$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: nnB5sy0E9eJFQWi0+kdPaz9Z53Lmr2ahYVYvGGhhueg= Subject key identifier: 32:70:67:EC:7E:02:62:73:24:57:CD:41:B1:CD:AC:CC:BB:5E:8B:22 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584BBFE0D848E72637D0D0E7AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C77A Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: r1KzN2jUI4wF6eH4VRzFb1ye/D0wI3T8V/oC9NpJCyk=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: DjHtVmC6Bp6feELuko8oLRrbObtjbNu2uT9PJ0V9QaQ=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: /+y4mV0rBVBGGp12rDwxD4nYlxOEEauEgJcDnCsnLSk=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: 66ZCbTqNoMjitCCWKpU+phTH0cYKb5ztTfVb720rYUM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d8:48:e7:26:37:d0:d0:e7:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=f3292083-ae7c-4140-9ab5-9cd5c312456e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:2c:7d:3f:4b:a9:4d:5f:a8:9b:30:37:c6: 69:32:09:50:45:87:45:83:4e:5f:ad:0b:21:87:0c: 42:45:02:ae:08:a3:fc:ce:e7:90:eb:00:ed:24:f1: c1:49:61:c8:1d:a6:76:17:46:71:32:98:4a:c3:5b: 77:34:c7:cd:21:58:73:df:82:43:fa:fa:a3:14:f1: be:25:61:b9:7b:00:48:eb:24:6f:9d:a6:ae:fe:d3: d8:fb:30:3d:1e:b9:96:33:3c:bb:77:7b:3d:08:91: 85:fd:87:26:2a:49:66:32:91:b7:fc:b8:48:7c:ea: 64:fe:a9:46:0e:85:d1:35:cf:f0:8c:8e:3a:46:cc: 42:63:43:dc:f1:30:22:bc:7b:ae:25:e1:ea:1f:fc: b5:d4:56:ea:00:b1:8a:be:83:33:5a:d8:22:3d:4d: f5:5c:bd:36:88:cc:41:a3:03:3c:b5:4a:d5:fb:de: af:8c:9e:36:e9:15:64:2e:57:f4:c0:02:37:49:b9: 35:78:38:c4:1e:73:a7:36:45:c5:1f:02:40:06:06: 00:58:43:c2:87:a3:bd:88:45:7f:05:10:82:b1:9a: 1c:f6:01:ff:b8:05:d3:f7:30:8e:1b:5a:64:85:6e: 08:91:84:91:fb:ab:20:99:2e:86:00:b8:e6:6c:c5: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:67:EC:7E:02:62:73:24:57:CD:41:B1:CD:AC:CC:BB:5E:8B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ad:b3:b6:2b:87:a9:e5:4d:6b:ba:96:7e:70:84:92:c7:28: 3a:dd:43:72:c2:7d:94:68:15:56:41:3b:8f:cb:cb:65:ee:4e: ff:be:c3:c1:f7:31:37:9f:26:ab:d9:c4:8c:4a:c0:5d:5d:2a: fb:67:90:f1:93:ac:65:d0:35:72:a5:c7:86:5e:84:f5:e0:27: c5:9c:1d:48:a7:ea:2a:59:78:45:72:c2:f9:cc:b8:df:52:9a: a1:87:f3:75:b6:89:a6:cc:46:70:72:f4:84:3c:ba:31:dd:11: c7:1c:60:31:a2:20:75:ab:4a:2f:ce:8a:36:41:d1:50:28:99: c8:00:c9:f3:d3:53:28:89:1a:98:4f:74:e2:56:da:c1:4f:87: dd:61:e4:d0:63:09:3d:20:4c:bc:d7:2f:47:c7:a5:32:57:6e: 95:ce:b7:33:40:49:6a:7a:f4:43:18:1e:c7:e8:22:df:a2:5d: b1:67:4e:5e:fe:38:80:40:68:f0:df:81:d3:d5:c5:d0:ba:3a: 5e:a0:c9:86:11:a9:e6:e2:54:b9:c8:10:1e:43:11:a7:88:3f: ba:ef:59:34:23:ba:5d:f1:80:32:b6:65:16:1f:1a:2a:ce:a2: d1:d4:d6:3d:3d:f9:3d:58:3f:be:e1:2b:a4:9d:4f:e8:8e:12: 11:e3:4c:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NhI5yY30NDnr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk ZjMyOTIwODMtYWU3Yy00MTQwLTlhYjUtOWNkNWMzMTI0NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBwsfT9LqU1fqJswN8ZpMglQRYdFg05frQsh hwxCRQKuCKP8zueQ6wDtJPHBSWHIHaZ2F0ZxMphKw1t3NMfNIVhz34JD+vqjFPG+ JWG5ewBI6yRvnaau/tPY+zA9HrmWMzy7d3s9CJGF/YcmKklmMpG3/LhIfOpk/qlG DoXRNc/wjI46RsxCY0Pc8TAivHuuJeHqH/y11FbqALGKvoMzWtgiPU31XL02iMxB owM8tUrV+96vjJ426RVkLlf0wAI3Sbk1eDjEHnOnNkXFHwJABgYAWEPCh6O9iEV/ BRCCsZoc9gH/uAXT9zCOG1pkhW4IkYSR+6sgmS6GALjmbMX8fwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDJwZ+x+AmJzJFfNQbHNrMy7XosiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQrbO2K4ep5U1rupZ+cISS xyg63UNywn2UaBVWQTuPy8tl7k7/vsPB9zE3nyar2cSMSsBdXSr7Z5Dxk6xl0DVy pceGXoT14CfFnB1Ip+oqWXhFcsL5zLjfUpqhh/N1tommzEZwcvSEPLox3RHHHGAx oiB1q0ovzoo2QdFQKJnIAMnz01MoiRqYT3TiVtrBT4fdYeTQYwk9IEy81y9Hx6Uy V26VzrczQElqevRDGB7H6CLfol2xZ05e/jiAQGjw34HT1cXQujpeoMmGEanm4lS5 yBAeQxGniD+671k0I7pd8YAytmUWHxoqzqLR1NY9Pfk9WD++4SuknU/ojhIR40wR -----END CERTIFICATE-----Generated at Wed Nov 5 08:58:59 2025 by rpki-client