$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft File: 37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft (raw, json) Hash identifier: LXjpiDlJhmMhscC7O8rSe3F+PIcjGyuzX9U2uuEP8NQ= Subject key identifier: 30:01:96:19:4F:5D:77:87:5B:B1:F4:5C:14:3B:E1:37:A2:83:14:16 Authority key identifier: 19:8E:1D:FF:50:DE:07:BA:C9:42:5C:7C:98:B6:1B:34:4B:58:E0:01 Certificate issuer: /CN=37fe8a4a-3fd3-4ba0-9423-f957bd58bca4 Certificate serial: 010D0C9F4328584BBE5DC40E56FE44E517265380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft Manifest number: 010D0C9F4328584073A839E187F867CAB6974D91 Signing time: Tue 04 Nov 2025 03:00:09 +0000 Manifest this update: Tue 04 Nov 2025 03:00:09 +0000 Manifest next update: Thu 06 Nov 2025 03:00:00 +0000 Files and hashes: 1: 37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl (hash: KJMAmwvx5ii9MHHjv5RiVgWLaZHMk98zMFNx5MeDzLE=) 2: 99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer (hash: EEeZcD6wqcu/OVUNFwuG9cUQZWqehZGRsPUn/pWNBrs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:5d:c4:0e:56:fe:44:e5:17:26:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fe8a4a-3fd3-4ba0-9423-f957bd58bca4 Validity Not Before: Nov 4 03:00:09 2025 GMT Not After : Nov 6 03:00:00 2025 GMT Subject: CN=78faf7c2-bc7e-4c82-a7f2-0a7b8b42c16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:de:08:02:93:9c:7a:c9:53:c9:70:b2:3c: ba:1a:2a:31:38:18:46:2f:cf:2b:ce:35:ab:2d:e5: fa:1e:ad:a4:79:7d:63:bb:21:d4:cb:b8:c7:e0:01: 5f:cc:2f:2f:32:06:9d:03:90:cc:6b:b4:3c:d1:7d: f2:24:b5:66:79:d5:52:be:ad:9e:ff:e3:e3:87:2a: 07:4b:d3:92:e7:0d:c6:2a:6e:14:85:c0:8e:91:24: 45:0e:c9:e9:96:1a:75:5f:c2:79:d7:7d:6d:70:e6: 1a:cb:9f:ba:72:c8:16:fa:ab:bf:68:e3:3e:4b:a9: aa:e2:ea:94:35:65:c1:34:6e:c6:d7:af:e9:e9:9e: be:0f:b7:df:5b:15:44:f7:4c:05:fe:87:68:05:e9: 25:ec:3f:ae:d8:c2:7f:6e:f8:1d:07:dc:c5:04:e3: 1b:84:2a:96:f8:6b:25:d7:52:5f:ee:7e:97:6f:a3: 1a:9f:d7:cd:5d:20:a3:e7:b8:4e:c2:fe:5e:22:f5: 73:72:7a:50:7e:c8:b5:46:26:fb:ca:72:71:98:fd: c8:7d:71:94:38:a8:72:af:81:16:a7:96:47:ec:1b: 3c:d1:9c:39:ff:e2:c9:09:c6:5d:09:93:9f:2b:93: 52:fa:57:62:c0:56:3e:aa:f2:7b:a0:97:dc:46:f2: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:96:19:4F:5D:77:87:5B:B1:F4:5C:14:3B:E1:37:A2:83:14:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl X509v3 Authority Key Identifier: keyid:19:8E:1D:FF:50:DE:07:BA:C9:42:5C:7C:98:B6:1B:34:4B:58:E0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6a:88:d9:0e:fe:c3:65:1c:73:8a:0a:31:f2:29:c5:6a:a7: 