$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: eSEMRtj1IkUE8C0ptB3JToJX9nigk704Yp62OIsoTcU= Subject key identifier: 79:E8:08:B2:59:3B:BB:21:F3:02:6A:E5:43:E9:77:F4:0B:43:BD:8D Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584BC03A2DA74605302789547500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FA8C Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: kooQ2irP9k+4HGDIDU8S1nqDurEghU0t8ZeOhVZAksE=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: HJhzQHcV4PoaB9rqL2cSXVZxk+peubAM6O7TcfoGOKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2d:a7:46:05:30:27:89:54:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=5412ece6-0449-434f-a31e-350f95149363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:1f:2c:23:6d:2c:84:57:71:b3:2a:9c:28: 3d:2e:f7:86:46:a8:ec:73:3a:89:5b:8c:a7:10:7e: 78:2d:aa:46:57:ff:44:90:e0:cc:c7:f3:01:61:b6: 35:30:b6:b7:d0:57:83:af:f4:d9:fb:a4:44:9b:69: ff:c9:d9:25:aa:89:06:d7:28:d3:3e:63:b4:c7:e4: 12:ac:e3:d6:32:61:59:43:06:bb:ef:9c:0b:bf:ec: fa:53:19:16:8d:d9:06:cc:7b:ed:d5:17:b3:75:48: 8e:0d:d7:4f:6e:56:9d:39:ad:0f:bd:e4:ab:69:9a: 1d:34:b9:91:6f:b2:51:10:77:57:fd:6e:f5:8f:59: 4d:92:1c:ff:4b:30:22:9a:19:b3:52:f3:bc:26:d0: fd:3a:73:43:e5:e4:9c:e1:e5:f9:c1:da:27:5b:9b: cc:ae:31:d4:8b:17:c2:be:38:e5:e5:c3:07:6a:8c: db:85:1c:68:41:0d:ac:d7:e8:08:1e:b0:98:8f:69: dc:cb:4f:9a:c8:0f:29:2c:ed:8c:af:2b:8e:16:b3: b1:8c:90:46:84:85:9c:82:89:48:d7:2c:4a:40:64: 77:8d:66:4f:4f:6d:00:95:3b:c0:3a:5a:fd:e8:b1: 75:d2:a3:8e:69:62:0b:87:ce:39:8f:d9:0d:d7:3c: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E8:08:B2:59:3B:BB:21:F3:02:6A:E5:43:E9:77:F4:0B:43:BD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ba:9b:f2:83:8e:1d:cb:21:fd:bc:75:df:57:25:fa:7b:5b: e6:9c:a3:81:f0:d9:b1:f8:3e:ff:95:e8:ed:3b:50:39:5e:00: fd:60:58:5d:38:3e:f1:6d:48:2c:fb:9a:f8:0a:6b:75:ae:54: 50:93:3a:75:c5:49:b1:97:06:06:eb:cc:f1:ae:4c:f3:40:5d: 03:fc:33:dc:54:97:66:38:a2:81:67:64:0b:b5:6b:42:3d:f2: 30:5e:b2:d0:4e:33:cd:2c:08:98:b6:0e:9f:f2:dc:f9:cf:89: 6a:87:86:11:91:51:f5:1a:61:65:b9:57:3d:a6:e1:b8:07:0a: 74:b4:ed:34:5b:e0:d9:af:47:94:7c:20:25:8e:d7:ed:a7:ea: 51:ea:a6:2e:8f:66:a1:e1:fe:79:a9:0e:f8:0c:71:00:18:c1: 8a:0b:7f:71:5f:a6:5e:d9:97:c9:b6:32:78:f9:5b:e4:6c:37: 1d:6d:ef:d8:1c:64:6b:3a:0b:b8:a5:3c:83:8a:99:1b:ab:85: b5:d1:a1:4d:a2:99:a6:32:e3:c3:d6:70:3a:12:a4:00:4f:10: ee:d8:bf:59:d0:96:74:9d:1f:f0:c6:e2:3f:76:34:64:b9:1b: 92:5e:c4:f8:64:c1:6e:ab:13:23:3f:18:79:13:a3:da:1c:89: e3:53:ef:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi2nRgUwJ4lUdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NTQxMmVjZTYtMDQ0OS00MzRmLWEzMWUtMzUwZjk1MTQ5MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi14fLCNtLIRXcbMqnCg9LveGRqjsczqJW4yn EH54LapGV/9EkODMx/MBYbY1MLa30FeDr/TZ+6REm2n/ydklqokG1yjTPmO0x+QS rOPWMmFZQwa775wLv+z6UxkWjdkGzHvt1RezdUiODddPbladOa0PveSraZodNLmR b7JREHdX/W71j1lNkhz/SzAimhmzUvO8JtD9OnND5eSc4eX5wdonW5vMrjHUixfC vjjl5cMHaozbhRxoQQ2s1+gIHrCYj2ncy0+ayA8pLO2MryuOFrOxjJBGhIWcgolI 1yxKQGR3jWZPT20AlTvAOlr96LF10qOOaWILh845j9kN1zwMJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHnoCLJZO7sh8wJq5UPpd/QLQ72NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANupvyg44dyyH9vHXfVyX6 e1vmnKOB8Nmx+D7/lejtO1A5XgD9YFhdOD7xbUgs+5r4Cmt1rlRQkzp1xUmxlwYG 68zxrkzzQF0D/DPcVJdmOKKBZ2QLtWtCPfIwXrLQTjPNLAiYtg6f8tz5z4lqh4YR kVH1GmFluVc9puG4Bwp0tO00W+DZr0eUfCAljtftp+pR6qYuj2ah4f55qQ74DHEA GMGKC39xX6Ze2ZfJtjJ4+VvkbDcdbe/YHGRrOgu4pTyDipkbq4W10aFNopmmMuPD 1nA6EqQATxDu2L9Z0JZ0nR/wxuI/djRkuRuSXsT4ZMFuqxMjPxh5E6PaHInjU+/h -----END CERTIFICATE-----Generated at Wed Nov 5 08:35:56 2025 by rpki-client