$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft File: a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft (raw, json) Hash identifier: /r/Wf/UVUq/brsukwtzlcPI5aIwTAHz0bQe/frh4gC4= Subject key identifier: EC:6C:20:10:A9:07:C4:4D:BC:16:9C:A6:4D:BB:2C:81:F9:09:E3:E3 Authority key identifier: 7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC Certificate issuer: /CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Certificate serial: 010D0C9F4328584BA98B5D5940169882E10A8C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft Manifest number: 010D0C9F43285849F351DAA6700A92C3DA4833A0 Signing time: Mon 27 Oct 2025 16:00:03 +0000 Manifest this update: Mon 27 Oct 2025 16:00:03 +0000 Manifest next update: Wed 29 Oct 2025 16:00:00 +0000 Files and hashes: 1: a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl (hash: e2lV/OF8RCXt5IQCbLdXQq7JkaYwExZqx0HxGvKJ1mw=) 2: e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa (hash: CKBNAJ7EnTyhwMMGuFHST88fNdu/HqdoMWQayrD/DCU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:8b:5d:59:40:16:98:82:e1:0a:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Validity Not Before: Oct 27 16:00:03 2025 GMT Not After : Oct 29 16:00:00 2025 GMT Subject: CN=0b721c3b-b208-45f0-9728-a7b143aedf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:79:59:03:3c:e9:f0:d8:a2:fd:d9:56:a2:88: c2:88:36:c7:33:1d:31:f7:94:c0:bf:5c:cf:10:0b: f1:77:a9:c8:d7:f4:32:51:8e:17:ca:b9:e3:a9:86: bf:f5:10:67:65:a7:23:9c:e3:21:65:ce:e8:7b:33: c3:2d:09:c1:17:00:9d:91:65:59:ac:04:35:6a:33: 2a:56:4a:24:7e:df:84:30:f9:ed:e3:5b:4c:39:e0: 2d:76:8b:f5:8f:0b:68:77:82:0e:5e:26:aa:27:d0: 8a:56:b8:38:90:ff:ca:24:b6:c6:42:80:ce:b7:43: e3:a6:7f:25:59:4c:87:e2:d1:bf:cf:a2:a8:9c:ab: 5e:d1:2c:a9:3b:6a:2f:c5:3b:d7:42:be:b7:2a:0a: 54:9e:80:b7:2e:79:2b:e9:05:59:3d:92:ff:49:a5: 53:db:5d:d7:61:79:61:2a:dd:e1:6c:bb:15:f7:78: 17:cd:ce:78:f8:01:8e:af:3f:50:87:83:71:1b:26: 25:a9:d1:de:18:79:eb:87:b7:9d:04:ce:0b:e2:e0: ef:d3:76:9a:c7:3a:62:ad:63:9b:35:a6:ff:a9:cd: fc:a2:a1:bb:91:72:dc:4e:cc:9d:44:27:b9:b8:f8: 82:87:69:a6:64:9b:87:c3:ff:8d:40:cb:f7:2a:02: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6C:20:10:A9:07:C4:4D:BC:16:9C:A6:4D:BB:2C:81:F9:09:E3:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl X509v3 Authority Key Identifier: keyid:7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:d4:65:b9:3c:25:df:86:aa:bd:35:bc:fa:55:e4:e1:73: