$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft File: 3990f0e4-fc13-467e-a765-98d98d252d56.mft (raw, json) Hash identifier: U0+r0LimdLJ7bb9r4fUC8YP3+ZqRFetvNmoTs3wkExU= Subject key identifier: 9C:A2:CB:C9:14:85:98:51:02:9B:EF:CE:FA:46:41:4C:CA:E5:07:A4 Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584B937181E53D837E499F5CC500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft Manifest number: 010D0C9F43285849ADAE6A28B57A43A6EC954F53 Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 3990f0e4-fc13-467e-a765-98d98d252d56.crl (hash: tLTt/97LgjJlCzBCmHb2ePjxvXpG29mnZH8o/llsGKM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:81:e5:3d:83:7e:49:9f:5c:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=9e38d954-b847-46a6-bc50-818809fe307e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:19:95:0b:35:7e:d5:1c:6c:fa:97:81:72: 57:13:bf:df:b6:5e:70:bd:82:18:d3:00:95:44:a5: e9:58:be:13:4f:b1:79:af:cf:15:88:84:06:14:f6: c5:3a:b2:b5:fc:b7:be:79:80:57:54:55:44:5e:a5: 93:d8:a6:c3:e6:32:ec:0a:78:24:1b:6e:9c:e2:58: a5:f8:5a:d8:93:ea:93:d7:d3:91:e6:f8:44:0e:b2: 58:bd:a2:a1:87:53:5e:be:8d:09:65:82:cd:6a:91: 96:e9:83:96:bf:80:d1:d9:09:37:2f:d8:a5:24:1d: 66:9e:72:06:2e:6b:71:b4:86:03:64:57:96:25:09: 9e:a1:c2:a7:52:e4:e0:1f:10:31:dc:10:cc:9d:85: 29:1e:2a:34:9e:f6:22:06:68:f3:90:b6:10:fe:54: 52:e3:41:9c:db:9f:3d:89:22:4c:2b:9c:aa:ed:82: 5f:09:a0:e9:14:00:32:d9:9f:dd:2d:0c:49:fd:33: 23:3b:b2:c7:b4:12:1e:13:75:5a:32:ca:43:ab:a0: b5:37:6d:e7:1b:86:a2:76:6b:73:cc:3e:5e:59:3b: a8:22:15:a6:0a:02:fc:af:cd:81:ea:82:23:02:ce: aa:19:5b:0c:51:d2:c4:19:e3:07:98:6c:9f:41:90: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:CB:C9:14:85:98:51:02:9B:EF:CE:FA:46:41:4C:CA:E5:07:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e9:94:3b:21:c2:d1:16:f7:67:58:33:2c:e1:cd:fc:d1:19: 65:55:23:f0:24:a4:95:16:ea:95:58:36:9e:7a:04:67:97:ac: af:47:ca:c6:76:52:12:64:84:01:14:a1:6f:39:c7:b3:b3:66: c9:d5:cc:82:f6:d5:c9:aa:a1:a9:69:ca:f4:44:01:b0:e6:57: 35:02:ef:a5:be:ee:94:6d:38:86:16:96:95:ce:86:12:46:93: a9:28:56:69:08:48:6b:b5:19:1a:92:27:78:ac:73:b5:fd:05: c0:56:b8:d1:74:c3:aa:55:54:df:a9:c6:7b:a3:23:71:e3:68: 5b:ba:75:35:13:d2:28:47:31:89:67:3b:29:d6:fa:2e:21:0f: 71:0c:0d:fe:98:d5:92:95:96:24:c9:2d:7d:79:04:5b:4f:8b: 41:10:c8:93:30:e8:f1:e5:0f:a2:6c:8f:c6:e9:61:de:f0:f2: 5a:08:3f:38:04:3b:55:1d:65:17:a8:86:ee:f7:21:fa:cf:c4: 95:78:79:d3:8b:ad:2b:b3:13:c5:9a:a4:52:e8:50:7f:7b:89: ec:04:a2:d2:c8:ad:7c:b0:6d:85:2f:ab:74:48:13:90:fe:e2: 6a:31:d5:ed:d1:74:6c:99:b6:a7:db:e9:6f:b3:47:63:f8:43: ab:bf:7d:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcYHlPYN+SZ9cxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk OWUzOGQ5NTQtYjg0Ny00NmE2LWJjNTAtODE4ODA5ZmUzMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkUZlQs1ftUcbPqXgXJXE7/ftl5wvYIY0wCV RKXpWL4TT7F5r88ViIQGFPbFOrK1/Le+eYBXVFVEXqWT2KbD5jLsCngkG26c4lil +FrYk+qT19OR5vhEDrJYvaKhh1Nevo0JZYLNapGW6YOWv4DR2Qk3L9ilJB1mnnIG LmtxtIYDZFeWJQmeocKnUuTgHxAx3BDMnYUpHio0nvYiBmjzkLYQ/lRS40Gc2589 iSJMK5yq7YJfCaDpFAAy2Z/dLQxJ/TMjO7LHtBIeE3VaMspDq6C1N23nG4aidmtz zD5eWTuoIhWmCgL8r82B6oIjAs6qGVsMUdLEGeMHmGyfQZDWVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJyiy8kUhZhRApvvzvpGQUzK5QekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMzk5MGYwZTQtZmMxMy00 NjdlLWE3NjUtOThkOThkMjUyZDU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAc6ZQ7IcLRFvdnWDMs4c38 0RllVSPwJKSVFuqVWDaeegRnl6yvR8rGdlISZIQBFKFvOcezs2bJ1cyC9tXJqqGp acr0RAGw5lc1Au+lvu6UbTiGFpaVzoYSRpOpKFZpCEhrtRkakid4rHO1/QXAVrjR dMOqVVTfqcZ7oyNx42hbunU1E9IoRzGJZzsp1vouIQ9xDA3+mNWSlZYkyS19eQRb T4tBEMiTMOjx5Q+ibI/G6WHe8PJaCD84BDtVHWUXqIbu9yH6z8SVeHnTi60rsxPF mqRS6FB/e4nsBKLSyK18sG2FL6t0SBOQ/uJqMdXt0XRsmban2+lvs0dj+EOrv324 -----END CERTIFICATE-----Generated at Mon Oct 20 04:14:56 2025 by rpki-client