$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: LatL2fHeCPlWOcGMWagO5Up66MtP2XeloNZIptNSnsw= Subject key identifier: 77:4D:1A:F0:17:D0:34:1C:85:86:8F:A1:55:2B:50:5F:A1:BC:89:F3 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584B79630F26C2CD6E36347EA0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBB0B Signing time: Fri 10 Oct 2025 10:00:03 +0000 Manifest this update: Fri 10 Oct 2025 10:00:03 +0000 Manifest next update: Mon 13 Oct 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: pr4+mUf1zepChjdawQKyEs/La1nx2rJSxi+ku7tQQQA=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: H06UmjlWIabt2OGqnnY+gtdAB6k8ET6VYOJWn69U9x8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:63:0f:26:c2:cd:6e:36:34:7e:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Oct 10 10:00:03 2025 GMT Not After : Oct 13 10:00:00 2025 GMT Subject: CN=ce25d42d-48cb-4bce-8b74-e783942845de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:18:ab:9e:0d:22:ff:7f:49:f1:d0:3a:e9: ee:a5:62:8b:f5:4f:89:3e:ca:9e:fa:8d:68:c3:78: ce:97:84:26:ca:88:13:a3:1c:76:6a:34:86:e7:f9: cc:07:63:c7:bb:7e:80:92:16:5d:e7:18:9d:91:e8: e8:87:c9:3d:ab:c6:f6:d4:2c:81:14:9a:70:fe:1c: 4b:d2:9b:30:f8:2d:f0:af:7f:c8:9e:5a:2e:ef:fe: 75:48:9e:1c:32:1a:f5:44:f2:59:cd:a2:6c:db:a7: 4c:63:12:cd:54:3a:30:c0:fa:29:a5:d0:3e:a8:3c: 19:09:59:2e:a8:3a:90:3c:e9:99:6f:09:d1:4d:92: a8:ac:c2:62:a2:ca:a4:31:5e:ae:78:75:ce:8a:38: 7a:32:0f:68:f8:d1:e3:16:44:1f:8b:16:41:5e:bc: 09:f7:43:31:87:65:d7:d1:35:53:d4:1a:6d:2c:c3: 41:ed:e9:2d:2a:b7:97:0b:8d:a4:44:a8:bd:c9:3d: 53:d2:8f:3c:15:50:c0:d3:e8:99:ec:af:4f:01:c9: bc:df:73:ac:b7:c5:19:5a:a0:ea:32:20:fd:d4:dc: 0b:85:f2:13:1d:e7:2b:16:75:9e:8e:ba:f8:69:6e: 2b:65:b7:62:4d:84:4c:62:02:8e:9d:20:38:e7:7e: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4D:1A:F0:17:D0:34:1C:85:86:8F:A1:55:2B:50:5F:A1:BC:89:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bc:a4:e9:93:ae:ae:68:b7:98:e4:cd:95:b4:91:47:bb:84: 0e:c6:ea:0b:57:bd:b1:d3:b2:6b:a0:23:28:b5:76:09:93:0d: 59:6e:98:f3:29:9c:ca:09:a2:0e:cd:17:17:d7:b8:70:14:6f: 73:6e:30:b8:ce:1d:95:dd:aa:fc:43:09:2b:bc:e3:b8:2e:51: 5f:04:7c:ad:b9:fd:ec:21:14:69:ce:3b:4d:83:c8:d9:47:5a: e5:41:1d:4b:0b:2f:cb:d2:43:70:4a:f9:6d:9f:01:63:df:ff: 49:83:68:a8:2f:33:34:c4:17:66:ef:60:f6:f2:bd:94:8c:31: 3d:60:58:8b:2d:7d:3f:8e:40:ef:ea:ac:13:45:76:0e:a6:92: 1d:76:04:6b:e6:5d:88:b7:05:54:34:d5:fc:63:a7:2c:2a:d2: 63:bd:a8:91:20:f5:44:46:1b:91:7a:a0:88:a3:82:f2:fd:cc: 05:99:60:a2:0b:64:78:57:11:57:0c:91:98:0b:98:db:2b:d7: 18:d3:c2:3c:c0:1f:16:48:00:59:33:8f:11:20:5b:2c:bb:a8: 0b:43:31:4e:3e:84:ba:af:2d:75:41:c3:ab:6c:d8:65:ff:34: 6d:eb:bb:34:3f:0e:b6:5b:22:a2:19:71:9d:b0:44:0e:96:a8: d7:33:76:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt5Yw8mws1uNjR+oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MTAxMDEwMDAwM1oXDTI1MTAxMzEwMDAwMFowLzEtMCsGA1UEAxMk Y2UyNWQ0MmQtNDhjYi00YmNlLThiNzQtZTc4Mzk0Mjg0NWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYYq54NIv9/SfHQOunupWKL9U+JPsqe+o1o w3jOl4QmyogToxx2ajSG5/nMB2PHu36AkhZd5xidkejoh8k9q8b21CyBFJpw/hxL 0psw+C3wr3/Inlou7/51SJ4cMhr1RPJZzaJs26dMYxLNVDowwPoppdA+qDwZCVku qDqQPOmZbwnRTZKorMJiosqkMV6ueHXOijh6Mg9o+NHjFkQfixZBXrwJ90Mxh2XX 0TVT1BptLMNB7ektKreXC42kRKi9yT1T0o88FVDA0+iZ7K9PAcm833Ost8UZWqDq MiD91NwLhfITHecrFnWejrr4aW4rZbdiTYRMYgKOnSA453749wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHdNGvAX0DQchYaPoVUrUF+hvInzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2vKTpk66uaLeY5M2VtJFH u4QOxuoLV72x07JroCMotXYJkw1ZbpjzKZzKCaIOzRcX17hwFG9zbjC4zh2V3ar8 QwkrvOO4LlFfBHytuf3sIRRpzjtNg8jZR1rlQR1LCy/L0kNwSvltnwFj3/9Jg2io LzM0xBdm72D28r2UjDE9YFiLLX0/jkDv6qwTRXYOppIddgRr5l2ItwVUNNX8Y6cs KtJjvaiRIPVERhuReqCIo4Ly/cwFmWCiC2R4VxFXDJGYC5jbK9cY08I8wB8WSABZ M48RIFssu6gLQzFOPoS6ry11QcOrbNhl/zRt67s0Pw62WyKiGXGdsEQOlqjXM3bX -----END CERTIFICATE-----Generated at Fri Oct 10 18:05:15 2025 by rpki-client