$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: mC3peApsbiacPnOK3qjfYQfYxtjSXMlyRot9uL0uSJA= Subject key identifier: CF:BA:4B:AC:C9:3A:E5:2C:77:3E:20:00:06:F3:A4:3F:4B:1C:F4:4F Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584B726963FA7C86BBEB694DE080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FABDB Signing time: Tue 07 Oct 2025 22:02:08 +0000 Manifest this update: Tue 07 Oct 2025 22:02:08 +0000 Manifest next update: Thu 09 Oct 2025 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: HsOwnoSo2Kh9KBMOdWtSD8IiFUPVvP9n8HKCELlPCXA=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: WCsl/uHAuRHFK8iwHtx6pvMStWiWbxyew8aipe66l+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:69:63:fa:7c:86:bb:eb:69:4d:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Oct 7 22:02:08 2025 GMT Not After : Oct 9 22:00:00 2025 GMT Subject: CN=b357b39e-05c2-4b7e-a6c4-bbb11b363914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:df:44:12:15:87:df:9c:76:2b:1f:27:ec: 8e:0a:2f:82:52:99:4c:ba:4a:95:10:a0:58:d3:48: a7:58:98:f2:fa:e4:ff:e2:7d:6a:2f:12:6b:00:a9: d9:58:a7:5b:ff:4d:8c:a0:08:10:75:ae:ad:66:80: cf:aa:70:a9:f9:cf:79:bb:01:64:fd:88:cf:dd:e7: de:06:e6:6a:8d:06:fb:55:29:7d:55:e8:eb:eb:9c: 04:10:64:e1:b0:b7:a5:94:a3:73:0f:b4:25:8e:59: 21:c8:81:87:2d:06:98:0c:10:8f:a0:41:d9:ef:5b: 13:13:96:c5:7a:c0:95:c4:dc:12:ba:fa:aa:54:1d: 96:d3:8c:bc:10:74:60:13:85:9b:f9:93:7a:25:11: 26:a3:e2:bc:95:71:8c:75:52:ad:0c:5e:48:fe:d8: e9:03:1a:fb:4a:32:6f:01:2b:5a:da:15:59:c0:21: 87:20:a7:f2:16:1b:a6:b4:ea:0c:35:8f:d9:8d:88: 9b:db:3b:a0:da:c0:aa:3b:8a:7b:00:fb:62:92:cf: fe:a6:0b:33:d0:1a:13:dd:f8:6f:b6:11:38:95:48: da:5f:3c:38:05:1f:11:4c:0f:2a:57:78:72:90:4f: 2f:9d:26:57:d8:0f:b3:6f:03:87:c1:44:3d:d9:23: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BA:4B:AC:C9:3A:E5:2C:77:3E:20:00:06:F3:A4:3F:4B:1C:F4:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:19:c0:d8:f6:5e:0a:be:43:74:fd:4c:14:88:34:e1:3a:58: 12:71:82:15:7c:51:e1:57:8b:cd:3a:9a:a0:74:36:a2:46:01: 18:ef:d5:ac:2f:c4:68:a6:fb:30:f3:d1:10:4f:fa:ef:9a:22: 69:ad:c6:62:fc:6f:df:70:6f:b6:26:1c:0c:24:20:79:0f:7d: 22:39:04:d8:b5:f3:a4:8d:1a:7f:08:d5:7e:e1:09:77:b1:9c: d7:b2:61:e7:62:13:ab:74:33:1f:23:b9:54:8c:9d:f7:a0:2e: 2d:1c:86:5d:ae:5d:23:62:08:fb:ce:5b:1c:bf:c3:2e:6a:f1: 28:07:04:77:95:8c:a5:c6:31:03:b1:0e:32:cc:f2:60:02:b5: a2:a5:c2:7f:36:51:d0:f8:1f:f6:ae:37:24:5a:cf:b6:ea:a8: 44:09:de:a4:3a:d9:dc:43:7d:85:38:88:11:c1:3e:b1:c6:41: 8a:5e:90:3a:d5:da:a8:45:c4:a6:b1:38:4f:63:99:07:53:81: ca:ea:12:b6:80:3c:d5:4b:d2:a1:a1:0b:14:92:ee:c9:76:54: 6e:22:a0:31:2f:75:2f:13:ba:3b:d5:6d:64:cf:5c:3b:3d:99: b4:88:05:fe:41:b9:0a:d5:bb:3a:e3:4c:f6:d0:6b:4f:ce:31: f4:29:96:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtyaWP6fIa762lN4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI1MTAwNzIyMDIwOFoXDTI1MTAwOTIyMDAwMFowLzEtMCsGA1UEAxMk YjM1N2IzOWUtMDVjMi00YjdlLWE2YzQtYmJiMTFiMzYzOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifPfRBIVh9+cdisfJ+yOCi+CUplMukqVEKBY 00inWJjy+uT/4n1qLxJrAKnZWKdb/02MoAgQda6tZoDPqnCp+c95uwFk/YjP3efe BuZqjQb7VSl9Vejr65wEEGThsLellKNzD7QljlkhyIGHLQaYDBCPoEHZ71sTE5bF esCVxNwSuvqqVB2W04y8EHRgE4Wb+ZN6JREmo+K8lXGMdVKtDF5I/tjpAxr7SjJv ASta2hVZwCGHIKfyFhumtOoMNY/ZjYib2zug2sCqO4p7APtiks/+pgsz0BoT3fhv thE4lUjaXzw4BR8RTA8qV3hykE8vnSZX2A+zbwOHwUQ92SPSqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM+6S6zJOuUsdz4gAAbzpD9LHPRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGGcDY9l4KvkN0/UwUiDTh OlgScYIVfFHhV4vNOpqgdDaiRgEY79WsL8Ropvsw89EQT/rvmiJprcZi/G/fcG+2 JhwMJCB5D30iOQTYtfOkjRp/CNV+4Ql3sZzXsmHnYhOrdDMfI7lUjJ33oC4tHIZd rl0jYgj7zlscv8MuavEoBwR3lYylxjEDsQ4yzPJgArWipcJ/NlHQ+B/2rjckWs+2 6qhECd6kOtncQ32FOIgRwT6xxkGKXpA61dqoRcSmsThPY5kHU4HK6hK2gDzVS9Kh oQsUku7JdlRuIqAxL3UvE7o71W1kz1w7PZm0iAX+QbkK1bs640z20GtPzjH0KZY4 -----END CERTIFICATE-----Generated at Wed Oct 8 17:26:12 2025 by rpki-client