$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: rrQxsh97nlTbaJMzzV9pCMdR62LnNZBbkU1VIchvHnU= Subject key identifier: 2E:D2:AC:C9:28:A1:24:25:C1:1A:E1:DD:6F:95:17:BD:23:F6:AF:6E Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584BA914405840C6BC1EC3766700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B6071 Signing time: Mon 27 Oct 2025 12:00:03 +0000 Manifest this update: Mon 27 Oct 2025 12:00:03 +0000 Manifest next update: Wed 29 Oct 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: Iu8XRtpaAl//AObQVujvD/08gTvsJDmcv2eeE1iwfuo=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: JIB4F42TUsoeNgxIG+zqcINEwbGjQVpzrEMc88OFdaI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:14:40:58:40:c6:bc:1e:c3:76:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Oct 27 12:00:03 2025 GMT Not After : Oct 29 12:00:00 2025 GMT Subject: CN=c8129086-8413-4533-9509-3ea730a58928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:be:e7:a8:24:4b:01:d9:e8:7f:c9:0f:e8: a4:b1:5f:5a:14:9a:5d:b4:3b:d8:b7:67:7c:8b:99: 37:e0:e9:ba:4f:1f:22:72:ea:25:dd:1f:10:37:60: 31:32:f5:ca:df:21:4b:7e:21:e4:1e:c8:2f:f6:28: 47:a7:09:a4:86:09:0c:f7:b7:c7:c6:f1:8f:97:f1: f3:17:5f:c5:d4:f7:f2:7b:19:f9:91:1a:07:cd:9b: 85:75:df:b4:40:9c:70:19:fe:af:5b:53:34:25:33: ad:c4:16:83:e6:ec:61:d0:34:e9:e6:d1:37:f3:73: 3d:4e:6a:7f:b3:b4:89:6a:43:e6:8a:b9:7d:bf:c9: e9:ac:29:19:19:af:63:c6:05:f6:24:97:b8:1e:06: a3:8a:c4:60:6d:64:4c:00:41:ac:ee:cf:f0:a1:3a: 1e:71:3e:24:b3:d7:c8:cf:0f:e5:98:bb:3b:37:f1: 2a:97:84:2b:7c:f7:54:c3:f1:91:1b:55:36:a4:47: 95:79:5e:fe:91:36:76:6e:43:01:05:7c:7a:c6:61: 0e:cd:71:8d:d4:ca:06:4c:a7:b1:6d:d2:28:d8:1a: cc:f7:07:bb:b9:02:70:26:30:c6:00:ca:47:a6:a5: 8e:27:bc:2b:c6:13:83:35:9a:5b:f2:2d:3e:fd:75: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D2:AC:C9:28:A1:24:25:C1:1A:E1:DD:6F:95:17:BD:23:F6:AF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:87:9b:e2:7e:72:47:f6:aa:58:a6:42:3b:71:b2:21:5e:39: d7:29:f1:cd:f0:55:7b:81:a7:ca:78:a1:8d:7f:b4:94:f0:e9: b6:b6:29:64:86:a1:7a:ed:df:33:42:4d:46:c7:b4:c7:c0:04: b7:8c:ac:e2:3b:3c:2e:93:a5:f1:35:d9:94:67:2a:1b:cc:ea: e4:af:82:0e:eb:4e:2a:ec:64:53:55:17:9d:79:23:ec:1f:84: 5d:2a:04:ee:a1:60:d6:d6:c9:91:44:f4:51:17:95:18:ed:42: fc:4e:1e:da:ba:ce:a2:cd:e8:82:ea:8f:7b:f2:cc:65:79:46: c6:3c:dd:3f:25:c9:7f:2a:da:97:bb:fd:93:1a:82:d0:39:b9: 82:84:5e:ae:15:95:ed:ac:a1:e1:04:51:2e:bb:3d:a6:70:f1: 64:2b:1e:c8:04:c0:06:08:40:c2:f4:65:ed:1a:d4:f0:ad:28: 6f:c1:99:75:de:c8:8f:f4:54:96:d4:17:f0:5e:e9:a8:30:51: a4:3d:44:47:0d:30:06:b4:d6:de:20:78:f3:4f:b5:9c:a9:4f: 78:7a:3f:01:ce:5e:9e:56:8c:ac:10:49:4e:fe:f4:82:0e:e3: 31:1a:04:52:4f:07:24:34:e6:e0:2e:67:05:a5:46:b7:12:13: bc:a3:07:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupFEBYQMa8HsN2ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MTAyNzEyMDAwM1oXDTI1MTAyOTEyMDAwMFowLzEtMCsGA1UEAxMk YzgxMjkwODYtODQxMy00NTMzLTk1MDktM2VhNzMwYTU4OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jy+56gkSwHZ6H/JD+iksV9aFJpdtDvYt2d8 i5k34Om6Tx8icuol3R8QN2AxMvXK3yFLfiHkHsgv9ihHpwmkhgkM97fHxvGPl/Hz F1/F1Pfyexn5kRoHzZuFdd+0QJxwGf6vW1M0JTOtxBaD5uxh0DTp5tE383M9Tmp/ s7SJakPmirl9v8nprCkZGa9jxgX2JJe4HgajisRgbWRMAEGs7s/woToecT4ks9fI zw/lmLs7N/Eql4QrfPdUw/GRG1U2pEeVeV7+kTZ2bkMBBXx6xmEOzXGN1MoGTKex bdIo2BrM9we7uQJwJjDGAMpHpqWOJ7wrxhODNZpb8i0+/XXwPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC7SrMkooSQlwRrh3W+VF70j9q9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDHh5vifnJH9qpYpkI7cbIh XjnXKfHN8FV7gafKeKGNf7SU8Om2tilkhqF67d8zQk1Gx7THwAS3jKziOzwuk6Xx NdmUZyobzOrkr4IO604q7GRTVRedeSPsH4RdKgTuoWDW1smRRPRRF5UY7UL8Th7a us6izeiC6o978sxleUbGPN0/Jcl/KtqXu/2TGoLQObmChF6uFZXtrKHhBFEuuz2m cPFkKx7IBMAGCEDC9GXtGtTwrShvwZl13siP9FSW1BfwXumoMFGkPURHDTAGtNbe IHjzT7WcqU94ej8Bzl6eVoysEElO/vSCDuMxGgRSTwckNObgLmcFpUa3EhO8owdS -----END CERTIFICATE-----Generated at Tue Oct 28 03:15:48 2025 by rpki-client