$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: v5roZL7gzfGtbXMTGImfdkzDKrmrd6WPaj2NJTsKw7w= Subject key identifier: C5:4A:E2:DD:A7:78:64:E4:0C:C1:E0:14:50:EA:A0:B2:D1:D9:E6:8C Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584B93AD01AD936EBA229F70C86C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D0A7 Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: FVyTcphNEi2EPidlAs51kMNBZBjTH0DabL2CENLTWoc=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: +25x7Wf91GORMz1KOvA6IQ0y02BwbJm17NvQRaNjcko=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: OqiRvlgyyHRV7ZYDCerujlty+RXIDPDZ7A2aXQDAtKA=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: cyL/hSbUh3JcKiWUxrsL1/YeikRYGrkoCPQAKGSsljY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ad:01:ad:93:6e:ba:22:9f:70:c8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=5a6d2ecf-631c-4544-8ed4-a34413bbeba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:86:70:e9:67:94:d8:a1:dd:26:8a:79:14: 97:f2:2a:ca:87:b7:4b:8b:8c:3d:da:82:9a:69:e9: a1:21:9c:d3:3c:32:9a:e1:6b:f9:d2:4b:f0:1f:f1: 30:00:48:aa:59:68:6b:f8:64:59:dc:50:43:e4:d3: c3:9e:6c:b5:6b:4d:83:89:88:f3:3f:ac:eb:9a:4f: 1b:9d:25:e0:67:77:1d:0d:54:3a:33:db:31:83:49: 32:34:1b:9e:dc:4d:b8:ae:83:66:70:fe:4a:a5:59: f7:05:e8:cf:41:7d:04:ff:fe:60:cd:41:6a:83:b2: ad:e2:ba:d1:ad:e8:be:3b:4b:1f:88:d1:cb:3e:2a: b3:76:28:d4:17:2c:cd:75:dd:81:2c:51:70:76:e4: 6c:40:c6:c2:82:d9:f0:2c:06:b5:fb:5e:eb:23:79: 13:22:42:93:06:c9:18:98:9c:7d:da:fc:7d:ab:73: 75:a9:a3:a0:23:2f:41:a3:1f:e7:c6:b5:6f:d0:35: fa:58:91:7b:a1:ef:43:63:ce:bf:65:99:4a:34:f1: 5f:5a:fb:9e:47:9f:f8:d6:a0:b1:c6:39:43:4b:80: d7:50:8d:6f:67:41:21:96:8b:ce:41:9f:f0:ff:12: d2:00:b0:61:86:8c:5a:96:29:4b:c0:5d:85:15:eb: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4A:E2:DD:A7:78:64:E4:0C:C1:E0:14:50:EA:A0:B2:D1:D9:E6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c2:ec:d5:d7:48:33:6e:0e:8c:6e:45:5c:9f:30:1e:28:bb: b8:d6:76:03:af:15:a7:87:bb:0c:43:9e:5e:77:02:b1:03:db: aa:34:24:7b:80:cf:76:3d:12:f8:84:83:4a:b4:d4:ce:7c:8c: 37:ee:88:87:a6:ca:89:68:bd:51:9c:19:5d:9c:8b:3f:2a:49: e6:77:9f:50:30:ae:47:9d:96:67:35:da:31:ad:33:96:67:14: f4:1a:d9:d3:36:fb:c1:64:e7:13:75:0e:b4:bd:c9:47:27:64: 89:32:fa:34:23:de:5d:2c:d5:5e:c8:ee:5a:aa:dc:b7:32:d7: 3c:fd:26:04:49:2d:0b:49:8f:e1:91:1a:ec:21:9f:60:1a:6d: 91:ed:47:51:a0:98:1b:e4:29:9e:d0:d4:c7:a2:da:ea:b6:ca: 9a:d8:2a:fb:4f:66:f9:fc:aa:95:32:f7:8f:52:fe:1f:35:4d: 43:49:72:6c:25:b5:6c:80:4a:69:7d:eb:73:0a:04:65:3d:42: c7:0b:31:aa:c9:a1:94:84:ff:5d:6b:13:b7:05:be:3a:2b:1f: 7c:e1:1b:03:4a:fb:7a:07:31:74:09:16:35:d7:81:a8:28:9d: 3b:da:d3:6d:a0:f9:82:ae:d1:90:b5:b6:ef:c6:12:62:60:99: 88:47:fd:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrQGtk266Ip9wyGwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk NWE2ZDJlY2YtNjMxYy00NTQ0LThlZDQtYTM0NDEzYmJlYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVCGcOlnlNih3SaKeRSX8irKh7dLi4w92oKa aemhIZzTPDKa4Wv50kvwH/EwAEiqWWhr+GRZ3FBD5NPDnmy1a02DiYjzP6zrmk8b nSXgZ3cdDVQ6M9sxg0kyNBue3E24roNmcP5KpVn3BejPQX0E//5gzUFqg7Kt4rrR rei+O0sfiNHLPiqzdijUFyzNdd2BLFFwduRsQMbCgtnwLAa1+17rI3kTIkKTBskY mJx92vx9q3N1qaOgIy9Box/nxrVv0DX6WJF7oe9DY86/ZZlKNPFfWvueR5/41qCx xjlDS4DXUI1vZ0EhlovOQZ/w/xLSALBhhoxalilLwF2FFeuwTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMVK4t2neGTkDMHgFFDqoLLR2eaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPwuzV10gzbg6MbkVcnzAe KLu41nYDrxWnh7sMQ55edwKxA9uqNCR7gM92PRL4hINKtNTOfIw37oiHpsqJaL1R nBldnIs/Kknmd59QMK5HnZZnNdoxrTOWZxT0GtnTNvvBZOcTdQ60vclHJ2SJMvo0 I95dLNVeyO5aqty3Mtc8/SYESS0LSY/hkRrsIZ9gGm2R7UdRoJgb5Cme0NTHotrq tsqa2Cr7T2b5/KqVMvePUv4fNU1DSXJsJbVsgEppfetzCgRlPULHCzGqyaGUhP9d axO3Bb46Kx984RsDSvt6BzF0CRY114GoKJ072tNtoPmCrtGQtbbvxhJiYJmIR/2k -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:56 2025 by rpki-client