$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft File: 03aa7869-00ee-4a38-9822-b5f285ade0c3.mft (raw, json) Hash identifier: 2QwOnC/Wh9ltLIbaHZ46HuxZeQTSw/5RgItKp7ygyY8= Subject key identifier: A7:4F:EF:E0:D1:63:51:72:10:C3:3C:C6:FE:AF:E8:2B:F9:67:F5:81 Authority key identifier: B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3 Certificate issuer: /CN=03aa7869-00ee-4a38-9822-b5f285ade0c3 Certificate serial: 010D0C9F4328584B79BC673C2109F721F5DA1900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft Manifest number: 010D0C9F4328584073A8551217A1309A69CD974A Signing time: Fri 10 Oct 2025 13:00:03 +0000 Manifest this update: Fri 10 Oct 2025 13:00:03 +0000 Manifest next update: Mon 13 Oct 2025 13:00:00 +0000 Files and hashes: 1: 03aa7869-00ee-4a38-9822-b5f285ade0c3.crl (hash: RTJYGyEEZmUz+TkD52Q3X1orlx6jIDt2qXIePIuCQlo=) 2: 736f6207-67a5-36c6-aa84-fc58d77c2dab.roa (hash: KfG7AKL90Td5ZTrGXRLqF4hw0Ys4LIxAn7YNSkhJvGA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:67:3c:21:09:f7:21:f5:da:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03aa7869-00ee-4a38-9822-b5f285ade0c3 Validity Not Before: Oct 10 13:00:03 2025 GMT Not After : Oct 13 13:00:00 2025 GMT Subject: CN=ba458a29-ab04-4515-aee7-f7afcd90ffbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:db:5e:48:37:1a:a3:22:a6:e8:0b:c4:fe: a2:7e:ed:dd:bb:9d:52:fe:35:7f:6c:f7:71:8c:eb: fd:92:f6:21:f8:73:d3:88:1c:50:1b:b9:02:eb:84: 21:a4:fa:71:fd:90:5d:8f:19:16:e1:24:46:9f:f0: f5:70:e0:45:89:61:9f:32:b0:de:47:5e:e1:66:c9: 90:d6:ec:cf:8c:69:6b:89:32:ea:7c:28:a4:88:1b: 04:a7:27:a4:b2:d5:67:0d:25:00:c5:20:df:fa:a3: 7a:d4:08:c8:1f:e0:c0:0d:87:00:29:db:3a:f6:c0: 1c:cf:16:62:e5:7b:ad:1a:4e:83:1b:7f:2c:c5:30: 55:b8:0a:ca:ba:1f:29:51:6e:a6:7b:fc:b8:64:10: cb:68:f6:43:dd:4e:f8:23:1f:75:08:2a:bf:64:99: 6a:30:53:6d:7b:e7:ab:b0:e5:29:63:7c:5b:fa:8e: dd:af:ea:96:df:07:00:f3:de:4d:39:99:fe:f3:9d: 24:cf:e3:67:07:3e:b0:4e:e5:b0:25:c1:8c:1d:23: 5c:e6:76:f5:30:cf:61:bf:fa:bc:3a:1b:27:76:76: 5c:69:17:12:a6:95:55:bb:c3:11:8c:0c:da:35:dd: 75:44:15:78:44:81:54:cf:45:ab:9c:8e:bd:80:30: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4F:EF:E0:D1:63:51:72:10:C3:3C:C6:FE:AF:E8:2B:F9:67:F5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.crl X509v3 Authority Key Identifier: keyid:B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:bf:aa:a9:af:6a:aa:c6:d4:45:e3:9a:79:49:d6:30:29:a0: 