$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft File: 3228caa5-d014-404b-9e3d-61cdea1ff493.mft (raw, json) Hash identifier: kTyg+g+nFDyH5k67elhANSlizXoFC6lwRJdmmMmWAKQ= Subject key identifier: 00:CD:44:60:6C:FD:A5:9D:E4:62:81:F0:AC:5F:4F:EF:50:CA:A9:9E Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Certificate serial: 010D0C9F4328584BA3F600DB2930B35C32CB6FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft Manifest number: 010D0C9F43285847A625B9018F5C2B74B33CB037 Signing time: Sat 25 Oct 2025 16:00:03 +0000 Manifest this update: Sat 25 Oct 2025 16:00:03 +0000 Manifest next update: Tue 28 Oct 2025 16:00:00 +0000 Files and hashes: 1: 3228caa5-d014-404b-9e3d-61cdea1ff493.crl (hash: DUN8gp0UmwHEYY7g+7hUAwnjXHCy3+lMKg7/DLbb8q0=) 2: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (hash: edFcqWa4Fg1AQoUNoXixFt4FCgBLomZRXgwysdp+j8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:f6:00:db:29:30:b3:5c:32:cb:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Validity Not Before: Oct 25 16:00:03 2025 GMT Not After : Oct 28 16:00:00 2025 GMT Subject: CN=6cbd0189-cfad-435f-9a69-3ba2d5516fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:15:1a:bc:05:46:2c:39:6e:70:1a:42:71: f4:67:46:fe:a4:e7:e4:83:03:c8:59:5e:2a:29:62: ac:fb:3d:c5:ee:35:df:9d:31:31:7b:0b:1e:88:b8: 64:e4:68:39:de:de:61:f6:38:8d:a0:73:86:78:c8: bc:63:0e:f1:70:2f:5e:a9:8b:6c:a3:c0:d7:c5:01: 51:02:a6:37:fc:ba:0e:fb:f5:0e:a6:31:05:fc:42: 5d:78:ed:4c:60:9f:16:c8:fd:4b:7f:d7:e6:83:70: 7d:65:7d:61:19:2f:a5:e1:46:1d:98:02:32:82:53: 23:79:64:09:60:a9:e7:9d:6b:04:7e:dd:ff:4f:31: 22:c2:39:57:93:ac:ef:07:7f:c3:4e:f3:3d:6d:00: 64:4c:88:e1:10:27:85:ab:03:e8:c2:77:2f:cf:dc: c0:01:5c:aa:94:59:5b:47:f5:cb:46:f4:90:00:5d: 23:5c:e0:1b:5b:45:17:19:31:c0:92:39:03:54:b9: 17:30:30:e5:38:63:64:74:35:1a:fc:d1:46:a1:cc: ee:56:55:58:20:b2:7c:65:4f:00:a9:30:4f:f0:e0: 2e:c2:64:98:3a:ff:94:32:1e:a4:85:a4:a4:e7:fc: bf:f1:7e:9b:ce:97:10:54:1a:39:8b:46:b5:22:97: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:44:60:6C:FD:A5:9D:E4:62:81:F0:AC:5F:4F:EF:50:CA:A9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl X509v3 Authority Key Identifier: keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:da:b2:89:fd:3b:c1:76:d4:23:34:eb:c9:8e:c6:06:d4:c8: a4:2e:c6:38:69:c9:e6:14:27:20:84:a6:a8:ee:70:85:fe:37: cb:de:e8:8a:bb:33:46:4d:78:19:d6:fc:e5:31:24:05:54:b8: 67:00:1c:7f:a5:2d:b1:59:23:e4:bb:1b:82:20:2b:71:05:fa: b5:17:8d:8c:74:07:81:8a:b2:e5:3e:0c:8c:04:96:88:cb:c4: bb:02:6d:31:1f:1e:63:90:f7:09:16:72:4f:43:80:e7:99:7a: b6:e9:90:d6:d3:03:ac:dc:ce:4b:13:d9:25:ff:58:26:fc:c6: e4:00:3a:48:1f:a1:b9:ab:6b:42:da:ea:9f:6c:2e:46:c2:c7: 4f:2e:bb:ea:69:2b:06:58:2c:a8:51:79:47:f9:90:fe:29:c4: 32:bf:b8:b8:3a:43:67:ac:75:79:33:32:d1:f9:62:7b:b8:38: fa:a8:e2:a9:8a:8e:72:fb:f1:2c:49:e7:bd:d7:22:66:7d:4d: c5:b0:da:62:a9:af:d7:52:00:5f:64:5a:3f:1c:c7:ea:a1:77: ad:6e:f3:b0:10:9d:d6:4e:33:3b:cf:5c:df:da:2d:c7:2d:e0: 54:1a:0e:9d:42:6f:44:fe:a5:ed:4a:14:41:60:cb:2b:ac:0b: 76:f5:21:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuj9gDbKTCzXDLLb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm NDkzMB4XDTI1MTAyNTE2MDAwM1oXDTI1MTAyODE2MDAwMFowLzEtMCsGA1UEAxMk NmNiZDAxODktY2ZhZC00MzVmLTlhNjktM2JhMmQ1NTE2ZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqcVGrwFRiw5bnAaQnH0Z0b+pOfkgwPIWV4q KWKs+z3F7jXfnTExewseiLhk5Gg53t5h9jiNoHOGeMi8Yw7xcC9eqYtso8DXxQFR AqY3/LoO+/UOpjEF/EJdeO1MYJ8WyP1Lf9fmg3B9ZX1hGS+l4UYdmAIyglMjeWQJ YKnnnWsEft3/TzEiwjlXk6zvB3/DTvM9bQBkTIjhECeFqwPowncvz9zAAVyqlFlb R/XLRvSQAF0jXOAbW0UXGTHAkjkDVLkXMDDlOGNkdDUa/NFGoczuVlVYILJ8ZU8A qTBP8OAuwmSYOv+UMh6khaSk5/y/8X6bzpcQVBo5i0a1IpfWqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFADNRGBs/aWd5GKB8KxfT+9QyqmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4 Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvMzIyOGNhYTUtZDAxNC00 MDRiLTllM2QtNjFjZGVhMWZmNDkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk ZWExZmY0OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR2rKJ/TvBdtQjNOvJjsYG 1MikLsY4acnmFCcghKao7nCF/jfL3uiKuzNGTXgZ1vzlMSQFVLhnABx/pS2xWSPk uxuCICtxBfq1F42MdAeBirLlPgyMBJaIy8S7Am0xHx5jkPcJFnJPQ4DnmXq26ZDW 0wOs3M5LE9kl/1gm/MbkADpIH6G5q2tC2uqfbC5GwsdPLrvqaSsGWCyoUXlH+ZD+ KcQyv7i4OkNnrHV5MzLR+WJ7uDj6qOKpio5y+/EsSee91yJmfU3FsNpiqa/XUgBf ZFo/HMfqoXetbvOwEJ3WTjM7z1zf2i3HLeBUGg6dQm9E/qXtShRBYMsrrAt29SE3 -----END CERTIFICATE-----Generated at Sun Oct 26 05:17:33 2025 by rpki-client