$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft File: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft (raw, json) Hash identifier: 9v+/rj/CgSc5BwLG2LjkjMQkl+abRcckDEo/TfekTbk= Subject key identifier: E6:5F:47:72:2C:97:4B:9C:13:64:FB:79:6C:2A:77:D1:21:9F:0E:66 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584B7892AAB4CA020DD61A828E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft Manifest number: 010D0C9F432858487BBB0833A7DA59D64374D4D8 Signing time: Fri 10 Oct 2025 03:00:08 +0000 Manifest this update: Fri 10 Oct 2025 03:00:08 +0000 Manifest next update: Mon 13 Oct 2025 03:00:00 +0000 Files and hashes: 1: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl (hash: 01nJr2gT6+pqwaLa/zel/ILjocx6ohiW2E138ikJJeM=) 2: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (hash: G42ei1h1NPV1iLNaQZKWGRJfKbJJLGkLF0lSr/s7oWU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:92:aa:b4:ca:02:0d:d6:1a:82:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Oct 10 03:00:08 2025 GMT Not After : Oct 13 03:00:00 2025 GMT Subject: CN=9a8b4d67-532f-4634-a285-c3fe716bd7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:be:14:0c:22:88:0d:29:08:ff:71:04:61: 09:8b:00:f7:e3:a8:b1:31:0d:97:7e:5c:34:e4:91: 15:7d:7c:bc:d4:02:e9:7e:9e:af:8d:72:b4:93:ca: 78:d7:23:26:64:7b:76:e3:64:a2:8c:7d:5e:09:77: 1a:ad:05:72:76:56:61:9f:4a:46:53:e1:0f:20:86: 7f:cc:da:92:7a:b9:d5:a0:e7:46:fc:76:9a:dd:17: 1c:91:2b:2a:fc:fc:08:60:6a:85:f9:05:77:34:4c: 60:3b:99:18:2c:90:99:e9:88:7c:a5:89:4c:d8:bf: 56:14:ed:df:2d:0e:24:cf:76:da:ce:8b:1d:7c:ce: 00:8f:22:19:cf:04:4f:4c:ef:c3:77:aa:30:89:a2: 19:e6:88:ab:44:e1:ca:5b:3b:d4:eb:ec:94:07:51: b1:18:1b:fd:18:ef:8a:91:a8:65:c9:96:8d:b4:fa: ec:fe:06:38:e0:6a:3f:1e:c5:cd:e9:0c:53:bb:09: b5:4a:39:6d:c5:bc:87:a5:0c:c3:fe:78:5a:7f:ed: c6:78:45:84:63:f8:99:42:be:2d:b3:79:52:d2:1c: a5:ec:69:6d:4f:68:0c:ad:8d:f1:c9:7b:ab:ca:7a: bf:bc:a7:6d:ef:f8:85:94:f9:e4:9d:10:9c:2d:5d: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5F:47:72:2C:97:4B:9C:13:64:FB:79:6C:2A:77:D1:21:9F:0E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:50:dd:7c:b8:50:37:01:e9:d2:12:e9:ac:8f:ab:01:69:07: d6:5f:15:06:29:40:cd:4e:65:e1:ab:05:c8:1a:60:82:39:0d: c6:1b:cf:f3:7b:6f:60:b8:e3:c0:43:35:8e:af:d9:46:8b:47: 7e:19:e1:f8:8f:86:9e:f9:8c:1e:e6:07:55:16:bf:e4:6b:a6: 04:1f:18:6a:d5:50:61:80:41:c6:25:30:f5:9c:4a:89:b4:84: 1d:12:ba:e0:cf:68:6f:19:b5:81:1a:ee:01:df:10:12:f5:51: c4:e8:d3:83:b0:de:51:ee:98:40:8e:53:9b:a6:39:92:b5:42: a9:e8:9f:9a:f2:6e:74:f1:20:c9:a0:fd:de:69:71:ea:50:6a: 68:bd:a6:25:65:34:2d:fb:e9:ab:bc:6a:a2:f0:48:45:62:33: 3b:d8:e1:4e:dc:24:11:c0:35:cf:b1:31:61:37:da:b8:89:5e: be:05:64:d3:68:2a:c7:9f:90:ac:24:f2:cd:62:b6:2b:0c:0a: c6:07:42:29:0a:9c:97:68:02:01:48:0b:07:87:56:3a:78:db: 9c:f3:98:79:cd:7b:fc:02:af:64:b7:82:9d:34:1d:13:b9:ed: 8e:63:96:0b:5c:bb:eb:69:73:f6:73:e1:f6:bc:0a:4b:b8:b8: 96:d6:cf:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt4kqq0ygIN1hqCjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI1MTAxMDAzMDAwOFoXDTI1MTAxMzAzMDAwMFowLzEtMCsGA1UEAxMk OWE4YjRkNjctNTMyZi00NjM0LWEyODUtYzNmZTcxNmJkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX++FAwiiA0pCP9xBGEJiwD346ixMQ2Xflw0 5JEVfXy81ALpfp6vjXK0k8p41yMmZHt242SijH1eCXcarQVydlZhn0pGU+EPIIZ/ zNqSernVoOdG/Haa3RcckSsq/PwIYGqF+QV3NExgO5kYLJCZ6Yh8pYlM2L9WFO3f LQ4kz3bazosdfM4AjyIZzwRPTO/Dd6owiaIZ5oirROHKWzvU6+yUB1GxGBv9GO+K kahlyZaNtPrs/gY44Go/HsXN6QxTuwm1SjltxbyHpQzD/nhaf+3GeEWEY/iZQr4t s3lS0hyl7GltT2gMrY3xyXurynq/vKdt7/iFlPnknRCcLV0/mwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOZfR3Isl0ucE2T7eWwqd9Ehnw5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvM2I0YTQ0MWYtNWQwYi00 ODEzLTgzNmUtMmFlZmQ1NGIwY2ExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3UN18uFA3AenSEumsj6sB aQfWXxUGKUDNTmXhqwXIGmCCOQ3GG8/ze29guOPAQzWOr9lGi0d+GeH4j4ae+Ywe 5gdVFr/ka6YEHxhq1VBhgEHGJTD1nEqJtIQdErrgz2hvGbWBGu4B3xAS9VHE6NOD sN5R7phAjlObpjmStUKp6J+a8m508SDJoP3eaXHqUGpovaYlZTQt++mrvGqi8EhF YjM72OFO3CQRwDXPsTFhN9q4iV6+BWTTaCrHn5CsJPLNYrYrDArGB0IpCpyXaAIB SAsHh1Y6eNuc85h5zXv8Aq9kt4KdNB0Tue2OY5YLXLvraXP2c+H2vApLuLiW1s8K -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:43 2025 by rpki-client