$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft File: a3398dc1-de03-4844-957b-e882d7878ae2.mft (raw, json) Hash identifier: 11CF+PpVck+YUnT/E5Q2x5y84d3mjpJ7smOSyvrLe/U= Subject key identifier: 65:78:83:C1:E8:86:2D:D2:E7:11:67:2F:CA:76:17:10:11:28:90:3C Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584BBEF29A64A8188C8A2BC70D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft Manifest number: 010D0C9F4328584073A8471614A6B3775D4E45A3 Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Thu 06 Nov 2025 08:00:00 +0000 Files and hashes: 1: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (hash: woc79tdmrh39ZqdY7D+16BjuFCKMDUTvzHuDvhXGB7k=) 2: a3398dc1-de03-4844-957b-e882d7878ae2.crl (hash: 0f0kAyinQcmwAynyMOSaUL3o0eyYG7x6rFWxTprqq8g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9a:64:a8:18:8c:8a:2b:c7:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 6 08:00:00 2025 GMT Subject: CN=487a1863-5b6b-4d60-9c50-43865ed86b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:36:7b:36:9c:4c:3e:f9:6d:31:73:68:a4: a8:78:18:4b:c0:c9:a2:f6:28:75:24:7e:69:bf:fc: 80:8a:db:d0:d8:75:bc:2c:f4:ab:98:8a:00:77:c2: 90:b1:d5:52:31:2b:fc:7d:b5:17:fe:f5:db:01:78: 02:a5:1e:66:a2:1c:0b:49:de:42:27:f7:45:e6:38: 7d:37:89:f3:fb:32:2d:33:d1:0b:d3:02:b9:49:43: d2:e3:0e:fa:c2:83:a4:16:7c:9c:31:07:83:e9:3e: d5:6a:57:2b:84:49:9e:c9:43:ac:cd:cd:7a:20:58: 4e:27:03:e3:c4:13:70:11:45:05:d1:e1:57:51:42: c4:81:ef:cb:3c:33:ab:32:0c:53:99:21:96:36:78: 8a:e8:ba:cc:4f:94:66:da:ab:22:10:b1:6e:17:eb: 5b:30:f2:fe:a3:b0:26:91:4b:c3:7a:09:61:44:56: d5:09:dc:40:cb:a7:98:fa:39:72:32:d4:87:44:b4: 89:d6:85:a8:8d:b7:46:06:97:64:c8:e9:fc:5e:6b: 83:3c:c2:28:9c:3a:1a:24:38:29:8e:15:ea:0d:cb: 8e:03:c5:bb:c0:16:4f:7d:32:34:c1:9e:d2:99:40: 1e:02:b8:e2:98:d6:ed:d4:0e:bd:e2:bc:a4:c1:75: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:83:C1:E8:86:2D:D2:E7:11:67:2F:CA:76:17:10:11:28:90:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b6:d2:5a:7e:af:44:3e:c6:97:bf:35:d5:27:df:d9:97:22: b7:44:5c:69:e3:dd:97:43:f8:df:ec:72:79:84:d4:fb:6d:37: 29:ca:f1:fa:07:13:ef:20:a3:89:a3:ee:55:cc:d0:a1:43:d3: 23:ed:75:d1:8f:5b:38:3c:6c:a8:95:e8:ed:8f:55:20:91:c3: 28:54:e4:2a:9b:ce:02:b6:84:af:24:44:a9:99:40:7a:5d:64: 1b:a6:d2:a6:6d:23:33:72:b4:e4:44:17:e2:41:cb:94:7a:db: 02:0b:14:30:3a:71:42:72:fe:76:66:63:3a:93:67:8a:a6:b1: 08:d5:6d:cb:1a:67:cc:19:1a:6c:e6:63:39:13:6d:fe:eb:06: 92:da:1b:9d:6f:6c:fd:c1:2f:33:be:50:c3:7e:f5:a2:1d:6c: ff:21:5d:0a:84:02:f5:43:68:5c:9b:2b:70:a0:83:03:79:ef: 6f:fe:69:c4:19:db:cd:fa:08:28:3c:98:c2:5d:81:54:24:2c: e5:84:f7:b9:c9:3f:15:3b:fc:e4:d6:3f:ec:79:dc:08:74:58: db:b8:39:9f:b0:26:e0:db:d4:24:a5:68:7a:f1:19:4f:b6:fa: 9f:8e:fd:c0:e8:30:c9:2d:64:18:d3:92:ac:e4:d6:aa:d5:58: 88:10:a9:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8ppkqBiMiivHDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNjA4MDAwMFowLzEtMCsGA1UEAxMk NDg3YTE4NjMtNWI2Yi00ZDYwLTljNTAtNDM4NjVlZDg2YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y82ezacTD75bTFzaKSoeBhLwMmi9ih1JH5p v/yAitvQ2HW8LPSrmIoAd8KQsdVSMSv8fbUX/vXbAXgCpR5mohwLSd5CJ/dF5jh9 N4nz+zItM9EL0wK5SUPS4w76woOkFnycMQeD6T7ValcrhEmeyUOszc16IFhOJwPj xBNwEUUF0eFXUULEge/LPDOrMgxTmSGWNniK6LrMT5Rm2qsiELFuF+tbMPL+o7Am kUvDeglhRFbVCdxAy6eY+jlyMtSHRLSJ1oWojbdGBpdkyOn8XmuDPMIonDoaJDgp jhXqDcuOA8W7wBZPfTI0wZ7SmUAeArjimNbt1A694rykwXXovQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGV4g8Hohi3S5xFnL8p2FxARKJA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvYTMzOThkYzEtZGUwMy00 ODQ0LTk1N2ItZTg4MmQ3ODc4YWUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSttJafq9EPsaXvzXVJ9/Z lyK3RFxp492XQ/jf7HJ5hNT7bTcpyvH6BxPvIKOJo+5VzNChQ9Mj7XXRj1s4PGyo lejtj1UgkcMoVOQqm84CtoSvJESpmUB6XWQbptKmbSMzcrTkRBfiQcuUetsCCxQw OnFCcv52ZmM6k2eKprEI1W3LGmfMGRps5mM5E23+6waS2hudb2z9wS8zvlDDfvWi HWz/IV0KhAL1Q2hcmytwoIMDee9v/mnEGdvN+ggoPJjCXYFUJCzlhPe5yT8VO/zk 1j/sedwIdFjbuDmfsCbg29QkpWh68RlPtvqfjv3A6DDJLWQY05Ks5Naq1ViIEKmi -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:56 2025 by rpki-client