$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft File: 3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft (raw, json) Hash identifier: bZtunGYfZMs4XoNZ6jpZiFC3B6FAhTEqJRbi0BqvG7k= Subject key identifier: 3A:CF:35:6C:52:5F:C4:31:BD:F7:EE:62:25:C4:43:EB:82:59:E1:5A Authority key identifier: 37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2 Certificate issuer: /CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a Certificate serial: 010D0C9F4328584BA6676456ACD2FDFBFD5BB940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft Manifest number: 010D0C9F43285849D9D65FE8AFBABE9E8FB010A9 Signing time: Sun 26 Oct 2025 13:00:08 +0000 Manifest this update: Sun 26 Oct 2025 13:00:08 +0000 Manifest next update: Tue 28 Oct 2025 13:00:00 +0000 Files and hashes: 1: 3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl (hash: xt/1Ypfcruj/IG9giz02Hwf2UNF++L5KuRCRQTS5zCY=) 2: d2418aec-7a93-3789-881e-6e9bb35e157e.roa (hash: D3CsVWDTYh5n/KY/pJiYQrqav1mLZLHcFFWzSi5xTUE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:64:56:ac:d2:fd:fb:fd:5b:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a Validity Not Before: Oct 26 13:00:08 2025 GMT Not After : Oct 28 13:00:00 2025 GMT Subject: CN=226b4309-5ec0-4548-ba56-780b259e9040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:4e:a9:87:0e:48:9e:da:40:7c:99:20:73: 9f:bb:b5:14:a4:b8:f4:dd:3d:4f:fe:02:04:fe:19: 98:13:e6:f7:d7:a7:2e:2b:90:22:81:e8:c8:5a:73: 44:20:a5:dc:a3:c9:66:84:ee:fb:80:e7:fe:96:f1: 3b:e2:2f:81:b1:a5:f6:54:d4:e6:49:81:c8:26:92: 05:a8:ac:0d:6e:50:b5:06:dc:93:b7:c7:8a:f7:b4: fc:96:9c:7b:c5:a3:56:3a:7d:2b:25:7a:85:be:4f: 1d:98:51:f2:3d:76:ac:4c:58:bf:96:9c:1e:6c:f2: f9:fa:3a:3c:8d:6c:0e:4b:f5:5b:69:81:3b:4c:59: 5e:71:55:50:c1:2b:74:c0:e9:17:af:04:87:c7:5c: e7:53:09:02:7c:ca:fd:d9:51:11:7c:3f:e3:fd:10: 46:98:98:5f:1d:68:dd:69:46:d1:12:4d:5f:a0:56: e9:7a:5f:5b:06:96:fe:7a:cb:d6:48:ca:50:d2:9a: d6:28:e1:74:2e:05:ca:f1:0c:37:de:9a:90:17:93: 94:73:2f:1d:e6:7a:ba:e9:6f:25:a1:53:bf:87:84: 1f:6e:c7:db:6a:97:f9:ea:5a:7d:ea:3b:5b:20:9f: 2f:53:11:ee:25:c7:30:7f:8a:4d:b6:1b:f6:21:e0: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CF:35:6C:52:5F:C4:31:BD:F7:EE:62:25:C4:43:EB:82:59:E1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl X509v3 Authority Key Identifier: keyid:37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:55:7a:3b:1e:8a:5d:7d:b3:2e:87:2c:08:e7:5b:21:e7:4a: 