$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft File: 3194b2e8-7001-4efa-9998-f4eded0d24d2.mft (raw, json) Hash identifier: dAm8P1JVnpvcrujnFB0CDqOv0NbD9haxQiYfqU9nBU0= Subject key identifier: A4:6B:F9:05:ED:62:76:95:7A:92:8C:02:B2:8B:99:40:9B:4E:93:F7 Authority key identifier: DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC Certificate issuer: /CN=3194b2e8-7001-4efa-9998-f4eded0d24d2 Certificate serial: 010D0C9F4328584B93E88DF348E4ABDC57CFD880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft Manifest number: 010D0C9F4328584813D3E16BEC4A00B0B54FD12B Signing time: Sun 19 Oct 2025 22:00:03 +0000 Manifest this update: Sun 19 Oct 2025 22:00:03 +0000 Manifest next update: Tue 21 Oct 2025 22:00:00 +0000 Files and hashes: 1: 3194b2e8-7001-4efa-9998-f4eded0d24d2.crl (hash: Q659qLTeTyw588qKoVV0S62GqwwbevYTzB+uMIAEhJM=) 2: 77e2bbd9-ddc3-3bb5-9db5-ea6fe5a710d5.roa (hash: IqGEj3+Xc0Fann2YVcqZAZxi9aqzzek/+Cdtg8aMMvI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:e8:8d:f3:48:e4:ab:dc:57:cf:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194b2e8-7001-4efa-9998-f4eded0d24d2 Validity Not Before: Oct 19 22:00:03 2025 GMT Not After : Oct 21 22:00:00 2025 GMT Subject: CN=5eda0a72-1dad-4c1f-ac5b-506218ee0a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:e1:d3:bb:c5:fc:3e:c3:ff:0c:cc:80:ab: f7:ef:0f:89:b1:30:98:55:7a:c7:8d:df:21:43:9e: 2d:15:6a:90:f4:70:7c:38:ba:a4:e5:d6:87:98:64: f2:df:c6:b8:24:7d:03:ed:a6:d3:06:98:47:3b:d4: b1:2d:2f:c9:28:ef:44:da:e2:d2:4a:5e:8b:cb:c2: 6f:21:ba:5b:ab:f0:e2:f1:20:d6:a1:32:8f:48:0f: b4:e9:d8:1f:5b:00:c8:11:c6:57:b5:b2:07:4b:80: 49:ea:53:1c:1e:35:8d:c3:8a:7c:3f:80:36:ad:8e: dc:bd:41:bc:53:2a:a7:b7:04:1d:37:15:d4:e8:ed: 0c:05:39:29:6b:68:d2:d1:4e:dd:9a:76:1a:cd:04: bc:11:30:f1:6d:b2:a5:f7:a7:f0:a3:7d:e3:ec:ed: 88:9f:17:30:d1:9a:76:d5:ce:4e:d4:80:c4:d8:4b: a1:18:f4:56:c1:a0:f0:69:d2:44:78:21:1f:b1:11: 95:77:2a:c1:37:5e:34:ae:59:05:4b:6d:8f:ec:b1: 2d:7a:8d:d3:61:48:a4:43:1d:8e:48:1d:bc:03:54: 6a:b0:cb:c4:9c:dc:3c:33:e5:3d:58:92:c0:05:e7: 8f:d5:98:7b:f5:ab:5e:35:19:9a:30:64:44:17:aa: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6B:F9:05:ED:62:76:95:7A:92:8C:02:B2:8B:99:40:9B:4E:93:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.crl X509v3 Authority Key Identifier: keyid:DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2d:33:30:be:c3:a7:ba:b8:ea:94:7f:b5:bf:cb:f1:e6:4f: 91:01:93:2e:f3:34:0e:7e:6f:91:15:e8:10:d6:3e:2c:e9:f3: 