$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.mft (raw, json) Hash identifier: xADsndY0uMe8veKi+2Gr2ioyS3xr4SdXGkshaE87f44= Subject key identifier: AA:1B:29:79:1A:8B:E9:18:A5:AC:DD:6D:66:75:C1:EE:69:41:EE:9C Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Certificate issuer: /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Certificate serial: 010D0C9F4328584B9659E83454630B131F65E100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft Manifest number: 010D0C9F432858488B7B09E7C4EF76CBED14D27E Signing time: Mon 20 Oct 2025 19:00:03 +0000 Manifest this update: Mon 20 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 3e9fb25a-438f-4e1d-a136-5c878d065c24.crl (hash: F5rpCeZDRm/avfBYydp7b1PTZ4aAPCqNcZRlZ2iD8do=) 2: 58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (hash: w4SttZsrIkeCFD7LRbAak4q2LplR07oBBPtLYZwa/n8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:59:e8:34:54:63:0b:13:1f:65:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Validity Not Before: Oct 20 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=4b6068d9-16f9-4dcb-8cd7-5eef30f4cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:f6:c3:1b:0a:da:39:75:ac:29:ab:d4:02: 57:8c:03:40:5b:ef:3a:ce:30:e6:7c:f9:95:65:59: f5:33:96:84:45:db:32:65:a8:bc:1b:49:a6:55:a9: eb:48:59:09:04:c8:a5:bb:c8:f1:39:a0:98:f7:22: c7:26:91:46:53:13:1e:75:48:47:d3:38:68:ad:48: 87:bf:e5:76:d9:ad:99:74:b6:10:ea:b7:7e:f3:6b: 7d:65:12:61:79:d4:cd:bd:9c:1c:83:51:d2:fa:e5: 9a:5e:e9:49:a5:e5:2a:ef:17:c2:cc:ca:59:3b:20: 4b:58:d3:da:5b:da:d4:4c:70:cd:86:36:b8:1d:12: 0b:0d:04:4c:90:10:8c:d4:1e:21:9f:d3:ac:20:42: 7a:33:de:53:a9:68:fc:ca:ee:9b:6b:8e:4f:a6:6a: f3:b4:62:2f:36:f5:c6:95:80:d4:b8:3e:d9:51:3c: 42:a0:98:fd:d4:2d:0e:66:3f:6a:e9:c2:f5:5d:ac: 43:d9:23:94:71:d6:03:b2:e2:b7:14:12:4c:af:ee: ab:78:82:ff:01:bc:c3:da:0c:65:4f:a5:cb:db:8f: ce:c1:c4:26:31:e6:7e:90:a3:22:d8:3a:ed:80:49: 8e:5a:5f:74:fe:76:7a:9a:9e:3a:ba:3d:9e:07:cf: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1B:29:79:1A:8B:E9:18:A5:AC:DD:6D:66:75:C1:EE:69:41:EE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl X509v3 Authority Key Identifier: keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:35:96:da:f0:1f:9f:9b:7e:4d:f7:0f:a0:79:e2:22:68:71: bc:1e:54:f2:c2:54:fe:aa:49:df:2e:a1:66:3a:29:1e:33:40: 2a:e3:59:ca:bf:37:7a:b1:f2:f4:99:23:66:1f:13:62:e2:0f: 71:54:54:8f:53:f3:30:1d:eb:27:e0:63:78:a6:38:48:4f:cf: fa:51:f1:af:c0:64:23:c6:b1:66:c4:8d:af:a2:de:b3:15:c2: 73:c6:54:5b:41:f1:6d:c4:c4:bb:49:57:f8:41:fa:75:eb:56: 44:7f:f2:e9:ec:b4:75:24:dc:bd:75:1f:7f:63:c9:76:7d:7e: 78:bd:2e:5e:51:f4:8f:b2:69:98:e0:c9:13:8a:35:46:93:af: b8:fb:b1:85:00:d0:7a:5f:99:d0:d8:17:6c:94:3b:72:da:9e: 5b:ad:33:20:cf:84:62:66:0a:46:c3:56:11:d8:dc:8f:0d:fd: 7f:de:2b:ff:53:d6:a8:8d:ce:ed:6e:9f:e5:1b:15:f2:7b:4b: b0:e2:b8:f0:9c:84:4e:10:ff:01:8b:80:db:d3:3b:14:14:28: f4:13:f5:61:14:23:be:73:f8:a8:17:c7:3f:d6:07:48:35:57: 81:ea:fe:89:10:16:53:d7:fa:19:ab:e8:ed:ba:38:58:e1:80: 60:ec:23:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWWeg0VGMLEx9l4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1 YzI0MB4XDTI1MTAyMDE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk NGI2MDY4ZDktMTZmOS00ZGNiLThjZDctNWVlZjMwZjRjYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUz2wxsK2jl1rCmr1AJXjANAW+86zjDmfPmV ZVn1M5aERdsyZai8G0mmVanrSFkJBMilu8jxOaCY9yLHJpFGUxMedUhH0zhorUiH v+V22a2ZdLYQ6rd+82t9ZRJhedTNvZwcg1HS+uWaXulJpeUq7xfCzMpZOyBLWNPa W9rUTHDNhja4HRILDQRMkBCM1B4hn9OsIEJ6M95TqWj8yu6ba45PpmrztGIvNvXG lYDUuD7ZUTxCoJj91C0OZj9q6cL1XaxD2SOUcdYDsuK3FBJMr+6reIL/AbzD2gxl T6XL24/OwcQmMeZ+kKMi2DrtgEmOWl90/nZ6mp46uj2eB8/A2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKobKXkai+kYpazdbWZ1we5pQe6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZTlm YjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvM2U5ZmIyNWEtNDM4Zi00 ZTFkLWExMzYtNWM4NzhkMDY1YzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2U5ZmIyNWEtNDM4Zi00ZTFkLWEx MzYtNWM4NzhkMDY1YzI0LzNlOWZiMjVhLTQzOGYtNGUxZC1hMTM2LTVjODc4ZDA2 NWMyNC5jcmwwHwYDVR0jBBgwFoAU0w52saMVmAH+L59D/FFDCjr66gQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3 OGQwNjVjMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPNZba8B+fm35N9w+geeIi aHG8HlTywlT+qknfLqFmOikeM0Aq41nKvzd6sfL0mSNmHxNi4g9xVFSPU/MwHesn 4GN4pjhIT8/6UfGvwGQjxrFmxI2vot6zFcJzxlRbQfFtxMS7SVf4Qfp161ZEf/Lp 7LR1JNy9dR9/Y8l2fX54vS5eUfSPsmmY4MkTijVGk6+4+7GFANB6X5nQ2BdslDty 2p5brTMgz4RiZgpGw1YR2NyPDf1/3iv/U9aojc7tbp/lGxXye0uw4rjwnIROEP8B i4Db0zsUFCj0E/VhFCO+c/ioF8c/1gdINVeB6v6JEBZT1/oZq+jtujhY4YBg7COX -----END CERTIFICATE-----Generated at Tue Oct 21 12:45:15 2025 by rpki-client