d:07:21:41:4b:1c:a2: 2c:00:b0:98:3e:14:60:f4:9f:45:38:ed:75:12:11: b3:c1:e7:9a:fb:73:41:2a:59:a2:3d:17:34:3e:ac: c3:69:bc:b7:3a:c8:44:fd:b7:f4:bf:8f:02:bc:70: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:0D:9E:C6:B2:E7:BE:40:51:A0:51:74:8C:3D:1D:91:D6:3D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl X509v3 Authority Key Identifier: keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c3:dc:3f:ff:29:0e:b9:0b:0d:a6:42:56:c5:14:bb:dd:93: 3d:7b:23:ce:8a:cb:46:42:23:de:54:70:13:49:e9:69:00:10: cb:87:f3:b7:8d:62:66:a9:59:44:83:af:62:eb:72:7a:26:04: 92:27:35:44:a4:d5:09:c6:c0:09:a7:e8:51:5c:c6:06:e3:4d: 6e:3c:62:02:51:a4:85:ac:65:51:9a:5c:a0:e8:0f:7c:57:fc: 58:6b:57:00:ad:92:57:1a:76:4c:ed:1e:75:c5:f6:0a:36:31: b5:2d:cb:58:99:08:a4:81:3d:11:98:30:c7:44:40:9d:3c:52: 51:94:43:1f:a6:ab:47:8a:f5:69:bb:0e:b5:00:dd:b0:4a:a9: 94:c9:99:64:c7:06:cb:cc:d5:11:df:f2:ff:4a:51:ee:12:59: b3:a8:3d:16:25:41:b0:72:24:db:e6:94:11:6b:06:d4:8e:94: 9d:52:f7:30:22:8b:35:8d:af:9d:9c:40:3c:0d:af:f3:e2:37: a7:e2:e8:89:e3:46:9b:f9:48:b4:35:4d:5d:cd:70:33:6c:85: 2f:38:b0:ee:7f:89:3b:3a:cb:98:7a:8a:36:7d:04:bb:8a:b6: 57:61:23:1e:7b:f4:eb:f1:44:00:92:26:cb:17:c1:35:ca:a2: c6:0b:39:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWPCs8PVKdkCMdLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODBmYTAtMzY0OS00OTAyLTk3OGUtZTc3MTFlZGM1 YTMzMB4XDTI1MTAyMDE4MDAwOFoXDTI1MTAyMzE4MDAwMFowLzEtMCsGA1UEAxMk Y2Q3ZWViNTYtZGQ5OS00NTcwLWExODMtOWU5ODJhNjk0MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaqEEc91fbp4pqX0OffmgdGpHdcjC/RgzWsp gc/0lWLo2B8b9r+tusi20KRVtFZiYFY3ICPr0MNGPnkcgndvfELpDYSEBNwGoQBu 5s/pGth6CXi8sN0XJsWh4KYhl1T2ydsSf3W0NaTaHF5tm+4qyD+pEBDbEo1BC0bL 2n3Q5ssGPiw0KATk1LW/Lu8Nh0INi9/sARmADUFB+r7hWrwKj6IratwKcwlpMMbU t6yz9830vpfW/OSFZqtevDiyZS6V+m0Xi1HO19skRA0HIUFLHKIsALCYPhRg9J9F OO11EhGzweea+3NBKlmiPRc0PqzDaby3OshE/bf0v48CvHBdjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL5pDZ7Gsue+QFGgUXSMPR2R1j2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4 MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVkYzVhMzMvZjMyODBmYTAtMzY0OS00 OTAyLTk3OGUtZTc3MTFlZGM1YTMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjMyODBmYTAtMzY0OS00OTAyLTk3 OGUtZTc3MTFlZGM1YTMzL2YzMjgwZmEwLTM2NDktNDkwMi05NzhlLWU3NzExZWRj NWEzMy5jcmwwHwYDVR0jBBgwFoAUKoBY+t2PgjtyqgMIsQtqvU/ScyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcx MWVkYzVhMzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRw9w//ykOuQsNpkJWxRS7 3ZM9eyPOistGQiPeVHATSelpABDLh/O3jWJmqVlEg69i63J6JgSSJzVEpNUJxsAJ p+hRXMYG401uPGICUaSFrGVRmlyg6A98V/xYa1cArZJXGnZM7R51xfYKNjG1LctY mQikgT0RmDDHRECdPFJRlEMfpqtHivVpuw61AN2wSqmUyZlkxwbLzNUR3/L/SlHu ElmzqD0WJUGwciTb5pQRawbUjpSdUvcwIos1ja+dnEA8Da/z4jen4uiJ40ab+Ui0 NU1dzXAzbIUvOLDuf4k7OsuYeoo2fQS7irZXYSMee/Tr8UQAkibLF8E1yqLGCzkt -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:16 2025 by rpki-client