$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft File: 3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft (raw, json) Hash identifier: rAGq+NA4Xz3awOHDxNMg86K7oHGIyOpqCdu8KXUFo60= Subject key identifier: 21:5E:1A:AB:38:4A:96:17:E3:1E:86:68:47:27:E7:BD:D8:C5:94:2F Authority key identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A Certificate issuer: /CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef Certificate serial: 010D0C9F4328584BC57634127DEE4FB71FF2DE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft Manifest number: 010D0C9F432858434C60800128E068FCB342B914 Signing time: Thu 06 Nov 2025 16:00:03 +0000 Manifest this update: Thu 06 Nov 2025 16:00:03 +0000 Manifest next update: Sat 08 Nov 2025 16:00:00 +0000 Files and hashes: 1: 00284572-ea59-33f8-9f35-4491476aec57.roa (hash: ZV8rOCK5H8pTitJzVuiwdREgMJTlfLlOZSPKah+Htys=) 2: 3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl (hash: QtOBjySORqQURjKLtyOppijK4zbiTmL6CLXwoAW+NLI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:76:34:12:7d:ee:4f:b7:1f:f2:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef Validity Not Before: Nov 6 16:00:03 2025 GMT Not After : Nov 8 16:00:00 2025 GMT Subject: CN=8568d23b-ebd2-482b-af9d-c04d989107bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:7f:08:f6:14:32:97:72:b6:f4:6d:58:61: 0d:d1:05:9c:f5:ef:ef:6f:c9:0f:8a:06:0a:54:87: b6:38:f5:17:bc:94:f8:a5:8f:cd:a7:69:2f:e8:f9: 0f:34:f4:70:15:1d:1b:35:e4:cc:e6:26:cb:2a:3f: d6:9c:99:23:1b:a0:5f:1b:bf:e2:d7:a2:97:31:ef: ad:b1:d1:69:53:5b:7b:e3:db:8a:b0:75:ec:56:1b: 03:1b:d6:79:96:dc:32:3c:b6:fc:26:c8:3e:d6:9e: cb:8a:94:71:3b:39:3f:18:f3:0f:d9:23:5a:69:4e: fd:31:38:9b:3d:ac:89:83:36:13:0f:7b:d4:44:78: 5c:0b:2b:86:9b:f8:e5:70:5e:70:b8:f4:8e:c9:4c: db:af:a8:59:6a:67:d1:08:8a:96:d6:b7:57:c7:01: 10:29:3e:a7:fe:70:ea:c0:e3:6b:0b:b5:c7:32:ff: e6:16:aa:73:f1:d3:f0:ce:75:91:bb:87:09:10:46: 59:d9:64:99:aa:c6:3f:cb:6e:bb:1a:8c:98:21:3f: 14:b5:05:43:a9:56:a8:bc:4b:5c:05:4d:a5:eb:41: 8e:79:ae:27:51:02:98:e7:9c:0d:a6:70:7e:ac:da: 0b:37:11:7c:ab:09:2e:fd:ea:66:7f:71:cd:8a:b1: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:1A:AB:38:4A:96:17:E3:1E:86:68:47:27:E7:BD:D8:C5:94:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl X509v3 Authority Key Identifier: keyid:A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b4:a3:af:0d:86:04:57:40:36:3a:6a:6a:da:95:f1:3d:14: 