$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft File: f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft (raw, json) Hash identifier: 2NA+fCetOP4qxf8K1Hj220JOkNqUIonKReSUGairizI= Subject key identifier: 66:50:CB:90:47:C8:16:5D:4F:93:4B:92:71:AB:99:A6:5A:A9:20:51 Authority key identifier: 3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56 Certificate issuer: /CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800 Certificate serial: 010D0C9F4328584BBE99456D3E28FE621FD7A1E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft Manifest number: 010D0C9F4328584073A83F9E0D82482C6C3C1262 Signing time: Tue 04 Nov 2025 05:00:03 +0000 Manifest this update: Tue 04 Nov 2025 05:00:03 +0000 Manifest next update: Thu 06 Nov 2025 05:00:00 +0000 Files and hashes: 1: 18b84f34-8d20-3067-920f-c50b075a588e.roa (hash: o+oVnDv6mJohaVChCh5/1rAf9SroX3zo7Y/rJSHblSI=) 2: f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl (hash: S5TAu4GzkjReGtg5wX/Rs8E38qlSGbISRLpDC4zXRGw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:99:45:6d:3e:28:fe:62:1f:d7:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800 Validity Not Before: Nov 4 05:00:03 2025 GMT Not After : Nov 6 05:00:00 2025 GMT Subject: CN=3a31e69d-b002-4dd2-ad49-77f7a9c2627c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:db:7c:93:6a:ec:99:fa:90:9a:7c:90:ee: 44:e6:fa:92:32:21:83:b3:f8:29:8e:10:56:d4:0c: fa:f1:8c:53:a0:31:11:9f:20:ba:d1:85:a4:3a:d2: c7:3d:67:24:fa:39:9e:08:12:7f:a4:4c:33:6f:d8: f5:d5:39:24:a6:27:02:78:5c:ae:10:ce:e4:9f:9d: 34:42:9f:b5:60:c6:b1:26:d7:dd:b6:a6:1b:f4:19: 4e:28:2f:30:7b:82:f0:78:27:c7:aa:2a:b9:a5:94: 6a:3c:f9:a0:15:88:35:7b:bb:83:87:c0:a6:49:13: eb:8e:3c:6c:a6:13:98:37:9d:ea:11:a1:cc:7b:b1: 25:6a:5e:f4:9e:e2:ba:60:29:ca:4d:54:d1:b1:9f: 2e:23:85:59:5e:66:a9:53:16:f9:3e:fa:ac:1f:f0: 28:10:af:22:52:b1:00:da:c5:e4:3a:e9:53:13:5c: 20:46:3a:d0:56:d9:93:1f:8e:6c:71:5f:2c:e0:be: 6a:8a:19:2b:4d:92:ea:3d:19:91:1c:da:b2:f4:cc: cb:d0:8c:c5:f0:87:00:c8:4b:0f:88:ce:a6:35:1e: d4:09:a8:a0:d7:26:ff:16:7c:79:0e:e9:7b:62:f7: 29:70:89:90:6f:aa:02:5a:5d:03:29:6a:f5:ac:59: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:50:CB:90:47:C8:16:5D:4F:93:4B:92:71:AB:99:A6:5A:A9:20:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl X509v3 Authority Key Identifier: keyid:3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:be:8b:ac:40:5c:2f:92:88:6c:41:f1:f8:0c:23:85:29:44: 