80:ac:1a:40:69:36:56:30:d3:ab:f1:48:9b:c3:9c:51:a9:7d: ef:27:48:94:60:56:5c:08:04:9b:7c:e8:ca:f0:44:c5:27:44: 4b:b2:5b:4e:7f:84:05:fc:eb:32:22:40:51:2b:39:15:b3:d0: 79:c7:f5:81:71:3a:87:f6:77:92:0a:cb:da:74:ef:7e:35:0d: 01:92:25:a7:8b:bd:e9:c0:71:0b:ed:38:08:dc:80:3f:d2:c9: b4:f5:ec:b8:d9:a1:3f:57:52:b1:4f:bb:27:38:be:fe:42:6d: ab:c0:e9:22:ca:8c:e5:37:87:2b:9c:07:26:61:c5:be:4f:87: cf:66:ef:05:38:84:aa:ff:5d:28:82:bf:ae:a8:84:2b:dd:d6: b4:61:c6:6c:0b:c5:08:14:bd:75:b0:05:4b:45:b8:9d:e0:19: 78:df:0f:10:5f:26:49:2c:de:d9:3d:f5:28:b5:08:34:66:2b: 5d:a8:72:90:ec:54:55:37:d8:7f:14:7e:8d:86:ce:ef:07:0a: 42:4c:24:79:ca:2b:3e:c2:aa:f3:42:5a:3c:7b:7a:46:42:83: f4:f4:c5:fc:43:d8:32:0a:8d:f1:9a:73:d5:b9:2d:35:df:19: c1:16:55:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5vGc8IQn3IfXaGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNhYTc4NjktMDBlZS00YTM4LTk4MjItYjVmMjg1YWRl MGMzMB4XDTI1MTAxMDEzMDAwM1oXDTI1MTAxMzEzMDAwMFowLzEtMCsGA1UEAxMk YmE0NThhMjktYWIwNC00NTE1LWFlZTctZjdhZmNkOTBmZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3fbXkg3GqMipugLxP6ifu3du51S/jV/bPdx jOv9kvYh+HPTiBxQG7kC64QhpPpx/ZBdjxkW4SRGn/D1cOBFiWGfMrDeR17hZsmQ 1uzPjGlriTLqfCikiBsEpyekstVnDSUAxSDf+qN61AjIH+DADYcAKds69sAczxZi 5XutGk6DG38sxTBVuArKuh8pUW6me/y4ZBDLaPZD3U74Ix91CCq/ZJlqMFNte+er sOUpY3xb+o7dr+qW3wcA895NOZn+850kz+NnBz6wTuWwJcGMHSNc5nb1MM9hv/q8 OhsndnZcaRcSppVVu8MRjAzaNd11RBV4RIFUz0WrnI69gDAjVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKdP7+DRY1FyEMM8xv6v6Cv5Z/WBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wM2Fh Nzg2OS0wMGVlLTRhMzgtOTgyMi1iNWYyODVhZGUwYzMvMDNhYTc4NjktMDBlZS00 YTM4LTk4MjItYjVmMjg1YWRlMGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDNhYTc4NjktMDBlZS00YTM4LTk4 MjItYjVmMjg1YWRlMGMzLzAzYWE3ODY5LTAwZWUtNGEzOC05ODIyLWI1ZjI4NWFk ZTBjMy5jcmwwHwYDVR0jBBgwFoAUsfBKmHpzSprmP1YEPFIG36Nzd/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wM2FhNzg2OS0wMGVlLTRhMzgtOTgyMi1iNWYy ODVhZGUwYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDQv6qpr2qqxtRF45p5SdYw KaCArBpAaTZWMNOr8Uibw5xRqX3vJ0iUYFZcCASbfOjK8ETFJ0RLsltOf4QF/Osy IkBRKzkVs9B5x/WBcTqH9neSCsvadO9+NQ0BkiWni73pwHEL7TgI3IA/0sm09ey4 2aE/V1KxT7snOL7+Qm2rwOkiyozlN4crnAcmYcW+T4fPZu8FOISq/10ogr+uqIQr 3da0YcZsC8UIFL11sAVLRbid4Bl43w8QXyZJLN7ZPfUotQg0ZitdqHKQ7FRVN9h/ FH6Nhs7vBwpCTCR5yis+wqrzQlo8e3pGQoP09MX8Q9gyCo3xmnPVuS013xnBFlWK -----END CERTIFICATE-----Generated at Fri Oct 10 23:49:13 2025 by rpki-client