$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft File: 398117f0-030c-4fca-8a7f-c35017830f8f.mft (raw, json) Hash identifier: 4ebycF/4pmWsyCaVl6ME0OJO5A4OdGcu5LuMIVe17No= Subject key identifier: FC:80:D9:4A:47:E6:78:2B:6D:BF:A2:EF:54:EA:00:05:1D:DD:E7:08 Authority key identifier: D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 Certificate issuer: /CN=398117f0-030c-4fca-8a7f-c35017830f8f Certificate serial: 010D0C9F4328584B3A74E42AE2CE2EBBB7C83C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft Manifest number: 010D0C9F432858497EADF361D8B5AA7A2F481124 Signing time: Wed 17 Sep 2025 21:00:03 +0000 Manifest this update: Wed 17 Sep 2025 21:00:03 +0000 Manifest next update: Fri 19 Sep 2025 21:00:00 +0000 Files and hashes: 1: 398117f0-030c-4fca-8a7f-c35017830f8f.crl (hash: qgLkJOrbI8WW1+vFEv50fCpSy6WLkTGA6TFXfNb8nRY=) 2: 4f4122b7-8496-3e28-8763-970d5d4f19d2.roa (hash: 5bF6P0B4yc/scWga/ozaREgsYJ9OzVxvJoN2O7t+2xo=) 3: f57d7e84-eace-3b4f-b404-7aafb17c030e.roa (hash: 4nS21qFu9dv1Kdt6kDTg1TksF4IIytvox5wsTdXzigk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:74:e4:2a:e2:ce:2e:bb:b7:c8:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398117f0-030c-4fca-8a7f-c35017830f8f Validity Not Before: Sep 17 21:00:03 2025 GMT Not After : Sep 19 21:00:00 2025 GMT Subject: CN=4e6ad4fa-e706-4c36-96c5-b7d7b9ab0f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:91:0f:3a:88:95:e2:6d:5d:a9:6a:b4:59:88: e7:9f:62:0f:b4:fd:ce:ad:ab:a1:23:dd:10:a1:d0: 46:51:ff:34:a8:5a:c6:e1:ed:98:4f:87:c8:3b:58: 8a:ba:d9:94:32:1b:1f:70:61:eb:f4:0e:56:eb:8c: 60:6f:3d:a5:e9:87:2f:d5:8b:50:e7:ca:f5:76:01: 69:56:cb:21:b7:4a:3a:43:5f:1d:f2:85:1d:bd:42: 16:dd:31:bb:7c:10:a7:76:f2:7f:29:11:1d:a3:58: 53:38:32:21:80:e7:e4:3e:d3:d7:33:92:47:86:2d: e8:f8:39:15:4f:5c:8f:28:82:5a:26:6b:8d:1a:88: bd:49:74:d4:d0:d1:0c:59:be:a9:b2:7f:da:ec:a4: fa:b7:ad:00:42:70:90:cc:b8:03:0d:f8:f6:da:65: a9:13:3b:1e:33:80:b8:53:a8:52:b9:08:6b:80:1f: 95:b0:9e:a5:29:13:d1:7b:e0:7c:b5:e6:ca:79:c7: 91:b5:8d:bb:a2:00:5d:03:80:bc:88:14:39:f2:c5: 85:9f:c7:d5:04:b0:66:c0:16:b8:c0:97:c8:b0:d2: 58:6e:78:46:50:8f:71:33:70:ff:4c:91:a5:c9:ef: dc:d1:8d:62:5e:51:93:94:99:44:f9:ca:95:e7:66: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:80:D9:4A:47:E6:78:2B:6D:BF:A2:EF:54:EA:00:05:1D:DD:E7:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl X509v3 Authority Key Identifier: keyid:D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:18:95:ea:0a:d9:ef:1a:3d:e8:bd:db:13:bc:be:f1:0f:7a: 