$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: J4hZuWzQ4dXFkqu9sMDi6WUFwekCCt55u4OkmHCtuVM= Subject key identifier: C1:B5:E7:8A:A5:84:41:06:AE:BC:C5:F4:DE:55:B5:BA:64:75:14:4E Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584B9589761E22163740EC8FAC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B606A Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Thu 23 Oct 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: Iu8XRtpaAl//AObQVujvD/08gTvsJDmcv2eeE1iwfuo=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: WpXoXlt4/xOm8i5b5b15KatLT9jHkXE5sgTNshp9vf8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:76:1e:22:16:37:40:ec:8f:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 23 12:00:00 2025 GMT Subject: CN=42341fb0-bbf5-4c7d-86b9-e1ea60644b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:78:3d:f8:71:63:1a:ef:b8:77:84:30:36:92: 70:62:53:a6:1d:f1:2b:ab:06:90:6b:ad:83:c8:86: f8:12:fd:28:84:d3:14:46:38:b3:9f:aa:43:b9:8f: f3:67:e4:ee:06:13:f5:9b:d4:c6:df:5e:ff:9a:c0: d2:36:54:ca:ee:02:dc:56:d7:f8:3d:29:bc:e1:76: f8:43:4a:42:66:b1:4d:e5:3d:86:e5:b5:64:8c:05: b6:ed:28:59:44:8a:8e:2f:ea:15:bb:59:cb:02:c0: 59:b7:20:3e:8e:60:72:8f:f0:b6:a5:35:77:35:69: 23:36:24:4c:9d:74:ac:e4:97:4c:34:2d:63:99:32: 1a:9a:2b:42:37:58:bb:2b:4b:c6:10:1f:4c:90:2e: b1:b2:7a:3f:ac:94:5c:f5:24:4c:89:a3:52:f3:b6: 88:dc:d5:95:88:a2:cd:a0:9b:06:84:d2:d7:b4:3c: 16:44:2f:90:28:ad:c3:3e:27:67:89:b6:d8:29:be: 45:0d:ef:a4:5b:67:68:01:ee:5a:75:c0:7f:3d:6e: 8b:6f:e7:ac:37:0e:fb:15:94:4f:d4:ec:b0:ed:5c: 05:88:91:b4:ee:b5:1e:25:48:bc:5b:14:c0:b6:04: 54:ab:74:bb:fb:96:0e:f0:88:60:9b:af:2e:75:11: ac:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:E7:8A:A5:84:41:06:AE:BC:C5:F4:DE:55:B5:BA:64:75:14:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ea:c2:3a:34:f3:e1:27:0d:37:98:2d:0d:2c:8c:9b:02:2e: 04:59:3d:b0:1c:40:15:65:11:31:ec:5a:fc:cb:7a:27:65:71: 75:68:a6:a2:a7:69:a7:46:c2:4b:7d:f8:71:47:84:76:bd:dc: d5:01:a0:93:61:10:c5:4e:8d:b7:73:ec:da:97:ea:ee:ae:e3: 5d:ce:b1:f3:4f:ac:be:db:6b:6a:6e:26:85:81:2c:f0:4a:3e: 06:c1:a0:22:18:72:0d:d8:0d:45:2a:df:df:53:fd:94:9b:bf: d1:60:55:98:18:61:50:be:7a:c6:9b:f0:33:07:7e:0d:6d:01: 99:53:c6:dd:08:72:09:ef:1b:8a:48:bd:a6:ce:90:35:6d:05: 16:62:f2:b9:6f:2b:fc:ac:3a:42:e2:a1:13:42:45:24:ca:70: e7:09:50:3a:20:60:b9:4b:31:3b:af:9f:24:ae:6b:41:57:f4: 8b:a9:34:28:8a:b8:56:0f:e9:be:4a:63:b0:88:87:de:11:0e: 31:88:8c:23:41:66:62:55:98:75:3f:b0:a1:2d:f7:8e:25:43: b3:19:d8:a4:de:51:0a:6e:e3:32:e3:9a:e8:35:c9:31:a7:d2: 55:74:ba:dd:14:6e:64:b4:30:68:89:c3:56:fe:dd:17:f5:cf: c8:b8:19:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXYeIhY3QOyPrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMzEyMDAwMFowLzEtMCsGA1UEAxMk NDIzNDFmYjAtYmJmNS00YzdkLTg2YjktZTFlYTYwNjQ0YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXg9+HFjGu+4d4QwNpJwYlOmHfErqwaQa62D yIb4Ev0ohNMURjizn6pDuY/zZ+TuBhP1m9TG317/msDSNlTK7gLcVtf4PSm84Xb4 Q0pCZrFN5T2G5bVkjAW27ShZRIqOL+oVu1nLAsBZtyA+jmByj/C2pTV3NWkjNiRM nXSs5JdMNC1jmTIamitCN1i7K0vGEB9MkC6xsno/rJRc9SRMiaNS87aI3NWViKLN oJsGhNLXtDwWRC+QKK3DPidnibbYKb5FDe+kW2doAe5adcB/PW6Lb+esNw77FZRP 1Oyw7VwFiJG07rUeJUi8WxTAtgRUq3S7+5YO8Ihgm68udRGs6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMG154qlhEEGrrzF9N5VtbpkdRROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW6sI6NPPhJw03mC0NLIyb Ai4EWT2wHEAVZREx7Fr8y3onZXF1aKaip2mnRsJLffhxR4R2vdzVAaCTYRDFTo23 c+zal+ruruNdzrHzT6y+22tqbiaFgSzwSj4GwaAiGHIN2A1FKt/fU/2Um7/RYFWY GGFQvnrGm/AzB34NbQGZU8bdCHIJ7xuKSL2mzpA1bQUWYvK5byv8rDpC4qETQkUk ynDnCVA6IGC5SzE7r58krmtBV/SLqTQoirhWD+m+SmOwiIfeEQ4xiIwjQWZiVZh1 P7ChLfeOJUOzGdik3lEKbuMy45roNckxp9JVdLrdFG5ktDBoicNW/t0X9c/IuBk7 -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:35 2025 by rpki-client