$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json) Hash identifier: Y3xZcDg0Il7Cd+hE587Gc5oG0ruOSu3sBmSd+1Xd6ns= Subject key identifier: 2A:A5:7A:9C:AD:BB:EE:6D:DF:C9:EF:92:5E:3D:11:E1:47:A4:BB:03 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584BC03A2DEED8E9034B07D89980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE2C7 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: Qbqyvf5xqr2qPgRQJDJCGjvOMMQr3AUfhX6E4cMt3qQ=) 2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: v9++3xdNs57HL24qveWpqoBqEGZr6WeV+gqMI6kO1uc=) 3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: Epf1evIAuoH456WIwSj4AvggqHs5yU8HWNEPF/jQlrk=) 4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: W6/z3Jq7T/aNkq+NPFwqopLSJ3/Eh2n1hr41H+sNzEo=) 5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: OgsLzfYUbvf4m2ISbbvAcrsOXWhRazzYX7iwa6kKZi4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:ee:d8:e9:03:4b:07:d8:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=ecb642b4-d2da-4b23-a24e-fa1ead5356c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:50:3b:78:2b:bf:f9:58:76:8e:61:23:2c: 41:7e:7e:10:e8:e7:78:69:20:d5:bc:9f:65:5c:b3: bf:49:26:da:3b:1e:4a:dc:7b:59:31:c6:0b:74:f6: 51:3e:d5:d3:a5:84:ab:28:f8:8e:0c:81:51:10:3a: 73:f4:e2:aa:51:d2:bd:da:0d:cd:5e:d9:f6:3b:58: 6f:51:51:57:3a:65:e1:5a:c6:dc:06:75:a5:f9:99: ba:a0:38:7d:a3:e8:04:7c:35:74:a7:05:99:40:1e: 35:7e:c2:5d:b8:a2:0b:6a:ff:fd:fd:90:cd:4a:50: 0f:17:27:55:d3:62:3f:55:a2:21:21:8f:f6:6b:ae: 57:b2:be:d3:78:62:40:93:fc:70:c8:a5:7e:07:3e: c8:23:bd:79:e9:4f:78:91:33:d4:c7:8f:16:0b:e2: 03:c2:90:fc:26:d7:e7:ae:d6:07:9d:a0:c8:17:13: 6e:5f:1e:e8:ea:33:8e:8c:37:4c:9e:62:b4:07:69: 32:d1:74:8a:ad:7a:90:53:3a:16:b0:7d:a6:ab:27: cb:71:1c:33:f9:be:ee:f0:a0:fe:4d:64:c6:3d:ed: 2e:68:e2:e1:39:71:47:d0:58:ac:ef:91:0c:40:bc: 90:ca:71:17:15:c6:d4:30:d8:41:e2:f9:0a:40:c1: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:7A:9C:AD:BB:EE:6D:DF:C9:EF:92:5E:3D:11:E1:47:A4:BB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ad:76:64:c2:1d:4b:71:6e:3d:ce:b8:7b:74:01:05:64:44: b0:b3:fd:c9:a7:35:5a:f3:ed:fb:32:b1:63:08:26:3c:a4:64: ee:46:71:5a:1c:63:42:56:41:7b:a5:9a:bc:12:dd:5a:7e:1e: 7f:1b:b1:1a:50:e1:cb:04:a8:17:d1:4a:eb:0b:64:39:6e:34: f9:9d:75:32:02:a7:82:cf:a5:7f:19:29:11:ea:76:3f:11:2a: 89:df:99:2a:8c:bf:c8:10:59:54:08:fc:a2:c7:2f:4f:7d:72: 3c:c9:d5:16:ea:e1:bf:3f:c2:0d:a5:22:9a:1f:40:1d:e9:f8: bc:0c:51:c6:7e:95:4c:c5:fb:8d:d6:0c:b6:09:60:3f:03:1d: 7c:08:04:77:36:5b:53:d1:40:16:38:9c:0b:63:af:75:7d:6a: de:79:74:4c:5f:c8:bc:b0:a5:59:ec:38:fb:96:94:58:b2:3b: 78:a7:08:7c:6e:0b:60:7f:43:20:21:2e:c9:84:e7:af:b9:20: ba:2f:f9:b5:f1:94:be:d8:a0:7b:bf:42:b4:05:ee:bb:5f:d2: c8:2c:97:08:2f:13:99:d7:7e:d0:64:f0:4a:55:87:92:10:0c: 8a:c5:d4:16:10:64:81:ba:00:fa:17:1d:14:0b:30:95:0c:1a: f1:c7:1b:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi3u2OkDSwfYmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZWNiNjQyYjQtZDJkYS00YjIzLWEyNGUtZmExZWFkNTM1NmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhQO3grv/lYdo5hIyxBfn4Q6Od4aSDVvJ9l XLO/SSbaOx5K3HtZMcYLdPZRPtXTpYSrKPiODIFREDpz9OKqUdK92g3NXtn2O1hv UVFXOmXhWsbcBnWl+Zm6oDh9o+gEfDV0pwWZQB41fsJduKILav/9/ZDNSlAPFydV 02I/VaIhIY/2a65Xsr7TeGJAk/xwyKV+Bz7II7156U94kTPUx48WC+IDwpD8Jtfn rtYHnaDIFxNuXx7o6jOOjDdMnmK0B2ky0XSKrXqQUzoWsH2mqyfLcRwz+b7u8KD+ TWTGPe0uaOLhOXFH0Fis75EMQLyQynEXFcbUMNhB4vkKQMHjywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqlepytu+5t38nvkl49EeFHpLsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00 MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANrXZkwh1LcW49zrh7dAEF ZESws/3JpzVa8+37MrFjCCY8pGTuRnFaHGNCVkF7pZq8Et1afh5/G7EaUOHLBKgX 0UrrC2Q5bjT5nXUyAqeCz6V/GSkR6nY/ESqJ35kqjL/IEFlUCPyixy9PfXI8ydUW 6uG/P8INpSKaH0Ad6fi8DFHGfpVMxfuN1gy2CWA/Ax18CAR3NltT0UAWOJwLY691 fWreeXRMX8i8sKVZ7Dj7lpRYsjt4pwh8bgtgf0MgIS7JhOevuSC6L/m18ZS+2KB7 v0K0Be67X9LILJcILxOZ137QZPBKVYeSEAyKxdQWEGSBugD6Fx0UCzCVDBrxxxtS -----END CERTIFICATE-----Generated at Tue Nov 4 20:07:01 2025 by rpki-client