$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft File: b3cdb9f9-485f-42c4-879d-31049b91d87f.mft (raw, json) Hash identifier: Rq+a+pmMGlwu/lkbOTRX3O81pXvl1Z9LRcnLqlVMwuY= Subject key identifier: 2C:42:17:15:28:42:CC:41:59:F2:EC:55:93:98:1E:39:21:0C:16:B6 Authority key identifier: D4:7E:B6:52:60:9A:D1:06:CE:3E:0B:4F:A6:C9:D9:C3:D5:EF:7D:3C Certificate issuer: /CN=b3cdb9f9-485f-42c4-879d-31049b91d87f Certificate serial: 010D0C9F4328584B93E89227E097F09659846D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft Manifest number: 010D0C9F4328584B5EFA64EBDA4A8CED35E7FC14 Signing time: Sun 19 Oct 2025 22:00:03 +0000 Manifest this update: Sun 19 Oct 2025 22:00:03 +0000 Manifest next update: Tue 21 Oct 2025 22:00:00 +0000 Files and hashes: 1: 6c551a98-24cb-390f-b208-fe3707946577.roa (hash: 2f2aWs9kE0KQH/1irSAGKTCrACLdyrIxYdAC6DX5LUc=) 2: b3cdb9f9-485f-42c4-879d-31049b91d87f.crl (hash: fe0HHNE+HF8UdxJxxxqulioJjEWX3N2MfRoDe4xoxCI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:e8:92:27:e0:97:f0:96:59:84:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3cdb9f9-485f-42c4-879d-31049b91d87f Validity Not Before: Oct 19 22:00:03 2025 GMT Not After : Oct 21 22:00:00 2025 GMT Subject: CN=83c052d8-d4c7-4edf-a7e4-9ba83dc1a34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:f4:6e:eb:ed:bb:10:84:f4:f2:03:16:72: 07:0a:73:82:a9:78:7d:59:69:70:98:d7:7b:f9:77: d3:77:2f:85:f6:0e:79:db:4f:b3:13:9d:22:b4:7e: cc:80:9f:4e:3c:bd:2b:70:98:a8:e0:99:0f:3d:bc: b6:41:f7:62:35:bc:16:7f:18:37:f4:ae:d0:3a:a1: 2f:54:a7:a3:af:39:c4:c2:e4:4f:3c:4e:85:fd:20: 5e:75:f5:55:d3:88:b7:8d:c5:31:7d:46:b5:ed:5e: ae:a3:1f:81:1d:b8:58:56:a9:3b:78:3f:5f:87:21: 17:4a:30:c1:cc:ea:64:93:a1:b6:53:8b:52:16:b8: 70:f0:ab:cc:f4:0f:96:1b:51:00:ff:53:27:7a:80: a0:e5:89:82:5f:0f:1a:06:7b:9f:92:06:a0:c4:e7: ed:84:3b:df:07:4b:00:d0:b3:25:d5:28:45:e0:d5: 9c:5b:7d:b7:3c:d5:50:84:9c:8a:d4:cb:c2:38:1f: 75:a2:2f:01:7e:88:4b:9a:7c:57:21:41:9e:3c:c2: 48:83:06:cc:ba:a5:44:d4:b9:e3:41:02:4b:6f:89: 4f:5b:52:f9:1f:4f:8c:6c:5f:0d:99:41:d3:aa:e4: 3c:93:2c:70:61:72:ab:e8:49:14:f2:42:bd:c6:d6: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:17:15:28:42:CC:41:59:F2:EC:55:93:98:1E:39:21:0C:16:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.crl X509v3 Authority Key Identifier: keyid:D4:7E:B6:52:60:9A:D1:06:CE:3E:0B:4F:A6:C9:D9:C3:D5:EF:7D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:78:2b:12:a5:11:36:ef:a6:ce:28:d5:1a:4f:0f:f4:54:e8: 