$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: LIJg8NU9OIN3CmRMLXwWVswq53AfA+ewn38aTu0vvaU= Subject key identifier: 80:88:25:EF:4F:C3:99:3F:1B:90:C3:3B:6F:08:93:93:1E:45:AF:A0 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584B938F3BAB46202587DAFE25E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A7F6 Signing time: Sun 19 Oct 2025 19:00:03 +0000 Manifest this update: Sun 19 Oct 2025 19:00:03 +0000 Manifest next update: Tue 21 Oct 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: Uc6onv0EF7Ri9hCCp79MsCvEZN+RrY+J+Lv84blAv4Y=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: jO3HOkl7zNOL3rS+GsGzdYfLDsAWXj3NHAVPELveceU=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: sSncewOK4aaysbPuOQqZReOsPxeMNSr63PtbmP75HKk=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: X7x66fM9XsgcVUK8YIc80dzR1Puitz6owWbsNgUr8hM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:8f:3b:ab:46:20:25:87:da:fe:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Oct 19 19:00:03 2025 GMT Not After : Oct 21 19:00:00 2025 GMT Subject: CN=c712b78f-9076-493e-95d3-fa5a3b491bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:f3:0d:0d:70:16:54:51:13:bc:de:02:f5: 32:41:33:fd:e6:1d:1d:7b:08:e7:8c:c2:ae:8d:2c: ee:1c:da:b0:97:86:b4:dd:72:2c:8a:eb:76:03:00: f0:0c:f8:5a:02:91:45:52:4a:2d:42:61:46:88:b9: 08:12:7d:fc:cf:af:74:8f:f2:48:ec:88:89:fc:48: 30:f1:0c:6b:5a:cc:f1:ce:f2:eb:7d:e9:19:46:11: 10:49:dc:dd:1c:71:be:fd:aa:08:d6:bc:b1:ee:bc: c3:12:fe:ea:ca:1f:a6:8f:ca:60:2f:4d:cd:4a:5c: 11:a8:0a:51:d6:72:27:3b:3b:85:bf:3e:62:b9:85: 06:51:9d:95:19:be:7d:34:cd:61:57:62:33:8a:0c: bf:08:8c:59:bc:06:53:8b:c3:67:48:f2:6d:aa:bc: 39:ea:cf:d1:be:e3:24:9c:0b:2c:fc:39:33:da:bf: e7:5a:3c:1c:0f:ef:82:10:66:c6:47:f1:d1:3f:81: 7b:3a:e3:6a:78:24:32:64:e1:7d:6d:59:25:81:71: 7d:ff:9b:9a:87:7c:b9:a6:e1:84:57:c9:c0:fe:e2: 9f:68:ba:2c:77:f5:7a:ae:9f:66:f3:cb:e6:c1:3e: a0:4e:a0:67:49:58:5e:50:10:f8:58:de:6b:d3:75: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:88:25:EF:4F:C3:99:3F:1B:90:C3:3B:6F:08:93:93:1E:45:AF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8c:02:2d:0b:6d:d1:62:13:6e:9e:65:a2:b2:0f:e8:7c:2f: be:6b:07:ce:c2:e9:d3:83:98:0c:49:70:d5:b5:02:45:c8:3d: 8d:18:67:41:e0:d2:01:90:63:6b:6c:c8:41:0f:73:ab:80:6d: d9:81:85:05:88:8e:d8:db:75:2f:95:58:9e:99:ca:8e:fd:ae: b4:c3:de:45:ab:f4:81:8d:eb:30:45:cf:b8:d8:f6:f9:c4:46: 60:6e:4a:ce:28:44:28:25:76:20:f1:7f:f4:f7:44:1d:19:46: 25:c5:ed:98:37:82:37:de:f7:e8:50:41:43:57:49:5b:ec:65: dd:c6:23:d0:d7:c2:e4:1a:4f:26:bd:49:5a:66:a9:7b:6a:a6: c0:17:a2:85:09:ee:e7:b4:26:03:49:30:3d:56:75:b3:a3:ee: c6:66:a5:18:a1:b7:38:7e:ff:e0:37:56:7e:bf:5c:04:59:86: 1b:29:f6:d2:64:62:fd:a2:07:d1:6c:8d:89:70:2c:91:79:bb: 4e:4c:57:4e:a8:aa:51:e6:f0:da:d9:a4:62:18:7f:83:bd:c1: 7b:29:ba:6c:33:9e:38:23:92:42:86:1c:1e:b9:16:20:91:6b: a6:bc:a8:f1:bb:72:04:9f:40:a7:94:f5:8a:9f:d2:b7:b5:18: ee:93:fa:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTjzurRiAlh9r+JeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MTAxOTE5MDAwM1oXDTI1MTAyMTE5MDAwMFowLzEtMCsGA1UEAxMk YzcxMmI3OGYtOTA3Ni00OTNlLTk1ZDMtZmE1YTNiNDkxYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWjzDQ1wFlRRE7zeAvUyQTP95h0dewjnjMKu jSzuHNqwl4a03XIsiut2AwDwDPhaApFFUkotQmFGiLkIEn38z690j/JI7IiJ/Egw 8QxrWszxzvLrfekZRhEQSdzdHHG+/aoI1ryx7rzDEv7qyh+mj8pgL03NSlwRqApR 1nInOzuFvz5iuYUGUZ2VGb59NM1hV2Izigy/CIxZvAZTi8NnSPJtqrw56s/RvuMk nAss/Dkz2r/nWjwcD++CEGbGR/HRP4F7OuNqeCQyZOF9bVklgXF9/5uah3y5puGE V8nA/uKfaLosd/V6rp9m88vmwT6gTqBnSVheUBD4WN5r03UkywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFICIJe9Pw5k/G5DDO28Ik5MeRa+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnjAItC23RYhNunmWisg/o fC++awfOwunTg5gMSXDVtQJFyD2NGGdB4NIBkGNrbMhBD3OrgG3ZgYUFiI7Y23Uv lViemcqO/a60w95Fq/SBjeswRc+42Pb5xEZgbkrOKEQoJXYg8X/090QdGUYlxe2Y N4I33vfoUEFDV0lb7GXdxiPQ18LkGk8mvUlaZql7aqbAF6KFCe7ntCYDSTA9VnWz o+7GZqUYobc4fv/gN1Z+v1wEWYYbKfbSZGL9ogfRbI2JcCyRebtOTFdOqKpR5vDa 2aRiGH+DvcF7KbpsM544I5JChhweuRYgkWumvKjxu3IEn0CnlPWKn9K3tRjuk/p8 -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:40 2025 by rpki-client