$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064/38906c03-11c8-472d-9296-e727a66bd064.mft File: 38906c03-11c8-472d-9296-e727a66bd064.mft (raw, json) Hash identifier: M12NrG8Hg+CtLkORH5NSNi+d++10UykyHCGaOxlRnJY= Subject key identifier: 68:72:BC:B1:4D:45:9C:0E:B4:12:BF:64:A0:43:A0:44:BC:16:E4:7A Authority key identifier: E0:CE:95:F5:FA:0B:C2:CE:D6:72:81:67:0A:E3:B9:F9:6E:00:85:8C Certificate issuer: /CN=38906c03-11c8-472d-9296-e727a66bd064 Certificate serial: 010D0C9F4328584BC057FE35389FA0BF57183778 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064/38906c03-11c8-472d-9296-e727a66bd064.mft Manifest number: 010D0C9F4328584524A1434EB7483892FE0E9BDE Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 38906c03-11c8-472d-9296-e727a66bd064.crl (hash: TpKgKy0fxe5TcZfI2FI5yvCIyRHo63ndyisDu0Z0MAI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064/38906c03-11c8-472d-9296-e727a66bd064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064/38906c03-11c8-472d-9296-e727a66bd064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fe:35:38:9f:a0:bf:57:18:37:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38906c03-11c8-472d-9296-e727a66bd064 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=32b72faa-6dd0-427c-a397-b6ba8af67493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:a0:c0:8b:b4:21:00:96:a0:0a:0c:fa:ee: 03:ac:dc:4d:d5:6c:50:bf:4c:56:51:35:42:5a:b8: ac:ad:14:c7:04:8b:92:df:77:00:32:04:fd:90:14: 42:ff:74:de:d1:73:01:2e:f7:4f:d1:c2:51:f8:7f: 00:72:38:e5:25:a1:fe:a2:3b:6d:3d:4d:24:55:3f: f8:d3:5d:4e:db:3d:47:75:0f:1c:da:32:59:fb:91: e7:fc:5d:57:02:d6:50:ce:40:bf:e6:e3:6b:1d:3b: f2:e5:a6:d9:c1:22:e5:55:d3:31:0a:23:f3:a7:9b: d9:11:2d:ee:76:b6:b9:4c:91:26:e8:dc:f9:b3:b3: 61:a7:08:bd:ea:f2:e5:5d:08:74:f5:e0:e2:61:23: 09:e8:85:7b:50:7c:a9:1f:bc:b6:f1:39:70:a3:c8: ee:23:8e:ee:79:b8:28:6b:3e:61:d6:ec:43:5d:8d: 3a:67:76:a3:3a:71:0c:97:df:43:da:0c:7e:cc:14: 88:75:09:20:f8:71:25:e6:49:e9:c1:7c:bf:f1:1d: bc:10:5b:c0:27:1b:2e:2d:8d:b9:be:b8:1a:99:c7: 8e:f3:71:9f:8d:f2:d4:30:69:30:b2:d6:7e:9c:b6: 11:bf:b9:1b:85:bb:cd:fc:5b:07:22:e6:1a:5d:4d: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:72:BC:B1:4D:45:9C:0E:B4:12:BF:64:A0:43:A0:44:BC:16:E4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064/38906c03-11c8-472d-9296-e727a66bd064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064/38906c03-11c8-472d-9296-e727a66bd064.crl X509v3 Authority Key Identifier: