$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft File: c3e3599f-a90f-4544-a440-c15eca99db7f.mft (raw, json) Hash identifier: 9iK3F7NuUIV4kvZwS2r51h4Hqimi1rN2J1TTCOQU4Do= Subject key identifier: D4:F0:1B:B7:F3:A0:C1:21:64:AC:81:2A:F9:90:A3:EF:9E:62:BB:8F Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 Certificate issuer: /CN=c3e3599f-a90f-4544-a440-c15eca99db7f Certificate serial: 010D0C9F4328584BBFFEA5A19511CEBF3ED67D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft Manifest number: 010D0C9F4328584073A81D4877564E5B466B38A4 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (hash: qH0+cjki+oip1Z/UamaEm9IWBZTSDi4sHv60irGi4Rg=) 2: c3e3599f-a90f-4544-a440-c15eca99db7f.crl (hash: jC17TIbRkwLC7BzrNZQngyRXbA1cc76gWvVYryUz+cg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a5:a1:95:11:ce:bf:3e:d6:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=4571a29d-6045-4d9c-ac17-1ef6026dba9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:b2:28:30:1d:4d:9d:a8:5a:ea:3d:8c:79: e0:3e:9f:bf:77:5a:aa:a9:73:83:2a:20:c6:e5:07: 67:81:4f:87:d7:ba:87:51:a5:2f:91:dd:03:56:3d: f5:c6:57:6f:bc:f8:d1:b6:47:b9:2e:a4:aa:08:4d: d6:e2:26:36:6b:a8:33:6a:6e:5c:ef:d0:b0:6c:23: f2:af:41:2a:fd:ed:01:4d:7b:21:5e:78:9d:dd:f2: 38:30:d1:2e:96:51:e2:bf:37:b8:61:dc:a3:56:aa: 12:9f:fd:03:d2:d9:17:cd:7d:ce:76:25:02:28:b9: f3:bf:e2:a4:c0:c0:2e:a2:52:b5:1c:4f:f7:5b:78: ca:d8:76:87:c6:90:c8:55:1d:c1:af:2a:88:c5:06: c2:7d:28:85:8e:f6:0e:5e:ab:ed:bc:bc:53:71:87: be:fe:cf:81:01:72:05:e6:3a:f3:f3:c6:77:ba:90: 3a:56:83:1c:94:59:9b:4b:35:69:10:4a:79:c3:88: 90:04:a0:84:ac:d9:f7:05:c2:e5:1b:68:28:77:9b: 74:9c:b3:85:7d:d4:75:77:d0:3e:49:e5:e9:a4:84: c4:1d:3d:71:e0:6a:7a:af:a9:30:75:b2:ad:84:30: 45:01:82:d2:8d:03:fb:83:e2:87:db:ad:94:4e:7e: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:1B:B7:F3:A0:C1:21:64:AC:81:2A:F9:90:A3:EF:9E:62:BB:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl X509v3 Authority Key Identifier: keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ca:0b:f2:05:17:02:ae:7b:d5:c5:df:f1:d2:18:ac:4e:e5: 74:6a:fc:9c:27:66:34:5f:8a:0e:a1:00:f0:a3:08:a7:c7:24: 50:6f:c7:ca:52:b4:d0:ef:9b:8d:72:fd:6c:69:37:16:28:07: 1b:94:a8:33:06:df:8d:20:a6:73:3b:8f:e0:a3:a0:0c:6d:9b: 1f:dd:35:ec:5a:c5:61:4c:e3:4a:b9:d7:5c:1b:94:d5:73:1e: 65:3b:83:91:84:89:2d:48:97:c7:75:f8:a4:fe:28:fb:9f:d9: c2:a0:4c:d5:b3:29:65:16:19:07:25:2f:06:bc:9a:c0:a8:8a: eb:44:f9:f4:99:8f:8a:03:58:d3:3d:d9:99:4b:31:22:7d:d3: e1:86:fc:8e:fd:d7:54:2c:3b:62:4a:f7:7e:00:ca:2d:3f:88: a8:24:b1:ac:41:fa:e5:bd:1c:b6:8f:fb:52:3a:92:d6:9a:8c: e9:06:e8:37:54:2d:53:38:8d:ab:67:f6:0e:e2:0f:df:dd:38: b6:d4:14:9b:6b:79:33:59:02:07:13:a9:06:58:d7:37:5f:22: fa:13:41:52:72:88:59:02:af:1d:38:09:c7:6b:cd:a7:3c:92: de:5b:77:40:32:34:3f:f9:c8:06:8b:b7:2d:12:98:97:40:a9: 82:24:bb:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qWhlRHOvz7WfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNlMzU5OWYtYTkwZi00NTQ0LWE0NDAtYzE1ZWNhOTlk YjdmMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk NDU3MWEyOWQtNjA0NS00ZDljLWFjMTctMWVmNjAyNmRiYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSSyKDAdTZ2oWuo9jHngPp+/d1qqqXODKiDG 5QdngU+H17qHUaUvkd0DVj31xldvvPjRtke5LqSqCE3W4iY2a6gzam5c79CwbCPy r0Eq/e0BTXshXnid3fI4MNEullHivze4YdyjVqoSn/0D0tkXzX3OdiUCKLnzv+Kk wMAuolK1HE/3W3jK2HaHxpDIVR3BryqIxQbCfSiFjvYOXqvtvLxTcYe+/s+BAXIF 5jrz88Z3upA6VoMclFmbSzVpEEp5w4iQBKCErNn3BcLlG2god5t0nLOFfdR1d9A+ SeXppITEHT1x4Gp6r6kwdbKthDBFAYLSjQP7g+KH262UTn5IEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNTwG7fzoMEhZKyBKvmQo++eYruPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jM2Uz NTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVlY2E5OWRiN2YvYzNlMzU5OWYtYTkwZi00 NTQ0LWE0NDAtYzE1ZWNhOTlkYjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzNlMzU5OWYtYTkwZi00NTQ0LWE0 NDAtYzE1ZWNhOTlkYjdmL2MzZTM1OTlmLWE5MGYtNDU0NC1hNDQwLWMxNWVjYTk5 ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUZi35ozyT0O7irIv3BNlz1RVsf1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jM2UzNTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVl Y2E5OWRiN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPygvyBRcCrnvVxd/x0his TuV0avycJ2Y0X4oOoQDwowinxyRQb8fKUrTQ75uNcv1saTcWKAcblKgzBt+NIKZz O4/go6AMbZsf3TXsWsVhTONKuddcG5TVcx5lO4ORhIktSJfHdfik/ij7n9nCoEzV syllFhkHJS8GvJrAqIrrRPn0mY+KA1jTPdmZSzEifdPhhvyO/ddULDtiSvd+AMot P4ioJLGsQfrlvRy2j/tSOpLWmozpBug3VC1TOI2rZ/YO4g/f3Ti21BSba3kzWQIH E6kGWNc3XyL6E0FScohZAq8dOAnHa82nPJLeW3dAMjQ/+cgGi7ctEpiXQKmCJLvR -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:36 2025 by rpki-client