$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft File: 3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft (raw, json) Hash identifier: QvoS9lGi/6CwJ4Vfy2tTX6s4/X1p/PSjYuOgDnMSWLM= Subject key identifier: 02:7E:5C:AB:25:9D:B2:D1:08:3A:18:ED:91:81:72:01:B2:BD:52:EB Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F4328584BBFC30EE07CA3D317136E3C50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft Manifest number: 010D0C9F43285844C248883735BAAFE479343E6B Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Thu 06 Nov 2025 15:00:00 +0000 Files and hashes: 1: 3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl (hash: m3ZCA1NkQsocgnC2bkDtUYK78yvopxZMZi7NRv/iw2s=) 2: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (hash: /4nhE9ugYba5AcAbaXa90JR/BDSpXemI38vcKWOwsxU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:0e:e0:7c:a3:d3:17:13:6e:3c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 6 15:00:00 2025 GMT Subject: CN=ba312506-3b81-48fe-ab66-d0618dc9e171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:05:3a:1e:2c:6f:f9:6c:4c:32:91:40:88: c2:ee:22:3e:3b:d6:83:f1:a5:8f:20:3f:ff:02:38: 7c:2d:95:5b:8e:a1:6c:44:87:58:87:e2:92:0b:ad: a9:69:08:23:7c:e7:50:cc:de:5c:33:63:2c:74:46: 56:22:c0:f7:1f:ab:2a:b6:e8:d7:69:a1:8d:02:fa: 13:3a:02:84:21:73:96:00:d4:f7:1f:ee:e1:fe:30: 18:1a:71:93:b6:72:74:31:43:80:04:95:0b:ac:94: ad:5a:38:85:3c:c2:f4:a0:d0:e4:fa:c0:0f:2c:b7: 57:ee:5a:e6:19:6f:68:11:be:ba:64:87:0d:cf:cc: 85:1d:92:d6:bc:03:62:f1:60:d7:3f:5a:87:c3:5e: 45:21:c2:ef:cb:cc:28:6e:87:6f:d5:47:47:e7:74: 73:c7:07:16:b1:7a:84:f3:35:c0:2b:6a:d5:57:da: 67:93:f7:54:11:6b:1d:ad:96:7a:e3:ba:22:8d:e0: 0c:c6:dd:14:3a:c3:c8:2a:33:4d:b2:65:1d:8b:a8: 73:8b:f7:66:25:27:60:a3:5d:46:17:c4:ff:72:7f: 29:2e:ca:6e:85:7c:46:3d:af:35:f9:f6:64:88:b9: 16:d0:ae:c7:5a:51:c0:c1:5f:f8:46:0a:1c:28:74: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:5C:AB:25:9D:B2:D1:08:3A:18:ED:91:81:72:01:B2:BD:52:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ce:5e:ba:a5:8c:9d:fa:40:55:8c:96:50:64:36:f9:53:1b: c2:8d:56:32:08:b3:eb:57:86:15:aa:7e:4f:fe:ce:04:b8:34: 94:75:a1:1f:de:6c:b4:83:30:8d:50:dd:8b:6d:a3:0b:01:56: a2:35:d0:e8:a8:3b:03:4c:2e:42:7a:e5:cc:9f:7a:67:4e:1c: e9:cf:b3:56:c7:c2:b1:5f:b2:de:a7:86:57:1a:e1:f3:d8:f7: da:36:5b:e0:5e:e1:0d:bc:af:8f:75:9b:7a:d6:78:e6:b1:0e: 62:3c:17:45:e1:19:b6:0b:e6:4a:f0:d6:8d:17:a7:d1:51:81: 01:88:af:b8:71:35:31:e6:de:8d:da:a4:ca:e6:0c:68:78:e1: 90:a3:28:7e:bc:43:ab:0d:57:4e:e1:0e:95:70:15:54:6e:49: a1:33:dd:13:9f:78:31:57:8d:f3:50:c5:63:b9:a1:e0:f9:03: a7:ba:7f:e1:4c:a8:54:62:38:b7:71:1e:65:f8:6c:d0:e3:9f: ef:42:13:6d:46:75:78:b0:19:50:8a:7d:4e:e9:e2:6c:90:d2: 25:b1:45:ad:a8:f2:f8:a6:c9:72:fc:59:b0:b1:4f:21:e7:18: 0c:55:98:4e:52:9c:da:c4:b0:53:52:a5:15:43:7e:b6:ed:18: 54:ef:08:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/ww7gfKPTFxNuPFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk YmEzMTI1MDYtM2I4MS00OGZlLWFiNjYtZDA2MThkYzllMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPYFOh4sb/lsTDKRQIjC7iI+O9aD8aWPID// Ajh8LZVbjqFsRIdYh+KSC62paQgjfOdQzN5cM2MsdEZWIsD3H6sqtujXaaGNAvoT OgKEIXOWANT3H+7h/jAYGnGTtnJ0MUOABJULrJStWjiFPML0oNDk+sAPLLdX7lrm GW9oEb66ZIcNz8yFHZLWvANi8WDXP1qHw15FIcLvy8wobodv1UdH53RzxwcWsXqE 8zXAK2rVV9pnk/dUEWsdrZZ647oijeAMxt0UOsPIKjNNsmUdi6hzi/dmJSdgo11G F8T/cn8pLspuhXxGPa81+fZkiLkW0K7HWlHAwV/4RgocKHSCEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAJ+XKslnbLRCDoY7ZGBcgGyvVLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvM2U5N2RkYzEtZTYwNS00 NmNmLWJjZjUtMDQ4ZjhkOGViNDFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtzl66pYyd+kBVjJZQZDb5 UxvCjVYyCLPrV4YVqn5P/s4EuDSUdaEf3my0gzCNUN2LbaMLAVaiNdDoqDsDTC5C euXMn3pnThzpz7NWx8KxX7Lep4ZXGuHz2PfaNlvgXuENvK+PdZt61njmsQ5iPBdF 4Rm2C+ZK8NaNF6fRUYEBiK+4cTUx5t6N2qTK5gxoeOGQoyh+vEOrDVdO4Q6VcBVU bkmhM90Tn3gxV43zUMVjuaHg+QOnun/hTKhUYji3cR5l+GzQ45/vQhNtRnV4sBlQ in1O6eJskNIlsUWtqPL4psly/FmwsU8h5xgMVZhOUpzaxLBTUqUVQ3627RhU7wjL -----END CERTIFICATE-----Generated at Wed Nov 5 03:30:37 2025 by rpki-client