$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft File: 3e43e154-e174-4a6b-a09a-e289bd92a034.mft (raw, json) Hash identifier: EI7KWo212BZyor8su2s/ENj8EdlUm7k50XbO+yYan34= Subject key identifier: C2:BC:2A:77:75:73:3E:CB:F0:BD:3F:A0:CE:CB:6A:26:C8:1E:3C:0C Authority key identifier: 97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 Certificate issuer: /CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Certificate serial: 010D0C9F4328584B3A92AE2CAE0C08D33B08E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft Manifest number: 010D0C9F4328584944138B300DF9C4D02E8D3B7B Signing time: Wed 17 Sep 2025 22:00:03 +0000 Manifest this update: Wed 17 Sep 2025 22:00:03 +0000 Manifest next update: Sat 20 Sep 2025 22:00:00 +0000 Files and hashes: 1: 3e43e154-e174-4a6b-a09a-e289bd92a034.crl (hash: GCfpvf4YKgu+Zx2M0fA6ot652/+9TPdjZ5yCE3uWnHE=) 2: bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa (hash: XSOW+diyOS9qcfBIaWgnZk4BCGbCLkSgIok1UtCvrEg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:92:ae:2c:ae:0c:08:d3:3b:08:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Validity Not Before: Sep 17 22:00:03 2025 GMT Not After : Sep 20 22:00:00 2025 GMT Subject: CN=b10e579a-d526-470e-abf6-91cad41c9065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f8:05:70:a1:f9:62:30:01:94:4f:85:82:0b: 73:39:10:43:b3:e0:0f:90:ae:4b:c7:a2:3c:8a:2c: 8a:cf:bf:52:ce:cc:1b:1d:39:9e:07:a8:c7:2c:df: 27:97:33:da:e6:8a:b3:c5:a2:a0:77:16:6b:18:d6: 77:a3:1f:a6:9b:47:4c:d8:9c:b7:9e:8a:d0:11:ec: 43:44:b2:1a:2b:11:8c:d6:ee:6d:52:73:d8:0c:c9: 57:f3:74:90:42:00:66:bb:d1:e3:fc:b8:85:25:c4: c2:fe:aa:a5:b6:a5:03:d2:14:78:82:e7:f8:ac:0c: 34:54:ad:6a:cf:fe:2e:6a:d0:ce:5e:62:58:f9:ad: 07:30:c3:3f:b1:c9:3a:12:a8:8a:83:cd:e3:83:fb: c4:60:b7:65:ec:92:63:cf:dd:ee:0a:7d:cc:04:99: 4a:ff:25:7e:06:2a:e7:64:15:89:b5:98:87:72:76: d0:75:b6:48:7f:c2:41:81:7f:85:34:1c:58:fd:f3: 01:71:f9:58:38:97:68:3f:51:90:a0:24:18:74:0f: d5:2c:48:20:b5:1c:60:50:27:a8:19:e6:1a:2e:95: bd:8d:49:0f:74:14:e0:20:bf:56:9c:9e:c1:ba:54: 86:99:a9:cb:c2:31:41:44:74:18:92:97:aa:88:b4: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BC:2A:77:75:73:3E:CB:F0:BD:3F:A0:CE:CB:6A:26:C8:1E:3C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl X509v3 Authority Key Identifier: keyid:97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:28:55:c1:f8:59:5d:9a:ae:29:45:fd:27:cd:cd:47:b7:0e: 9d:f3:33:04:86:aa:cc:d9:5d:9f:d1:0c:c9:eb:65:17:59:eb: 