$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft File: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft (raw, json) Hash identifier: bT0vmOLb1UxHSGV+YaGlXkmyhyT1kfLA3aqTIUIOkIg= Subject key identifier: 42:83:6A:B1:9B:C8:5C:53:BE:EC:14:7A:C5:E1:C9:58:7B:69:17:6E Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 Certificate issuer: /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Certificate serial: 010D0C9F4328584B7A15BBF04703887E0C94E340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft Manifest number: 010D0C9F43285846A2A5DF805C012DA5D578D147 Signing time: Fri 10 Oct 2025 16:00:03 +0000 Manifest this update: Fri 10 Oct 2025 16:00:03 +0000 Manifest next update: Mon 13 Oct 2025 16:00:00 +0000 Files and hashes: 1: a082d65c-6976-35d6-be33-792a4918c345.roa (hash: 1y0Y1zQLMv4Qum79YgiwLeDGJl+vfe4nnwIQVEpseIE=) 2: b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl (hash: pIEhaX5BZIZW4EfPAg9T1uWPVguJ0IxacJHvbQepXNs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:15:bb:f0:47:03:88:7e:0c:94:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Validity Not Before: Oct 10 16:00:03 2025 GMT Not After : Oct 13 16:00:00 2025 GMT Subject: CN=08b3338e-cbd1-4c84-a85d-e2af82615f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:d8:e8:b3:ba:03:17:6d:36:96:c5:3c:a5: 7d:1b:67:89:6b:65:6d:31:48:57:50:9c:41:1e:26: 63:0b:b6:da:e2:c2:01:cf:51:de:1e:9b:a4:cf:16: 1a:26:6b:92:7f:83:20:8c:d2:1c:f9:f5:60:67:e2: ef:f8:1a:f1:49:fd:af:c1:df:79:8a:9b:b7:3d:2b: f3:29:87:96:11:67:a7:3d:4f:95:4e:ef:31:c4:dc: 1d:b9:bb:9b:12:ca:cf:e2:3c:80:a6:a8:5d:9b:d3: c0:fa:38:05:4d:a3:30:29:e0:ac:bd:31:b8:7d:2f: 2f:23:9e:d6:9f:04:8d:1c:29:02:e3:d3:85:96:20: f9:35:b0:4c:42:86:97:b0:ff:0f:6d:06:6d:99:f6: f3:e1:19:06:64:c0:61:c4:e4:16:57:f7:11:c4:68: 5a:ce:28:f8:66:6b:06:59:6e:29:7b:1c:ac:6b:26: ff:8a:12:28:45:2c:ea:bb:e1:bc:d1:73:dd:3e:3b: 35:aa:08:cc:0e:2d:c9:94:07:71:3f:a8:36:55:16: ae:a5:13:30:93:2a:36:c4:a3:f9:9a:a6:55:b0:3d: 89:fb:0d:88:83:d7:54:5b:1a:7b:fd:bd:96:c5:ce: 03:66:80:6a:bc:e6:a5:64:97:37:89:8f:a4:fc:f8: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:6A:B1:9B:C8:5C:53:BE:EC:14:7A:C5:E1:C9:58:7B:69:17:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl X509v3 Authority Key Identifier: keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:24:c7:77:ca:79:6b:86:f8:cb:71:b4:44:35:82:84:e7:f8: d8:96:de:8d:a7:58:b0:bd:26:9e:a6:f7:e9:ce:72:cb:c7:db: 7b:a8:a6:df:ee:81:28:ef:b2:c2:a4:40:27:c0:a6:a3:6e:53: e0:7e:94:8d:8c:67:4b:9d:1b:69:51:ba:e5:88:b3:37:1c:ae: a1:1b:6a:c3:7a:0e:24:d8:e1:a3:2b:58:14:35:57:33:4e:67: eb:55:06:97:8c:57:36:34:57:ac:a9:bf:12:04:03:e0:ae:a6: 7c:95:ff:b2:f6:4e:80:d9:43:1c:45:f9:47:6f:b8:b1:a8:f5: d1:48:19:36:0f:27:e7:3a:1c:30:ec:b9:95:15:4e:b8:6c:28: 3c:d1:a3:bb:bd:36:72:d0:f2:34:ab:3b:d4:fe:e2:0d:80:1e: 5a:ae:c4:e9:8a:03:6f:e3:ec:b2:91:b2:f5:3c:76:a3:1d:8c: 97:b9:af:fd:41:c6:0b:f6:99:79:78:f4:5b:5a:55:0f:12:67: aa:14:65:d0:ca:f3:85:13:55:42:d0:cd:08:6b:b6:52:5a:8a: ff:90:39:76:bd:77:66:94:f7:28:f9:19:2c:ad:0c:ef:e9:5e: 4e:63:57:1b:b5:9f:0d:b9:38:d2:d8:68:46:9d:02:f6:37:a0: e7:c6:7f:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt6FbvwRwOIfgyU40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM5ODdhMDItOWViMy00Zjg4LThlOWEtMmJhNTUwYzM0 NDNiMB4XDTI1MTAxMDE2MDAwM1oXDTI1MTAxMzE2MDAwMFowLzEtMCsGA1UEAxMk MDhiMzMzOGUtY2JkMS00Yzg0LWE4NWQtZTJhZjgyNjE1ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U3Y6LO6AxdtNpbFPKV9G2eJa2VtMUhXUJxB HiZjC7ba4sIBz1HeHpukzxYaJmuSf4MgjNIc+fVgZ+Lv+BrxSf2vwd95ipu3PSvz KYeWEWenPU+VTu8xxNwdububEsrP4jyApqhdm9PA+jgFTaMwKeCsvTG4fS8vI57W nwSNHCkC49OFliD5NbBMQoaXsP8PbQZtmfbz4RkGZMBhxOQWV/cRxGhazij4ZmsG WW4pexysayb/ihIoRSzqu+G80XPdPjs1qgjMDi3JlAdxP6g2VRaupRMwkyo2xKP5 mqZVsD2J+w2Ig9dUWxp7/b2Wxc4DZoBqvOalZJc3iY+k/Pi0nwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEKDarGbyFxTvuwUesXhyVh7aRduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMzk4 N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1NTBjMzQ0M2IvYjM5ODdhMDItOWViMy00 Zjg4LThlOWEtMmJhNTUwYzM0NDNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjM5ODdhMDItOWViMy00Zjg4LThl OWEtMmJhNTUwYzM0NDNiL2IzOTg3YTAyLTllYjMtNGY4OC04ZTlhLTJiYTU1MGMz NDQzYi5jcmwwHwYDVR0jBBgwFoAUQFs2D+DwLAsH4BdLT6Rmei8vxBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMzk4N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1 NTBjMzQ0M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIJMd3ynlrhvjLcbRENYKE 5/jYlt6Np1iwvSaepvfpznLLx9t7qKbf7oEo77LCpEAnwKajblPgfpSNjGdLnRtp UbrliLM3HK6hG2rDeg4k2OGjK1gUNVczTmfrVQaXjFc2NFesqb8SBAPgrqZ8lf+y 9k6A2UMcRflHb7ixqPXRSBk2DyfnOhww7LmVFU64bCg80aO7vTZy0PI0qzvU/uIN gB5arsTpigNv4+yykbL1PHajHYyXua/9QcYL9pl5ePRbWlUPEmeqFGXQyvOFE1VC 0M0Ia7ZSWor/kDl2vXdmlPco+RksrQzv6V5OY1cbtZ8NuTjS2GhGnQL2N6Dnxn+i -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:53 2025 by rpki-client