$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: 5a6gXG38NegfM2hKu+q/671GOcJT+31hqJDfV+trMyM= Subject key identifier: 45:A5:8F:5B:F2:48:D4:38:AC:3C:2B:CC:C5:DB:88:A8:25:F0:29:63 Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584B911DE9586B43717724B68F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FABE7 Signing time: Sat 18 Oct 2025 22:00:08 +0000 Manifest this update: Sat 18 Oct 2025 22:00:08 +0000 Manifest next update: Tue 21 Oct 2025 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: otDgIf72qSBTESn4dkklNecoxGnDdvmiAK3hF1AjDgA=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WCsl/uHAuRHFK8iwHtx6pvMStWiWbxyew8aipe66l+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:1d:e9:58:6b:43:71:77:24:b6:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Oct 18 22:00:08 2025 GMT Not After : Oct 21 22:00:00 2025 GMT Subject: CN=f61cdbf0-80b0-4ace-bc37-d43ba5ba6ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:a2:ca:f4:4a:a3:87:ec:26:08:5d:ae:4c: 83:99:fb:91:f1:b1:5c:80:ea:90:7f:13:d9:90:7c: b2:4f:4c:98:34:89:b7:1e:03:90:9d:8a:f3:1c:62: de:fc:d2:9e:85:59:25:e0:14:06:1f:d8:55:d3:1c: 6b:46:b3:eb:e8:11:2e:c8:66:95:fe:f7:56:b5:f8: c1:cd:c8:f6:f4:bb:6c:c8:61:57:52:4b:e2:71:65: b6:94:c0:d8:d9:c1:46:68:9d:f9:af:b1:40:fe:48: a4:6e:26:e8:7f:df:cc:23:5a:a2:49:ce:a3:82:cf: 2d:f8:b0:f6:67:d0:a1:bf:a3:41:5b:41:40:c6:a7: bf:34:a3:e9:1d:86:af:0c:c3:2f:16:0f:a1:86:78: 10:d6:a5:c7:f0:a1:5f:5f:d8:02:55:a8:bf:72:aa: ea:11:f8:79:7e:8a:e9:6d:f1:d4:64:e8:58:e0:72: b1:66:89:e7:83:7d:a7:f1:93:32:92:c5:7a:b7:ec: 1f:74:4e:a9:f8:36:41:77:9a:be:8e:0e:ef:3d:7c: 8d:57:ca:b1:1d:9b:5b:cc:b8:b6:23:e2:08:89:7c: d9:d9:a1:54:3f:5d:61:4c:b2:73:15:f1:b6:7d:31: 53:d7:44:1e:da:f9:94:ff:98:df:01:2c:6c:a9:a2: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:8F:5B:F2:48:D4:38:AC:3C:2B:CC:C5:DB:88:A8:25:F0:29:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:18:dc:88:d8:03:48:21:6b:12:44:4b:28:39:98:a5:15:18: e4:95:1d:84:46:46:12:53:f6:38:2b:0c:f8:35:96:a0:a8:00: fe:9c:66:b4:67:18:61:5a:ff:fc:b0:41:79:bc:be:f2:49:db: 3f:f4:50:ff:a8:e0:ec:93:69:ae:14:be:24:4e:82:97:4e:7d: 4d:71:98:94:b8:e0:9d:d4:32:55:98:d7:76:e5:78:03:2f:ff: da:cf:44:38:26:10:f0:cb:ec:7c:96:b5:ca:28:34:ee:83:00: a2:c3:5d:c4:cc:f3:c0:c4:e5:92:43:63:23:ef:a9:5f:8b:a7: d6:10:5d:36:a1:ba:f1:65:8a:84:f8:0d:0b:8f:8d:c6:0b:0b: 07:18:2f:d4:ab:38:5f:74:4d:64:84:ea:45:0b:56:fa:6f:ab: 58:57:a8:3d:b0:11:63:50:e7:31:5c:d6:51:2f:2c:86:04:fa: a8:39:01:6b:00:d8:e3:ac:96:e4:83:6d:ec:50:e7:c3:31:f0: 03:ff:ec:11:a3:18:1a:e5:dd:2d:82:8a:93:04:5b:7b:d9:d0: d2:74:65:b0:10:4f:c5:3e:67:6b:4a:c9:db:14:b1:0b:a7:37: 09:42:a4:25:21:10:5d:7c:a7:69:70:0f:58:0a:e2:86:ad:2f: 03:3c:26:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRHelYa0NxdyS2jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI1MTAxODIyMDAwOFoXDTI1MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk ZjYxY2RiZjAtODBiMC00YWNlLWJjMzctZDQzYmE1YmE2Y2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixSiyvRKo4fsJghdrkyDmfuR8bFcgOqQfxPZ kHyyT0yYNIm3HgOQnYrzHGLe/NKehVkl4BQGH9hV0xxrRrPr6BEuyGaV/vdWtfjB zcj29LtsyGFXUkvicWW2lMDY2cFGaJ35r7FA/kikbibof9/MI1qiSc6jgs8t+LD2 Z9Chv6NBW0FAxqe/NKPpHYavDMMvFg+hhngQ1qXH8KFfX9gCVai/cqrqEfh5forp bfHUZOhY4HKxZonng32n8ZMyksV6t+wfdE6p+DZBd5q+jg7vPXyNV8qxHZtbzLi2 I+IIiXzZ2aFUP11hTLJzFfG2fTFT10Qe2vmU/5jfASxsqaIToQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEWlj1vySNQ4rDwrzMXbiKgl8CljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRGNyI2ANIIWsSREsoOZil FRjklR2ERkYSU/Y4Kwz4NZagqAD+nGa0ZxhhWv/8sEF5vL7ySds/9FD/qODsk2mu FL4kToKXTn1NcZiUuOCd1DJVmNd25XgDL//az0Q4JhDwy+x8lrXKKDTugwCiw13E zPPAxOWSQ2Mj76lfi6fWEF02obrxZYqE+A0Lj43GCwsHGC/UqzhfdE1khOpFC1b6 b6tYV6g9sBFjUOcxXNZRLyyGBPqoOQFrANjjrJbkg23sUOfDMfAD/+wRoxga5d0t goqTBFt72dDSdGWwEE/FPmdrSsnbFLELpzcJQqQlIRBdfKdpcA9YCuKGrS8DPCZD -----END CERTIFICATE-----Generated at Sun Oct 19 23:24:16 2025 by rpki-client