$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft File: 32a9337d-d761-426f-939a-0a770ad5bcce.mft (raw, json) Hash identifier: dqsmwvHCL3SLugOa+2UXOCvEeoneGfvQFPEY+KRuop4= Subject key identifier: 43:59:78:F8:B3:8E:35:05:2C:35:BC:6C:4A:D7:1E:FF:5B:E9:3C:F8 Authority key identifier: 40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD Certificate issuer: /CN=32a9337d-d761-426f-939a-0a770ad5bcce Certificate serial: 010D0C9F4328584BBFC30F924BDA6B1932C7FAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft Manifest number: 010D0C9F43285844C2468AEE46D70C1AB82EF380 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 07a3338e-daba-38dd-af30-905208773fd9.roa (hash: 6lmtA7OhRM5F5h3D/VoIp1ayvilmBSNlogzTVIWhcYg=) 2: 32a9337d-d761-426f-939a-0a770ad5bcce.crl (hash: fUYneeS0k49wiXXDk2W/rWiSLOM54ka+hK7orxVUA3U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0f:92:4b:da:6b:19:32:c7:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a9337d-d761-426f-939a-0a770ad5bcce Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=ba36e380-b72e-42e7-918f-cbb7fbdcec8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:af:92:62:e3:a1:a7:c1:18:6f:0c:6d:a4: d8:64:42:3b:68:9e:ba:6f:23:e0:d6:25:d4:4f:ef: 72:24:21:30:8c:9f:6f:2b:17:58:bc:d8:f8:91:67: b3:68:70:b3:37:f9:20:c1:d8:dd:8b:b8:c8:7c:82: f6:62:ed:e9:31:27:8d:69:c7:d4:a0:2b:f0:e2:26: 2c:15:28:3b:53:54:39:33:1b:2a:f3:51:b2:27:3d: 12:49:a7:ec:33:13:ee:3d:e3:fe:4b:5b:4c:20:2b: af:37:0f:8a:c2:c9:de:90:4d:b8:98:f6:67:2d:02: 16:59:84:21:30:28:9b:b4:69:af:09:b3:07:fa:49: 4c:8d:9e:9b:58:df:fa:81:c6:50:43:53:76:95:e8: b5:62:32:81:94:af:c2:9d:00:38:b8:cc:c3:a4:6d: e5:46:07:80:ce:66:ba:1d:78:0c:c7:b2:e4:cf:6e: 42:12:fd:91:b4:d9:2f:02:6a:f4:a3:fc:3f:20:1d: aa:c7:5b:29:64:70:4c:3c:4f:a1:ba:cf:f4:25:02: d2:dd:95:02:9d:43:ad:1d:03:15:68:63:4c:23:9b: 89:96:02:09:b4:7e:d9:ff:c5:69:dd:dc:78:b7:7b: 4c:a3:bd:20:91:8a:2b:e6:f9:cc:8c:84:b2:de:ee: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:59:78:F8:B3:8E:35:05:2C:35:BC:6C:4A:D7:1E:FF:5B:E9:3C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl X509v3 Authority Key Identifier: keyid:40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:43:58:53:3a:4a:3d:25:a9:d9:35:5f:70:e1:8f:16:8a:fa: a4:22:03:f2:2d:c1:42:f5:9e:6b:5c:83:3f:8d:20:44:91:e2: b4:15:05:09:c6:07:75:b3:0b:ad:f7:46:34:91:22:c0:84:9d: 2d:b0:14:0c:8c:81:cc:42:e9:a3:b5:2b:cf:1f:ce:ac:16:47: b1:ce:94:44:8d:a8:72:02:8b:d6:8a:47:0f:21:8e:49:b8:b3: f6:ce:c4:bd:b0:82:6d:2e:14:73:c9:94:9a:19:f9:d1:6f:03: 84:ed:77:30:16:56:d2:71:53:59:fb:8c:92:1f:4a:40:e0:38: 16:b2:2f:aa:96:77:65:9b:27:b0:c1:72:c4:3c:95:53:fd:37: 76:70:f6:78:f6:34:79:ed:72:0b:2e:14:fd:49:61:6a:21:1a: 34:51:82:2d:d6:82:b5:f8:0d:5f:14:a8:0b:3c:29:16:70:c6: 14:70:4f:08:b4:6a:ec:0c:2e:ff:54:cf:be:e8:9c:4e:15:4f: 99:09:ae:0a:ef:43:c3:fa:09:c3:90:d2:89:bc:5c:5c:73:25: 7c:44:cd:e7:3d:8f:73:ce:4b:06:92:13:94:85:9d:8c:d5:99: 98:d9:7f:3e:3d:8a:93:77:59:6f:80:46:20:a9:38:61:5d:37: 19:0d:ea:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww+SS9prGTLH+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJhOTMzN2QtZDc2MS00MjZmLTkzOWEtMGE3NzBhZDVi Y2NlMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk YmEzNmUzODAtYjcyZS00MmU3LTkxOGYtY2JiN2ZiZGNlYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJqvkmLjoafBGG8MbaTYZEI7aJ66byPg1iXU T+9yJCEwjJ9vKxdYvNj4kWezaHCzN/kgwdjdi7jIfIL2Yu3pMSeNacfUoCvw4iYs FSg7U1Q5Mxsq81GyJz0SSafsMxPuPeP+S1tMICuvNw+KwsnekE24mPZnLQIWWYQh MCibtGmvCbMH+klMjZ6bWN/6gcZQQ1N2lei1YjKBlK/CnQA4uMzDpG3lRgeAzma6 HXgMx7Lkz25CEv2RtNkvAmr0o/w/IB2qx1spZHBMPE+hus/0JQLS3ZUCnUOtHQMV aGNMI5uJlgIJtH7Z/8Vp3dx4t3tMo70gkYor5vnMjISy3u5eTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFENZePizjjUFLDW8bErXHv9b6Tz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMmE5 MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3MGFkNWJjY2UvMzJhOTMzN2QtZDc2MS00 MjZmLTkzOWEtMGE3NzBhZDViY2NlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzJhOTMzN2QtZDc2MS00MjZmLTkz OWEtMGE3NzBhZDViY2NlLzMyYTkzMzdkLWQ3NjEtNDI2Zi05MzlhLTBhNzcwYWQ1 YmNjZS5jcmwwHwYDVR0jBBgwFoAUQEOwOPP8C2XLCa6C843TQDjCtf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMmE5MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3 MGFkNWJjY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhQ1hTOko9JanZNV9w4Y8W ivqkIgPyLcFC9Z5rXIM/jSBEkeK0FQUJxgd1swut90Y0kSLAhJ0tsBQMjIHMQumj tSvPH86sFkexzpREjahyAovWikcPIY5JuLP2zsS9sIJtLhRzyZSaGfnRbwOE7Xcw FlbScVNZ+4ySH0pA4DgWsi+qlndlmyewwXLEPJVT/Td2cPZ49jR57XILLhT9SWFq IRo0UYIt1oK1+A1fFKgLPCkWcMYUcE8ItGrsDC7/VM++6JxOFU+ZCa4K70PD+gnD kNKJvFxccyV8RM3nPY9zzksGkhOUhZ2M1ZmY2X8+PYqTd1lvgEYgqThhXTcZDerq -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:14 2025 by rpki-client