$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft File: e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft (raw, json) Hash identifier: Pf+34SAXEj2SEIPUx97xTRw8hqwwLLWIFUJh7oB5gBE= Subject key identifier: 79:51:8F:1A:01:2C:E7:AA:8E:A3:88:7A:39:C5:AC:82:5F:63:83:5A Authority key identifier: FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A Certificate issuer: /CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48 Certificate serial: 010D0C9F4328584B92BEC60F9496DBC013106500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft Manifest number: 010D0C9F4328584AFC03CA6ABD8AA12499A0E0B7 Signing time: Sun 19 Oct 2025 12:00:03 +0000 Manifest this update: Sun 19 Oct 2025 12:00:03 +0000 Manifest next update: Wed 22 Oct 2025 12:00:00 +0000 Files and hashes: 1: 783626be-bd0c-3ed4-a095-e5bba6c7ce60.roa (hash: TkgZpNcR2UzlZoe8ppwLOJLDuGdFXjcZPFz6LMbmKp4=) 2: e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl (hash: JxP9puBDLQtRM7fo7JDJG49xBn8c0422xKNQgVCKt24=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:be:c6:0f:94:96:db:c0:13:10:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48 Validity Not Before: Oct 19 12:00:03 2025 GMT Not After : Oct 22 12:00:00 2025 GMT Subject: CN=534daa07-b7e1-4e73-856c-d097c6113236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:f4:e3:d5:ce:bd:29:ac:7b:cb:88:44:b9: 51:2d:53:01:fc:80:cc:b7:11:75:06:a0:a6:8b:8e: dd:06:05:3c:6f:ff:68:81:c1:03:b8:6f:5f:83:dd: 2e:4b:e0:4e:46:7f:1c:6b:68:7a:71:ff:4f:bf:68: 63:94:fa:ab:71:ea:90:f9:bb:ac:2e:21:d2:77:02: b1:5a:ed:89:a2:97:5f:e2:f6:60:a3:03:38:2d:72: 11:9f:84:dd:c5:6a:a7:11:c6:84:ed:12:55:06:62: 83:af:d4:16:cd:c5:dd:d7:56:20:ad:e8:90:b1:af: d5:b7:06:31:16:48:47:2e:ca:33:97:1f:e5:5e:4c: 21:62:7b:8c:94:bf:5c:a0:97:a6:6d:9d:95:e5:73: ec:71:1a:36:d0:68:56:d7:78:e5:2a:cc:49:74:17: 89:41:db:7d:a0:2c:fb:63:1c:2a:fe:f4:df:6b:37: 57:78:e0:82:36:ba:c2:35:e5:ba:9f:56:42:a5:4c: 94:95:4a:9b:59:9d:b8:9f:0e:4f:fc:bb:00:92:3c: 4b:e8:84:2d:ee:51:c2:8f:1f:30:3a:08:15:59:5f: e9:dd:43:de:cb:da:b1:e8:50:0a:3d:9e:a4:b3:fb: e2:75:2b:93:a2:b9:4a:44:56:77:26:78:b9:eb:b5: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:51:8F:1A:01:2C:E7:AA:8E:A3:88:7A:39:C5:AC:82:5F:63:83:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl X509v3 Authority Key Identifier: keyid:FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:00:11:09:0f:20:b6:01:47:43:f9:15:84:63:7d:de:ac:08: