$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: GIMCuI16D6hPpCbzCE3900gJjgZMVxrbY9u2UHI+5r0= Subject key identifier: 50:CD:15:88:DD:8C:0F:FF:86:85:B2:76:18:D6:BA:61:0C:E6:AF:DD Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584BBFA650FCDA0A53B319A80700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6F8DA Signing time: Tue 04 Nov 2025 14:02:08 +0000 Manifest this update: Tue 04 Nov 2025 14:02:08 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: Lx46MNDZdP3kEpJgwqPpSA7sXvrWIZoS06hd65Tu5zI=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: qjh9z7nihxTGQunpie1DR2F+5Uucaak6qD73F2knumI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a6:50:fc:da:0a:53:b3:19:a8:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Nov 4 14:02:08 2025 GMT Not After : Nov 6 11:00:00 2025 GMT Subject: CN=aa211b17-3de1-41df-bf7d-a071a4398355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fd:12:c6:17:a4:9d:f9:ea:88:7b:c1:3e:4d: 1c:f1:37:a1:e8:d0:81:e6:30:7d:19:2f:9f:40:d9: ef:97:5e:cd:d4:db:ce:03:25:a5:51:05:ae:f1:ce: 98:56:2b:33:3f:c8:dd:d7:77:50:fa:6b:09:26:f9: 26:18:38:f2:cd:de:47:4a:09:f6:76:8b:d1:91:f2: 94:93:8a:4b:6c:54:dc:d8:fc:31:27:de:84:89:ab: cb:04:d0:f7:30:75:92:51:e4:2a:d1:bd:2f:6e:82: 25:c2:c4:98:da:5c:a0:fd:5d:8d:6b:98:68:bf:b8: b6:75:5c:2c:e4:0c:5d:37:dc:0d:a2:7f:77:dd:21: c6:60:32:4c:f9:c5:22:58:a7:c7:11:8d:95:d5:c4: 1c:ef:b3:d5:1a:a4:cd:fd:86:d8:4a:88:17:1d:bf: d2:57:80:82:e5:9e:ac:03:33:94:52:ab:cc:d5:45: 5d:9e:c1:2f:d1:84:2e:20:6b:b4:00:37:91:c0:82: 74:62:08:51:fd:01:94:f0:17:d7:58:e3:6f:a6:0d: b6:36:d6:f0:bc:fd:c8:e5:1f:28:bd:da:4e:d5:c5: 99:d2:d7:83:26:02:28:c8:4c:0e:cf:80:9b:21:a1: cb:0e:1a:10:ad:47:3c:77:14:0f:4c:67:b4:da:2b: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CD:15:88:DD:8C:0F:FF:86:85:B2:76:18:D6:BA:61:0C:E6:AF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1d:06:27:3f:51:e9:57:eb:dc:ec:9e:23:f3:3d:29:c4:5e: 3b:70:54:06:90:5b:b3:92:10:d5:65:9c:4a:8a:62:92:54:79: 29:79:1a:61:cd:dd:a2:01:6b:3e:ed:26:17:44:0f:b2:be:12: a4:f3:1f:fc:0e:83:a6:21:16:fe:60:9a:68:d3:75:31:a3:25: e7:39:c9:e0:d0:36:d4:51:fc:a4:71:be:51:52:b1:6c:6d:c7: 37:6a:03:dd:31:ec:ec:ee:4e:a1:92:19:0a:15:25:f6:bb:5a: f3:d5:39:7e:32:18:39:64:fd:31:8a:dd:84:9b:5c:a0:12:e8: 99:ea:f8:60:58:e3:9f:ae:bb:ff:68:d2:81:16:a6:d9:8b:fd: 04:ce:b7:f4:aa:de:9a:e5:10:bb:85:80:90:c9:bf:0f:0c:b8: ee:52:d4:56:c8:cd:f2:0e:d3:c9:f9:0e:dd:e2:b6:5c:1c:8b: c2:f3:3d:48:ae:a4:d9:93:e4:99:4e:0a:8d:3d:4e:74:bd:af: 99:80:41:33:04:bc:68:e3:ec:64:eb:ca:8d:90:c2:d0:62:87: 88:01:c6:1d:83:53:c0:44:99:0e:f7:6b:62:63:d9:c2:96:27: a7:85:28:5c:27:70:7f:4a:2d:99:ee:c0:ae:a9:17:20:d1:b9: 15:71:67:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/plD82gpTsxmoBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MTEwNDE0MDIwOFoXDTI1MTEwNjExMDAwMFowLzEtMCsGA1UEAxMk YWEyMTFiMTctM2RlMS00MWRmLWJmN2QtYTA3MWE0Mzk4MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f0SxheknfnqiHvBPk0c8Teh6NCB5jB9GS+f QNnvl17N1NvOAyWlUQWu8c6YViszP8jd13dQ+msJJvkmGDjyzd5HSgn2dovRkfKU k4pLbFTc2PwxJ96EiavLBND3MHWSUeQq0b0vboIlwsSY2lyg/V2Na5hov7i2dVws 5AxdN9wNon933SHGYDJM+cUiWKfHEY2V1cQc77PVGqTN/YbYSogXHb/SV4CC5Z6s AzOUUqvM1UVdnsEv0YQuIGu0ADeRwIJ0YghR/QGU8BfXWONvpg22NtbwvP3I5R8o vdpO1cWZ0teDJgIoyEwOz4CbIaHLDhoQrUc8dxQPTGe02is93wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFDNFYjdjA//hoWydhjWumEM5q/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBHQYnP1HpV+vc7J4j8z0p xF47cFQGkFuzkhDVZZxKimKSVHkpeRphzd2iAWs+7SYXRA+yvhKk8x/8DoOmIRb+ YJpo03UxoyXnOcng0DbUUfykcb5RUrFsbcc3agPdMezs7k6hkhkKFSX2u1rz1Tl+ Mhg5ZP0xit2Em1ygEuiZ6vhgWOOfrrv/aNKBFqbZi/0Ezrf0qt6a5RC7hYCQyb8P DLjuUtRWyM3yDtPJ+Q7d4rZcHIvC8z1IrqTZk+SZTgqNPU50va+ZgEEzBLxo4+xk 68qNkMLQYoeIAcYdg1PARJkO92tiY9nClienhShcJ3B/Si2Z7sCuqRcg0bkVcWe3 -----END CERTIFICATE-----Generated at Wed Nov 5 00:42:19 2025 by rpki-client