$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: /yBJNwnMExq/kySaF8G1UTTlCsH8xjY5nhfBl0oTPks= Subject key identifier: 99:18:43:15:FC:18:4A:98:67:2B:D9:16:BD:B5:E0:41:56:9E:22:D2 Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584B8A0564EA643548D569735DD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA9690 Signing time: Thu 16 Oct 2025 09:00:03 +0000 Manifest this update: Thu 16 Oct 2025 09:00:03 +0000 Manifest next update: Sun 19 Oct 2025 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: XqGEcJejygpyVpQN3JsCnuPKi+0KHhhE9GvcTNvYOqw=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: HaMgPs1cf8QUJ0TNHA44EkwG2rxjL2M8M+CF068nmKE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:05:64:ea:64:35:48:d5:69:73:5d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Oct 16 09:00:03 2025 GMT Not After : Oct 19 09:00:00 2025 GMT Subject: CN=921676a0-e7b9-49ec-a6ae-c6b5cda8fbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:90:b9:ff:57:02:ac:62:9f:57:31:45:bc:c9: 74:2b:fa:a7:f3:81:13:71:1a:7c:9d:90:be:60:5a: 28:ce:64:a5:8c:36:6e:8b:cc:7c:d9:82:d4:44:bf: 8e:19:12:8e:e8:d0:2b:fa:5d:b2:00:cd:3e:db:70: 8a:3f:75:0e:a9:ca:c3:9b:b6:35:02:3e:93:67:52: 0c:9c:74:9a:09:38:7c:47:67:4f:43:78:3e:22:7e: a7:55:22:86:2a:ba:f6:97:70:93:97:8c:db:d3:c9: 40:dd:2b:27:8d:51:fc:8d:53:52:39:87:9b:69:fc: 69:45:83:24:3a:eb:5a:30:30:a8:43:d3:fb:b6:b0: f2:73:97:26:a6:46:38:3b:ad:83:d0:03:d4:96:8d: 60:a3:d9:29:84:5b:ec:3c:5b:5b:f2:67:aa:76:0b: b0:cf:79:e4:f9:5c:5a:b5:8c:eb:21:99:57:18:f2: d9:1c:e4:11:59:ca:1c:94:f6:b1:80:2a:fe:e5:d7: 28:27:a4:57:98:56:c6:4f:72:28:e5:7c:a3:b4:2b: 87:38:ac:19:bb:fe:ff:d5:40:b1:e2:ab:60:6b:51: ea:c3:ad:a1:42:0c:3b:8f:5d:db:35:86:6c:bf:b1: 1a:f2:66:70:d2:27:76:a9:9d:13:b6:bc:87:08:bd: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:43:15:FC:18:4A:98:67:2B:D9:16:BD:B5:E0:41:56:9E:22:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6d:7d:76:75:1d:a5:11:ee:93:2c:48:2e:1f:6d:e2:cd:7c: 23:79:2f:e1:6b:91:45:9d:4b:ce:c4:05:4f:e1:92:45:de:c2: 03:0f:d0:e3:d9:1c:4b:45:fc:8a:98:45:41:5a:06:67:c9:62: 46:c1:90:ed:a8:d6:b1:e0:7d:b2:af:2c:26:31:3c:36:42:23: c7:99:13:11:06:f4:b8:42:bc:62:8f:3b:81:08:99:a2:eb:bb: 13:58:08:e8:a8:59:5a:31:a0:13:ec:44:fd:59:61:f5:d8:45: 57:05:bc:57:76:27:37:3c:88:54:7d:65:47:19:d1:d9:5e:cf: 2c:5a:b6:be:49:f2:51:60:0c:71:ee:14:fe:54:3c:a1:67:a6: b4:2d:0c:8f:28:4e:a4:d0:3f:d8:57:e5:dd:6f:e8:d5:16:b0: 13:03:34:4f:1f:42:4e:ed:56:10:1f:38:78:82:75:b8:26:ef: 9e:f0:b6:d3:1c:ff:4f:2d:96:0f:16:e5:4d:29:b2:8e:88:8b: ca:19:62:ac:4f:1d:2f:7d:36:10:f9:8f:90:86:18:75:53:fc: 97:0e:73:48:bd:61:cd:91:25:99:e7:7c:12:eb:a3:5b:a7:ef: 2d:a1:94:b7:99:1f:d4:08:ee:4e:6b:73:bc:e7:b8:ec:10:06: cd:69:61:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuKBWTqZDVI1WlzXdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI1MTAxNjA5MDAwM1oXDTI1MTAxOTA5MDAwMFowLzEtMCsGA1UEAxMk OTIxNjc2YTAtZTdiOS00OWVjLWE2YWUtYzZiNWNkYThmYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85C5/1cCrGKfVzFFvMl0K/qn84ETcRp8nZC+ YFoozmSljDZui8x82YLURL+OGRKO6NAr+l2yAM0+23CKP3UOqcrDm7Y1Aj6TZ1IM nHSaCTh8R2dPQ3g+In6nVSKGKrr2l3CTl4zb08lA3SsnjVH8jVNSOYebafxpRYMk OutaMDCoQ9P7trDyc5cmpkY4O62D0APUlo1go9kphFvsPFtb8meqdguwz3nk+Vxa tYzrIZlXGPLZHOQRWcoclPaxgCr+5dcoJ6RXmFbGT3Io5XyjtCuHOKwZu/7/1UCx 4qtga1Hqw62hQgw7j13bNYZsv7Ea8mZw0id2qZ0TtryHCL14VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJkYQxX8GEqYZyvZFr214EFWniLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkbX12dR2lEe6TLEguH23i zXwjeS/ha5FFnUvOxAVP4ZJF3sIDD9Dj2RxLRfyKmEVBWgZnyWJGwZDtqNax4H2y rywmMTw2QiPHmRMRBvS4QrxijzuBCJmi67sTWAjoqFlaMaAT7ET9WWH12EVXBbxX dic3PIhUfWVHGdHZXs8sWra+SfJRYAxx7hT+VDyhZ6a0LQyPKE6k0D/YV+Xdb+jV FrATAzRPH0JO7VYQHzh4gnW4Ju+e8LbTHP9PLZYPFuVNKbKOiIvKGWKsTx0vfTYQ +Y+Qhhh1U/yXDnNIvWHNkSWZ53wS66Nbp+8toZS3mR/UCO5Oa3O857jsEAbNaWGr -----END CERTIFICATE-----Generated at Fri Oct 17 09:30:04 2025 by rpki-client