82:f8:6d:3c:05:c6:2c:b9:dc:0a:8c:84:3b:ec:22:0e:0c:9d: 85:0c:c5:3c:e0:be:c6:53:28:95:49:e2:55:c5:d3:a6:bb:ad: 44:07:86:89:49:f5:2e:5f:b7:d9:1c:38:cf:34:0c:a3:42:70: 9b:2e:e7:f5:17:f3:17:ff:84:44:5d:c4:43:e8:32:dd:c2:5c: 12:ef:ad:5b:c7:0e:9c:6a:c5:0e:2f:16:f8:3a:17:1f:31:7d: b0:09:cb:1c:3a:9d:ad:e4:72:5c:cd:bd:f5:28:2d:f8:09:db: f8:dc:ca:9a:98:49:a5:5b:85:97:d8:15:0d:58:54:73:44:c5: 0f:30:a0:72:58:24:a3:ea:32:b1:94:34:4b:2e:f5:61:0c:ff: ed:a1:87:78:b1:65:59:2f:80:56:b7:cb:18:ef:79:08:b1:42: 34:fa:74:eb:e6:fd:2f:03:90:1c:89:a8:72:a4:a0:de:dc:2b: ef:6d:9e:aa:3e:59:76:6e:fa:de:99:0b:2c:cc:72:84:8d:33: d0:f5:0e:55:9e:f0:36:82:fc:02:72:94:3d:50:59:43:3b:06: ac:cb:52:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuT6I3zSOSr3FfP2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE5NGIyZTgtNzAwMS00ZWZhLTk5OTgtZjRlZGVkMGQy NGQyMB4XDTI1MTAxOTIyMDAwM1oXDTI1MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk NWVkYTBhNzItMWRhZC00YzFmLWFjNWItNTA2MjE4ZWUwYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gPh07vF/D7D/wzMgKv37w+JsTCYVXrHjd8h Q54tFWqQ9HB8OLqk5daHmGTy38a4JH0D7abTBphHO9SxLS/JKO9E2uLSSl6Ly8Jv Ibpbq/Di8SDWoTKPSA+06dgfWwDIEcZXtbIHS4BJ6lMcHjWNw4p8P4A2rY7cvUG8 UyqntwQdNxXU6O0MBTkpa2jS0U7dmnYazQS8ETDxbbKl96fwo33j7O2Inxcw0Zp2 1c5O1IDE2EuhGPRWwaDwadJEeCEfsRGVdyrBN140rlkFS22P7LEteo3TYUikQx2O SB28A1RqsMvEnNw8M+U9WJLABeeP1Zh79ateNRmaMGREF6rIZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKRr+QXtYnaVepKMArKLmUCbTpP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMTk0 YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVkZWQwZDI0ZDIvMzE5NGIyZTgtNzAwMS00 ZWZhLTk5OTgtZjRlZGVkMGQyNGQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzE5NGIyZTgtNzAwMS00ZWZhLTk5 OTgtZjRlZGVkMGQyNGQyLzMxOTRiMmU4LTcwMDEtNGVmYS05OTk4LWY0ZWRlZDBk MjRkMi5jcmwwHwYDVR0jBBgwFoAU2t4txV5tDxkyAiq4DmjR++xviewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMTk0YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVk ZWQwZDI0ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBELTMwvsOnurjqlH+1v8vx 5k+RAZMu8zQOfm+RFegQ1j4s6fOC+G08BcYsudwKjIQ77CIODJ2FDMU84L7GUyiV SeJVxdOmu61EB4aJSfUuX7fZHDjPNAyjQnCbLuf1F/MX/4REXcRD6DLdwlwS761b xw6casUOLxb4OhcfMX2wCcscOp2t5HJczb31KC34Cdv43MqamEmlW4WX2BUNWFRz RMUPMKByWCSj6jKxlDRLLvVhDP/toYd4sWVZL4BWt8sY73kIsUI0+nTr5v0vA5Ac iahypKDe3CvvbZ6qPll2bvremQsszHKEjTPQ9Q5VnvA2gvwCcpQ9UFlDOwasy1L2 -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:57 2025 by rpki-client