3e:8d:ed:cf:a1:cb:82:4c:38:0b:a6:f8:5f:82:08:6f:86:42: 08:83:a7:cd:af:bd:9c:15:85:94:d7:cd:e8:33:2e:18:10:b5: 2c:fe:87:eb:c3:3c:1c:e6:57:89:1b:23:db:71:fe:5e:d6:81: 7d:a7:b1:0e:b5:b1:2b:0e:f3:5d:8a:20:d9:da:69:32:ed:35: 47:32:a6:4e:11:9e:bb:79:86:0c:b6:b6:0c:a5:27:bc:fd:1e: 9a:08:03:6b:02:85:a0:0c:b0:5a:21:1a:86:99:96:09:59:d4: 6c:43:da:71:c8:83:1e:91:66:c8:c2:c5:4a:ca:47:07:e4:be: 9f:f2:25:dd:ee:1c:1a:33:be:5b:ac:c3:99:bd:8d:a0:78:aa: 57:a0:be:c2:c4:52:09:a5:67:d1:bf:cf:f8:00:12:f2:e8:ff: d7:d1:bf:c5:da:06:2c:7e:1e:48:7c:73:4f:bd:8a:78:b0:be: 29:13:c6:c5:56:60:8c:3b:01:34:47:9e:15:2d:15:72:55:b6: e7:fe:b3:af:64:33:b4:b5:73:50:4d:3a:08:cf:6b:f3:52:20: 8c:00:58:0f:88:81:f8:12:ef:da:b7:37:2c:17:37:45:1a:c8: 86:4a:3a:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEumZ2RWrNL9+/1buUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkOTYwYWItOWFmNi00N2UyLWEyOGQtNjIzYjdkNGNl ZDZhMB4XDTI1MTAyNjEzMDAwOFoXDTI1MTAyODEzMDAwMFowLzEtMCsGA1UEAxMk MjI2YjQzMDktNWVjMC00NTQ4LWJhNTYtNzgwYjI1OWU5MDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV5OqYcOSJ7aQHyZIHOfu7UUpLj03T1P/gIE /hmYE+b316cuK5AigejIWnNEIKXco8lmhO77gOf+lvE74i+BsaX2VNTmSYHIJpIF qKwNblC1BtyTt8eK97T8lpx7xaNWOn0rJXqFvk8dmFHyPXasTFi/lpwebPL5+jo8 jWwOS/VbaYE7TFlecVVQwSt0wOkXrwSHx1znUwkCfMr92VERfD/j/RBGmJhfHWjd aUbREk1foFbpel9bBpb+esvWSMpQ0prWKOF0LgXK8Qw33pqQF5OUcy8d5nq66W8l oVO/h4Qfbsfbapf56lp96jtbIJ8vUxHuJccwf4pNthv2IeDkyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDrPNWxSX8QxvffuYiXEQ+uCWeFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5 NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNiN2Q0Y2VkNmEvM2ZkOTYwYWItOWFmNi00 N2UyLWEyOGQtNjIzYjdkNGNlZDZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ZkOTYwYWItOWFmNi00N2UyLWEy OGQtNjIzYjdkNGNlZDZhLzNmZDk2MGFiLTlhZjYtNDdlMi1hMjhkLTYyM2I3ZDRj ZWQ2YS5jcmwwHwYDVR0jBBgwFoAUNxMbooWnBA3GnpfGqlb+qDu1BsIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNi N2Q0Y2VkNmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZVXo7HopdfbMuhywI51sh 50o+je3PocuCTDgLpvhfgghvhkIIg6fNr72cFYWU183oMy4YELUs/ofrwzwc5leJ GyPbcf5e1oF9p7EOtbErDvNdiiDZ2mky7TVHMqZOEZ67eYYMtrYMpSe8/R6aCANr AoWgDLBaIRqGmZYJWdRsQ9pxyIMekWbIwsVKykcH5L6f8iXd7hwaM75brMOZvY2g eKpXoL7CxFIJpWfRv8/4ABLy6P/X0b/F2gYsfh5IfHNPvYp4sL4pE8bFVmCMOwE0 R54VLRVyVbbn/rOvZDO0tXNQTToIz2vzUiCMAFgPiIH4Eu/atzcsFzdFGsiGSjqh -----END CERTIFICATE-----Generated at Sun Oct 26 19:00:46 2025 by rpki-client