$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft File: 3e752e0d-0e22-47d1-a147-151d170def2d.mft (raw, json) Hash identifier: tOLTcLvMSYwnN0nIqqNV5JJhywqGaYp9uRj5dB2dRv8= Subject key identifier: D2:C4:20:32:71:FB:96:F0:60:71:71:1C:E6:39:D5:2B:28:DA:D8:EE Authority key identifier: 8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 Certificate issuer: /CN=3e752e0d-0e22-47d1-a147-151d170def2d Certificate serial: 010D0C9F4328584BBFFEA773C6805E5B11503E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft Manifest number: 010D0C9F4328584338DCA9666A635BF04CCCE80E Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 3e752e0d-0e22-47d1-a147-151d170def2d.crl (hash: LB6pwE6XLlEkx1hAdcK317wpfSyBQmuI7ZZrhS2rSCI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a7:73:c6:80:5e:5b:11:50:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e752e0d-0e22-47d1-a147-151d170def2d Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=997af393-95da-4480-9846-b84b3a44849a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:eb:63:b1:82:46:ec:a6:50:08:4b:df:e7: b0:a7:1c:61:eb:37:93:33:29:5e:31:68:38:40:ff: fb:0a:91:c6:75:e5:d7:57:2c:85:8a:63:96:7b:24: ca:2b:0a:1b:1f:60:31:6c:82:43:37:0f:6a:56:15: df:f1:87:c4:97:c8:c7:26:8a:ea:c9:36:cf:91:80: 8b:93:fb:e1:9c:b4:fa:eb:3c:71:19:f5:1c:0a:8f: f3:87:c7:06:20:34:e0:c5:8c:6b:46:4e:21:bd:99: 8b:45:9d:f4:aa:92:af:36:a3:ee:23:57:57:1a:f3: 9a:89:06:9b:60:a5:66:58:5f:6c:51:1c:d1:44:92: 97:d7:ab:09:9f:92:64:18:ee:b2:5d:bf:c7:68:09: fa:fe:8b:b7:89:8c:df:a8:fa:ad:2e:c0:ef:1d:c4: 1d:fe:ec:28:4f:cb:97:b2:9f:ec:d7:63:00:dd:7e: 2f:a2:e1:46:b5:58:6a:99:10:7b:81:d9:b2:8e:d5: bb:ce:74:d2:ad:e4:9c:75:a7:ed:7c:ed:b0:ee:a3: 27:f1:a1:05:9e:40:8f:a9:2a:6a:1e:cb:58:97:f0: da:e2:fa:a8:5d:31:15:72:31:7e:b5:ab:d9:10:b3: 4c:86:12:37:2c:81:12:a6:3d:71:b6:ad:6d:a8:4d: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:20:32:71:FB:96:F0:60:71:71:1C:E6:39:D5:2B:28:DA:D8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d/3e752e0d-0e22-47d1-a147-151d170def2d.crl X509v3 Authority Key Identifier: keyid:8B:B4:53:36:F7:37:42:D8:50:F2:23:DC:1F:47:1B:D9:89:CD:9A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e752e0d-0e22-47d1-a147-151d170def2d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:aa:a3:99:70:34:c1:77:5a:75:6a:42:92:e8:0d:f5:7c:3a: 58:10:be:17:fc:9a:c2:73:43:c6:46:78:7b:3e:bc:43:95:30: 0b:96:da:ee:ce:16:2a:cf:9c:ae:04:8b:48:30:3b:e5:09:c1: 98:28:8f:6a:b3:0a:f6:05:fb:fe:45:5b:ba:bc:35:b9:8d:19: e6:40:ee:13:5f:82:82:35:59:c4:46:15:d7:4f:2a:96:2f:e3: 38:22:f3:c2:cf:77:c8:d8:21:13:31:21:38:ba:3d:ea:ba:1a: c4:92:8b:d8:5f:36:8d:82:c3:db:97:6b:07:2a:8f:f7:bc:88: d6:74:65:63:97:21:cd:8b:01:60:a3:36:43:0c:82:50:68:bf: f4:a4:c7:5f:57:fc:45:66:ca:08:8c:2a:22:0a:75:87:c0:17: b8:36:59:bd:2d:b9:6b:b1:71:1b:42:46:26:79:1e:b7:32:e2: a0:4d:dd:2b:a0:5c:01:a0:6b:90:b0:c1:f6:09:97:bd:1b:53: 7a:f9:51:60:ca:23:3a:56:30:a4:c2:d0:ca:48:d7:6b:e9:11: 4f:64:73:78:ec:80:f0:23:7a:4d:0a:57:67:9c:74:96:07:d0: 3c:54:de:ac:03:02:ef:5b:1c:6f:ee:07:af:8b:1a:c7:cc:02: 79:b2:03:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qdzxoBeWxFQPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U3NTJlMGQtMGUyMi00N2QxLWExNDctMTUxZDE3MGRl ZjJkMB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk OTk3YWYzOTMtOTVkYS00NDgwLTk4NDYtYjg0YjNhNDQ4NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0HrY7GCRuymUAhL3+ewpxxh6zeTMyleMWg4 QP/7CpHGdeXXVyyFimOWeyTKKwobH2AxbIJDNw9qVhXf8YfEl8jHJorqyTbPkYCL k/vhnLT66zxxGfUcCo/zh8cGIDTgxYxrRk4hvZmLRZ30qpKvNqPuI1dXGvOaiQab YKVmWF9sURzRRJKX16sJn5JkGO6yXb/HaAn6/ou3iYzfqPqtLsDvHcQd/uwoT8uX sp/s12MA3X4vouFGtVhqmRB7gdmyjtW7znTSreScdaftfO2w7qMn8aEFnkCPqSpq HstYl/Da4vqoXTEVcjF+tavZELNMhhI3LIESpj1xtq1tqE1HjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLEIDJx+5bwYHFxHOY51Sso2tjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1 MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFkMTcwZGVmMmQvM2U3NTJlMGQtMGUyMi00 N2QxLWExNDctMTUxZDE3MGRlZjJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2U3NTJlMGQtMGUyMi00N2QxLWEx NDctMTUxZDE3MGRlZjJkLzNlNzUyZTBkLTBlMjItNDdkMS1hMTQ3LTE1MWQxNzBk ZWYyZC5jcmwwHwYDVR0jBBgwFoAUi7RTNvc3QthQ8iPcH0cb2YnNmqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZTc1MmUwZC0wZTIyLTQ3ZDEtYTE0Ny0xNTFk MTcwZGVmMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeqqOZcDTBd1p1akKS6A31 fDpYEL4X/JrCc0PGRnh7PrxDlTALltruzhYqz5yuBItIMDvlCcGYKI9qswr2Bfv+ RVu6vDW5jRnmQO4TX4KCNVnERhXXTyqWL+M4IvPCz3fI2CETMSE4uj3quhrEkovY XzaNgsPbl2sHKo/3vIjWdGVjlyHNiwFgozZDDIJQaL/0pMdfV/xFZsoIjCoiCnWH wBe4Nlm9LblrsXEbQkYmeR63MuKgTd0roFwBoGuQsMH2CZe9G1N6+VFgyiM6VjCk wtDKSNdr6RFPZHN47IDwI3pNCldnnHSWB9A8VN6sAwLvWxxv7gevixrHzAJ5sgP9 -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:25 2025 by rpki-client