$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: 9TMA1paZlWNEtNnHVd7pXA5mdsLjZRF0w2nzlQptX9c= Subject key identifier: 1C:4F:E8:A5:1A:25:F8:C5:67:84:87:90:D8:8E:D1:8F:D5:9E:EC:36 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584B73EB79F9759FD68A2D533140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCA7B Signing time: Wed 08 Oct 2025 11:00:03 +0000 Manifest this update: Wed 08 Oct 2025 11:00:03 +0000 Manifest next update: Sat 11 Oct 2025 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: DdRbpxxq/zsy8zU8faLm6yXX3TzfPnrc4ZxnjcHgcK8=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: FIZ3xJMvnPKUekYvK3IflROLqHYHvYvdFrSm+5fWMLU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:eb:79:f9:75:9f:d6:8a:2d:53:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Oct 8 11:00:03 2025 GMT Not After : Oct 11 11:00:00 2025 GMT Subject: CN=98d6d29d-e574-44f8-890e-c905ca7d9c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:02:5a:17:a4:76:2b:57:82:4a:e9:04:35: 07:6c:f6:94:06:f6:4d:56:c9:22:3a:c7:e2:7f:69: 41:2f:1d:5f:28:5d:ae:48:eb:d4:21:14:17:8d:d5: 52:5e:f5:96:64:bf:05:b8:8d:c9:33:06:63:c9:19: 45:34:22:1f:bd:80:98:6f:22:22:73:f8:e7:fe:af: 31:e3:11:cf:65:92:14:15:41:a2:bc:32:42:86:0a: d6:3d:81:d7:05:b4:f9:68:67:53:5c:1a:b3:79:96: b9:d9:ef:f3:e0:b6:4c:a9:8c:f0:f6:78:5b:c4:8f: 62:cd:55:b3:78:b7:9b:3a:92:59:28:ba:3e:7f:d5: 37:e6:73:df:d9:7a:be:55:93:d9:58:37:63:a6:b0: da:ad:fb:0d:b2:e4:af:5b:0a:36:01:d0:05:84:95: f4:84:3c:a7:81:0b:b2:9f:37:67:1a:ed:a4:a7:81: 44:97:66:31:c0:2d:f6:23:05:62:f4:35:30:56:fb: ea:8c:74:69:54:eb:f1:94:9b:13:1e:54:8e:79:de: 29:f1:93:70:42:0a:86:de:8d:b8:82:20:e4:08:a0: 87:7b:2b:0c:94:c6:8e:6f:a3:dc:e4:3f:37:38:22: 83:19:a5:90:b7:27:15:15:89:21:37:e2:39:cd:20: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:E8:A5:1A:25:F8:C5:67:84:87:90:D8:8E:D1:8F:D5:9E:EC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:07:c3:6b:92:86:35:9f:cf:10:83:56:3c:8e:5c:70:5a:97: d0:e5:89:b6:c2:e1:20:34:d1:fb:d6:a8:64:a3:57:f6:af:8e: 75:e0:0e:a1:96:d4:1e:12:62:65:ee:f7:6c:f5:5b:e2:1d:b2: 16:7d:5e:6a:86:5f:2d:db:24:0f:93:48:fd:d8:e0:da:61:83: 8e:9e:78:67:7a:2d:e9:fe:6e:30:09:42:87:41:b3:45:fd:7e: b5:98:d3:ff:54:67:22:17:70:65:30:f6:09:d2:4f:a0:aa:4f: 17:d4:a5:0a:12:cf:46:bb:c2:12:00:3e:4e:a1:25:23:06:30: d2:6a:08:1e:e3:c3:90:ee:c1:c8:fa:17:d0:df:6f:7a:ad:d0: 3f:5d:f5:80:a2:c8:f8:bf:d0:6c:b0:62:ce:d3:77:e0:ff:90: e7:4b:5f:f1:3e:5b:c0:c1:13:a7:37:af:76:58:fd:d9:42:a7: e5:d8:d5:65:94:fc:b4:a4:0c:0c:28:c8:e7:7d:cd:86:73:cd: 01:57:4d:19:89:d8:a4:ae:c9:34:0b:60:6e:7b:c4:77:1b:bf: 57:68:66:90:e0:38:d5:6a:83:f9:6f:e0:2f:99:31:ed:94:80: 60:45:52:51:83:71:5d:43:9b:d0:ab:2b:45:76:76:d1:1b:08: 17:71:d2:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtz63n5dZ/Wii1TMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MTAwODExMDAwM1oXDTI1MTAxMTExMDAwMFowLzEtMCsGA1UEAxMk OThkNmQyOWQtZTU3NC00NGY4LTg5MGUtYzkwNWNhN2Q5YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKkCWhekditXgkrpBDUHbPaUBvZNVskiOsfi f2lBLx1fKF2uSOvUIRQXjdVSXvWWZL8FuI3JMwZjyRlFNCIfvYCYbyIic/jn/q8x 4xHPZZIUFUGivDJChgrWPYHXBbT5aGdTXBqzeZa52e/z4LZMqYzw9nhbxI9izVWz eLebOpJZKLo+f9U35nPf2Xq+VZPZWDdjprDarfsNsuSvWwo2AdAFhJX0hDyngQuy nzdnGu2kp4FEl2YxwC32IwVi9DUwVvvqjHRpVOvxlJsTHlSOed4p8ZNwQgqG3o24 giDkCKCHeysMlMaOb6Pc5D83OCKDGaWQtycVFYkhN+I5zSABiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBxP6KUaJfjFZ4SHkNiO0Y/Vnuw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/B8NrkoY1n88Qg1Y8jlxw WpfQ5Ym2wuEgNNH71qhko1f2r4514A6hltQeEmJl7vds9VviHbIWfV5qhl8t2yQP k0j92ODaYYOOnnhnei3p/m4wCUKHQbNF/X61mNP/VGciF3BlMPYJ0k+gqk8X1KUK Es9Gu8ISAD5OoSUjBjDSagge48OQ7sHI+hfQ3296rdA/XfWAosj4v9BssGLO03fg /5DnS1/xPlvAwROnN692WP3ZQqfl2NVllPy0pAwMKMjnfc2Gc80BV00Zidikrsk0 C2Bue8R3G79XaGaQ4DjVaoP5b+AvmTHtlIBgRVJRg3FdQ5vQqytFdnbRGwgXcdKk -----END CERTIFICATE-----Generated at Wed Oct 8 17:27:51 2025 by rpki-client