$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: /N6RtKyGHnQuhoPoDQQSG6uoMZA8F/yDMM3EUbwSTn4= Subject key identifier: 17:16:58:3D:1B:C1:9B:A6:3A:00:E4:6F:3C:87:7F:EB:B7:06:D0:1E Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F4328584B7892AA037D7006F7353F9180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924B0A Signing time: Fri 10 Oct 2025 03:00:08 +0000 Manifest this update: Fri 10 Oct 2025 03:00:08 +0000 Manifest next update: Mon 13 Oct 2025 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: tAPZ5HBHsx1AF2LrupybvJsREpYfXaXwaBBY5T0UEzo=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: 9leOZX6HUEKFO06FH9PaIyDfTiO8MABPj8Q9CJh9N8M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:92:aa:03:7d:70:06:f7:35:3f:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Oct 10 03:00:08 2025 GMT Not After : Oct 13 03:00:00 2025 GMT Subject: CN=f3e4f610-8179-4322-bf3b-f09413398056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:45:cf:a3:c9:2b:8d:7b:91:ad:ef:70:b0: 33:eb:e7:77:f4:be:47:66:e3:cb:01:54:68:7c:d1: 7c:62:41:bd:cb:fc:55:8a:cf:c0:61:de:15:ca:4a: 6f:00:93:29:82:9f:be:47:ca:d9:7e:43:f8:b6:1a: ee:90:2d:db:88:8a:2f:42:c2:23:f6:c7:5c:3b:b7: f1:c3:f7:76:74:07:7b:a4:0d:ac:85:35:be:7b:e6: fa:68:49:50:dd:b1:6a:5d:49:f7:1f:ce:1e:d2:5a: 96:22:35:17:84:da:62:d8:c2:50:d3:0c:97:4c:e7: 5b:b7:6c:91:ec:08:ff:1e:5b:5a:68:38:73:88:63: 99:47:e5:84:bb:0c:3f:37:fb:9c:0e:9a:7e:f1:d9: 40:fb:e0:fb:a9:72:af:3a:0c:b7:9d:d2:26:d8:fd: d8:90:65:2e:71:3d:44:fb:74:c1:e3:2e:85:c0:16: 9a:4d:4e:5f:50:ff:c3:ae:33:b1:d5:35:a4:fe:56: 2d:e1:68:b1:7e:76:9d:94:25:69:bd:ef:3c:39:2c: 32:27:d7:83:c8:f6:b7:95:5d:f7:a8:f4:01:3f:17: 35:68:b3:f9:15:5d:2c:5a:39:d6:0d:69:58:7d:8e: 89:c8:52:9b:2d:08:57:c0:8c:de:6d:70:3b:6f:34: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:16:58:3D:1B:C1:9B:A6:3A:00:E4:6F:3C:87:7F:EB:B7:06:D0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d8:e7:1b:01:15:c8:65:b4:49:38:8d:90:04:e0:dd:79:af: db:7a:21:ee:1c:e8:87:cd:6e:ed:b9:cd:9a:39:79:39:d3:7b: 79:55:d2:28:73:3e:4f:8c:af:8f:cc:56:7c:4b:aa:29:b3:bd: fd:0c:76:82:42:5f:cd:77:b9:1a:99:f6:49:18:aa:a5:3e:0d: 6c:97:2a:a9:10:67:44:7c:34:26:bd:17:d9:cf:57:fd:b3:c0: 40:13:98:4e:a7:68:c1:a1:b6:6e:09:54:4b:ae:f0:c3:ac:97: 84:76:98:2c:fa:89:fb:b0:8b:26:4b:5f:2a:09:42:e9:45:32: f5:fa:15:37:d2:f3:de:1c:6d:ad:49:67:a8:29:7e:8d:8d:83: 0f:66:e4:ba:2e:d8:74:8c:fc:d9:f8:98:bf:63:6c:bb:1b:ac: da:bb:f5:5b:4b:e7:ce:f6:2d:ba:39:8f:ae:36:da:2a:dd:89: a1:cd:e0:50:5f:81:14:29:98:0f:51:8a:6c:d7:e3:a9:5b:0c: 21:37:48:2c:a1:af:59:42:33:2e:7c:aa:37:70:da:70:b8:f2: f9:96:b7:4e:87:e9:73:a4:61:94:8a:01:31:99:29:12:a0:27: fa:79:32:5e:e3:c5:05:1a:f5:9b:1f:10:24:3e:8d:08:c8:9e: 8f:bd:95:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt4kqoDfXAG9zU/kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI1MTAxMDAzMDAwOFoXDTI1MTAxMzAzMDAwMFowLzEtMCsGA1UEAxMk ZjNlNGY2MTAtODE3OS00MzIyLWJmM2ItZjA5NDEzMzk4MDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ZFz6PJK417ka3vcLAz6+d39L5HZuPLAVRo fNF8YkG9y/xVis/AYd4VykpvAJMpgp++R8rZfkP4thrukC3biIovQsIj9sdcO7fx w/d2dAd7pA2shTW+e+b6aElQ3bFqXUn3H84e0lqWIjUXhNpi2MJQ0wyXTOdbt2yR 7Aj/HltaaDhziGOZR+WEuww/N/ucDpp+8dlA++D7qXKvOgy3ndIm2P3YkGUucT1E +3TB4y6FwBaaTU5fUP/DrjOx1TWk/lYt4WixfnadlCVpve88OSwyJ9eDyPa3lV33 qPQBPxc1aLP5FV0sWjnWDWlYfY6JyFKbLQhXwIzebXA7bzQWSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBcWWD0bwZumOgDkbzyHf+u3BtAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg2OcbARXIZbRJOI2QBODd ea/beiHuHOiHzW7tuc2aOXk503t5VdIocz5PjK+PzFZ8S6ops739DHaCQl/Nd7ka mfZJGKqlPg1slyqpEGdEfDQmvRfZz1f9s8BAE5hOp2jBobZuCVRLrvDDrJeEdpgs +on7sIsmS18qCULpRTL1+hU30vPeHG2tSWeoKX6NjYMPZuS6Lth0jPzZ+Ji/Y2y7 G6zau/VbS+fO9i26OY+uNtoq3YmhzeBQX4EUKZgPUYps1+OpWwwhN0gsoa9ZQjMu fKo3cNpwuPL5lrdOh+lzpGGUigExmSkSoCf6eTJe48UFGvWbHxAkPo0IyJ6PvZU8 -----END CERTIFICATE-----Generated at Fri Oct 10 23:38:51 2025 by rpki-client