94:35:a9:6d:62:a0:70:65:92:2c:ed:25:ac:a1:20:9b:a2:54: c6:5b:23:2f:eb:0d:21:76:8f:1a:e6:d1:fa:12:fd:2b:2b:c3: 7c:d4:89:b8:72:d7:d4:98:ec:40:90:93:38:4f:a6:b6:52:0a: 0e:e9:75:19:56:8b:ba:a5:ca:ba:d5:12:e0:fe:ff:68:f9:22: 8b:d6:97:9f:ea:06:b9:23:b1:eb:0f:7f:2f:9b:e9:c9:7d:77: af:7e:cc:b9:ac:e5:68:ae:61:37:5e:73:04:f0:20:98:7e:96: 42:ff:c9:d3:a0:ab:07:2b:1c:21:80:52:3e:66:0d:c1:e6:43: f8:b1:3f:25:1c:31:ef:73:44:d3:7b:f0:1d:e5:52:1a:cd:da: 2f:6c:90:e2:48:77:30:30:9b:a5:4b:46:ed:8a:ca:21:42:3e: 83:bc:02:61:d6:6e:90:34:3d:75:52:ad:65:2b:3f:31:7c:0c: bd:d6:0d:57:64:8a:11:20:1f:95:47:a9:bd:3e:72:e1:5b:45: 71:dd:ae:0d:89:b6:e1:0c:ee:6e:ca:ac:f2:bc:3c:6c:1c:51: c7:71:0d:c7:74:fa:26:e0:c7:df:3e:cb:4a:ad:c3:39:b8:57: 6f:0d:1b:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+mUVtPij+Yh/XoeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNmZjVjZjMtMjMzMS00M2VkLWE1MDctMDlhM2Y1MmIy ODAwMB4XDTI1MTEwNDA1MDAwM1oXDTI1MTEwNjA1MDAwMFowLzEtMCsGA1UEAxMk M2EzMWU2OWQtYjAwMi00ZGQyLWFkNDktNzdmN2E5YzI2MjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla7bfJNq7Jn6kJp8kO5E5vqSMiGDs/gpjhBW 1Az68YxToDERnyC60YWkOtLHPWck+jmeCBJ/pEwzb9j11TkkpicCeFyuEM7kn500 Qp+1YMaxJtfdtqYb9BlOKC8we4LweCfHqiq5pZRqPPmgFYg1e7uDh8CmSRPrjjxs phOYN53qEaHMe7Elal70nuK6YCnKTVTRsZ8uI4VZXmapUxb5PvqsH/AoEK8iUrEA 2sXkOulTE1wgRjrQVtmTH45scV8s4L5qihkrTZLqPRmRHNqy9MzL0IzF8IcAyEsP iM6mNR7UCaig1yb/Fnx5Dul7YvcpcImQb6oCWl0DKWr1rFmkiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGZQy5BHyBZdT5NLknGrmaZaqSBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mM2Zm NWNmMy0yMzMxLTQzZWQtYTUwNy0wOWEzZjUyYjI4MDAvZjNmZjVjZjMtMjMzMS00 M2VkLWE1MDctMDlhM2Y1MmIyODAwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjNmZjVjZjMtMjMzMS00M2VkLWE1 MDctMDlhM2Y1MmIyODAwL2YzZmY1Y2YzLTIzMzEtNDNlZC1hNTA3LTA5YTNmNTJi MjgwMC5jcmwwHwYDVR0jBBgwFoAUPbZtITn2s1vU4ibTAF3ejsm+NVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mM2ZmNWNmMy0yMzMxLTQzZWQtYTUwNy0wOWEz ZjUyYjI4MDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBivousQFwvkohsQfH4DCOF KUSUNaltYqBwZZIs7SWsoSCbolTGWyMv6w0hdo8a5tH6Ev0rK8N81Im4ctfUmOxA kJM4T6a2UgoO6XUZVou6pcq61RLg/v9o+SKL1pef6ga5I7HrD38vm+nJfXevfsy5 rOVormE3XnME8CCYfpZC/8nToKsHKxwhgFI+Zg3B5kP4sT8lHDHvc0TTe/Ad5VIa zdovbJDiSHcwMJulS0btisohQj6DvAJh1m6QND11Uq1lKz8xfAy91g1XZIoRIB+V R6m9PnLhW0Vx3a4NibbhDO5uyqzyvDxsHFHHcQ3HdPom4MffPstKrcM5uFdvDRv0 -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:57 2025 by rpki-client