99:84:c0:5d:94:7a:e3:ec:a7:3f:3f:54:a7:c6:96:06:9d:09: 97:08:cd:28:b5:20:a8:17:c9:6c:a8:c3:c3:09:92:1e:d2:42: d9:7e:ff:52:5a:3e:14:d5:75:47:ac:8c:39:33:b1:e0:ce:14: d7:2b:b4:34:7e:53:a8:ec:7c:08:28:ec:4c:28:ab:5e:bd:a4: fc:46:95:91:59:8e:ad:05:27:50:73:7f:cc:01:56:6d:31:f7: 20:02:74:85:c6:e7:4a:ba:90:be:ca:dd:e5:34:72:e0:97:74: 4e:8c:64:74:6d:93:57:cd:ed:91:b3:d2:7f:a9:1c:ca:1b:85: db:d9:81:26:58:46:7e:73:5b:04:7f:82:35:3a:4b:39:2a:a3: 1c:e0:f4:5d:ce:c6:82:0b:c0:95:b2:f0:2f:87:92:49:d4:d4: 72:4b:ee:4a:b8:bf:9b:34:b6:ad:4b:c4:83:ab:c8:49:f5:1e: e2:be:4a:26:c6:56:c2:b4:91:16:47:30:12:79:49:33:9d:ee: 55:c9:78:9d:2b:28:03:9d:7d:8b:64:d0:71:99:71:a1:eb:8b: 2c:a9:61:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs6kq4srgwI0zsI6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U0M2UxNTQtZTE3NC00YTZiLWEwOWEtZTI4OWJkOTJh MDM0MB4XDTI1MDkxNzIyMDAwM1oXDTI1MDkyMDIyMDAwMFowLzEtMCsGA1UEAxMk YjEwZTU3OWEtZDUyNi00NzBlLWFiZjYtOTFjYWQ0MWM5MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PgFcKH5YjABlE+FggtzORBDs+APkK5Lx6I8 iiyKz79SzswbHTmeB6jHLN8nlzPa5oqzxaKgdxZrGNZ3ox+mm0dM2Jy3norQEexD RLIaKxGM1u5tUnPYDMlX83SQQgBmu9Hj/LiFJcTC/qqltqUD0hR4guf4rAw0VK1q z/4uatDOXmJY+a0HMMM/sck6EqiKg83jg/vEYLdl7JJjz93uCn3MBJlK/yV+Birn ZBWJtZiHcnbQdbZIf8JBgX+FNBxY/fMBcflYOJdoP1GQoCQYdA/VLEggtRxgUCeo GeYaLpW9jUkPdBTgIL9WnJ7BulSGmanLwjFBRHQYkpeqiLSTRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMK8Knd1cz7L8L0/oM7LaibIHjwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQz ZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5YmQ5MmEwMzQvM2U0M2UxNTQtZTE3NC00 YTZiLWEwOWEtZTI4OWJkOTJhMDM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2U0M2UxNTQtZTE3NC00YTZiLWEw OWEtZTI4OWJkOTJhMDM0LzNlNDNlMTU0LWUxNzQtNGE2Yi1hMDlhLWUyODliZDky YTAzNC5jcmwwHwYDVR0jBBgwFoAUl5YC2dswnhnP056lQoCu/o/5m8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQzZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5 YmQ5MmEwMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRKFXB+Fldmq4pRf0nzc1H tw6d8zMEhqrM2V2f0QzJ62UXWeuZhMBdlHrj7Kc/P1SnxpYGnQmXCM0otSCoF8ls qMPDCZIe0kLZfv9SWj4U1XVHrIw5M7HgzhTXK7Q0flOo7HwIKOxMKKtevaT8RpWR WY6tBSdQc3/MAVZtMfcgAnSFxudKupC+yt3lNHLgl3ROjGR0bZNXze2Rs9J/qRzK G4Xb2YEmWEZ+c1sEf4I1Oks5KqMc4PRdzsaCC8CVsvAvh5JJ1NRyS+5KuL+bNLat S8SDq8hJ9R7ivkomxlbCtJEWRzASeUkzne5VyXidKygDnX2LZNBxmXGh64ssqWFE -----END CERTIFICATE-----Generated at Wed Sep 17 23:52:31 2025 by rpki-client