$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft File: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft (raw, json) Hash identifier: L+iE1oxd3+Wdpjv+Z+EWWnKJDP8SqSWL6og3Zsu9HP0= Subject key identifier: A8:B8:5E:84:D9:52:74:47:88:0E:17:39:7D:24:38:44:34:24:68:78 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F4328584BC19F84CB627568921CFEC980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft Manifest number: 010D0C9F4328584073A845B1E7CF882A25356465 Signing time: Wed 05 Nov 2025 07:00:03 +0000 Manifest this update: Wed 05 Nov 2025 07:00:03 +0000 Manifest next update: Sat 08 Nov 2025 07:00:00 +0000 Files and hashes: 1: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl (hash: x7tM3Y5CRXdg3l30q2AKWnhnChBj1lmMevRx2fp1s18=) 2: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (hash: ww+E2//TcQhbrtAPxlqyfAP8oKFYpGeUR3jVnG1BoYU=) 3: d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (hash: 8ySd6lSRHwO2zZnLC3OKz2eQGlDvNdEuAU+bpGzev0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:9f:84:cb:62:75:68:92:1c:fe:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Nov 5 07:00:03 2025 GMT Not After : Nov 8 07:00:00 2025 GMT Subject: CN=e413152b-f0fe-4f96-9e18-a84baec94632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:06:6c:4d:f0:64:9c:63:27:e7:41:e5:53: 64:b9:58:4d:79:63:6c:52:07:73:08:85:ea:23:e1: 63:4c:b4:4b:81:d6:26:78:07:37:56:a2:83:5c:b2: 2a:97:41:ab:48:15:61:68:ea:b3:f6:2f:5e:ef:93: cf:22:31:ab:46:2d:b2:33:0c:dd:69:d9:4a:fc:be: a3:0c:03:57:09:ca:65:95:b4:e4:60:1f:36:2e:13: 3c:d4:fa:2f:fc:c6:55:da:33:e1:42:2a:d4:d0:34: 51:7a:57:e5:14:ec:8b:9d:bb:8a:4e:f3:bf:27:4e: 3f:94:32:e8:80:27:d0:9f:ad:81:7d:4f:25:01:d1: 73:26:2a:ca:81:0d:f4:bc:f7:19:95:55:d2:29:aa: d0:88:8a:85:bd:d4:99:80:6f:df:6c:80:e7:82:89: bf:ae:a3:c7:51:c9:d2:44:a0:a5:58:d5:ae:d8:bd: 2d:52:3d:8f:10:7f:e8:bf:2a:97:e7:3c:70:5d:ee: b2:cd:e9:fe:87:39:52:8e:17:d1:a5:e3:38:5d:08: 81:2a:4b:01:62:be:5d:85:6e:12:0f:6f:90:d1:5d: 1a:dc:9a:cf:83:d1:a6:e6:ca:19:b8:ed:d4:13:e2: 84:ec:36:5f:e0:f9:18:f1:c1:5e:1b:eb:41:7e:36: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B8:5E:84:D9:52:74:47:88:0E:17:39:7D:24:38:44:34:24:68:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ec:a1:41:04:5a:94:26:97:af:c1:f6:d6:6a:7c:e8:96:ab: 4f:6c:35:66:af:6f:17:68:53:66:3f:3a:46:dc:80:67:36:eb: 54:47:95:d2:7d:c5:e9:b1:19:74:b4:66:e0:d4:be:1d:7a:e0: 2f:dc:af:46:ee:be:7a:45:ff:26:b1:00:16:10:60:1e:37:f6: 34:e4:14:9a:b5:47:0e:d6:81:9a:30:a4:7f:a1:8b:4e:97:0b: 98:4a:cd:76:96:20:f3:85:cf:a8:3a:7e:da:ac:d1:72:f7:15: e6:27:57:8e:aa:f8:eb:96:a0:30:e9:2d:5d:b7:59:45:e0:79: 83:c0:07:11:d7:98:5f:eb:17:4f:98:da:61:4e:9a:c4:a5:86: de:91:b0:7b:4d:91:cb:c6:77:a1:8c:bf:74:f9:28:8f:a0:3f: 81:19:43:d6:7e:1b:cc:89:39:77:0d:43:91:98:78:5f:c8:12: 77:2a:9a:a1:e6:99:f4:f0:49:a0:4a:36:59:e1:c0:bd:13:8a: 23:b8:02:89:bf:06:70:35:ab:69:07:7d:8f:4d:58:3e:eb:fa: 65:ec:96:57:56:9f:71:31:49:b9:c8:83:22:d0:16:d9:80:b0: 5c:49:35:df:81:77:9d:ce:f7:85:09:32:75:90:93:7e:19:fc: 00:cf:c6:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBn4TLYnVokhz+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MTEwNTA3MDAwM1oXDTI1MTEwODA3MDAwMFowLzEtMCsGA1UEAxMk ZTQxMzE1MmItZjBmZS00Zjk2LTllMTgtYTg0YmFlYzk0NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4GbE3wZJxjJ+dB5VNkuVhNeWNsUgdzCIXq I+FjTLRLgdYmeAc3VqKDXLIql0GrSBVhaOqz9i9e75PPIjGrRi2yMwzdadlK/L6j DANXCcpllbTkYB82LhM81Pov/MZV2jPhQirU0DRRelflFOyLnbuKTvO/J04/lDLo gCfQn62BfU8lAdFzJirKgQ30vPcZlVXSKarQiIqFvdSZgG/fbIDngom/rqPHUcnS RKClWNWu2L0tUj2PEH/ovyqX5zxwXe6yzen+hzlSjhfRpeM4XQiBKksBYr5dhW4S D2+Q0V0a3JrPg9Gm5soZuO3UE+KE7DZf4PkY8cFeG+tBfjaQ9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKi4XoTZUnRHiA4XOX0kOEQ0JGh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvM2YyOGI2MmMtN2M1MC00 Y2NmLWJhYzUtYTZjZWQ5YzUxMGFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+7KFBBFqUJpevwfbWanzo lqtPbDVmr28XaFNmPzpG3IBnNutUR5XSfcXpsRl0tGbg1L4deuAv3K9G7r56Rf8m sQAWEGAeN/Y05BSatUcO1oGaMKR/oYtOlwuYSs12liDzhc+oOn7arNFy9xXmJ1eO qvjrlqAw6S1dt1lF4HmDwAcR15hf6xdPmNphTprEpYbekbB7TZHLxnehjL90+SiP oD+BGUPWfhvMiTl3DUORmHhfyBJ3Kpqh5pn08EmgSjZZ4cC9E4ojuAKJvwZwNatp B32PTVg+6/pl7JZXVp9xMUm5yIMi0BbZgLBcSTXfgXedzveFCTJ1kJN+GfwAz8ZJ -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:33 2025 by rpki-client