1f:dd:4d:91:e2:c6:ed:9b:d0:71:82:cc:93:4a:02:1f:b8:62: f0:6a:af:b4:e1:34:84:11:22:37:11:cd:a7:94:59:8c:ab:74: 28:af:7c:99:62:f6:fb:f3:f3:42:04:39:9b:3c:5f:04:51:0e: 82:08:f3:cf:d7:cb:fe:39:9b:38:28:a9:90:cf:f3:78:f4:94: 1f:85:dc:ae:cc:67:f2:c9:92:13:b9:2e:e3:f5:dc:4f:f5:e2: 76:0d:d0:62:c8:c9:72:8a:d7:90:c4:a9:80:c5:04:ff:7d:6c: 0e:52:ae:33:34:3a:3a:5d:80:11:35:74:f4:1a:f5:4a:f9:a8: 47:f1:5c:7e:fa:c6:c7:65:0a:c4:0b:10:c4:85:cd:19:bf:b8: 79:1a:79:58:cd:14:98:7d:c4:fc:33:56:83:7a:8e:32:07:cc: 3a:5e:eb:73:d7:ff:bd:b2:21:3c:8b:fe:14:68:ca:32:4f:06: 78:c7:28:e4:fe:f0:c5:b8:e7:cb:b7:2b:ea:3e:16:7b:d6:da: 05:fc:75:a3:f0:98:f4:89:0c:0f:e4:3a:fa:22:a1:8c:e1:18: 64:8f:d3:ce:31:3e:51:ca:c1:aa:04:c3:83:59:a3:fd:f2:5f: 78:71:47:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs6dOQq4s4uu7fIPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MTE3ZjAtMDMwYy00ZmNhLThhN2YtYzM1MDE3ODMw ZjhmMB4XDTI1MDkxNzIxMDAwM1oXDTI1MDkxOTIxMDAwMFowLzEtMCsGA1UEAxMk NGU2YWQ0ZmEtZTcwNi00YzM2LTk2YzUtYjdkN2I5YWIwZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpEPOoiV4m1dqWq0WYjnn2IPtP3OrauhI90Q odBGUf80qFrG4e2YT4fIO1iKutmUMhsfcGHr9A5W64xgbz2l6Ycv1YtQ58r1dgFp Vssht0o6Q18d8oUdvUIW3TG7fBCndvJ/KREdo1hTODIhgOfkPtPXM5JHhi3o+DkV T1yPKIJaJmuNGoi9SXTU0NEMWb6psn/a7KT6t60AQnCQzLgDDfj22mWpEzseM4C4 U6hSuQhrgB+VsJ6lKRPRe+B8tebKeceRtY27ogBdA4C8iBQ58sWFn8fVBLBmwBa4 wJfIsNJYbnhGUI9xM3D/TJGlye/c0Y1iXlGTlJlE+cqV52ZZBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPyA2UpH5ngrbb+i71TqAAUd3ecIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgx MTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUwMTc4MzBmOGYvMzk4MTE3ZjAtMDMwYy00 ZmNhLThhN2YtYzM1MDE3ODMwZjhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk4MTE3ZjAtMDMwYy00ZmNhLThh N2YtYzM1MDE3ODMwZjhmLzM5ODExN2YwLTAzMGMtNGZjYS04YTdmLWMzNTAxNzgz MGY4Zi5jcmwwHwYDVR0jBBgwFoAU0zqWn+U3hLo1c9gddq3vnpZd4cIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgxMTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUw MTc4MzBmOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGGJXqCtnvGj3ovdsTvL7x D3of3U2R4sbtm9BxgsyTSgIfuGLwaq+04TSEESI3Ec2nlFmMq3Qor3yZYvb78/NC BDmbPF8EUQ6CCPPP18v+OZs4KKmQz/N49JQfhdyuzGfyyZITuS7j9dxP9eJ2DdBi yMlyiteQxKmAxQT/fWwOUq4zNDo6XYARNXT0GvVK+ahH8Vx++sbHZQrECxDEhc0Z v7h5GnlYzRSYfcT8M1aDeo4yB8w6Xutz1/+9siE8i/4UaMoyTwZ4xyjk/vDFuOfL tyvqPhZ71toF/HWj8Jj0iQwP5Dr6IqGM4Rhkj9POMT5RysGqBMODWaP98l94cUfV -----END CERTIFICATE-----Generated at Wed Sep 17 23:58:59 2025 by rpki-client