$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: 4zgr5HZBD8e4dd4jmXYIffwbBU5W+iewjWHsIV2m1Ko= Subject key identifier: 46:00:6A:44:60:58:17:93:8A:FF:06:5E:FE:1A:AC:9D:11:49:A6:FC Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584B7B7B1D365CF301DB687E28C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF5643CA Signing time: Sat 11 Oct 2025 04:00:08 +0000 Manifest this update: Sat 11 Oct 2025 04:00:08 +0000 Manifest next update: Mon 13 Oct 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 8kTN9u66M6Nsztcy/hQhpR3uLP4Ht7SmYKQ0RACAH6s=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: WKQtglIF43w2PzHkIkAhQy9grYiOUo7/FshaSKEMERU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:7b:1d:36:5c:f3:01:db:68:7e:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Oct 11 04:00:08 2025 GMT Not After : Oct 13 04:00:00 2025 GMT Subject: CN=f7336537-9ec2-4195-8b9f-ce3ee788eb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:22:8b:51:f0:a6:93:08:35:3f:fd:5f:85: 7d:5a:7c:a4:ee:b2:e0:78:6a:5e:3e:c4:4f:28:a5: 14:dc:3b:10:43:9b:f2:cc:f0:95:d8:c7:ed:a8:e8: f7:9f:be:18:b5:75:ba:ce:eb:63:9a:45:6f:2d:2a: 7a:22:d2:ab:de:0f:f0:e9:c2:9e:13:07:ec:8f:55: 02:e2:79:d8:8f:13:0a:42:4a:0d:6c:da:c2:88:0e: 88:aa:85:bd:46:ae:e2:29:33:cc:81:03:85:98:4e: 42:4a:70:cb:ed:38:fe:bf:a0:94:27:f1:d7:af:d2: bb:72:4c:c2:fe:ee:66:6d:2a:8b:9b:01:da:90:ab: 2e:fe:c8:bb:85:7f:84:6e:99:0e:d3:05:4a:27:3c: 33:fc:5d:35:af:4f:d1:5d:c2:c5:09:b9:99:ea:5f: ba:4a:0b:17:99:0a:8d:9a:ae:65:6f:06:ef:87:de: ee:02:33:6a:25:01:e5:b8:c5:b3:cc:74:f1:7e:e9: e7:ac:7a:0b:95:2d:85:cb:b1:5a:76:5c:8b:b9:14: 6b:fa:db:aa:0e:fa:49:53:c6:e7:b8:a4:ac:59:d7: c5:9b:cc:66:a0:e7:76:53:63:d1:52:0e:38:1f:d6: 60:ee:54:8c:da:c8:55:0b:e9:e2:b9:d8:e0:f8:9c: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:00:6A:44:60:58:17:93:8A:FF:06:5E:FE:1A:AC:9D:11:49:A6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:bd:73:0f:3a:c7:be:5f:8f:c5:38:39:55:c0:8a:87:01:7f: 0b:5a:72:40:3c:ec:71:20:6e:67:47:ee:b4:5b:c0:da:9a:45: e0:65:48:82:40:b4:57:60:62:13:cb:1b:97:4a:1c:38:05:0d: 0f:0f:a2:40:b3:42:cd:3d:09:59:b8:49:5d:97:84:f9:6a:ec: bb:13:7e:bd:bb:c5:f2:1b:d1:af:80:a6:04:37:79:b3:15:b6: df:df:2f:39:60:1b:31:58:9f:67:62:2e:18:5b:56:56:ee:79: 1b:a3:54:55:c0:4d:25:0b:e4:87:b6:1e:68:93:a0:60:cd:6e: 5d:de:72:0c:dd:e2:37:48:56:b1:e4:01:3a:e6:cd:bc:8f:8f: f1:7d:7f:7c:cb:34:db:58:37:34:a6:f7:2e:90:a2:4b:d7:7c: 4b:65:92:1b:86:37:07:97:97:ae:57:ab:c2:b8:6e:b3:3a:0e: 12:a8:46:97:29:2e:aa:bc:59:c0:da:d7:af:0d:cb:96:02:60: 8c:2c:db:30:66:59:8d:a6:4b:8d:db:f3:6b:d9:30:a5:f1:c0: ea:a3:80:51:d0:9f:02:10:e5:53:3a:e4:f0:94:ea:3d:bc:92: a4:68:d9:9c:b4:98:5f:13:43:e2:ca:f1:74:e4:ca:bd:9d:92: f3:76:36:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt7ex02XPMB22h+KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MTAxMTA0MDAwOFoXDTI1MTAxMzA0MDAwMFowLzEtMCsGA1UEAxMk ZjczMzY1MzctOWVjMi00MTk1LThiOWYtY2UzZWU3ODhlYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSAii1HwppMINT/9X4V9Wnyk7rLgeGpePsRP KKUU3DsQQ5vyzPCV2MftqOj3n74YtXW6zutjmkVvLSp6ItKr3g/w6cKeEwfsj1UC 4nnYjxMKQkoNbNrCiA6IqoW9Rq7iKTPMgQOFmE5CSnDL7Tj+v6CUJ/HXr9K7ckzC /u5mbSqLmwHakKsu/si7hX+EbpkO0wVKJzwz/F01r0/RXcLFCbmZ6l+6SgsXmQqN mq5lbwbvh97uAjNqJQHluMWzzHTxfunnrHoLlS2Fy7FadlyLuRRr+tuqDvpJU8bn uKSsWdfFm8xmoOd2U2PRUg44H9Zg7lSM2shVC+niudjg+JzG7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEYAakRgWBeTiv8GXv4arJ0RSab8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsvXMPOse+X4/FODlVwIqH AX8LWnJAPOxxIG5nR+60W8DamkXgZUiCQLRXYGITyxuXShw4BQ0PD6JAs0LNPQlZ uEldl4T5auy7E369u8XyG9GvgKYEN3mzFbbf3y85YBsxWJ9nYi4YW1ZW7nkbo1RV wE0lC+SHth5ok6BgzW5d3nIM3eI3SFax5AE65s28j4/xfX98yzTbWDc0pvcukKJL 13xLZZIbhjcHl5euV6vCuG6zOg4SqEaXKS6qvFnA2tevDcuWAmCMLNswZlmNpkuN 2/Nr2TCl8cDqo4BR0J8CEOVTOuTwlOo9vJKkaNmctJhfE0PiyvF05Mq9nZLzdjZ2 -----END CERTIFICATE-----Generated at Sat Oct 11 11:28:24 2025 by rpki-client