$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: pasmVuWWB7nO0zf4NiRsREInOBWztfLJ1WMmHX131z4= Subject key identifier: D8:30:7E:5C:9F:45:85:52:BB:E2:9B:5E:AB:3F:2E:C0:D5:A9:52:5A Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584B77A460B1869E2E72B2529A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F70B3 Signing time: Thu 09 Oct 2025 19:00:03 +0000 Manifest this update: Thu 09 Oct 2025 19:00:03 +0000 Manifest next update: Sun 12 Oct 2025 19:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: kG6kiV1IIF0cUuBsmuJ4q+dRoONBwcQ33RmgHOx+G+I=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: NRpR6geFCHR+7fALoEntSewh6MfUBWUeanuDia0/Ocs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:a4:60:b1:86:9e:2e:72:b2:52:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Oct 9 19:00:03 2025 GMT Not After : Oct 12 19:00:00 2025 GMT Subject: CN=2f38b460-65e3-489a-98ba-b929064ae7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:54:94:97:8d:e7:0b:a3:11:41:49:50:b9: 28:92:36:63:98:75:57:80:2e:ea:5c:e3:1a:0c:e8: c2:4e:c3:2a:6c:06:44:45:96:7b:3d:6f:17:ae:76: af:40:48:e6:9f:6d:44:db:cc:76:12:07:06:b1:53: 15:7b:89:9a:05:be:56:e7:fa:eb:8c:ff:84:7e:bb: 3e:87:00:48:21:07:85:6e:f0:eb:32:7d:60:47:a7: 61:4a:6c:20:cb:9a:74:28:d8:0f:fd:c7:be:bd:62: 02:dd:50:61:d0:a0:d4:81:44:37:5d:37:04:41:c1: 4e:3f:58:91:3f:c8:04:a2:a4:89:ee:be:aa:21:4f: df:0d:7c:ca:8a:0e:b6:e0:df:3b:ed:ef:e6:d1:76: 3f:3d:fa:a5:fa:0c:ef:9f:3a:59:b6:6e:a7:2d:3b: 45:43:6b:fa:db:cd:6a:f1:7b:31:3f:66:5e:ef:b5: 62:d1:75:94:59:bc:91:29:fa:02:1c:59:f3:0c:0c: a7:55:ff:f6:84:82:ac:74:45:d0:db:ab:6d:9f:d5: ce:9d:48:9f:38:18:35:75:eb:f0:e9:6d:27:23:14: 9c:f4:6a:b5:4d:00:e2:dc:5f:c9:82:40:12:f7:a6: fe:d8:1a:37:23:d5:98:45:d7:92:f4:04:09:e3:58: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:30:7E:5C:9F:45:85:52:BB:E2:9B:5E:AB:3F:2E:C0:D5:A9:52:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6f:bd:38:4e:a8:53:65:c1:f2:88:27:07:e2:a2:e1:42:2d: 56:6a:54:f8:e3:47:7a:90:9e:ac:d6:95:05:94:20:ea:6d:5b: 00:30:84:ac:81:5f:45:d9:f0:14:5d:50:4c:c7:ab:82:0a:f6: 76:19:d8:66:70:28:3c:fc:db:22:9b:83:88:cb:a7:58:8e:83: d8:71:e8:28:fd:10:b8:1f:73:47:d2:72:9b:32:00:b5:01:15: a0:11:43:10:6c:6e:87:4a:ff:f7:30:9d:23:74:4e:1e:6c:23: d5:37:1f:b5:5d:e0:d8:1f:2d:54:ed:39:7a:29:0d:7f:94:a3: bc:b9:3f:07:f4:03:2b:f6:bf:9e:65:fb:fd:99:b7:b7:2e:d9: c8:1f:24:de:fa:23:8c:6c:8e:22:a7:30:98:26:a3:86:40:b7: 99:22:7a:c8:2a:88:75:6d:3e:21:fd:ba:9a:01:30:1c:d1:13: 18:2e:ce:7b:12:43:bb:d6:12:57:df:9e:da:d4:03:db:30:6c: 68:cf:b1:0a:9a:64:ef:8f:e5:cb:75:ec:1e:22:a6:7d:b5:e5: ad:2a:b1:7b:00:a4:72:39:a9:bf:30:59:62:46:13:a2:00:5a: 6b:c2:6d:ae:ad:3b:86:a6:39:2d:2f:9e:38:c4:ef:cc:5f:1b: 21:13:a6:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3pGCxhp4ucrJSmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MTAwOTE5MDAwM1oXDTI1MTAxMjE5MDAwMFowLzEtMCsGA1UEAxMk MmYzOGI0NjAtNjVlMy00ODlhLTk4YmEtYjkyOTA2NGFlN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUxUlJeN5wujEUFJULkokjZjmHVXgC7qXOMa DOjCTsMqbAZERZZ7PW8XrnavQEjmn21E28x2EgcGsVMVe4maBb5W5/rrjP+Efrs+ hwBIIQeFbvDrMn1gR6dhSmwgy5p0KNgP/ce+vWIC3VBh0KDUgUQ3XTcEQcFOP1iR P8gEoqSJ7r6qIU/fDXzKig624N877e/m0XY/Pfql+gzvnzpZtm6nLTtFQ2v6281q 8XsxP2Ze77Vi0XWUWbyRKfoCHFnzDAynVf/2hIKsdEXQ26ttn9XOnUifOBg1devw 6W0nIxSc9Gq1TQDi3F/JgkAS96b+2Bo3I9WYRdeS9AQJ41i7kQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNgwflyfRYVSu+KbXqs/LsDVqVJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZb704TqhTZcHyiCcH4qLh Qi1WalT440d6kJ6s1pUFlCDqbVsAMISsgV9F2fAUXVBMx6uCCvZ2GdhmcCg8/Nsi m4OIy6dYjoPYcego/RC4H3NH0nKbMgC1ARWgEUMQbG6HSv/3MJ0jdE4ebCPVNx+1 XeDYHy1U7Tl6KQ1/lKO8uT8H9AMr9r+eZfv9mbe3LtnIHyTe+iOMbI4ipzCYJqOG QLeZInrIKoh1bT4h/bqaATAc0RMYLs57EkO71hJX357a1APbMGxoz7EKmmTvj+XL deweIqZ9teWtKrF7AKRyOam/MFliRhOiAFprwm2urTuGpjktL544xO/MXxshE6aB -----END CERTIFICATE-----Generated at Fri Oct 10 18:47:28 2025 by rpki-client