$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft File: a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft (raw, json) Hash identifier: eBHO0rG4fX9BZaD0aVA5btMXCkh7dXdYv7guJ3ncWMM= Subject key identifier: C5:E8:2E:FA:CB:C6:34:81:02:E6:7E:69:B1:15:34:45:A7:09:0D:0C Authority key identifier: 8F:41:CC:64:02:BE:D5:8F:AC:44:7A:3B:61:D5:2D:90:6C:73:1C:6B Certificate issuer: /CN=a3f17d39-fe12-49b7-8dc5-45109c63ea9d Certificate serial: 010D0C9F4328584BC2CA5D88D2476014FAB67EB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft Manifest number: 010D0C9F4328584327DD07B3A5BFFD5D1311BE28 Signing time: Wed 05 Nov 2025 17:02:09 +0000 Manifest this update: Wed 05 Nov 2025 17:02:09 +0000 Manifest next update: Fri 07 Nov 2025 17:00:00 +0000 Files and hashes: 1: 07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa (hash: gMNiO24Y0sJ/nHNi5+qmoybJexaOJUdG86JayBmazOg=) 2: a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl (hash: zRNcu6DAq0w4Wt6rYLAqEcVLe0IqYXyMQZHXBkiid4o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ca:5d:88:d2:47:60:14:fa:b6:7e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f17d39-fe12-49b7-8dc5-45109c63ea9d Validity Not Before: Nov 5 17:02:09 2025 GMT Not After : Nov 7 17:00:00 2025 GMT Subject: CN=7e63842a-023f-4b99-b96c-44a46acd9938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:c2:1e:9f:1c:2f:9a:a9:db:b3:6b:07:ec: 21:92:97:64:19:7a:bd:d5:c6:ba:6b:2c:d4:e0:62: 6e:4c:05:9c:54:20:72:e1:e0:06:2a:55:a2:26:99: c8:e0:8b:3a:a4:1e:21:f0:30:fa:3f:ac:80:4e:14: b9:f6:7e:b9:bb:88:40:46:fe:45:75:4e:f9:2f:d8: 44:94:98:32:e2:b2:a0:e5:96:74:89:b9:2d:e6:ef: fe:91:28:19:aa:66:cc:c9:ca:55:49:84:bd:6e:43: eb:c7:bb:48:50:51:7c:be:48:3a:a5:77:42:b7:66: c3:5c:4f:03:f4:b1:05:ca:19:7c:7d:6d:b6:13:63: 3f:a8:7c:58:bf:a3:11:c1:76:9b:b6:30:65:3b:21: 81:6d:51:7d:4f:cd:a9:f0:5f:fd:5f:6a:a7:f4:04: b1:4a:af:1c:87:a9:0b:2c:5b:00:9d:d9:24:58:8b: 2d:35:db:85:bb:ae:1b:b2:3f:48:a5:cf:87:1c:be: 9e:8a:a2:82:14:11:a8:61:d4:d0:98:11:18:e7:40: 58:7b:ea:8f:6e:2e:5b:a0:1b:95:ae:37:20:06:9e: ca:bc:94:ec:44:18:86:85:2f:af:7c:82:e1:bb:56: 51:ec:ab:59:53:59:97:91:fd:f7:16:cb:35:4a:a4: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:2E:FA:CB:C6:34:81:02:E6:7E:69:B1:15:34:45:A7:09:0D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl X509v3 Authority Key Identifier: keyid:8F:41:CC:64:02:BE:D5:8F:AC:44:7A:3B:61:D5:2D:90:6C:73:1C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:be:b1:66:e4:e1:ea:bc:68:05:41:ac:96:12:40:e7:0d:f7: 