31:60:f1:e2:aa:a8:9e:5c:a9:5a:cc:31:36:95:7d:5c:86:4a: 0f:61:e7:f7:4f:18:b6:be:0e:8a:82:c5:1c:e1:95:dd:eb:a1: c6:60:48:a0:26:71:34:0b:6a:25:12:9b:30:8c:45:a4:5a:03: 5b:1d:c1:a2:61:f3:c8:21:c6:c7:5d:a7:93:42:07:bb:d4:45: 5c:7d:85:4d:79:19:7b:44:da:57:95:ec:5b:2a:9b:33:da:b2: 68:af:3c:75:bb:b0:bd:b9:a6:c2:0e:61:b9:90:22:04:d7:6d: 31:5e:20:07:4e:2c:17:9d:19:1c:1f:a5:3b:09:91:6a:b8:73: 66:97:5d:81:5e:fb:ba:9c:8f:33:92:7f:26:81:95:2b:1c:93: e6:47:b8:8e:7f:fe:15:5e:e5:2f:5b:cc:58:65:3a:d9:2b:0e: 23:64:ac:13:6d:40:b0:5e:7e:17:f9:5c:38:ef:26:38:b3:12: d7:d7:f1:7c:d7:4e:4a:bc:ca:0f:09:3f:82:f8:e3:67:f8:95: df:02:c0:c5:05:bf:2a:b5:51:fa:74:92:c3:14:97:93:42:81: 04:57:0f:6f:72:d5:d5:a4:96:98:d3:0f:86:4a:8d:49:6b:6b: 9e:0f:72:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvFdjQSfe5Ptx/y3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1YTRjNTUtNDE3YS00ZDU4LWI2MDQtMDljM2NjMTBh NWVmMB4XDTI1MTEwNjE2MDAwM1oXDTI1MTEwODE2MDAwMFowLzEtMCsGA1UEAxMk ODU2OGQyM2ItZWJkMi00ODJiLWFmOWQtYzA0ZDk4OTEwN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1/CPYUMpdytvRtWGEN0QWc9e/vb8kPigYK VIe2OPUXvJT4pY/Np2kv6PkPNPRwFR0bNeTM5ibLKj/WnJkjG6BfG7/i16KXMe+t sdFpU1t749uKsHXsVhsDG9Z5ltwyPLb8Jsg+1p7LipRxOzk/GPMP2SNaaU79MTib PayJgzYTD3vURHhcCyuGm/jlcF5wuPSOyUzbr6hZamfRCIqW1rdXxwEQKT6n/nDq wONrC7XHMv/mFqpz8dPwznWRu4cJEEZZ2WSZqsY/y267GoyYIT8UtQVDqVaovEtc BU2l60GOea4nUQKY55wNpnB+rNoLNxF8qwku/epmf3HNirFojwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFeGqs4SpYX4x6GaEcn573YxZQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZTVh NGM1NS00MTdhLTRkNTgtYjYwNC0wOWMzY2MxMGE1ZWYvM2U1YTRjNTUtNDE3YS00 ZDU4LWI2MDQtMDljM2NjMTBhNWVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2U1YTRjNTUtNDE3YS00ZDU4LWI2 MDQtMDljM2NjMTBhNWVmLzNlNWE0YzU1LTQxN2EtNGQ1OC1iNjA0LTA5YzNjYzEw YTVlZi5jcmwwHwYDVR0jBBgwFoAUo+ULNqTB6i2Gf8SIiAhERfwsMiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZTVhNGM1NS00MTdhLTRkNTgtYjYwNC0wOWMz Y2MxMGE1ZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQActKOvDYYEV0A2Ompq2pXx PRQxYPHiqqieXKlazDE2lX1chkoPYef3Txi2vg6KgsUc4ZXd66HGYEigJnE0C2ol EpswjEWkWgNbHcGiYfPIIcbHXaeTQge71EVcfYVNeRl7RNpXlexbKpsz2rJorzx1 u7C9uabCDmG5kCIE120xXiAHTiwXnRkcH6U7CZFquHNml12BXvu6nI8zkn8mgZUr HJPmR7iOf/4VXuUvW8xYZTrZKw4jZKwTbUCwXn4X+Vw47yY4sxLX1/F8105KvMoP CT+C+ONn+JXfAsDFBb8qtVH6dJLDFJeTQoEEVw9vctXVpJaY0w+GSo1Ja2ueD3KI -----END CERTIFICATE-----Generated at Fri Nov 7 12:45:08 2025 by rpki-client