$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft File: a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft (raw, json) Hash identifier: HOL0PpbIH2/RpCbNwisxjU7QvmCyMNzDyoSh1rVDvSc= Subject key identifier: A1:11:0C:99:C6:41:08:CA:DE:69:F6:CB:77:E5:BD:49:39:DB:5B:C9 Authority key identifier: 7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC Certificate issuer: /CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Certificate serial: 010D0C9F4328584B9600927688E569281E2E2800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft Manifest number: 010D0C9F43285849F351DAA6700A92C3DA483399 Signing time: Mon 20 Oct 2025 16:00:03 +0000 Manifest this update: Mon 20 Oct 2025 16:00:03 +0000 Manifest next update: Thu 23 Oct 2025 16:00:00 +0000 Files and hashes: 1: a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl (hash: ZivLKAq82atPQhB9C7gpepPryrNYuEIK/Jw+0/I+BtI=) 2: e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa (hash: CKBNAJ7EnTyhwMMGuFHST88fNdu/HqdoMWQayrD/DCU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:00:92:76:88:e5:69:28:1e:2e:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Validity Not Before: Oct 20 16:00:03 2025 GMT Not After : Oct 23 16:00:00 2025 GMT Subject: CN=70571723-9223-46de-a969-a0f5aab2e0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:ea:34:8a:33:a5:d7:02:fd:4e:8a:2e:b7: 15:84:62:66:16:87:e1:00:f3:e4:69:72:6e:d4:7c: 5d:aa:01:13:ea:f5:61:9b:b5:79:a3:2a:74:57:c8: 73:d5:38:1e:85:96:3d:a4:42:ab:80:29:15:6b:6a: d4:3d:56:ca:14:09:6b:0a:95:02:46:02:78:a0:85: 53:8a:40:d1:e4:b6:d5:e5:59:6e:64:d2:4a:48:9b: bc:09:38:e4:7d:33:65:0a:fe:cb:40:04:d8:4b:a1: ce:d6:8c:d5:3b:ca:64:ef:fd:cc:20:4c:52:5a:20: 5c:81:7b:55:04:fe:34:bc:96:d7:97:90:50:b4:fe: 0e:5c:e9:73:ac:da:34:d1:b2:ce:f6:62:1e:55:b7: 4f:18:3a:c1:27:50:e6:2d:87:cc:28:2e:b7:1f:64: 68:97:7c:8c:6f:66:27:82:ca:5b:19:66:be:da:5e: 16:36:bf:ae:16:42:f4:63:8f:d1:d9:12:51:80:49: d6:62:5f:1a:17:ad:98:12:5f:de:c3:fb:18:15:7e: 14:10:8f:a5:45:92:55:93:89:80:6d:86:6b:ee:36: d5:3d:2b:48:db:3e:4b:d6:5d:7e:7d:47:7d:b2:64: de:d3:10:34:a0:0d:24:cd:f2:32:07:85:ab:63:3c: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:11:0C:99:C6:41:08:CA:DE:69:F6:CB:77:E5:BD:49:39:DB:5B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl X509v3 Authority Key Identifier: keyid:7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ec:77:79:d2:9f:0a:ad:73:16:be:be:4a:9e:c5:2c:ec:ae: b4:ea:4f:c6:55:e4:6f:60:33:e3:7e:0a:93:f5:f5:40:50:90: 60:14:e1:61:d4:9d:53:96:e4:4e:0d:a8:a8:77:d7:14:d6:97: 71:fd:69:85:e7:84:5f:1c:94:ac:b9:c9:30:bb:7f:ef:ea:cd: 41:14:05:58:d7:d3:c1:72:a8:68:b5:f4:a9:b8:38:46:23:f0: 2e:d5:26:d5:ef:8e:3a:f4:a8:e6:38:58:6d:57:ce:86:9f:0c: e5:c6:ac:af:1a:3c:29:47:9b:1d:bc:12:ba:24:b3:6c:8a:75: ac:0c:ec:7b:35:27:ca:fa:2f:d8:84:40:c1:48:df:7e:1e:ec: ba:a5:ba:e8:d6:31:2e:44:23:9c:f4:b8:dd:3e:75:b6:1d:b6: 94:e0:74:1d:14:e9:ec:5a:3a:87:b2:68:b7:d2:95:a5:1c:c7: 2f:5e:f0:bc:ed:93:bd:6b:8b:41:7f:48:af:64:80:18:bf:3c: 63:da:7d:cf:96:84:77:b7:0b:12:50:74:f1:d9:2a:f2:7f:0d: 98:ed:91:7a:a6:e0:e4:36:51:fb:1b:80:89:be:fe:be:d2:7f: ca:0d:b5:d6:d8:b4:08:af:7b:e5:ed:24:ab:55:df:5d:c0:28: 64:63:ca:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWAJJ2iOVpKB4uKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmNjdiMTItNDU4Zi00MjU3LWJkYjEtZGU4NGIxYjhk NDBkMB4XDTI1MTAyMDE2MDAwM1oXDTI1MTAyMzE2MDAwMFowLzEtMCsGA1UEAxMk NzA1NzE3MjMtOTIyMy00NmRlLWE5NjktYTBmNWFhYjJlMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRnqNIozpdcC/U6KLrcVhGJmFofhAPPkaXJu 1HxdqgET6vVhm7V5oyp0V8hz1TgehZY9pEKrgCkVa2rUPVbKFAlrCpUCRgJ4oIVT ikDR5LbV5VluZNJKSJu8CTjkfTNlCv7LQATYS6HO1ozVO8pk7/3MIExSWiBcgXtV BP40vJbXl5BQtP4OXOlzrNo00bLO9mIeVbdPGDrBJ1DmLYfMKC63H2Rol3yMb2Yn gspbGWa+2l4WNr+uFkL0Y4/R2RJRgEnWYl8aF62YEl/ew/sYFX4UEI+lRZJVk4mA bYZr7jbVPStI2z5L1l1+fUd9smTe0xA0oA0kzfIyB4WrYzwMzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKERDJnGQQjK3mn2y3flvUk521vJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2 N2IxMi00NThmLTQyNTctYmRiMS1kZTg0YjFiOGQ0MGQvYTNmNjdiMTItNDU4Zi00 MjU3LWJkYjEtZGU4NGIxYjhkNDBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNmNjdiMTItNDU4Zi00MjU3LWJk YjEtZGU4NGIxYjhkNDBkL2EzZjY3YjEyLTQ1OGYtNDI1Ny1iZGIxLWRlODRiMWI4 ZDQwZC5jcmwwHwYDVR0jBBgwFoAUeusTNaT6sOe2Pmwwzb5EUU2NCOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2N2IxMi00NThmLTQyNTctYmRiMS1kZTg0 YjFiOGQ0MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBW7Hd50p8KrXMWvr5KnsUs 7K606k/GVeRvYDPjfgqT9fVAUJBgFOFh1J1TluRODaiod9cU1pdx/WmF54RfHJSs uckwu3/v6s1BFAVY19PBcqhotfSpuDhGI/Au1SbV74469KjmOFhtV86Gnwzlxqyv GjwpR5sdvBK6JLNsinWsDOx7NSfK+i/YhEDBSN9+Huy6pbro1jEuRCOc9LjdPnW2 HbaU4HQdFOnsWjqHsmi30pWlHMcvXvC87ZO9a4tBf0ivZIAYvzxj2n3PloR3twsS UHTx2Sryfw2Y7ZF6puDkNlH7G4CJvv6+0n/KDbXW2LQIr3vl7SSrVd9dwChkY8oJ -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:09 2025 by rpki-client