ab:ca:1b:10:05:1b:6a:58:de:2d:04:1c:5f:4c:3c:76:fb:3d: e0:65:f6:22:14:17:13:47:7a:f5:29:93:de:0b:ca:06:3d:f4: e4:71:74:ee:7b:91:d4:38:87:27:b5:52:a8:6d:56:64:09:98: a2:4d:b2:da:6c:4f:1d:28:5c:82:28:01:8e:37:f4:76:3b:31: 07:2c:67:42:47:6b:c2:cb:4f:fe:fb:79:c7:91:1f:43:0b:84: d8:d3:fd:ec:00:4f:b8:dc:aa:a1:98:e0:7b:0f:99:73:2c:86: bc:e6:5e:20:b7:59:c6:24:b1:2e:dc:27:10:72:57:7d:18:b0: 14:45:03:7e:25:56:12:48:7f:39:7d:7c:44:49:9d:1b:75:9a: f7:42:71:5e:da:df:45:7f:a7:4c:58:ea:50:e4:5d:67:a5:26: 44:6f:f8:71:22:40:71:9c:fc:71:44:19:0f:c1:53:da:32:48: 2d:a7:e5:bd:c3:6d:fb:5c:f2:d7:5a:e1:f9:58:0f:f7:b7:7e: cd:32:d0:9c:1d:1c:f3:b7:45:5b:e1:b7:11:25:bf:a2:ef:0c: d1:2f:99:28:f8:70:4d:3d:08:47:bb:64:24:10:53:3f:d6:2f: be:46:52:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSvsYPlJbbwBMQZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmODM1ZDQtNGQ2Yi00MTk2LWI1NzctM2UxMWJlM2Qw ZjQ4MB4XDTI1MTAxOTEyMDAwM1oXDTI1MTAyMjEyMDAwMFowLzEtMCsGA1UEAxMk NTM0ZGFhMDctYjdlMS00ZTczLTg1NmMtZDA5N2M2MTEzMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmL049XOvSmse8uIRLlRLVMB/IDMtxF1BqCm i47dBgU8b/9ogcEDuG9fg90uS+BORn8ca2h6cf9Pv2hjlPqrceqQ+busLiHSdwKx Wu2Jopdf4vZgowM4LXIRn4TdxWqnEcaE7RJVBmKDr9QWzcXd11YgreiQsa/VtwYx FkhHLsozlx/lXkwhYnuMlL9coJembZ2V5XPscRo20GhW13jlKsxJdBeJQdt9oCz7 Yxwq/vTfazdXeOCCNrrCNeW6n1ZCpUyUlUqbWZ24nw5P/LsAkjxL6IQt7lHCjx8w OggVWV/p3UPey9qx6FAKPZ6ks/vidSuTorlKRFZ3Jni567WirQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHlRjxoBLOeqjqOIejnFrIJfY4NaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4 MzVkNC00ZDZiLTQxOTYtYjU3Ny0zZTExYmUzZDBmNDgvZTNmODM1ZDQtNGQ2Yi00 MTk2LWI1NzctM2UxMWJlM2QwZjQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTNmODM1ZDQtNGQ2Yi00MTk2LWI1 NzctM2UxMWJlM2QwZjQ4L2UzZjgzNWQ0LTRkNmItNDE5Ni1iNTc3LTNlMTFiZTNk MGY0OC5jcmwwHwYDVR0jBBgwFoAU/TVEqMA65blUyDpqFZPEmnhZUkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4MzVkNC00ZDZiLTQxOTYtYjU3Ny0zZTEx YmUzZDBmNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqABEJDyC2AUdD+RWEY33e rAiryhsQBRtqWN4tBBxfTDx2+z3gZfYiFBcTR3r1KZPeC8oGPfTkcXTue5HUOIcn tVKobVZkCZiiTbLabE8dKFyCKAGON/R2OzEHLGdCR2vCy0/++3nHkR9DC4TY0/3s AE+43KqhmOB7D5lzLIa85l4gt1nGJLEu3CcQcld9GLAURQN+JVYSSH85fXxESZ0b dZr3QnFe2t9Ff6dMWOpQ5F1npSZEb/hxIkBxnPxxRBkPwVPaMkgtp+W9w237XPLX WuH5WA/3t37NMtCcHRzzt0Vb4bcRJb+i7wzRL5ko+HBNPQhHu2QkEFM/1i++RlKW -----END CERTIFICATE-----Generated at Mon Oct 20 01:31:12 2025 by rpki-client