48:fb:1c:eb:b3:96:10:55:7f:cf:24:bc:7c:7e:b2:76:29:3c: 06:06:22:48:40:df:6f:dd:be:0a:f1:41:23:79:26:a9:1b:1d: d3:5d:e8:d3:97:f0:51:d0:9b:6b:e2:ea:9e:98:ee:83:72:ee: 93:ec:ac:4c:5e:ce:02:16:22:ab:9f:8d:fd:64:2c:f4:a0:3c: 83:a6:bb:a2:76:e8:da:c4:61:dd:6c:ea:9c:b6:35:19:8a:e8: de:01:f7:a6:85:47:b6:db:2c:09:5f:a6:e3:53:18:ab:65:20: 81:12:c1:af:a0:ba:dd:33:fc:fb:a3:fb:18:4d:83:45:2e:fd: 16:56:e8:e2:c1:60:bc:3d:0b:cd:79:09:4c:46:c3:0e:e1:ec: 7c:4b:bf:cc:2c:7d:58:c7:af:f5:07:55:1b:b4:54:e0:8b:18: 29:53:35:dc:d0:e0:bd:c0:62:20:2d:9b:ab:ba:7c:42:19:5f: e4:74:68:d4:d8:f5:d8:a2:2a:3d:24:a4:e9:bd:57:67:5d:df: b5:34:c4:f1:43:39:bf:69:21:a3:86:7c:11:ea:f3:65:81:93: 13:ba:29:73:f5:7f:05:ec:a9:77:56:75:15:3b:16:b1:bb:05: 1e:7a:08:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuT6JIn4JfwllmEbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNjZGI5ZjktNDg1Zi00MmM0LTg3OWQtMzEwNDliOTFk ODdmMB4XDTI1MTAxOTIyMDAwM1oXDTI1MTAyMTIyMDAwMFowLzEtMCsGA1UEAxMk ODNjMDUyZDgtZDRjNy00ZWRmLWE3ZTQtOWJhODNkYzFhMzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWD0buvtuxCE9PIDFnIHCnOCqXh9WWlwmNd7 +XfTdy+F9g5520+zE50itH7MgJ9OPL0rcJio4JkPPby2QfdiNbwWfxg39K7QOqEv VKejrznEwuRPPE6F/SBedfVV04i3jcUxfUa17V6uox+BHbhYVqk7eD9fhyEXSjDB zOpkk6G2U4tSFrhw8KvM9A+WG1EA/1MneoCg5YmCXw8aBnufkgagxOfthDvfB0sA 0LMl1ShF4NWcW323PNVQhJyK1MvCOB91oi8BfohLmnxXIUGePMJIgwbMuqVE1Lnj QQJLb4lPW1L5H0+MbF8NmUHTquQ8kyxwYXKr6EkU8kK9xtbsywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxCFxUoQsxBWfLsVZOYHjkhDBa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iM2Nk YjlmOS00ODVmLTQyYzQtODc5ZC0zMTA0OWI5MWQ4N2YvYjNjZGI5ZjktNDg1Zi00 MmM0LTg3OWQtMzEwNDliOTFkODdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjNjZGI5ZjktNDg1Zi00MmM0LTg3 OWQtMzEwNDliOTFkODdmL2IzY2RiOWY5LTQ4NWYtNDJjNC04NzlkLTMxMDQ5Yjkx ZDg3Zi5jcmwwHwYDVR0jBBgwFoAU1H62UmCa0QbOPgtPpsnZw9XvfTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iM2NkYjlmOS00ODVmLTQyYzQtODc5ZC0zMTA0 OWI5MWQ4N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1eCsSpRE276bOKNUaTw/0 VOhI+xzrs5YQVX/PJLx8frJ2KTwGBiJIQN9v3b4K8UEjeSapGx3TXejTl/BR0Jtr 4uqemO6Dcu6T7KxMXs4CFiKrn439ZCz0oDyDpruidujaxGHdbOqctjUZiujeAfem hUe22ywJX6bjUxirZSCBEsGvoLrdM/z7o/sYTYNFLv0WVujiwWC8PQvNeQlMRsMO 4ex8S7/MLH1Yx6/1B1UbtFTgixgpUzXc0OC9wGIgLZurunxCGV/kdGjU2PXYoio9 JKTpvVdnXd+1NMTxQzm/aSGjhnwR6vNlgZMTuilz9X8F7Kl3VnUVOxaxuwUeegj6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:30:37 2025 by rpki-client