$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft File: a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft (raw, json) Hash identifier: tBchvG4KfJYvea7X2c65Vyld6hHvKYYh/7Zt5f7F95A= Subject key identifier: BC:2F:70:DD:F6:D6:07:3A:C0:65:AA:C4:64:D7:73:55:F6:4D:47:77 Authority key identifier: BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 Certificate issuer: /CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Certificate serial: 010D0C9F4328584B774B191A96A60B59C8237D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft Manifest number: 010D0C9F43285845F8473EC48CF2A2F0FF6DE185 Signing time: Thu 09 Oct 2025 16:00:09 +0000 Manifest this update: Thu 09 Oct 2025 16:00:09 +0000 Manifest next update: Sun 12 Oct 2025 16:00:00 +0000 Files and hashes: 1: 31044689-5617-3cd5-a65d-c714e253e409.roa (hash: 5CTfTrw+HhjYcDWX/ETb1AiBbOyREOT5TJBud0W4gWI=) 2: a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl (hash: BkCfJR6L9/ZwIYf7yRRMpw09+EK885M2rCymWYfiIKo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:4b:19:1a:96:a6:0b:59:c8:23:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Validity Not Before: Oct 9 16:00:09 2025 GMT Not After : Oct 12 16:00:00 2025 GMT Subject: CN=7f990e49-cd55-45cc-b3aa-cc32511de4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:6c:35:d0:1e:a3:47:9c:fe:90:73:72:29: 40:27:60:24:9b:51:ad:d9:bc:c7:c7:4b:cf:e7:59: 90:58:e5:e2:fa:c8:e4:5e:65:2c:49:7f:d2:64:80: 21:06:24:ba:ef:61:72:8a:09:b5:f2:fc:7d:e2:c3: a1:47:5c:34:b5:0d:68:ef:54:99:83:f4:c3:7e:22: 4a:48:0f:fc:2f:50:62:dd:23:4b:93:cd:2f:26:1c: 84:b7:17:1c:b6:f2:d7:5d:8f:ec:55:21:8c:18:27: 41:5a:26:c2:6b:7e:ec:db:07:6a:ec:d7:41:d6:c3: b6:24:32:69:00:7c:e1:f3:f4:6e:69:01:e6:11:c9: 73:aa:f2:79:58:0d:19:70:6d:54:ed:3d:3e:08:d3: 3f:0f:13:bf:94:9a:1c:65:a3:07:5a:b5:1e:88:34: 84:7f:77:ad:b4:52:b0:57:23:be:63:20:8e:85:d6: 51:05:d4:07:45:27:c9:56:98:a1:35:85:91:ea:3f: a8:67:8e:89:24:55:3a:4a:d6:e4:e1:de:de:64:1d: cb:2d:e0:52:62:0f:79:2a:4b:ac:51:f4:e0:6f:d2: ab:f5:c2:af:ae:9b:61:b4:42:7a:50:70:0c:51:86: 46:46:5d:34:32:65:b7:20:a1:ce:38:2e:f9:b6:f8: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2F:70:DD:F6:D6:07:3A:C0:65:AA:C4:64:D7:73:55:F6:4D:47:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl X509v3 Authority Key Identifier: keyid:BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c0:0a:07:7a:10:0d:87:2b:f8:4b:f5:a7:5b:03:97:1e:ad: 97:03:80:5b:96:ad:54:6b:8f:10:be:0c:a0:43:b9:8f:46:68: 60:63:b5:6f:7a:4a:47:21:72:c5:08:22:44:0d:5e:67:1b:93: 3f:e3:c3:d8:d5:93:09:0b:fb:34:56:33:8c:94:8d:85:fe:e1: c8:63:16:f6:05:56:15:32:23:dd:77:7b:c9:17:58:25:f9:18: 5e:e8:e4:0a:30:57:c4:54:d0:f0:92:92:02:bb:d4:94:c7:9f: b6:7c:c8:5a:da:5c:88:61:73:ca:44:ba:72:54:e6:87:6d:dc: 27:c8:da:58:ad:16:0a:6a:7b:51:97:0f:28:af:07:e7:00:87: 8d:0b:d3:d6:3e:fa:bf:1e:81:bb:6b:a3:c5:48:84:4d:f6:2b: f6:47:5b:cf:df:f3:15:85:c9:13:68:01:94:5d:33:04:35:68: 8a:a6:98:cb:b0:d2:e3:99:87:0f:0b:c5:a0:b2:d0:32:50:9a: e8:2c:8f:0c:4e:cc:ae:d7:3d:52:d8:b3:a8:39:73:3f:4b:4d: 62:66:ff:82:c5:c2:d3:fe:e6:44:b0:f3:37:22:fe:8b:8d:16: 31:48:19:16:11:02:2e:95:7d:46:02:68:b6:ca:29:c1:8f:1a: 58:f1:cb:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3SxkalqYLWcgjfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmYzk3NmItNjI5NC00YzdmLWFkZjktMGExMjRjMzhm OWE3MB4XDTI1MTAwOTE2MDAwOVoXDTI1MTAxMjE2MDAwMFowLzEtMCsGA1UEAxMk N2Y5OTBlNDktY2Q1NS00NWNjLWIzYWEtY2MzMjUxMWRlNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsVsNdAeo0ec/pBzcilAJ2Akm1Gt2bzHx0vP 51mQWOXi+sjkXmUsSX/SZIAhBiS672Fyigm18vx94sOhR1w0tQ1o71SZg/TDfiJK SA/8L1Bi3SNLk80vJhyEtxcctvLXXY/sVSGMGCdBWibCa37s2wdq7NdB1sO2JDJp AHzh8/RuaQHmEclzqvJ5WA0ZcG1U7T0+CNM/DxO/lJocZaMHWrUeiDSEf3ettFKw VyO+YyCOhdZRBdQHRSfJVpihNYWR6j+oZ46JJFU6Stbk4d7eZB3LLeBSYg95Kkus UfTgb9Kr9cKvrpthtEJ6UHAMUYZGRl00MmW3IKHOOC75tvhjrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLwvcN321gc6wGWqxGTXc1X2TUd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2Zj OTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEyNGMzOGY5YTcvYTNmYzk3NmItNjI5NC00 YzdmLWFkZjktMGExMjRjMzhmOWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTNmYzk3NmItNjI5NC00YzdmLWFk ZjktMGExMjRjMzhmOWE3L2EzZmM5NzZiLTYyOTQtNGM3Zi1hZGY5LTBhMTI0YzM4 ZjlhNy5jcmwwHwYDVR0jBBgwFoAUvEj0F4l7oUc6MZd1zaZNuACo7RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2ZjOTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEy NGMzOGY5YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIwAoHehANhyv4S/WnWwOX Hq2XA4Bblq1Ua48QvgygQ7mPRmhgY7VvekpHIXLFCCJEDV5nG5M/48PY1ZMJC/s0 VjOMlI2F/uHIYxb2BVYVMiPdd3vJF1gl+Rhe6OQKMFfEVNDwkpICu9SUx5+2fMha 2lyIYXPKRLpyVOaHbdwnyNpYrRYKantRlw8orwfnAIeNC9PWPvq/HoG7a6PFSIRN 9iv2R1vP3/MVhckTaAGUXTMENWiKppjLsNLjmYcPC8WgstAyUJroLI8MTsyu1z1S 2LOoOXM/S01iZv+CxcLT/uZEsPM3Iv6LjRYxSBkWEQIulX1GAmi2yinBjxpY8cul -----END CERTIFICATE-----Generated at Fri Oct 10 16:36:08 2025 by rpki-client