$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft (raw, json) Hash identifier: DshlR8OvfwRBOOnbokUE+IMB1omt6QYuuZdv4SngTdg= Subject key identifier: 52:C0:E6:C9:15:B1:C5:41:E3:C2:17:7A:83:78:D7:A4:D3:E3:C7:60 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584B93717BDC38C8478FFD008C8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft Manifest number: 010D0C9F432858493B4550F98B85D16859A8BF1C Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl (hash: 4DTnwA0QHN9uKY1jgPmxM/DWchbzoKTrf/KnpzmOM/s=) 2: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (hash: hFfPoYhCJXqDPp6e7NItDcOmMQ+GZn7lcTUddxbvvJk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7b:dc:38:c8:47:8f:fd:00:8c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=5ae0a7d1-4d47-4aca-84f4-24bf4a19b0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:8a:64:50:d8:fc:e1:d6:3a:04:a5:e1:d4: 95:17:71:14:00:42:e7:2d:ab:02:33:a4:75:57:a9: 32:34:69:3a:28:46:40:3e:7b:dc:9b:66:4c:c2:d5: 3a:34:7f:0d:a6:31:f8:8d:d8:48:7f:09:84:a9:75: 44:03:eb:6f:f9:a3:d9:24:06:ef:d5:68:f0:24:4f: 7e:14:b6:19:fb:44:11:4b:d1:86:6e:02:56:27:c7: 8d:30:e5:bc:d1:c0:93:35:52:aa:e0:e6:7c:26:30: 2f:7f:9f:a6:d4:d0:b2:4a:fb:aa:c6:cd:e8:47:d9: a1:00:d9:fc:5e:46:91:78:87:d3:a7:4a:2d:a9:b4: a7:ba:50:a5:03:35:c5:af:e8:fc:0d:0f:c1:b9:fe: df:b3:42:74:c6:92:fa:57:6d:01:13:01:55:70:0d: c6:03:50:6f:cf:a8:d6:bd:f2:7a:e6:93:5f:9a:8b: 04:88:b2:49:36:fd:1b:78:62:c5:6a:7c:bd:1d:ea: 86:dd:ef:af:80:4d:d8:87:62:fb:be:7a:76:f8:0a: 0c:93:d6:54:c6:e3:8a:4d:97:23:d2:f2:e7:da:cb: 4b:d6:9d:a6:ad:14:d9:7b:32:d5:7e:a6:59:84:ef: 1a:48:fc:ba:7b:0b:32:fd:0d:ae:d9:51:42:d1:80: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C0:E6:C9:15:B1:C5:41:E3:C2:17:7A:83:78:D7:A4:D3:E3:C7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4b:f1:63:ed:69:65:fc:b5:69:75:7b:c4:a1:2c:37:d0:2a: 3b:7d:d7:4d:c0:d8:1b:4f:fc:53:79:07:4f:65:84:69:e4:65: 67:7f:df:4b:18:b1:7e:50:17:03:5b:b0:97:d2:2d:af:c7:4a: 82:ff:b6:ef:f1:a5:63:fd:68:8c:f4:fe:f8:5a:3f:39:db:85: 30:f6:40:b8:ef:41:fb:12:97:c5:86:7b:b8:77:6d:6a:b7:d3: a6:d3:82:0f:24:b0:f3:5d:3f:55:83:10:49:40:1c:cf:a2:b8: 6a:03:66:7e:9c:3e:0c:3d:10:ec:98:01:cf:25:ec:8e:ec:2a: 3c:c3:c7:ef:a8:29:a1:69:c3:a6:3b:84:77:f6:87:0e:c5:ef: cc:0f:ed:58:3f:18:14:eb:7c:7a:32:89:ce:ba:d3:38:7d:7d: ab:fb:e4:68:71:03:1b:12:66:32:42:92:a6:51:2b:bf:ce:2d: 90:ef:a5:bb:66:4c:66:41:dd:93:a5:c6:9f:d4:6b:df:8d:30: fd:9e:e3:e3:0d:5e:05:7a:ad:47:1a:e5:66:6c:b9:2c:21:f1: 3b:d0:68:c1:3f:25:da:e6:b3:b6:ac:6e:16:21:76:dc:97:3d: 0f:45:5c:d0:85:de:7c:93:30:32:bc:63:80:a7:57:af:6c:08: ee:45:9b:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcXvcOMhHj/0AjIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk NWFlMGE3ZDEtNGQ0Ny00YWNhLTg0ZjQtMjRiZjRhMTliMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhWKZFDY/OHWOgSl4dSVF3EUAELnLasCM6R1 V6kyNGk6KEZAPnvcm2ZMwtU6NH8NpjH4jdhIfwmEqXVEA+tv+aPZJAbv1WjwJE9+ FLYZ+0QRS9GGbgJWJ8eNMOW80cCTNVKq4OZ8JjAvf5+m1NCySvuqxs3oR9mhANn8 XkaReIfTp0otqbSnulClAzXFr+j8DQ/Buf7fs0J0xpL6V20BEwFVcA3GA1Bvz6jW vfJ65pNfmosEiLJJNv0beGLFany9HeqG3e+vgE3Yh2L7vnp2+AoMk9ZUxuOKTZcj 0vLn2stL1p2mrRTZezLVfqZZhO8aSPy6ewsy/Q2u2VFC0YBLCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFLA5skVscVB48IXeoN416TT48dgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMzI3OGU3MDgtZDEyOC00 NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCS/Fj7Wll/LVpdXvEoSw3 0Co7fddNwNgbT/xTeQdPZYRp5GVnf99LGLF+UBcDW7CX0i2vx0qC/7bv8aVj/WiM 9P74Wj8524Uw9kC470H7EpfFhnu4d21qt9Om04IPJLDzXT9VgxBJQBzPorhqA2Z+ nD4MPRDsmAHPJeyO7Co8w8fvqCmhacOmO4R39ocOxe/MD+1YPxgU63x6MonOutM4 fX2r++RocQMbEmYyQpKmUSu/zi2Q76W7ZkxmQd2Tpcaf1GvfjTD9nuPjDV4Feq1H GuVmbLksIfE70GjBPyXa5rO2rG4WIXbclz0PRVzQhd58kzAyvGOAp1evbAjuRZsu -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:30 2025 by rpki-client