$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft File: 3a033ee1-5d03-497a-8120-3969593cdf7e.mft (raw, json) Hash identifier: xicAL9tEbA+UzmlERNC6k0mGI7eloP8r86oSqtDrvhQ= Subject key identifier: 8F:ED:A9:B8:FD:F0:AA:CC:36:5A:06:DB:DC:DB:C6:32:9F:81:76:23 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584BBFE0D9ED94A83C1979A64780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft Manifest number: 010D0C9F4328584534EC3BF001B4FD74E4080067 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 3a033ee1-5d03-497a-8120-3969593cdf7e.crl (hash: LkJaPTafjw4D+fVJqHBcwL8UztWxlCr5wJEtWv9Pn6Y=) 2: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (hash: gQKCGZ/pNsXZnwYUmMTge96h/Si/OUH0oJALLKKSlGQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d9:ed:94:a8:3c:19:79:a6:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=c2ca0384-02a1-4a8f-853e-1d00c3dbb6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f0:12:77:21:8f:46:0b:fc:f4:74:d1:ce:b9: 6e:e9:2b:e7:3c:77:5e:7d:73:7c:c2:17:19:1a:ab: cd:8b:0e:6b:47:2f:85:65:6a:4b:89:98:b4:69:4f: f7:52:b0:84:74:9e:b4:22:d3:92:61:77:3b:05:7d: 6a:bc:fa:2e:2f:3f:c3:a7:d5:1a:27:ac:ab:92:7c: f9:36:fa:04:d4:d9:f9:01:4f:ef:81:89:a5:03:7e: dd:a5:b5:ef:05:1d:72:3b:bf:81:ea:63:b6:e7:05: 0c:0f:b7:fd:7f:e6:eb:69:b0:c1:79:76:b4:1a:80: 50:19:5d:fe:6c:a7:eb:ef:12:f5:c4:df:b0:2d:65: e0:be:bd:0c:46:a5:05:57:97:9c:9e:6c:31:cf:b8: 8d:85:6b:c3:c2:48:fc:a5:5a:cd:2a:ce:30:dd:1b: b5:b8:4c:a9:af:0d:6b:73:ec:04:01:7f:e4:5a:74: 1e:b5:08:73:19:a1:23:51:3b:93:f6:b9:21:22:7d: 94:ad:18:3a:72:d6:5c:d4:34:a7:59:4a:22:79:67: 87:33:5c:14:d6:62:de:86:8f:dc:59:c2:3c:e3:04: 82:79:30:da:65:c0:3a:62:64:b3:8b:fd:e5:40:4b: a4:6e:f6:4c:0f:5e:a2:65:a9:d3:37:1a:06:0d:09: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:ED:A9:B8:FD:F0:AA:CC:36:5A:06:DB:DC:DB:C6:32:9F:81:76:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b5:95:a3:47:5d:e9:d2:4a:c0:b1:41:2b:b4:88:43:2f:30: 48:43:85:b2:7b:e7:95:32:55:08:b6:84:5b:10:3f:75:72:11: 5c:87:6c:b9:90:a8:27:f1:6a:6d:b6:aa:42:86:e1:00:e4:51: cc:40:80:67:7b:4c:9e:d9:61:0e:d6:23:91:2b:6a:87:df:03: be:ee:ed:02:86:86:8f:5f:38:0a:bd:4d:4e:fb:16:8a:d1:1e: fb:b9:76:72:6a:64:90:5f:0d:05:5e:e4:98:e5:96:c3:87:5e: 30:ce:b5:3a:21:83:91:84:9f:78:fa:cb:66:e3:bd:05:df:c2: 2e:63:79:65:03:1e:bd:01:75:45:f1:e7:0f:b7:6f:c2:5e:7b: 72:36:c8:5f:1d:94:c4:a3:40:90:fb:ba:e9:25:c1:a9:1d:7b: ad:6a:93:20:f3:38:df:ed:7a:be:96:14:9a:26:06:c5:4a:37: ec:f9:d9:6f:b2:da:b3:da:9a:37:b9:a1:52:ca:53:3f:ab:64: 9a:93:22:eb:b3:8f:6b:5c:42:d7:21:32:47:f2:28:b3:9b:f6: f6:74:3d:fa:2f:b9:1b:93:d5:91:06:be:50:7a:9f:6a:0a:2a: e1:ef:c9:04:77:4c:d4:bd:2a:8d:13:12:f1:7b:09:f0:ee:6b: c6:b7:86:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NntlKg8GXmmR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk YzJjYTAzODQtMDJhMS00YThmLTg1M2UtMWQwMGMzZGJiNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PASdyGPRgv89HTRzrlu6SvnPHdefXN8whcZ GqvNiw5rRy+FZWpLiZi0aU/3UrCEdJ60ItOSYXc7BX1qvPouLz/Dp9UaJ6yrknz5 NvoE1Nn5AU/vgYmlA37dpbXvBR1yO7+B6mO25wUMD7f9f+brabDBeXa0GoBQGV3+ bKfr7xL1xN+wLWXgvr0MRqUFV5ecnmwxz7iNhWvDwkj8pVrNKs4w3Ru1uEyprw1r c+wEAX/kWnQetQhzGaEjUTuT9rkhIn2UrRg6ctZc1DSnWUoieWeHM1wU1mLeho/c WcI84wSCeTDaZcA6YmSzi/3lQEukbvZMD16iZanTNxoGDQmsgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI/tqbj98KrMNloG29zbxjKfgXYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvM2EwMzNlZTEtNWQwMy00 OTdhLTgxMjAtMzk2OTU5M2NkZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWtZWjR13p0krAsUErtIhD LzBIQ4Wye+eVMlUItoRbED91chFch2y5kKgn8WpttqpChuEA5FHMQIBne0ye2WEO 1iORK2qH3wO+7u0ChoaPXzgKvU1O+xaK0R77uXZyamSQXw0FXuSY5ZbDh14wzrU6 IYORhJ94+stm470F38IuY3llAx69AXVF8ecPt2/CXntyNshfHZTEo0CQ+7rpJcGp HXutapMg8zjf7Xq+lhSaJgbFSjfs+dlvstqz2po3uaFSylM/q2SakyLrs49rXELX ITJH8iizm/b2dD36L7kbk9WRBr5Qep9qCirh78kEd0zUvSqNExLxewnw7mvGt4be -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:04 2025 by rpki-client