$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft File: 3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json) Hash identifier: GMr3nPQGpc/t6aAy28aFZB/aFz/su2SoMdbERbDBbNk= Subject key identifier: 72:8B:5A:06:F0:B9:9F:AA:A4:0E:64:3F:5B:EA:D1:AB:9F:F0:F6:74 Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238 Certificate serial: 010D0C9F4328584B7768D5C7DDA4540A466B9D70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft Manifest number: 010D0C9F43285845DC7F251890046E2B090F55FE Signing time: Thu 09 Oct 2025 17:00:03 +0000 Manifest this update: Thu 09 Oct 2025 17:00:03 +0000 Manifest next update: Sun 12 Oct 2025 17:00:00 +0000 Files and hashes: 1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: sPrGYAkruwHEPgo+7V9uI9ZFey8kE03+xuGb+k0+NmQ=) 2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: xYgucBm7SwVMLR4xasd9joHhxgyQzWhandh0icNj1ac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:68:d5:c7:dd:a4:54:0a:46:6b:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Validity Not Before: Oct 9 17:00:03 2025 GMT Not After : Oct 12 17:00:00 2025 GMT Subject: CN=91f2bb28-3e64-4e85-a3d4-63be1d5ca107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:98:ee:85:0d:81:6a:d4:ea:02:7e:3e:80: 85:cb:64:75:56:d5:61:30:f3:12:71:03:42:92:fc: 4d:ae:ef:f2:a2:09:6c:c9:18:c4:ec:a7:40:5f:97: ea:7b:c0:e0:0d:57:0a:8e:22:c0:8b:49:f8:dd:c2: 28:04:1b:06:4e:10:c9:bd:3d:d0:00:05:0a:1c:00: 05:02:5c:11:65:f3:57:84:6c:bc:3e:c8:b9:af:b2: 7a:03:c0:c2:d7:3f:6f:83:c0:59:fc:1b:83:0e:d0: c2:1f:a5:d1:24:c0:8c:c0:cd:74:4a:ce:b0:e7:a2: 17:a9:10:f6:07:58:53:88:a8:71:48:49:a4:4a:44: a1:b5:bf:ea:db:2d:8b:7d:86:87:2e:f1:5f:6e:d7: ba:11:3d:71:6c:6e:06:19:52:24:fc:33:ac:26:10: fe:fe:84:a3:a9:b2:ad:3f:9b:99:08:bd:14:75:8f: c3:45:3d:db:78:3d:bc:93:19:55:04:df:c4:c4:91: 70:60:bd:b6:70:6d:e9:fc:ad:76:63:99:b0:57:7e: 4b:64:f5:51:0b:0a:05:fc:73:72:a8:7a:c8:54:0b: 39:ee:6b:54:56:3c:03:28:46:27:a1:19:5c:98:e7: 85:3a:e6:f5:6a:5e:67:7b:0a:71:d1:36:54:8e:7e: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:5A:06:F0:B9:9F:AA:A4:0E:64:3F:5B:EA:D1:AB:9F:F0:F6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl X509v3 Authority Key Identifier: keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b0:9b:7d:fc:f2:6b:b8:c8:b6:49:54:ff:a1:ac:89:0d:2a: c4:9c:e1:b5:09:d5:97:83:af:ca:d1:50:5a:9c:ee:4a:87:39: d0:1e:35:e8:64:8e:5f:f4:ea:74:34:34:45:e0:2e:fa:95:8d: ef:24:7c:23:1c:78:d4:9e:7e:3f:ab:f3:1c:5d:4c:65:a5:9c: ca:55:d4:03:cc:ab:62:66:1b:b7:72:47:91:79:6f:b9:d2:af: be:f0:6a:8c:b5:c3:44:84:61:0d:1d:06:6c:33:b7:f9:2f:8e: 34:71:de:64:3e:af:bd:03:4c:87:93:ac:7c:34:bc:13:2a:7d: cc:dd:b3:3e:dd:62:0d:6c:2f:ec:3b:78:9b:42:cf:25:4a:ad: 6f:fb:ad:e8:83:7c:b0:ea:6b:40:06:ca:f7:be:04:72:08:55: 3a:bb:40:c7:15:f7:6e:de:79:4b:8b:29:07:82:c6:17:21:56: 60:67:8c:ce:fc:2d:5f:d3:2d:65:8b:7a:44:af:cc:a6:8f:38: 3f:ab:43:be:e5:03:59:4d:8f:0c:9c:88:3b:4a:d4:11:20:7e: ae:6c:07:e6:ac:d6:75:1f:65:1e:df:9f:c9:5b:e5:ad:1b:12: a1:42:6f:2d:c2:15:65:11:41:fd:d2:79:82:36:d3:39:16:13: ec:15:8b:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3aNXH3aRUCkZrnXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz MjM4MB4XDTI1MTAwOTE3MDAwM1oXDTI1MTAxMjE3MDAwMFowLzEtMCsGA1UEAxMk OTFmMmJiMjgtM2U2NC00ZTg1LWEzZDQtNjNiZTFkNWNhMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozyY7oUNgWrU6gJ+PoCFy2R1VtVhMPMScQNC kvxNru/yoglsyRjE7KdAX5fqe8DgDVcKjiLAi0n43cIoBBsGThDJvT3QAAUKHAAF AlwRZfNXhGy8Psi5r7J6A8DC1z9vg8BZ/BuDDtDCH6XRJMCMwM10Ss6w56IXqRD2 B1hTiKhxSEmkSkShtb/q2y2LfYaHLvFfbte6ET1xbG4GGVIk/DOsJhD+/oSjqbKt P5uZCL0UdY/DRT3beD28kxlVBN/ExJFwYL22cG3p/K12Y5mwV35LZPVRCwoF/HNy qHrIVAs57mtUVjwDKEYnoRlcmOeFOub1al5newpx0TZUjn5kHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHKLWgbwuZ+qpA5kP1vq0auf8PZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00 NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3 YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5 OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAasJt9/PJruMi2SVT/oayJ DSrEnOG1CdWXg6/K0VBanO5KhznQHjXoZI5f9Op0NDRF4C76lY3vJHwjHHjUnn4/ q/McXUxlpZzKVdQDzKtiZhu3ckeReW+50q++8GqMtcNEhGENHQZsM7f5L440cd5k Pq+9A0yHk6x8NLwTKn3M3bM+3WINbC/sO3ibQs8lSq1v+63og3yw6mtABsr3vgRy CFU6u0DHFfdu3nlLiykHgsYXIVZgZ4zO/C1f0y1li3pEr8ymjzg/q0O+5QNZTY8M nIg7StQRIH6ubAfmrNZ1H2Ue35/JW+WtGxKhQm8twhVlEUH90nmCNtM5FhPsFYuh -----END CERTIFICATE-----Generated at Fri Oct 10 17:36:34 2025 by rpki-client