0e:6e:9e:bd:f3:5b:3a:8c:14:bd:c0:81:5a:03:f4:66:11:d3: 37:3a:bb:7f:0f:53:e4:e7:03:88:f0:cd:f9:00:81:db:6c:8d: f4:18:83:22:5b:09:01:fe:78:85:ca:9a:a7:14:c2:82:41:83: 03:05:2f:08:9c:28:7c:4c:ed:5f:e1:14:86:f9:f5:ee:2f:a9: d9:b0:db:41:99:b4:a2:f7:25:72:3b:51:20:0a:66:88:0b:34: e9:a6:64:07:4b:b7:bb:2b:34:ad:53:46:5f:9c:27:31:8e:03: f2:1c:00:6e:65:2a:03:e4:d7:89:40:93:6f:61:5d:f8:35:9c: e9:9e:5c:53:e7:b8:c4:a1:bd:15:23:b1:91:aa:89:42:c4:ae: f3:65:de:fb:b3:8a:70:a0:2a:89:d0:fb:43:e0:73:0e:0b:9d: 09:1f:b5:f0:73:2d:7e:88:07:26:ad:c7:69:47:97:2e:89:4e: 3b:ca:1e:43:19:b2:85:65:d0:05:b7:be:3a:65:fc:86:60:17: 1a:9a:0e:b8:05:cd:13:8b:41:c9:9c:98:2a:9e:58:d8:b1:ae: fe:45:38:99:1e:3b:87:6e:36:8a:a7:81:b2:31:8a:ff:4d:3c: 5a:9f:e2:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+XcQOVv5E5RcmU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdmZThhNGEtM2ZkMy00YmEwLTk0MjMtZjk1N2JkNThi Y2E0MB4XDTI1MTEwNDAzMDAwOVoXDTI1MTEwNjAzMDAwMFowLzEtMCsGA1UEAxMk NzhmYWY3YzItYmM3ZS00YzgyLWE3ZjItMGE3YjhiNDJjMTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWfeCAKTnHrJU8lwsjy6GioxOBhGL88rzjWr LeX6Hq2keX1juyHUy7jH4AFfzC8vMgadA5DMa7Q80X3yJLVmedVSvq2e/+PjhyoH S9OS5w3GKm4UhcCOkSRFDsnplhp1X8J5131tcOYay5+6csgW+qu/aOM+S6mq4uqU NWXBNG7G16/p6Z6+D7ffWxVE90wF/odoBekl7D+u2MJ/bvgdB9zFBOMbhCqW+Gsl 11Jf7n6Xb6Man9fNXSCj57hOwv5eIvVzcnpQfsi1Rib7ynJxmP3IfXGUOKhyr4EW p5ZH7Bs80Zw5/+LJCcZdCZOfK5NS+ldiwFY+qvJ7oJfcRvKKaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDABlhlPXXeHW7H0XBQ74TeigxQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zN2Zl OGE0YS0zZmQzLTRiYTAtOTQyMy1mOTU3YmQ1OGJjYTQvMzdmZThhNGEtM2ZkMy00 YmEwLTk0MjMtZjk1N2JkNThiY2E0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzdmZThhNGEtM2ZkMy00YmEwLTk0 MjMtZjk1N2JkNThiY2E0LzM3ZmU4YTRhLTNmZDMtNGJhMC05NDIzLWY5NTdiZDU4 YmNhNC5jcmwwHwYDVR0jBBgwFoAUGY4d/1DeB7rJQlx8mLYbNEtY4AEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zN2ZlOGE0YS0zZmQzLTRiYTAtOTQyMy1mOTU3 YmQ1OGJjYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtaojZDv7DZRxzigox8inF aqcObp6981s6jBS9wIFaA/RmEdM3Ort/D1Pk5wOI8M35AIHbbI30GIMiWwkB/niF ypqnFMKCQYMDBS8InCh8TO1f4RSG+fXuL6nZsNtBmbSi9yVyO1EgCmaICzTppmQH S7e7KzStU0ZfnCcxjgPyHABuZSoD5NeJQJNvYV34NZzpnlxT57jEob0VI7GRqolC xK7zZd77s4pwoCqJ0PtD4HMOC50JH7Xwcy1+iAcmrcdpR5cuiU47yh5DGbKFZdAF t746ZfyGYBcamg64Bc0Ti0HJnJgqnljYsa7+RTiZHjuHbjaKp4GyMYr/TTxan+KE -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:51 2025 by rpki-client