e3:ac:8d:6f:8c:5c:62:38:e7:35:2a:95:68:eb:3e:bd:c4:64: 16:75:7d:6e:ae:a3:09:7b:21:e2:b1:3c:91:4c:42:64:1b:df: bf:85:1d:ca:0b:84:ef:cc:56:23:ae:25:dc:60:e4:8d:17:22: 49:2e:4e:20:74:02:c9:af:66:25:05:47:0b:07:f7:9a:17:db: 1e:3c:71:4c:1a:11:18:4e:96:fa:c3:e9:92:7d:71:a8:5b:0f: 18:16:32:69:9e:39:23:aa:42:eb:59:27:95:35:2e:b0:04:51: 96:3c:73:7f:4d:82:03:de:7a:c8:b7:1f:01:b4:ec:51:ad:d4: d5:28:83:30:b3:9e:c0:00:19:49:c5:62:d1:5e:ec:1a:66:1b: 81:51:1c:98:40:61:58:59:9c:f1:2b:f9:cd:29:7e:2e:5f:59: 7b:d3:58:d5:45:20:f5:45:44:88:d1:37:20:4c:f8:98:5c:ba: 41:da:41:a7:45:8b:a6:c0:ce:b1:03:a5:2a:56:1a:8d:70:b9: 58:ce:6c:36:41:4e:25:64:ff:b5:ab:e0:b8:aa:1e:0b:39:68: 64:8a:1e:2a:10:62:85:f5:ca:ac:13:70:49:0f:6a:1b:fb:7f: 58:53:f6:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupi11ZQBaYguEKjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmNjdiMTItNDU4Zi00MjU3LWJkYjEtZGU4NGIxYjhk NDBkMB4XDTI1MTAyNzE2MDAwM1oXDTI1MTAyOTE2MDAwMFowLzEtMCsGA1UEAxMk MGI3MjFjM2ItYjIwOC00NWYwLTk3MjgtYTdiMTQzYWVkZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3lZAzzp8Nii/dlWoojCiDbHMx0x95TAv1zP EAvxd6nI1/QyUY4XyrnjqYa/9RBnZacjnOMhZc7oezPDLQnBFwCdkWVZrAQ1ajMq Vkokft+EMPnt41tMOeAtdov1jwtod4IOXiaqJ9CKVrg4kP/KJLbGQoDOt0Pjpn8l WUyH4tG/z6KonKte0SypO2ovxTvXQr63KgpUnoC3Lnkr6QVZPZL/SaVT213XYXlh Kt3hbLsV93gXzc54+AGOrz9Qh4NxGyYlqdHeGHnrh7edBM4L4uDv03aaxzpirWOb Nab/qc38oqG7kXLcTsydRCe5uPiCh2mmZJuHw/+NQMv3KgJs0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOxsIBCpB8RNvBacpk27LIH5CePjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2 N2IxMi00NThmLTQyNTctYmRiMS1kZTg0YjFiOGQ0MGQvYTNmNjdiMTItNDU4Zi00 MjU3LWJkYjEtZGU4NGIxYjhkNDBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNmNjdiMTItNDU4Zi00MjU3LWJk YjEtZGU4NGIxYjhkNDBkL2EzZjY3YjEyLTQ1OGYtNDI1Ny1iZGIxLWRlODRiMWI4 ZDQwZC5jcmwwHwYDVR0jBBgwFoAUeusTNaT6sOe2Pmwwzb5EUU2NCOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2N2IxMi00NThmLTQyNTctYmRiMS1kZTg0 YjFiOGQ0MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfP9RluTwl34aqvTW8+lXk 4XPjrI1vjFxiOOc1KpVo6z69xGQWdX1urqMJeyHisTyRTEJkG9+/hR3KC4TvzFYj riXcYOSNFyJJLk4gdALJr2YlBUcLB/eaF9sePHFMGhEYTpb6w+mSfXGoWw8YFjJp njkjqkLrWSeVNS6wBFGWPHN/TYID3nrItx8BtOxRrdTVKIMws57AABlJxWLRXuwa ZhuBURyYQGFYWZzxK/nNKX4uX1l701jVRSD1RUSI0TcgTPiYXLpB2kGnRYumwM6x A6UqVhqNcLlYzmw2QU4lZP+1q+C4qh4LOWhkih4qEGKF9cqsE3BJD2ob+39YU/Ys -----END CERTIFICATE-----Generated at Tue Oct 28 03:08:03 2025 by rpki-client