31:f9:c3:42:0a:eb:96:60:4e:f7:b1:75:95:b0:94:55:b2:13: 58:bf:85:2a:4e:d4:51:a9:f6:21:d2:ec:be:79:e4:41:35:86: d2:00:74:48:66:82:82:b3:de:ac:0a:2a:d1:56:04:6c:ee:e5: 07:e5:eb:e1:c1:b6:d1:1e:96:71:fc:3f:49:06:8f:43:12:bf: c4:5f:a7:51:db:ba:d6:51:a4:d4:90:fa:4e:4c:20:45:14:16: 9b:38:66:a3:8c:e1:3b:c0:15:78:0b:d9:07:2c:d0:44:af:2f: a3:d9:fd:93:9a:ee:2e:bc:8b:17:f0:06:3c:59:55:52:4b:ba: 55:f9:aa:ae:31:be:8f:46:c5:d9:2f:fd:13:6a:f4:05:a7:b7: bd:46:55:55:45:17:46:0c:b9:1c:21:0d:60:71:da:41:0f:87: 80:31:cf:c7:17:6a:20:eb:0e:35:15:8b:52:47:df:82:42:6b: 36:2d:df:ad:78:10:ad:d8:e2:bb:03:fb:24:21:fc:eb:73:86: b1:3d:e8:23:a0:95:46:b6:54:9f:99:dd:6e:29:3e:e8:ea:d2: 97:33:37:27:a2:b8:e8:f1:01:75:18:4d:82:aa:b1:cf:e8:d2: ba:32:73:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCyl2I0kdgFPq2frAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmMTdkMzktZmUxMi00OWI3LThkYzUtNDUxMDljNjNl YTlkMB4XDTI1MTEwNTE3MDIwOVoXDTI1MTEwNzE3MDAwMFowLzEtMCsGA1UEAxMk N2U2Mzg0MmEtMDIzZi00Yjk5LWI5NmMtNDRhNDZhY2Q5OTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIzCHp8cL5qp27NrB+whkpdkGXq91ca6ayzU 4GJuTAWcVCBy4eAGKlWiJpnI4Is6pB4h8DD6P6yAThS59n65u4hARv5FdU75L9hE lJgy4rKg5ZZ0ibkt5u/+kSgZqmbMycpVSYS9bkPrx7tIUFF8vkg6pXdCt2bDXE8D 9LEFyhl8fW22E2M/qHxYv6MRwXabtjBlOyGBbVF9T82p8F/9X2qn9ASxSq8ch6kL LFsAndkkWIstNduFu64bsj9Ipc+HHL6eiqKCFBGoYdTQmBEY50BYe+qPbi5boBuV rjcgBp7KvJTsRBiGhS+vfILhu1ZR7KtZU1mXkf33Fss1SqRVVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMXoLvrLxjSBAuZ+abEVNEWnCQ0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hM2Yx N2QzOS1mZTEyLTQ5YjctOGRjNS00NTEwOWM2M2VhOWQvYTNmMTdkMzktZmUxMi00 OWI3LThkYzUtNDUxMDljNjNlYTlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTNmMTdkMzktZmUxMi00OWI3LThk YzUtNDUxMDljNjNlYTlkL2EzZjE3ZDM5LWZlMTItNDliNy04ZGM1LTQ1MTA5YzYz ZWE5ZC5jcmwwHwYDVR0jBBgwFoAUj0HMZAK+1Y+sRHo7YdUtkGxzHGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hM2YxN2QzOS1mZTEyLTQ5YjctOGRjNS00NTEw OWM2M2VhOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8vrFm5OHqvGgFQayWEkDn Dfcx+cNCCuuWYE73sXWVsJRVshNYv4UqTtRRqfYh0uy+eeRBNYbSAHRIZoKCs96s CirRVgRs7uUH5evhwbbRHpZx/D9JBo9DEr/EX6dR27rWUaTUkPpOTCBFFBabOGaj jOE7wBV4C9kHLNBEry+j2f2Tmu4uvIsX8AY8WVVSS7pV+aquMb6PRsXZL/0TavQF p7e9RlVVRRdGDLkcIQ1gcdpBD4eAMc/HF2og6w41FYtSR9+CQms2Ld+teBCt2OK7 A/skIfzrc4axPegjoJVGtlSfmd1uKT7o6tKXMzcnorjo8QF1GE2CqrHP6NK6MnNE -----END CERTIFICATE-----Generated at Wed Nov 5 23:41:53 2025 by rpki-client