$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft File: 328ebe8e-32d9-4873-ad53-1a5e421126d5.mft (raw, json) Hash identifier: bbSCkCLrT3CqgwlHkhX9D/A3V48HMswU8JFlhxdMQ0I= Subject key identifier: DC:9B:EE:E0:72:50:02:BF:29:BB:19:18:E9:51:AC:77:E5:55:D6:9D Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F4328584B735693DB6EA29A2F0AB81900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft Manifest number: 010D0C9F4328584377CDCF1B885D5CE55DCA4B91 Signing time: Wed 08 Oct 2025 06:00:03 +0000 Manifest this update: Wed 08 Oct 2025 06:00:03 +0000 Manifest next update: Sat 11 Oct 2025 06:00:00 +0000 Files and hashes: 1: 2bdf5da3-7278-3180-9d5c-727f67919ebc.roa (hash: 9c8fF2UNIVHjuWISrXVxmnpBwXxrF2Z4UpDYPOwe/9w=) 2: 328ebe8e-32d9-4873-ad53-1a5e421126d5.crl (hash: pMXMZn5jyMpsfpiea2lMTFIZMHFhfAeyQViz4JeMON8=) 3: 614b6e40-c958-3824-8cf1-5905e6c7c991.roa (hash: D19nKXozHYSjedmAd+nFfJpggcAMHHYHKsHET0E5zl4=) 4: aedbe3d8-a938-347c-a902-e7d97e409a71.roa (hash: 3fMxDsky1UAE/sfk67xNPaJLt5lmajD69V5jLRnjVno=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:56:93:db:6e:a2:9a:2f:0a:b8:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: Oct 8 06:00:03 2025 GMT Not After : Oct 11 06:00:00 2025 GMT Subject: CN=9b5fb0b6-2def-41b2-a305-c64e862b47fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:8a:ef:ca:72:89:65:ac:93:96:51:2b:f3: f9:03:db:3d:9f:1b:f8:8d:02:ed:cb:43:5e:75:f9: 6a:3e:78:97:ad:a6:1d:16:8a:c3:be:6a:3b:b3:e9: 0f:35:fe:83:b4:72:e7:44:0b:dd:66:94:b6:59:6f: ac:7e:05:c6:75:b0:64:ab:66:98:22:2a:de:e9:c0: cf:c1:b2:0e:2f:b8:e7:19:15:74:d6:06:f3:ad:2a: 0d:f9:d1:29:6a:33:19:55:9b:43:7a:3f:c8:5d:cf: d6:ff:91:ed:5b:0a:93:86:35:b1:72:86:6e:b6:43: e7:b7:b7:be:66:09:1b:55:40:f4:94:93:2d:16:89: 4f:76:6a:33:2d:45:e7:74:8a:4f:23:23:75:da:c0: 67:42:9f:8e:ec:d1:62:e3:ce:e4:f1:c1:55:e8:e3: 11:7c:a6:cd:e8:41:9c:cd:93:5e:46:e1:9d:d9:46: e4:7e:c0:f3:8c:03:99:ea:46:fc:7e:c9:e1:9f:fb: a1:04:63:a7:de:ad:e4:29:dd:8e:8a:d2:ce:28:20: 8f:e3:55:96:c1:de:30:f0:4c:25:88:ca:3d:11:45: d9:18:e0:53:ec:06:0d:0c:e0:6e:a4:2f:e0:35:3e: 1e:24:d5:75:f9:39:89:5f:62:3c:b1:96:75:36:5c: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:EE:E0:72:50:02:BF:29:BB:19:18:E9:51:AC:77:E5:55:D6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:87:49:8d:e5:1c:63:de:d8:0c:28:ea:d3:bf:7b:78:b4:98: 88:06:a9:27:9b:5a:aa:8b:1a:db:19:b9:dc:2f:d3:40:96:f9: 36:07:11:97:7d:e3:e7:26:56:da:7d:1e:70:ed:e2:06:3d:70: 38:36:8c:1e:65:f2:b1:dc:c6:f0:70:c4:a8:d6:f8:51:4d:76: ac:b3:f6:cf:34:89:ea:da:3a:36:02:36:f3:3b:5b:59:ea:f0: 06:30:fa:87:a2:51:3f:2e:df:69:48:4f:ce:95:9d:1d:16:f6: 34:15:54:f9:38:0b:f9:4f:69:ae:03:2e:80:69:42:69:3c:85: bc:bd:5d:35:78:c4:c2:45:24:ba:81:3c:9d:03:5c:de:39:71: 1b:ee:9f:80:96:8a:66:ab:01:b3:68:8f:4e:46:b9:b7:72:97: 95:68:13:ce:c9:04:17:41:ec:11:d4:b6:6b:da:97:3c:71:5d: 78:59:b7:a5:26:58:00:2f:06:57:10:56:2a:5e:41:e9:3f:79: 1a:8b:24:c7:c6:75:e1:10:98:86:24:10:62:b1:90:a9:4e:db: ce:d0:0d:71:a5:90:2c:6c:cb:c0:92:ab:6a:78:24:31:e8:69: 66:c1:8b:50:b4:3b:b6:f8:52:32:d9:89:53:96:09:12:b6:4b: 82:35:16:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtzVpPbbqKaLwq4GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI1MTAwODA2MDAwM1oXDTI1MTAxMTA2MDAwMFowLzEtMCsGA1UEAxMk OWI1ZmIwYjYtMmRlZi00MWIyLWEzMDUtYzY0ZTg2MmI0N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8eK78pyiWWsk5ZRK/P5A9s9nxv4jQLty0Ne dflqPniXraYdForDvmo7s+kPNf6DtHLnRAvdZpS2WW+sfgXGdbBkq2aYIire6cDP wbIOL7jnGRV01gbzrSoN+dEpajMZVZtDej/IXc/W/5HtWwqThjWxcoZutkPnt7e+ ZgkbVUD0lJMtFolPdmozLUXndIpPIyN12sBnQp+O7NFi487k8cFV6OMRfKbN6EGc zZNeRuGd2UbkfsDzjAOZ6kb8fsnhn/uhBGOn3q3kKd2OitLOKCCP41WWwd4w8Ewl iMo9EUXZGOBT7AYNDOBupC/gNT4eJNV1+TmJX2I8sZZ1NlxDhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNyb7uByUAK/KbsZGOlRrHflVdadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvMzI4ZWJlOGUtMzJkOS00 ODczLWFkNTMtMWE1ZTQyMTEyNmQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzh0mN5Rxj3tgMKOrTv3t4 tJiIBqknm1qqixrbGbncL9NAlvk2BxGXfePnJlbafR5w7eIGPXA4NoweZfKx3Mbw cMSo1vhRTXass/bPNInq2jo2AjbzO1tZ6vAGMPqHolE/Lt9pSE/OlZ0dFvY0FVT5 OAv5T2muAy6AaUJpPIW8vV01eMTCRSS6gTydA1zeOXEb7p+AlopmqwGzaI9ORrm3 cpeVaBPOyQQXQewR1LZr2pc8cV14WbelJlgALwZXEFYqXkHpP3kaiyTHxnXhEJiG JBBisZCpTtvO0A1xpZAsbMvAkqtqeCQx6GlmwYtQtDu2+FIy2YlTlgkStkuCNRYt -----END CERTIFICATE-----Generated at Wed Oct 8 17:29:01 2025 by rpki-client