keyid:E0:CE:95:F5:FA:0B:C2:CE:D6:72:81:67:0A:E3:B9:F9:6E:00:85:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38906c03-11c8-472d-9296-e727a66bd064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5c:32:4f:67:1d:1c:ff:77:5f:4c:59:a1:51:81:b1:90:df: 66:37:3e:31:27:50:90:90:b5:4e:74:6f:d2:cd:13:2b:27:92: 98:ac:66:a8:de:8e:27:34:4d:c7:bc:ba:80:df:8b:91:5c:b9: 83:eb:23:81:b2:57:67:22:a8:c0:a4:24:e5:d3:28:4e:fd:07: 0a:05:a5:d8:c4:36:1b:2a:18:b9:24:35:0a:2d:12:ad:45:16: e4:91:ff:88:41:8b:c9:39:75:c2:ca:73:ac:95:b1:e1:9c:e4: d4:64:2c:ca:86:51:a9:e8:8e:12:31:16:44:fb:ee:89:a4:bf: 7d:38:b0:2a:85:86:05:9c:26:9a:d6:15:1c:55:d3:c6:9d:1c: 6a:c7:f8:55:e5:29:ae:74:e5:11:6f:43:73:11:6c:a7:e8:31: 9e:6b:2b:95:2e:06:d5:82:f5:80:39:41:98:9a:74:bd:ae:34: 09:90:c5:de:2e:43:71:46:e9:ad:58:57:f8:da:78:1b:8a:a4: c2:bb:87:e4:2a:37:e8:1f:fc:3c:1b:d8:45:30:e1:c5:78:c1: 1b:5c:4d:f0:89:f7:44:19:95:94:3f:80:e8:dd:93:e1:bb:17: d7:c2:14:63:cc:e9:1a:c5:cd:a6:4f:2d:fc:e9:77:3d:8a:85: 78:71:d6:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/41OJ+gv1cYN3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg5MDZjMDMtMTFjOC00NzJkLTkyOTYtZTcyN2E2NmJk MDY0MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk MzJiNzJmYWEtNmRkMC00MjdjLWEzOTctYjZiYThhZjY3NDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkmgwIu0IQCWoAoM+u4DrNxN1WxQv0xWUTVC WrisrRTHBIuS33cAMgT9kBRC/3Te0XMBLvdP0cJR+H8AcjjlJaH+ojttPU0kVT/4 011O2z1HdQ8c2jJZ+5Hn/F1XAtZQzkC/5uNrHTvy5abZwSLlVdMxCiPzp5vZES3u dra5TJEm6Nz5s7Nhpwi96vLlXQh09eDiYSMJ6IV7UHypH7y28Tlwo8juI47uebgo az5h1uxDXY06Z3ajOnEMl99D2gx+zBSIdQkg+HEl5knpwXy/8R28EFvAJxsuLY25 vrgamceO83GfjfLUMGkwstZ+nLYRv7kbhbvN/FsHIuYaXU0KGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGhyvLFNRZwOtBK/ZKBDoES8FuR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zODkw NmMwMy0xMWM4LTQ3MmQtOTI5Ni1lNzI3YTY2YmQwNjQvMzg5MDZjMDMtMTFjOC00 NzJkLTkyOTYtZTcyN2E2NmJkMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzg5MDZjMDMtMTFjOC00NzJkLTky OTYtZTcyN2E2NmJkMDY0LzM4OTA2YzAzLTExYzgtNDcyZC05Mjk2LWU3MjdhNjZi ZDA2NC5jcmwwHwYDVR0jBBgwFoAU4M6V9foLws7WcoFnCuO5+W4AhYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zODkwNmMwMy0xMWM4LTQ3MmQtOTI5Ni1lNzI3 YTY2YmQwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRXDJPZx0c/3dfTFmhUYGx kN9mNz4xJ1CQkLVOdG/SzRMrJ5KYrGao3o4nNE3HvLqA34uRXLmD6yOBsldnIqjA pCTl0yhO/QcKBaXYxDYbKhi5JDUKLRKtRRbkkf+IQYvJOXXCynOslbHhnOTUZCzK hlGp6I4SMRZE++6JpL99OLAqhYYFnCaa1hUcVdPGnRxqx/hV5SmudOURb0NzEWyn 6DGeayuVLgbVgvWAOUGYmnS9rjQJkMXeLkNxRumtWFf42ngbiqTCu4fkKjfoH/w8 G9hFMOHFeMEbXE3wifdEGZWUP4Do3ZPhuxfXwhRjzOkaxc2mTy386Xc9ioV4cdbz -----END CERTIFICATE-----Generated at Wed Nov 5 17:00:30 2025 by rpki-client