$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: AXRxQpUkqbSOyH6PjIabp0JhexHsngOj4awVOZXf4fs= Subject key identifier: 54:B1:41:6C:66:20:44:24:E7:09:F3:E1:E1:90:E5:85:3B:C0:A1:A0 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584B961E6587F54BE7C7AF9ED570 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D176 Signing time: Mon 20 Oct 2025 17:00:08 +0000 Manifest this update: Mon 20 Oct 2025 17:00:08 +0000 Manifest next update: Thu 23 Oct 2025 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: trIcwoS1kEuMsQVn07Xmi5wlT3pdFIQ+WI8GTBinqV4=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: xa0ElEHH4iM4OTAiHXd1SqEeS2SGiJju5LC2iHCmnac=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: WuFxtAWHKYwmTJNTZuKezaWDKouIgzgnbWhkicJi2yw=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: NiKR63g68A46kkCZ5a8H6gX37ZXVGuED9dWT2qTDAis=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:1e:65:87:f5:4b:e7:c7:af:9e:d5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Oct 20 17:00:08 2025 GMT Not After : Oct 23 17:00:00 2025 GMT Subject: CN=fc7222d2-2e3d-4bc3-bfd1-c53e274696db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:d6:a3:6c:1d:94:ea:7e:87:c5:c9:04:12: 59:86:7a:07:13:a5:53:bc:98:ca:ef:17:e4:b2:13: 28:6b:21:c5:02:b3:7e:d4:80:ea:2a:26:33:ed:5e: 4f:97:1d:1b:a3:1f:3c:66:6c:40:db:bc:a5:8f:a2: 90:82:4c:47:a6:43:23:11:99:98:12:f0:50:70:9a: 29:57:bd:ab:5e:e6:4c:81:09:c8:b8:83:17:10:fd: 21:f4:47:c1:fb:66:82:64:55:39:82:cd:1f:b0:06: 6e:67:ab:5b:50:7c:d2:d8:99:de:73:5d:3f:77:eb: 27:89:8f:60:f8:73:d3:ba:44:85:31:dc:6a:57:5c: 38:28:20:d0:5b:fb:75:80:14:b8:9c:1c:43:da:0b: ad:90:a9:f6:de:9e:1b:70:d1:d0:a0:4c:2e:a7:ed: b5:34:05:8c:d3:e2:30:ac:f6:91:5a:dc:28:69:5d: 3c:10:78:05:2b:df:02:7a:0b:95:70:04:1f:f1:c8: 31:c9:89:9c:21:f8:75:20:db:c9:b1:3a:eb:1d:e6: 76:29:00:82:b4:de:9f:67:f3:9a:e2:60:f8:03:0f: 38:fd:6b:4e:07:81:be:3d:b3:ed:b0:67:cf:cd:ed: c0:48:2b:65:50:39:10:19:bd:88:50:d5:e0:46:cd: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B1:41:6C:66:20:44:24:E7:09:F3:E1:E1:90:E5:85:3B:C0:A1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:46:00:1d:eb:51:0d:84:b8:54:24:e9:5a:07:c7:cc:be:3f: bd:8d:17:c1:5f:0f:09:31:2d:88:a6:2c:a2:ea:e1:65:eb:61: 84:a8:d3:14:d6:35:c8:ea:12:a1:72:5c:d1:1e:d2:98:45:b8: 7f:e8:7a:e6:fa:6f:26:9e:39:3c:6d:d0:76:d6:ed:8a:f3:cd: d9:d9:e1:47:5c:b5:6f:b8:ac:2a:11:b6:9c:3d:4f:78:e7:c8: 84:27:ff:52:cc:e2:17:98:b9:cc:89:9a:b1:09:7b:51:e8:41: ed:e5:c9:b8:fb:6a:aa:98:7b:8b:3c:cd:4e:09:99:35:f6:ff: 21:ca:b6:d6:24:08:32:c9:34:0a:f6:d9:d1:d2:04:14:78:31: cb:bf:d9:a1:94:f6:30:cd:9e:f0:d9:8d:04:65:e9:f5:83:2b: cc:a2:10:5d:c2:5b:84:02:7a:09:1c:69:25:3f:a7:57:04:6b: b7:b8:1a:89:dc:a2:f3:9c:f7:0a:87:9f:4e:5a:a6:bb:e7:c3: 95:4c:e8:2a:39:65:df:aa:5f:f4:cd:27:72:b7:66:71:7f:aa: fc:9c:73:5d:9b:62:c7:13:1e:25:d1:4b:aa:d5:fd:98:f8:38: 47:8d:e6:6b:20:e8:33:97:41:4f:96:88:f5:fc:08:90:37:12: c3:a0:8c:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWHmWH9Uvnx6+e1XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MTAyMDE3MDAwOFoXDTI1MTAyMzE3MDAwMFowLzEtMCsGA1UEAxMk ZmM3MjIyZDItMmUzZC00YmMzLWJmZDEtYzUzZTI3NDY5NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVfWo2wdlOp+h8XJBBJZhnoHE6VTvJjK7xfk shMoayHFArN+1IDqKiYz7V5Plx0box88ZmxA27ylj6KQgkxHpkMjEZmYEvBQcJop V72rXuZMgQnIuIMXEP0h9EfB+2aCZFU5gs0fsAZuZ6tbUHzS2Jnec10/d+sniY9g +HPTukSFMdxqV1w4KCDQW/t1gBS4nBxD2gutkKn23p4bcNHQoEwup+21NAWM0+Iw rPaRWtwoaV08EHgFK98CeguVcAQf8cgxyYmcIfh1INvJsTrrHeZ2KQCCtN6fZ/Oa 4mD4Aw84/WtOB4G+PbPtsGfPze3ASCtlUDkQGb2IUNXgRs1/NwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFSxQWxmIEQk5wnz4eGQ5YU7wKGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkRgAd61ENhLhUJOlaB8fM vj+9jRfBXw8JMS2Ipiyi6uFl62GEqNMU1jXI6hKhclzRHtKYRbh/6Hrm+m8mnjk8 bdB21u2K883Z2eFHXLVvuKwqEbacPU9458iEJ/9SzOIXmLnMiZqxCXtR6EHt5cm4 +2qqmHuLPM1OCZk19v8hyrbWJAgyyTQK9tnR0gQUeDHLv9mhlPYwzZ7w2Y0EZen1 gyvMohBdwluEAnoJHGklP6dXBGu3uBqJ3KLznPcKh59OWqa758OVTOgqOWXfql/0 zSdyt2Zxf6r8nHNdm2LHEx4l0Uuq1f2Y+DhHjeZrIOgzl0FPloj1/AiQNxLDoIxq -----END CERTIFICATE-----Generated at Tue Oct 21 02:08:01 2025 by rpki-client