$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: iJrODv1uJONmEbCMa4+Zx+nhNjnfXY9MgPvQV0JQZrc= Subject key identifier: 15:BE:B3:2B:6F:62:EE:65:F7:92:47:F0:D3:94:83:21:72:60:BF:FF Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584B394B266BCE1DE0CB3FD21290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6F8A8 Signing time: Wed 17 Sep 2025 11:00:08 +0000 Manifest this update: Wed 17 Sep 2025 11:00:08 +0000 Manifest next update: Fri 19 Sep 2025 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: BbXPHsTgUHbXHKj3COqCByBEQ9lhR8Kz14+qKx5cpU4=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: Dcvf2wO5zWyd31noaertK9DCSoTNeTzy/E248Nw/4/M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:4b:26:6b:ce:1d:e0:cb:3f:d2:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Sep 17 11:00:08 2025 GMT Not After : Sep 19 11:00:00 2025 GMT Subject: CN=351a9dea-4398-4451-95d3-125973355563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:d9:ab:92:85:73:ca:e2:e9:48:c8:6a:00: df:f7:32:8f:24:f2:35:36:82:7e:c6:81:5d:38:a7: f0:73:2e:48:aa:de:64:c4:3c:f6:70:04:2c:4f:49: 39:4a:86:46:39:b9:40:2f:e5:37:ec:35:81:1f:00: 32:e6:c2:6a:92:d3:ad:6e:86:b4:0a:e7:08:a4:2f: 2e:6f:5e:68:36:31:d8:6a:19:b8:89:44:2c:58:5f: 88:10:40:60:0d:4b:55:67:12:6a:7b:3d:42:f6:10: af:18:1d:90:66:34:e7:32:25:90:38:97:5b:10:80: 42:0d:c3:e5:5c:55:75:78:ee:80:76:54:4c:b8:8f: e5:ca:2b:81:6a:ec:11:b0:c2:57:89:f8:b9:99:8e: 0f:99:3c:10:7d:3a:83:c0:e6:d2:39:64:4c:ff:9b: 5a:31:24:f0:01:49:46:32:c2:d0:03:52:b7:ee:14: f3:41:0c:4a:ef:d9:ad:82:d7:fb:ae:a5:f4:66:9d: 08:f3:39:c2:78:96:6a:ec:50:c5:dd:c2:32:96:9d: 34:37:6c:e4:bb:f8:84:74:23:73:06:a9:15:30:17: 37:99:32:58:f1:45:69:fb:cf:35:15:a0:f0:ad:c5: c2:33:a2:3c:5f:1d:ca:63:60:81:e3:5a:0b:b5:f2: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BE:B3:2B:6F:62:EE:65:F7:92:47:F0:D3:94:83:21:72:60:BF:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a9:eb:81:f7:ab:33:a8:57:3c:cd:6a:9d:c5:34:79:81:94: a7:59:9c:50:c9:ef:34:da:72:11:cc:ad:26:39:96:22:83:aa: f4:3f:94:26:44:bc:75:6a:85:79:4c:b7:db:91:a1:12:d2:1f: 55:16:59:f6:73:20:9a:1b:a4:55:d9:ca:0b:06:84:8a:26:bb: 94:85:ac:b5:84:72:71:b1:b1:67:b3:81:2a:45:ba:45:9b:67: bc:4d:fe:78:38:d1:96:83:dc:d5:a9:21:94:06:fe:a7:c9:cc: 2c:89:e0:c1:1d:46:b4:3a:32:70:d5:00:d0:e8:5d:59:3d:e2: d6:22:73:5e:42:93:4e:34:11:63:9f:fb:88:b7:56:9a:fc:57: d3:4a:b5:a6:77:a3:d4:0a:b9:fa:16:8d:5b:02:30:7e:32:5d: 11:d3:ee:c9:52:20:7d:fd:49:dc:78:de:c1:e7:35:c0:b5:4d: 28:1d:e9:e8:76:39:1d:e3:dc:86:99:af:01:28:75:80:4f:9c: 4b:70:db:18:2a:ef:72:52:8c:7b:60:9d:61:d2:cd:78:d0:8f: 0c:f3:17:86:f5:8f:97:3f:22:1f:d4:05:c4:ca:68:0e:0e:bd: 7a:12:a6:1e:67:03:75:04:6d:7d:57:97:9f:78:72:81:31:6b: d3:d1:5c:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs5SyZrzh3gyz/SEpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MDkxNzExMDAwOFoXDTI1MDkxOTExMDAwMFowLzEtMCsGA1UEAxMk MzUxYTlkZWEtNDM5OC00NDUxLTk1ZDMtMTI1OTczMzU1NTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0rZq5KFc8ri6UjIagDf9zKPJPI1NoJ+xoFd OKfwcy5Iqt5kxDz2cAQsT0k5SoZGOblAL+U37DWBHwAy5sJqktOtboa0CucIpC8u b15oNjHYahm4iUQsWF+IEEBgDUtVZxJqez1C9hCvGB2QZjTnMiWQOJdbEIBCDcPl XFV1eO6AdlRMuI/lyiuBauwRsMJXifi5mY4PmTwQfTqDwObSOWRM/5taMSTwAUlG MsLQA1K37hTzQQxK79mtgtf7rqX0Zp0I8znCeJZq7FDF3cIylp00N2zku/iEdCNz BqkVMBc3mTJY8UVp+881FaDwrcXCM6I8Xx3KY2CB41oLtfLl0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBW+sytvYu5l95JH8NOUgyFyYL//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFqeuB96szqFc8zWqdxTR5 gZSnWZxQye802nIRzK0mOZYig6r0P5QmRLx1aoV5TLfbkaES0h9VFln2cyCaG6RV 2coLBoSKJruUhay1hHJxsbFns4EqRbpFm2e8Tf54ONGWg9zVqSGUBv6nycwsieDB HUa0OjJw1QDQ6F1ZPeLWInNeQpNONBFjn/uIt1aa/FfTSrWmd6PUCrn6Fo1bAjB+ Ml0R0+7JUiB9/UnceN7B5zXAtU0oHenodjkd49yGma8BKHWAT5xLcNsYKu9yUox7 YJ1h0s140I8M8xeG9Y+XPyIf1AXEymgODr16EqYeZwN1BG19V5efeHKBMWvT0VwT -----END CERTIFICATE-----Generated at Wed Sep 17 19:16:10 2025 by rpki-client