$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft File: 3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft (raw, json) Hash identifier: 8puje7CBD5xfSNSeWiX0mxdcgg8rNyIfNKgZdfvNcqk= Subject key identifier: 97:18:4B:45:63:D0:25:34:19:D9:41:DC:FC:53:D7:13:75:F6:75:A1 Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 Certificate issuer: /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Certificate serial: 010D0C9F4328584BC128731F2589370140510280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft Manifest number: 010D0C9F4328584073A8393752AC1CE1AEC89627 Signing time: Wed 05 Nov 2025 03:00:08 +0000 Manifest this update: Wed 05 Nov 2025 03:00:08 +0000 Manifest next update: Sat 08 Nov 2025 03:00:00 +0000 Files and hashes: 1: 3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl (hash: YhHPyfDDYLRACgCIJ7mqRhF6JmD6Cl/UBtwgNQGPQJQ=) 2: 6758e236-250b-3365-a146-9e1a9f1e2a79.roa (hash: IU9dcI542pgJ0eOCUuTlReLQ3s6rQTGJQKuvoGLE1zc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:28:73:1f:25:89:37:01:40:51:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Validity Not Before: Nov 5 03:00:08 2025 GMT Not After : Nov 8 03:00:00 2025 GMT Subject: CN=9955b2de-82dd-4aee-934f-6d1b26e5e052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:35:f0:1c:df:66:34:54:7d:31:08:61:00: ea:61:c1:2e:05:17:13:22:9b:4f:85:85:e9:26:a3: 3f:42:33:88:4d:c0:57:cd:b3:c5:b4:0e:f0:ae:f3: 3f:fc:5a:aa:fd:a6:ee:7a:a3:23:65:48:94:67:8c: 3f:37:1d:e6:61:4d:cd:50:4a:20:0e:c9:a7:61:85: 69:29:73:d0:bf:c5:74:de:81:f3:57:1e:a8:64:f3: c2:3b:72:1f:23:fe:ad:f4:b7:15:d1:c7:bf:dc:dc: f1:e2:05:b0:0f:f7:60:48:5b:92:84:c2:0b:7a:19: 40:9b:79:84:ce:14:ae:ee:7b:4d:aa:d7:8f:1f:cd: b0:bf:3e:d0:25:0d:49:6d:87:1c:62:fb:69:e6:07: 10:dc:45:25:f2:7f:df:46:7a:db:71:9d:34:0e:2a: 20:44:f1:37:25:24:99:ce:a0:05:41:78:54:80:e6: 61:4e:f8:da:7d:c6:2b:bc:dc:66:f3:c8:27:27:ee: 19:0d:32:9e:5d:44:c0:46:cb:5f:90:93:b4:54:56: fa:11:5c:75:0e:3f:18:65:68:d4:77:c7:3c:00:e9: 33:97:ff:89:da:30:db:c1:88:27:f4:d3:bb:87:65: 36:63:12:78:c8:0f:70:a3:e0:6f:c3:86:f2:d4:80: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:18:4B:45:63:D0:25:34:19:D9:41:DC:FC:53:D7:13:75:F6:75:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl X509v3 Authority Key Identifier: keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c8:05:f6:c0:0b:ff:dd:f2:c4:0b:2a:ec:53:ec:34:a3:3d: e7:1d:10:b1:7b:41:22:5c:62:23:b4:10:ba:51:d4:ef:97:d3: e4:e1:28:8f:f7:af:63:23:cc:93:c4:ea:74:68:7e:a6:ab:08: 7f:04:e7:63:4d:d2:99:2d:95:5e:cd:0d:45:d1:c4:25:51:4f: 77:a4:31:a3:34:2f:ba:62:cc:7b:ee:e1:2f:97:24:8d:61:d7: 4b:8f:a0:9b:8b:0b:f8:4e:6d:f6:b6:73:79:01:03:e3:8b:67: f6:59:07:bb:27:3a:f4:24:e0:70:66:3c:03:4e:fe:e2:26:40: a9:40:95:bb:fb:56:19:e2:3f:9d:9a:3e:d1:f6:f4:31:52:ba: 0b:b7:3a:bf:78:bf:24:c3:af:a8:9c:8d:c7:06:72:b6:ef:02: c5:ec:73:d4:34:59:1e:84:f5:6f:f6:17:17:cc:08:0f:2d:e2: e4:1d:57:63:6d:48:cc:31:9f:c4:f3:8e:a3:71:6e:39:5a:ab: ed:d9:81:62:8a:58:ac:c9:f2:9e:c8:84:e2:58:82:f0:3e:21: c6:a8:67:c4:68:40:f7:ae:23:65:bd:88:1e:99:0c:cc:f1:5b: ca:da:38:a6:2a:12:84:9e:60:d0:47:9d:39:48:49:50:39:50: b2:03:ae:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBKHMfJYk3AUBRAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3YmYtZTUxYmEwMjlk NDRjMB4XDTI1MTEwNTAzMDAwOFoXDTI1MTEwODAzMDAwMFowLzEtMCsGA1UEAxMk OTk1NWIyZGUtODJkZC00YWVlLTkzNGYtNmQxYjI2ZTVlMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ018BzfZjRUfTEIYQDqYcEuBRcTIptPhYXp JqM/QjOITcBXzbPFtA7wrvM//Fqq/abueqMjZUiUZ4w/Nx3mYU3NUEogDsmnYYVp KXPQv8V03oHzVx6oZPPCO3IfI/6t9LcV0ce/3Nzx4gWwD/dgSFuShMILehlAm3mE zhSu7ntNqtePH82wvz7QJQ1JbYccYvtp5gcQ3EUl8n/fRnrbcZ00DiogRPE3JSSZ zqAFQXhUgOZhTvjafcYrvNxm88gnJ+4ZDTKeXUTARstfkJO0VFb6EVx1Dj8YZWjU d8c8AOkzl/+J2jDbwYgn9NO7h2U2YxJ4yA9wo+Bvw4by1IBz8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJcYS0Vj0CU0GdlB3PxT1xN19nWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlm NjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFiYTAyOWQ0NGMvM2M5ZjYwZDQtY2ZiZC00 ZjZkLTk3YmYtZTUxYmEwMjlkNDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3 YmYtZTUxYmEwMjlkNDRjLzNjOWY2MGQ0LWNmYmQtNGY2ZC05N2JmLWU1MWJhMDI5 ZDQ0Yy5jcmwwHwYDVR0jBBgwFoAUDxcdvoCm4oEQi7dn8WDJN3kHwLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlmNjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFi YTAyOWQ0NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRyAX2wAv/3fLECyrsU+w0 oz3nHRCxe0EiXGIjtBC6UdTvl9Pk4SiP969jI8yTxOp0aH6mqwh/BOdjTdKZLZVe zQ1F0cQlUU93pDGjNC+6Ysx77uEvlySNYddLj6Cbiwv4Tm32tnN5AQPji2f2WQe7 Jzr0JOBwZjwDTv7iJkCpQJW7+1YZ4j+dmj7R9vQxUroLtzq/eL8kw6+onI3HBnK2 7wLF7HPUNFkehPVv9hcXzAgPLeLkHVdjbUjMMZ/E846jcW45Wqvt2YFiilisyfKe yITiWILwPiHGqGfEaED3riNlvYgemQzM8VvK2jimKhKEnmDQR505SElQOVCyA66w -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:25 2025 by rpki-client