$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft File: 3bb72fa3-359e-464d-be35-978a12d62998.mft (raw, json) Hash identifier: YaaNmGRDNl1JQDVD4H8EdVczA5QQm1xBRkJzttK/LR4= Subject key identifier: 20:FB:A4:C5:89:2D:AE:C1:93:0A:99:A7:F0:66:45:40:B6:79:9E:5D Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584B7768D45F619C4C1B882E9FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft Manifest number: 010D0C9F432858478216621AE1CF34A01FCA0380 Signing time: Thu 09 Oct 2025 17:00:03 +0000 Manifest this update: Thu 09 Oct 2025 17:00:03 +0000 Manifest next update: Sat 11 Oct 2025 17:00:00 +0000 Files and hashes: 1: 3bb72fa3-359e-464d-be35-978a12d62998.crl (hash: PgTGwl38Ai1712ibeH6+QQCTjmPtoY9gWBkdJ4o1W1c=) 2: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (hash: y0JC6EdliGsx3kp+4VboB35BMI6sT4y75ybCKfqsXA8=) 3: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (hash: AiEDXxN5pPLbEt+lkBKS9mQAsqU352f7SxmFd035uN4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:68:d4:5f:61:9c:4c:1b:88:2e:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Oct 9 17:00:03 2025 GMT Not After : Oct 11 17:00:00 2025 GMT Subject: CN=71b2ee74-2ee1-435d-9f08-89ab47ba8483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:d8:6d:48:76:60:f4:e9:84:c1:05:26:7e: 71:3f:b5:b0:73:f2:7d:2a:80:85:01:3c:09:aa:df: 68:92:ec:88:97:9e:51:e2:54:0e:a7:d3:4a:72:bd: 77:0f:11:0f:e7:aa:3d:db:42:b6:ce:3b:b3:4e:71: 10:58:73:f4:f4:60:7c:3d:27:94:94:9d:cf:ac:42: 4c:f6:bc:6e:d9:86:2b:0a:9e:66:ec:82:eb:4c:c8: 2d:b2:7a:6f:c4:d8:44:85:f3:31:e7:7b:1a:19:f5: 95:c2:3a:a0:83:91:91:69:80:a6:3d:d8:c9:57:c2: 8f:de:6f:4a:06:98:c4:43:48:53:8b:2c:85:4f:15: 3f:9b:22:29:1d:c5:9b:1c:c1:49:ac:69:21:73:2b: a8:29:31:9a:68:4f:19:a7:b3:f8:9d:bb:d4:84:d1: 48:2c:68:3b:8a:29:02:62:1d:6d:66:4f:67:b5:0a: c4:d1:93:a4:18:89:79:f4:10:67:64:60:eb:e2:4c: e1:63:e3:25:ec:45:2c:0e:d5:ff:7f:37:3a:77:e6: 6d:90:92:db:b1:23:5f:45:f0:df:c2:6e:5f:82:84: dc:ce:71:36:b8:33:8c:2c:5a:e2:96:88:5b:99:02: 3a:59:48:82:c2:a3:55:bd:6b:38:78:7e:fb:58:df: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:A4:C5:89:2D:AE:C1:93:0A:99:A7:F0:66:45:40:B6:79:9E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:12:3a:00:be:79:70:ed:94:c9:92:65:18:73:40:e4:ba:d2: 37:89:4f:f3:ce:92:02:05:79:8c:42:3a:87:36:1c:78:50:66: 79:34:8a:42:6d:fd:3a:28:e0:ac:80:35:54:e3:ba:dd:c0:95: 4d:38:2e:b0:7c:1e:5c:7a:8d:41:41:57:6d:23:6a:d1:12:1b: 00:fd:ec:f4:c0:15:82:ce:09:e9:2d:c5:c4:5a:0b:b2:1f:6c: 0d:89:6c:ee:a5:5e:9f:c6:57:1b:6a:e8:90:06:5c:08:ce:5b: c2:d5:53:50:e7:e0:31:92:32:c3:4c:ce:0a:90:da:f8:0b:1e: 1d:87:a4:df:fa:76:0d:9d:9a:59:d6:2a:89:3c:7a:aa:3b:6f: fe:2c:7b:8e:33:dd:02:e2:53:27:a7:0d:5f:3a:98:9c:e5:be: fe:f1:e0:20:84:f7:25:e6:d9:8b:97:ac:28:eb:01:61:7f:33: d7:36:97:da:9b:eb:2e:8d:d5:31:d0:0a:51:87:6d:4b:51:ed: eb:0f:51:66:1f:e7:40:78:ce:1e:b5:05:d3:6d:13:78:63:60: 69:d0:e7:0e:18:a4:25:b7:a7:f8:bc:97:9c:dd:57:07:54:d5: b7:8a:e7:b6:0b:96:db:fc:cf:c4:e6:ec:3e:05:ed:01:52:ed: a5:70:ec:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3aNRfYZxMG4gun8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MTAwOTE3MDAwM1oXDTI1MTAxMTE3MDAwMFowLzEtMCsGA1UEAxMk NzFiMmVlNzQtMmVlMS00MzVkLTlmMDgtODlhYjQ3YmE4NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlErYbUh2YPTphMEFJn5xP7Wwc/J9KoCFATwJ qt9okuyIl55R4lQOp9NKcr13DxEP56o920K2zjuzTnEQWHP09GB8PSeUlJ3PrEJM 9rxu2YYrCp5m7ILrTMgtsnpvxNhEhfMx53saGfWVwjqgg5GRaYCmPdjJV8KP3m9K BpjEQ0hTiyyFTxU/myIpHcWbHMFJrGkhcyuoKTGaaE8Zp7P4nbvUhNFILGg7iikC Yh1tZk9ntQrE0ZOkGIl59BBnZGDr4kzhY+Ml7EUsDtX/fzc6d+ZtkJLbsSNfRfDf wm5fgoTcznE2uDOMLFrilohbmQI6WUiCwqNVvWs4eH77WN/97wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCD7pMWJLa7BkwqZp/BmRUC2eZ5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvM2JiNzJmYTMtMzU5ZS00 NjRkLWJlMzUtOTc4YTEyZDYyOTk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWEjoAvnlw7ZTJkmUYc0Dk utI3iU/zzpICBXmMQjqHNhx4UGZ5NIpCbf06KOCsgDVU47rdwJVNOC6wfB5ceo1B QVdtI2rREhsA/ez0wBWCzgnpLcXEWguyH2wNiWzupV6fxlcbauiQBlwIzlvC1VNQ 5+AxkjLDTM4KkNr4Cx4dh6Tf+nYNnZpZ1iqJPHqqO2/+LHuOM90C4lMnpw1fOpic 5b7+8eAghPcl5tmLl6wo6wFhfzPXNpfam+sujdUx0ApRh21LUe3rD1FmH+dAeM4e tQXTbRN4Y2Bp0OcOGKQlt6f4vJec3VcHVNW3iue2C5bb/M/E5uw+Be0BUu2lcOzE -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:08 2025 by rpki-client