$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft File: 3d17c017-30b5-444a-aa30-048cc30971e3.mft (raw, json) Hash identifier: 8qMmL8MCKFLQ+/P4/wbfNVe88D627N5j/LZ3hT6bq3s= Subject key identifier: C6:A6:8A:BF:27:60:82:ED:90:E2:1F:51:0B:F4:0B:6C:DD:BC:B2:C5 Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584B93717C749765CD188946EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft Manifest number: 010D0C9F4328584AEEBB1810A11CCF289AF9B6FE Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: 3d17c017-30b5-444a-aa30-048cc30971e3.crl (hash: mnhNkI5gH7Ol6ZOF9FxkBGsg14XrwMD1Ai39RQz7Xwg=) 2: a45363ac-38b7-3765-9fd2-71955777f847.roa (hash: 1anl831tVkJswkthf/3+Syju5s69S5ProUY0fqq/m1Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7c:74:97:65:cd:18:89:46:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=3a24f278-51a5-4640-8391-aa95a56f0dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:4d:fe:d0:14:1c:cc:2b:97:0b:bd:85:b4: c3:d8:96:7d:6d:f4:2b:7a:17:b1:38:40:0e:50:69: 6d:55:8a:5f:70:99:f8:d4:c1:2e:16:84:e1:8e:d0: d2:eb:b9:08:15:30:50:ae:d7:c0:3a:81:5f:c8:aa: 2d:f6:db:1d:e6:82:41:cf:2f:fb:82:f0:0f:61:2f: 8d:3b:7e:4d:68:df:28:69:76:00:27:93:b8:ee:ff: 61:a6:c1:0b:e6:e3:0a:e2:cc:11:1d:c0:1d:e7:03: 68:83:2d:28:6e:33:57:85:86:a4:61:66:0f:f7:4e: 54:20:e5:c4:82:17:c6:5a:d0:85:8e:4e:9b:fb:9e: 9e:83:97:2b:12:cc:9d:ac:e8:a9:e7:29:ce:93:e6: fe:8d:6e:cb:25:2e:36:ee:96:e0:07:34:df:54:5a: 89:a4:4a:41:ef:94:55:03:32:28:26:57:62:dd:0a: 82:94:0c:3b:c0:a3:e9:82:e6:cd:02:c7:f7:ba:a4: 43:d1:0a:41:47:c1:c7:b2:23:73:e8:c3:28:38:15: 36:cb:5c:29:e0:58:02:06:ad:7f:17:54:5d:95:c6: 6b:6d:65:94:db:71:fe:57:13:b0:1b:d6:a5:e4:71: 3c:3d:88:f4:95:7a:2b:8b:4a:c3:82:0b:87:10:a5: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A6:8A:BF:27:60:82:ED:90:E2:1F:51:0B:F4:0B:6C:DD:BC:B2:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bf:11:e9:3d:08:74:7d:9a:81:93:17:27:93:73:de:16:23: e5:b7:c5:a9:6d:36:9e:be:7d:81:a9:f8:c1:ca:e7:6b:f8:6c: 19:2f:ab:bf:52:71:0c:83:78:13:53:88:f9:11:5a:9d:51:37: 40:68:56:49:12:7e:d4:94:45:21:30:98:28:49:93:6c:9a:80: c1:29:de:7d:3f:74:fe:e2:89:e2:23:3d:ca:e5:76:79:74:40: ec:6c:46:97:6d:e6:76:57:b1:b3:db:c9:e0:40:9f:2b:ca:e1: 55:c3:df:2b:58:44:de:0f:ba:d2:e5:1d:a0:cf:30:d0:90:d2: 03:ba:bd:23:af:38:56:7d:0f:43:18:7d:7e:da:4b:a7:3f:18: ab:ec:05:16:7c:b0:b6:25:11:7c:54:f7:3a:15:42:72:fb:f3: 09:fe:d4:f0:5f:50:7f:2a:13:dd:cc:99:3d:c0:79:c5:ae:13: 27:04:bd:91:01:d3:d5:74:d2:03:b4:1b:b4:1c:65:26:e9:b7: 2a:16:35:39:27:3c:82:98:4e:15:42:f7:47:fb:db:4b:3b:f9: 88:5d:a3:dd:41:36:fd:f5:2b:ec:bb:62:93:a4:af:94:51:d4: 3b:39:0f:de:a3:57:b6:07:88:27:da:62:67:59:ef:45:f2:42: ce:54:e8:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcXx0l2XNGIlG7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk M2EyNGYyNzgtNTFhNS00NjQwLTgzOTEtYWE5NWE1NmYwZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAhN/tAUHMwrlwu9hbTD2JZ9bfQrehexOEAO UGltVYpfcJn41MEuFoThjtDS67kIFTBQrtfAOoFfyKot9tsd5oJBzy/7gvAPYS+N O35NaN8oaXYAJ5O47v9hpsEL5uMK4swRHcAd5wNogy0objNXhYakYWYP905UIOXE ghfGWtCFjk6b+56eg5crEsydrOip5ynOk+b+jW7LJS427pbgBzTfVFqJpEpB75RV AzIoJldi3QqClAw7wKPpgubNAsf3uqRD0QpBR8HHsiNz6MMoOBU2y1wp4FgCBq1/ F1RdlcZrbWWU23H+VxOwG9al5HE8PYj0lXori0rDgguHEKUNDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMamir8nYILtkOIfUQv0C2zdvLLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvM2QxN2MwMTctMzBiNS00 NDRhLWFhMzAtMDQ4Y2MzMDk3MWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYvxHpPQh0fZqBkxcnk3Pe FiPlt8WpbTaevn2BqfjByudr+GwZL6u/UnEMg3gTU4j5EVqdUTdAaFZJEn7UlEUh MJgoSZNsmoDBKd59P3T+4oniIz3K5XZ5dEDsbEaXbeZ2V7Gz28ngQJ8ryuFVw98r WETeD7rS5R2gzzDQkNIDur0jrzhWfQ9DGH1+2kunPxir7AUWfLC2JRF8VPc6FUJy +/MJ/tTwX1B/KhPdzJk9wHnFrhMnBL2RAdPVdNIDtBu0HGUm6bcqFjU5JzyCmE4V QvdH+9tLO/mIXaPdQTb99Svsu2KTpK+UUdQ7OQ/eo1e2B4gn2mJnWe9F8kLOVOjE -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:20 2025 by rpki-client